209 karma · joined March 4, 2013
https://www.cyberwatch.fr - Vulnerability Monitoring Software
With the General Data Protection Regulation, any leak of private data caused by a major cybersecurity gap in a company will lead to severe financial sanctions such as a fine based on 4% of the company turnover.
This law will indeed give the risk a “cost” :).
Cyberwatch is a vulnerability monitoring software that helps companies to save time finding and fixing their IT vulnerabilities.
We're looking for a French back-end developer with a passion in cybersecurity.
Stack: - Core built with Ruby on Rails / MySQL / Redis / BackboneJS - Several modules built with Bash / Powershell / C# - Packaged with Docker & Docker-Compose
Email me to apply: maxime AT cyberwatch.fr. No remote, no recruiters.
I'd love to see this feature on Slack or Mattermost, to create instant and easy Snippets.
First, we defined the skills we're looking for i.e. Programming / SysAdmin / Cybersecurity.
Our process goes as follows:
1. We ask candidates to answer a quizz by phone, with questions in the 3 chosen fields. Duration = 1h.
2. We ask candidates to solve remotely with Google Docs 5 real-world problems asking for skills in Algorithmics, Data Modeling, Object-Oriented Programming, Software Design, and Parsing. We also add a bonus question like "how many people can get into a train". Duration = 1h.
3. We have a HR meeting at our office with a non-technical member of the team. Duration = 1h.
The quizz helps us to remove of our list the candidates that do not have the technical culture we're looking for, and to see what they already have worked on.
The 5 problems helps us to see how the candidates can code, the bonus question helps us to see how they approach new issues and manage their stress.
The final HR meeting is very typical: we try to see if we would be happy to take a 6 hours long flight with the candidate.
Most candidates do not go through first step, and roughly half on them do not go through second step.
This simple process definitely helped us to reduce the time spent on hiring and to make the really good candidates shine.
Some vendors give you a lot a details, some are very obscure.
There is a need for a "standard" Security Advisory, on the same base that there is a "standard" emerging from Responsible Disclosure.
I'd love to get your feedback on our product and how you'd imagine an integration with other features you described.
Can we DM on Twitter? (@maximeae)
But if you try to build a company, I assume that you want to solve a problem.
If you solve a B2C problem: talk to friends affected by the problem, or launch a Meetup based on this problem. You'll get free feedbacks and people LOVE to talk about themselves.
If you solve a B2B problem: talk to friendly businesses affected by the problem, or go to events and conferences as a vendor with kakemonos talking about the problem you solve. If the problem you solve is really important, you'll get plenty of people coming to your stand to talk to you.
Once you'll have a few "leads", you will be able to refine the market segments that are the most affected by the problem you solve. THIS is really important: for B2C, you'll have to target this segment in your future ads, for B2B, you'll have to target this segment in leads generation.
Also:
- "Should I try to approach bosses or common workers of companies?" => Talk to the guy affected by the problem you solve. It might be the CEO, or a manager, or the worker.
- "Should I phone them, ask for an appointment, explain my goals and if they let me in, do the talk?" => Yes, phone is better than cold email. But be prepared, it's really harder than cold email.
- "What is the right approach to talk to my potential customers?" => Beginner script: Hi, my name is X, I represent Y, we solve THE_PROBLEM_YOU_SOLVE. Are you affected by this problem? Could we talk about this in person at your office?
1. Your idea and your software will probably not be aligned to your market needs at first;
2. Go out and talk to your customers;
3. Do not just focus on code;
4. When your customer really needs something that is not in your software, do not hesitate to bill this customer for special developments: it will finance the feature for all your customers and keep your feet on the ground;
5. CIO are overstretched by sales rep, so B2B sales cycles can be really long (at least in France).
Disclaimer: CEO of a French Cybersecurity software company. French market is known to prefer service over software and "On Premise software" over "SaaS". As a result, we switched from SaaS mode to On Premise, and we started with Penetration Testing to join the end of the month. While my advices might not be the best, we are in our third year of business and should finally reach profitability :)
Do you want to customize everything with ease? Do you have someone who can maintain the security of your blog and eventually add new features later? => WordPress on your own hosting
Do you want to use a very classical theme? Do you want a complete service with no skills required and no maintenance? => Wix or WordPress.com
Do you want to customize everything? Do you have someone to maintain the blog on a regular base? => Jekyll on GitHub or on your own hosting
Shall you need to sell things online with the blog, WordPress can be augmented with Shopify, meanwhile Wix has already this feature.
I used to write a lot of UML diagrams in Mechatronics Engineering for a big company, where specs were not supposed to change often. For projects with a long lifetime and a slow change velocity, UML is totally justified.
UML diagrams are not worth it for Software Engineering: code evolve too fast to keep your diagrams up to date. In that case, I replace UML diagrams by simple sketchs / mockups and simple tables.
They can use it for ActiveDirectory, and it help them reduce IT department costs: a Windows Desktop SysAdmin can easily manage a Windows Server.
Getting Linux would require them to hire new specialists.
Is that different from http://streamdata.io/ ?
Next step: migrate 100% of the OS in the Cloud?
They have a very easy interface to manage your domains and their zones. As a result, if you develop your business and need more domains, you'll save a lot of time.
Plus, they have a good customer service, they offer SSL certificate for 1st year, and free emails addresses.
If hackers goes into hardware, maybe should we also start working on Scam letters filters?
What a nightmare. Car manufacturers have to design more resilient systems.
Based on the difficulty to secure hardware systems after deployment, they will be for sure trying to put more and more features on the software-side.
If so, they will also have to think about a quick way to deploy security fixes remotely. One way could be working with connectivity solutions for Embedded Systems (e.g. SigFox).
Deployed as a live USB, it becomes the Swiss Army knife of pentesters.
I will write about it later when I'll have some results. Please feel free to try it as well and contribute :).
I heard that Oculus Rift had some minor delay issues. With Carmack as C.T.O., I do believe that everything will be solved pretty quick.
Kudos, Oculus!