131 karma · joined April 14, 2014
Some of the best security engineers I've known came from a network engineer or sysadmin background. So don't worry if you don't have a "masters in security". I'd spend some time thinking about the last large system you built. How would someone attack it? How would you detect those attacks? What would you do if they were successful? How could you have architected around those weaknesses? If doing that seems like fun, my team is hiring in Seattle, feel free to drop us a message at prodsec-recruiting@tableau.com
Tableau's Product Security team is scaling up! We're looking for two operationally-focused security engineers. If you're specifically interested in security work, please shoot me a message.
* Security Engineer - https://tableaurefer.rolepoint.com/?shorturl=DxfBe#job/ahBzf...
Requisite blurb about Tableau: Tableau Software is a company on a mission. We help people see and understand their data. After a highly successful IPO in 2013, Tableau has become a market-defining company in the business intelligence industry. Our culture is casual and high-energy. We are passionate about our product and our mission and we are loyal to each other and our company. We value work/life balance, efficiency, simplicity, freakishly friendly customer service, and making a difference in the world!
#Note#: Please only contact me if you're an individual (no recruiters/staff aug companies) that wants to do security engineering full time at Tableau. One of us will be at DerbyCon if you want to catch up as well.
If you want to apply, please base64 decode our poor man's HN spam filter "cHJvZHNlYy1yZWNydWl0aW5nQHRhYmxlYXUuY29t" and email us your resume. Cheers!
Tableau's Product Security team is scaling up! We're looking for two operationally-focused security engineers. If you're specifically interested in security work, please shoot me a message.
* Security Engineer - https://tableaurefer.rolepoint.com/?shorturl=DxfBe#job/ahBzf...
Requisite blurb about Tableau: Tableau Software is a company on a mission. We help people see and understand their data. After a highly successful IPO in 2013, Tableau has become a market-defining company in the business intelligence industry. Our culture is casual and high-energy. We are passionate about our product and our mission and we are loyal to each other and our company. We value work/life balance, efficiency, simplicity, freakishly friendly customer service, and making a difference in the world!
#Note#: Please only contact me if you're an individual (no recruiters/staff aug companies) that wants to do security engineering full time at Tableau. One of us will be at DerbyCon if you want to catch up as well.
If you want to apply, please email us at prodsec-recruiting@tableau.com so we can put you into the system. Cheers!
* Security Engineer - https://tableaurefer.rolepoint.com/?shorturl=DxfBe#job/ahBzf...
* Senior Application Security Engineer - https://tableaurefer.rolepoint.com/?shorturl=DxfBe#job/ahBzf...
* Senior Software Security Engineer, Security Features Team - https://tableaurefer.rolepoint.com/?shorturl=DxfBe#job/ahBzf...
Requisite blurb about Tableau: Tableau Software is a company on a mission. We help people see and understand their data. After a highly successful IPO in 2013, Tableau has become a market-defining company in the business intelligence industry. Our culture is casual and high-energy. We are passionate about our product and our mission and we are loyal to each other and our company. We value work/life balance, efficiency, simplicity, freakishly friendly customer service, and making a difference in the world!
#Note#: Please only contact me if you're an individual (no recruiters/staff aug companies) that wants to do security engineering full time at Tableau.
If you want to apply, please email me at behle@tableau.com so I can put you into the system. Cheers!
Tableau's Product Security team is scaling up! We're looking for an operationally-focused security engineer. If you're specifically interested in security work, please shoot me a message.
* Security Engineer - https://tableaurefer.rolepoint.com/?shorturl=DxfBe#job/ahBzf...
Requisite blurb about Tableau: Tableau Software is a company on a mission. We help people see and understand their data. After a highly successful IPO in 2013, Tableau has become a market-defining company in the business intelligence industry. Our culture is casual and high-energy. We are passionate about our product and our mission and we are loyal to each other and our company. We value work/life balance, efficiency, simplicity, freakishly friendly customer service, and making a difference in the world!
Note: Please only contact me if you're an individual (no recruiters/staff aug companies) that wants to do production systems security engineering.
If you want to apply, please email me at behle@tableau.com so I can put you into the system. Cheers!
* Security Engineer - https://tableau.rolepoint.com/?shorturl=YRR6e#job/ahBzfnJvbG...
* Senior Application Security Engineer - https://tableau.rolepoint.com/?shorturl=YRR6e#job/ahBzfnJvbG...
* Application Security Engineer - https://tableau.rolepoint.com/?shorturl=YRR6e#job/ahBzfnJvbG...
Requisite blurb about Tableau: Tableau Software is a company on a mission. We help people see and understand their data. After a highly successful IPO in 2013, Tableau has become a market-defining company in the business intelligence industry. Our culture is casual and high-energy. We are passionate about our product and our mission and we are loyal to each other and our company. We value work/life balance, efficiency, simplicity, freakishly friendly customer service, and making a difference in the world!
If you want to apply, please email me at behle@tableau.com so I can put you into the system. Cheers!
Tableau's Product Security team is scaling up! We're looking for a manager, two application security engineers, and a more operationally-focused security engineer.
* Engineering Manager - https://tableau.rolepoint.com/?shorturl=YRR6e#job/ahBzfnJvbG...
* Security Engineer - https://tableau.rolepoint.com/?shorturl=YRR6e#job/ahBzfnJvbG...
* Senior Application Security Engineer - https://tableau.rolepoint.com/?shorturl=YRR6e#job/ahBzfnJvbG...
* Application Security Engineer - https://tableau.rolepoint.com/?shorturl=YRR6e#job/ahBzfnJvbG...
Requisite blurb about Tableau: Tableau Software is a company on a mission. We help people see and understand their data. After a highly successful IPO in 2013, Tableau has become a market-defining company in the business intelligence industry. Our culture is casual and high-energy. We are passionate about our product and our mission and we are loyal to each other and our company. We value work/life balance, efficiency, simplicity, freakishly friendly customer service, and making a difference in the world!
If you want to apply, please email me at behle@tableau.com so I can put you into the system. Cheers!
I'm a little late to the party, but posting this here in case other folks are looking.
What you will be doing: You will be leading the effort to coordinate and prioritize security work across Tableau products. You will drive efforts to implement secure development practices and security enhancements throughout Tableau products and services. You will be a security advocate and will guide development teams through the process of working with the Product Security team to identify and prioritize security risks. You are experienced in making tradeoffs and evangelizing for the best path forward, balancing security fixes with other priorities.
Even though you will be working around security-related enhancements, technologies, and processes; a prior background in security is not required as long as you are a voracious learner, good at listening, and able to help guide discussions to reach a decision. ___ About Tableau: Tableau Software is a company on a mission. We help people see and understand their data. After a highly successful IPO in 2013, Tableau has become a market-defining company in the business intelligence industry. Our culture is casual and high-energy. We are passionate about our product and our mission and we are loyal to each other and our company. We value work/life balance, efficiency, simplicity, freakishly friendly customer service, and making a difference in the world! ___
The full position is up on https://tableaurefer.rolepoint.com/?shorturl=beXWc#job/ahBzf... If you want to apply, please email me at behle@tableau.com so I can put you into the system. Cheers!
About the company: We help people see and understand their data. After a highly successful IPO in 2013, Tableau has become a market-defining company in the business intelligence industry. Our culture is casual and high-energy. We are passionate about our product and our mission and we are loyal to each other and our company. We value work/life balance, efficiency, simplicity, freakishly friendly customer service, and making a difference in the world!
About the position: The security team is chartered with managing and enhancing the company’s Information Security program. This role will be responsible for operational aspects of security at Tableau including system hardening, incident response, consulting with projects to identify risks, and expanding our awareness program. This role will be an integral part of the Tableau security team and the successful candidate must have a strong background in a broad range of information security areas.
Applying: Apply directly here: http://rolp.co/MttHc If you want more information about the position, email me at behle@tableau.com
In case you hadn't seen it, this is basically the anti-marketing video for how conference calls actually work: https://www.youtube.com/watch?v=DYu_bGbZiiQ
Tableau Software is a company on a mission. We help people see and understand their data. After a highly successful IPO in 2013, Tableau has become a market-defining company in the business intelligence industry. Tens of thousands of companies and organizations have chosen Tableau. From the executive suites of Fortune 500 companies to the jungles of Central America, from immunology research labs to high school robotics club meetings, our software can be found anywhere people have data and questions. Check out all of our products at: www.tableau.com/product-tour.
Highlighted positions (full list at https://careers.tableau.com/):
* Information Security Analyst - https://bitly.com/1cXgwem Looking for a seasoned security incident handler who can help build out our internal and external IR processes, as well as help teams architect systems in a secure way. * Systems Engineer - http://bit.ly/1Ks7xPF
Apply by PM'ing me on Reddit (same username) or by clicking the apply button on the post. Feel free to reply with any questions. Cheers!
That said, I really lost a lot of sympathy for the woman in the garage though, kids are hugely expensive (about a quarter million dollars to raise them to 18) and I just can't understand how she thought having a second kid would improve her situation. Obviously it could have been an accident or similar, but damn, maybe now isn't the right time for a second kid!
I'm probably just a first world asshole with no sense of what it must be like in her position.
It caused the dev team to implode (everybody but one person on the 8-man team left within a year). The systems' stability and overall architecture was utterly terrible, servers would fall over because they would log so many things that they'd run out of disk space ("what's logrotate?" "What's a slave database?"), no metrics, no definition of success for a service, etc.
I suppose you could pull this "DevOps" thing off if you really wanted to, but you have to hire folks who can program and actually like sysadmin work. Otherwise you end up hiring developers to do everything, who are terrible at sysadmin work, and who get burnt out because they never get to actually program.
I maintain that the pages answered from team happy hours are the most dangerous.
1) When you're oncall, your time and priorities are no longer your own.
At your kid's soccer game? A date night? Planning on doing any of those things? Be prepared to get pulled out at any moment to deal with something that could take hours to resolve. This was the part that really got to me. As much as I'd like to do any one of those example things, I had made a prior commitment to be available and had to honor that.
2) Know the response time and physical location requirements for responding to a page
Is this something you can just fire up your laptop and an aircard and jam on, or do you have to be able to drive to the office within an hour. Don't forget about driving through places with less than great cell phone coverage.
3) It can be fun
There was a part of me that really liked the adrenaline rush of getting paged in on a legitimate security issue and having to run the call and pull the right people in to get the situation handled. It's a great test of how well you know the environment and where all the pertinent information lives.
4) Know the team size and oncall frequency akg_67's estimate was spot on. Anything shorter than a month is crazy and you never quite feel like you normalize. Since it's based on team size, know what the optimal size of the team is and that there's funding for it? My team imploded and at the end there were only a few of us on the oncall rotation. Bear in mind that oncall duty doesn't go away because you no longer have the staff to make it manageable.
5) Vacations and sick time are now more complicated
Who has to be oncall during Christmas/4th of July/etc? What used to be some loose coordination with your manager is now a give/take discussion with your team about who covered the last holiday and who's turn it is. It's all completely fair and reasonable and if you have a good team dynamic you can make it work, but it's definitely more complicated than telling Aunt Edna that of course you'll be home for Christmas.
6) Get paid for it
Whether in flexing the hours for the time spend working a page off hours or by getting paid directly for off hours work. No reason to kill yourself for no additional compensation (and there will be those hellish pages or that automated alarm that goes off hourly starting at 3am).
7) Put the operational burden for supporting a thing in the hands of the people who have the ability to fix it
There should be a cycle of: Get paged Root cause Fix Post mortem Deploy fix so that thing never happens again
If you don't have ownership over the thing that's paging you, you're at risk of getting paged all night every night for something you have to go convince other people to take time out of their schedules to fix to solve a problem that they don't feel. Not a great situation.
If Comcast wanted to take this down, it would be through a trademark infringement claim.
(IANAL, etc, etc)