Home
Calendar
Certifications
Columns
Features
Forum
Resources
Vitals
Latest Additions
April 2013 Free Giveaway Sponsor - eLearnSecurity
Human Intelligence to Navigate the Security Data Deluge
February 2013 Free Giveaway Winner of SANS CyberCon Training
Interview: Bugcrowd Founders on Herding Ninjas for Crowdsourced Bug Bounties
Network Forensics: The Tree in the Forest
March 2013 Free Giveaway Sponsor - Mile2
Book Review: Violent Python
February 2013 Free Giveaway Sponsor - SANS
Holiday 2012 Free Giveaway Winner of Metasploit Pro by Rapid7
Course Review: SANS FOR408 Computer Forensic Investigations – Windows In-Depth
The Security Consulting Sugar High
Tutorial: Fun with SMB on the Command Line
Interview: Ilia Kolochenko, CEO of High-Tech Bridge
October 2012 Free Giveaway Winner of LearningGate Training
The Broken: Assessing Corporate Security in 2012 to Make a Better 2013
EH-Net Login
Welcome Guest.
Username:
Password:
Remember me
Lost Password?
No account yet?
Register
Who's Online
We have 38 guests and 2 members online
Free Business and Tech Magazines and eBooks
You are here:
Home
Resources
Career Central
What am I doing wrong?
EH-Net
May 20, 2013, 10:06:19 PM
Welcome,
Guest
. Please
login
or
register
.
Did you miss your
activation email?
1 Hour
1 Day
1 Week
1 Month
Forever
Login with username, password and session length
News
: Go back to The Ethical Hacker Network Online Magazine
Home Page
Home
Help
Calendar
Login
Register
EH-Net
>
Resources
>
Career Central
(Moderator:
don
) >
What am I doing wrong?
Pages: [
1
]
Go Down
« previous
next »
Print
Author
Topic: What am I doing wrong? (Read 6237 times)
0 Members and 1 Guest are viewing this topic.
Joshsevo
Sr. Member
Offline
Posts: 278
What am I doing wrong?
«
on:
November 15, 2011, 01:23:30 PM »
So a few of you know on the forums and a few of you have helped with finding a suitable job.
Still no luck finding a job. All that talk about certs only help you get in the door is spot on. I have a few certs but no job offers. I've had a few interviews, mostly phone interviews. I've been let gently a few times. one time I had them tell me they didn't like my personality as the only reason I wasn't hired.
So maybe it's me. Maybe it's my resume, maybe my cover letter, but it's probably my experience.
Give me a critique on my CV & Resume and let me know what I can improve on or what I can remove.
I have a few different versions of my resume and can tailor all of them if need be.
A quick overview of my skills
Sec+
CEH
CHFI
Active Secret Clearance
Prior Military
Disabled Veteran
Computer Forensics Intern for the past 1.5 yrs. Doing bookmarking, finding contraband, locating emails, pictures, Wmv's etc.... Worked with EnCase & FTK.
Technical Support installing print drivers, completing part orders, multi tasking is a must here. Worked here 4.5 yrs.
Bachelors Degree in CIS (dual majors in Network Security & Computer Forensics)
Working on my Master's degree currently in Computer Information Systems Security management.
Willing to relocate on my own dime if given the opportunity
Member of the FBI's Infrgard Security community. ( you need a background check for this)
Resumes & CV will follow:
Logged
Security+, Network+, C|EH, CHFI, CPT
Joshsevo
Sr. Member
Offline
Posts: 278
Re: What am I doing wrong?
«
Reply #1 on:
November 15, 2011, 01:24:20 PM »
Dear hiring manager:
I am currently a recent graduate with a Bachelors degree in Computer Information systems with dual majors, Computer Forensics & Network Security. For the past year I've had a internship with a local Computer Forensics firm where I handled cases that ranged from fraud, company espionage, to Child Exploitation. I have certified in CEH (Certified Ethical Hacker), Security+, and my CHFI (Computer Hacker Forensics Investigator). I am currently enrolled in school for my Master’s Degree in Computer Information Systems Security.
I am volunteering my nights at a local Computer Forensics firm named PenrodEllis Forensic Data Discovery where I have done a large variety of tasks in the two years that I have been there.
Throughout the cases that I worked on I was tasked with bookmarking suspected emails, documents, pictures as well as finding recent internet activity. Then finding any links that associated the user to those links and the times they were accessed. The software that was used to bookmark these pieces of evidence was FTK 3 and also EnCase. Other software that was used in conjunction with the cases was FTK, Imager, FTK Registry viewer. I am currently working on my ACE certification and should have it within a month. I also have moderate experience with EnCase and feel comfortable using it on a daily basis. I plan on applying for this certification within a yr. as by then I will have met the minimums of 3 yrs. of experience using it.
Other duties that I was tasked with was writing reports using MS Word 2010 (One note) and also using pre-made "search words" to look for the evidence left behind by the suspect. Using the proper Chain of Custody during the acquisition and throughout the entire life of the case/HD is something that is second nature to me.
I have been recently accepted into the FBI's Infragard National Security Protection community.
I am willing to travel extensively and also relocate for the job if it requires it.
Thank you for your time and consideration.
Sincerely,
Josh XXXX
Logged
Security+, Network+, C|EH, CHFI, CPT
Joshsevo
Sr. Member
Offline
Posts: 278
Re: What am I doing wrong?
«
Reply #2 on:
November 15, 2011, 01:25:18 PM »
RESUME---
Josh Carpenter
Targeting Entry Level Network Security/Jr. Admin
Recent graduate from Devry University with a Bachelors in Computer Information Systems with dual tracks in Computer Forensics & Network Security.
Active Secret Clearance
Currently working on CPT (certified Penetration Tester) certification which requires use of Red Hat Linux and a large variety of Network Security tools to complete the required “flags”.
I am currently certified in CEH, Security+, CHFI. These certifications work with the DoD 8570. I am currently working on my ACE certification and should ascertain it within a month.
Some of the responsibilities given to me were the following: exposure and use of forensic write-blocking devices and software, research on different programs which had forensic interest for the particular criminal case being worked on, (i.e. Limewire, etc.), and the use of a Shadow Drive and its utility in a criminal case, etc. In addition, I did a significant amount of work using a Forensic software called EnCase and FTK, in which I looked for keywords, sorted the case by different markers, viewed jpegs and text documents of forensic interest, and put the evidence of significant value in designated folders.
Currently volunteering at a local Computer Forensics Company where I was tasked with attaching write blockers to device prior to acquisitions of hard drives of different types along with helping and sometimes involving cases that made headlines in the local media. The internship has lasted 2 years.
Intermediate experience with reports regarding the Network state and using reports to document the different techniques used to gain access to the network and tools used and information found.
Worked on a myriad of cases ranging from Child Exploitation to Fraud, Corporate espionage etc..
Quickly learn and master new technology; equally successful in both team and self-directed settings; and proficient in a range of computer systems, tools and testing methodologies
Education
Devry University – Westminster, CO
B.S. in Computer Information Systems program
Concurrent Employment with College Studies:
Junior Computer Forensics Analyst (2010 to Present): PenrodEllis Forensic Data Discovery
Keller University- Westminster, CO
Master’s Degree- Masters of Information Systems Security (Degree expected: April, 2013)
Technology Summary
Certifications: CEH (Certified Ethical Hacker), CHFI (Computer Hacker Forensics Investigator), Security+
Systems: Windows Vista, XP & Windows 7, Linux (Ubuntu),
Software: FTK, EnCase, Helix, FTK Registry Viewer, FTK Imager, Mandiant Web Historian, Regripper, Sluethkit, Skype Log Parser, Perl and Python, Exiftool, Linux CLI, NMAP, Nessus, GFI,
IT Experience
Epilog Laser-Golden, CO
NOC, Technical Support: (2007 to current) Handled technical troubleshooting within a commercial, government and residential networks for the last 4.5 years
Setup networks that allowed the customers to use their laser engraver to keep their business up and running.
Completed customers part orders ranging from a few dollars to $45,000.
Worked with the IT Department and a third party database design company for the new Technical support department and what should be included in it.
PenrodEllis Forensic Data Discovery -Denver, CO
• Junior Computer Forensic Analyst: (2009 to current)
• I gained knowledge of the team approach in gathering and analyzing case evidence. I assisted with peer to peer investigations involving the trading of child pornography and have used the comparison of hash values to locate images and videos of suspected child pornography. I learned the basics of a computer related criminal investigation. In addition, I gained experience previewing computers in a forensic manner using the EnCase software and FTK 3.
• Extensive use of Tableau write blockers and the documentation associated with use of them.
Available for Relocation & Travel
Logged
Security+, Network+, C|EH, CHFI, CPT
Joshsevo
Sr. Member
Offline
Posts: 278
Re: What am I doing wrong?
«
Reply #3 on:
November 15, 2011, 01:41:45 PM »
I am on about every job board that exists and usually look for new jobs at lunch each day.
Should I go out and get more certifications?
There has to be an understanding that I am a married man with a 2.5 old son so me quitting my job and working for peanuts is not finnacially feasbile.
I am at the point that I will quit my FT job and get a security guard job working nights so I can go to my Forensics internship more often and during the day so I can get more experience. This is my plan that I have been tossing around in my head for the last few months and will act upon it in March/April time frame if no job is found.
Logged
Security+, Network+, C|EH, CHFI, CPT
lorddicranius
Sr. Member
Offline
Posts: 447
Re: What am I doing wrong?
«
Reply #4 on:
November 15, 2011, 01:50:15 PM »
Just a couple things I noticed as I glanced through...
1) I wouldn't call being a disabled veteran a skill
2) On the resume, unless you modify the "targeting" line (aka objective") each time you send it in, and that line reads exactly for the position you're submitting it for, remove it from your resume. If you submit you're resume with an objective that doesn't match the position you're trying to get, you're shooting yourself in the foot right from the get-go.
«
Last Edit: November 15, 2011, 01:52:12 PM by lorddicranius
»
Logged
GSEC, eCPPT, Sec+
cd1zz
Hero Member
Offline
Posts: 561
Re: What am I doing wrong?
«
Reply #5 on:
November 15, 2011, 01:50:56 PM »
Josh,
I am in Denver. I just got a great security gig locally and can give you some constructive criticism. Send me a PM with your email address.
-C
Logged
OSCE | OSCP | GXPN | OSWP | CISSP
http://www.pwnag3.com
http://www.networkadminsecrets.com
Joshsevo
Sr. Member
Offline
Posts: 278
Re: What am I doing wrong?
«
Reply #6 on:
November 15, 2011, 02:03:21 PM »
But I am very skilled at being disabled. I've worked at it for years. LOL good catch.
When I apply at jobs I remove the "targeting" line. For example if I am trying to get an entry level System Admin. I change that to "targeting System Admin positions"........Should I just remove this completly from all my resume's?
Quote from: lorddicranius on November 15, 2011, 01:50:15 PM
Just a couple things I noticed as I glanced through...
1) I wouldn't call being a disabled veteran a skill
2) On the resume, unless you modify the "targeting" line (aka objective") each time you send it in, and that line reads exactly for the position you're submitting it for, remove it from your resume. If you submit you're resume with an objective that doesn't match the position you're trying to get, you're shooting yourself in the foot right from the get-go.
Logged
Security+, Network+, C|EH, CHFI, CPT
lorddicranius
Sr. Member
Offline
Posts: 447
Re: What am I doing wrong?
«
Reply #7 on:
November 15, 2011, 02:24:23 PM »
I don't think removing it completely is necessary, just as long as you're changing it for each position you submit it for so that it matches said position. It's one thing that seems to be repeated every time Lee Kushner and Mike Murray do a preso on infosec careers (Lee keeps seeing it in his work as a recruiter).
Lee doing a talk at the OWASP NYC 2008 meeting:
https://www.owasp.org/index.php/OWASP_Jobs#tab=Employment_Resources
And here's 3 talks both Lee and Mike have done at DEFCON:
-
https://www.defcon.org/html/links/dc-archives/dc-15-archive.html#Murray
-
https://www.defcon.org/html/links/dc-archives/dc-16-archive.html#Kushner
-
https://www.defcon.org/html/links/dc-archives/dc-17-archive.html#Kushner
Some of the points are repeated throughout the videos, but I've found some good information watching these.
Logged
GSEC, eCPPT, Sec+
millwalll
Guest
Re: What am I doing wrong?
«
Reply #8 on:
November 16, 2011, 03:50:30 AM »
ok with your cover note (RESUME) I always got told this it to explain why you are good for the job. So you should try relate to the job you are applying for if this is a junior position then you should say things like you pick things up quickly you are always eager to learn and love a new challenge. And you really want work in security so much so you spending your own time and money to help progress this. Because at the moment it seems like your RESUME is telling me the same stuff that is in your CV.
The CV just seems like a list of points and jobs that don't really tell me much. These days with the job market is so hard the CV is there to sell you before it was a foot in the door now you really need to sell yourself and what you are good at what you do.
if you send me a PM with your email I am happy to send your my CV and Cover note that may help.
Logged
3xban
Hero Member
Offline
Posts: 605
Re: What am I doing wrong?
«
Reply #9 on:
November 16, 2011, 09:39:45 AM »
I agree with Jamie about the resume and letter looking very similar. For your resume I would remove some of the wording. Hiring managers like bullets, short and too the point. Don't put in that you are currently working on a cert. If you have the certs, list them in their own section along with education
Education:
Devry University
BS in Computer Info Systems - concentration in Computer Forensics
Certifications:
CEH, Security+, CHFI (you can expand the names and put the acronyms in parathesis).
About your clearance, you probably want to list you have a security clearance, but not the level of the clearance. Might as well put a sign on your forehead that read "I know lots of important secret stuff come social engineer me!" It would also probably be listed away from skills or stated in your cover letter or in your job search profile on the job boards.
Create a section of "Expertise" put those bullet items that you REALLY want to highlight, things like
Expertise with Encase product
Expertise with IDS/IPS log review
etc...
Then move into listing technical skills:
Analyzing logs to determine the history of activity on a system....
Utilizing Wireshark to analyze packet captures.... (I am just throwing these down for looks, they may not apply).
You want the resume to be clear and concise. Don't be afraid to go beyond a single page but don't clutter the pages. Mine is currently two full pages with my job history on the second page along with my education. I've been out of school for almost 12 years now so my education is not something I need to emphasize. I want employers to see my skills and expertise first.
Also get involved with the community if you aren't already. Look at the Security Bsides schedule network!!
Technical skills are important, but some hiring managers look for soft skills as well. Its great that you can probably rebuild the entire history of use on a suspect system but if you can't write the report up properly or communicate with the non-tech folks about the details, you may have problems. We are no longer the little geeks stuck in the basement never to see the light of day, we need to be able to talk business and understand goals beyond our dimly lit labs.
Also speak with confidence, don't claim to be an expert in anything since a good interviewer will test that statement and you may end up looking like a jackass. If you don't understand a term, don't pretend to, maybe go with, "I haven't worked with it, but I am aware of it..." or something along those lines. Then note it and google for later.
Good luck man, and keep the chin up. There are jobs out there and you need to show that you aren't just looking for a job but want to build a career! Maybe in an interview, pull a "What can I do for you?" when they ask you if you have any questions. Oh Questions! make sure you have a few. Phone interviews are your time to shine, you won't have to wear a suit, you can be in a comfortable environment so the pressure will be a bit lighter.
Ok, that is all for now.
Logged
Certs: GCWN
(@)Dewser
Joshsevo
Sr. Member
Offline
Posts: 278
Re: What am I doing wrong?
«
Reply #10 on:
November 16, 2011, 01:07:59 PM »
Thanks for all the suggestions. I will redo my resume in the next few days and repost the new one.
It's hard to come up with explainations of what I do or the Forensics stuff when I don't have much to say in general. but again i will use everyone suggestions and their resumes as a reference and go from there.
I keep my chin up. I have a decent job that pays the bills (barely) but looking to get rewarded for the 4.5 yrs of school and the hard work I've out into this new career field.
Logged
Security+, Network+, C|EH, CHFI, CPT
millwalll
Guest
Re: What am I doing wrong?
«
Reply #11 on:
November 21, 2011, 05:12:31 AM »
You will be fine! Are you basked in the usa or UK ? I hope you got my CV and cover note and hope it helps.
Logged
Joshsevo
Sr. Member
Offline
Posts: 278
Re: What am I doing wrong?
«
Reply #12 on:
November 21, 2011, 04:07:41 PM »
I am in the USA and I did get them and looked them over and copied it word for word. Thanks. Just kdding.
Logged
Security+, Network+, C|EH, CHFI, CPT
Pages: [
1
]
Go Up
Print
« previous
next »
Jump to:
Please select a destination:
-----------------------------
EH-Net
-----------------------------
=> Calendar Of Events
===> ChicagoCon 2007
===> ChicagoCon 2008s
===> ChicagoCon 2008f
===> ChicagoCon 2009s
=> Ethical Hacktivism
=> News Items and General Discussion About EH-Net
===> Greetings
=> Special Events
-----------------------------
Ethical Hacking Discussions and Related Certifications
-----------------------------
=> General Certification
===> Networking
===> OS
===> Security
=> Compliance, Regulations & Standards
=> Control Systems
=> Cyber Warfare
=> Forensics
===> CCE / MCCE - (Master) Certified Computer Examiner
===> CHFI - Computer Hacking Forensic Investigator
===> EnCE - EnCase® Certified Examiner
===> GCFA - GIAC Certified Forensics Analyst
=> Hardware
=> Incident Response
===> CSIH - Computer Security Incident Handler
===> GCIH - GIAC Certified Incident Handler
=> Malware
===> Advisories
=> Mobile
=> Network Pen Testing
===> CEH - Certified Ethical Hacker
===> CPTC - Certified Penetration Testing Consultant
===> CPTE - Certified Penetration Testing Engineer
===> CSTA - Certified Security Testing Associate
===> eCPPT - eLearnSecurity Certified Professional Penetration Tester
===> ECSA - EC-Council Certified Security Analyst
===> GPEN - GIAC Certified Penetration Tester
===> OSCP - Offensive Security Certified Professional
=> Physical Security
=> Programming
=> Social Engineering
=> Web Applications
=> Wireless
===> CWNP Certs
===> GAWN - GIAC Assessing Wireless Networks
===> OSWP - Offensive Security Wireless Professional
=> Other
-----------------------------
Columns
-----------------------------
=> Editor-In-Chief
=> Andress
=> Gates
=> Haddix
=> Hadnagy
=> Heffner
=> Hoffman
=> Linn
=> RichM
=> Murray
=> J. Peltier
=> Weidman
=> Wilson
-----------------------------
Features
-----------------------------
=> /root
=> Book Reviews
=> Opinions
=> Skillz
===> Examples
===> May 06 - Star Hacks, Episode V: The Empire Hacks Back
===> July 06 - Hack Bill!
===> Sept 06 - Netcat in the Hat
===> Nov 06 - Hitch-Hackers Guide to the Galaxy
===> Dec 06 - A Christmas (Hacking) Story
===> Feb 07 - Charlottes Web Site
===> April 07 - Microsoft Office Space
===> June 07 - Serenity Hack
===> Oct 07 - Worst. Ethical. Hacker. Challenge. Ever.
===> Dec 07 - Frosty the Snow Crash
===> March 2008 - It Happened One Friday
===> Oct 2008 - Scooby Doo and the Crypto Caper
===> Dec 08 - Santa Claus Is Hacking to Town
===> Feb 2009 - Brady Bunch Boondoggle
===> July 2009 - Prison Break
===> October 2009 - SSHliders
===> December 2009 - Miracle on Thirty-Hack Street
===> December 2010 - The Nightmare Before Charlie Browns Christmas
-----------------------------
Resources
-----------------------------
=> Career Central
===> Looking For Work
===> Looking To Hire
=> Links to cool sites.
=> Mass Media
=> News from the Outside World
=> Tools
=> Tutorials
===> Tutorial Requests
Loading...
Exclusive Deal
SANSFIRE 2013
June 15 - 22
5% Off
w/ Code
:
EHN_5
SANS Deals 4 EH-Netters
5% OFF
Any
SANS Course
in Any Format!
Coupon Code:
EHN_5
Including
SANS Rocky Mountain 2013
&
SANS Boston 2013
Polls
Compared to this year, 2013 will be:
Great!
Better.
About the same.
Little worse.
FUBAR!
Recent Forum Topics
OSCP - Offensive Security Certified Professional
: Failed my first attempt at the OSCP exam
(94) by
azmatt
Programming
: Finished Python Course in Codecademy now what?
(11) by
securitian
Tools
: Social-Engineer Toolkit (SET) Version 5.0 “The Wild West” Released
(2) by
m0wgli
Malware
: EICAR?
(3) by
UKSecurityGuy
Advisories
: HTB23154: Multiple Vulnerabilities in Exponent CMS
(0) by
AndyP
Advisories
: HTB23153: Multiple Vulnerabilities in Jojo CMS
(0) by
AndyP
Advisories
: HTB23151: Cross-Site Request Forgery (CSRF) in UMI.CMS
(0) by
AndyP
Tutorials
: Need guidance
(8) by
r0ckm4n
OSCP - Offensive Security Certified Professional
: Class Scheduled 6/8 - Linux n00b
(7) by
Taemyks
OSCP - Offensive Security Certified Professional
: OSCP exam scheduled
(6) by
gbhat
Incident Response
: LinkedIn Forensics
(0) by
AFENTIS_Forensics
General Certification
: Red Team/Blue Team
(1) by
ajohnson
Career Central
: Starter cert?
(3) by
Grendel
Network Pen Testing
: Beginner Ethical Hacker
(1) by
m0wgli
General Certification
: CPT Practical Submission
(0) by
z28power4u
Web Applications
: Nessus and Nikto
(4) by
Seen
Network Pen Testing
: Cracking salted MD5 hash
(4) by
n37sh@rk
CEH - Certified Ethical Hacker
: Passed my C|EH
(3) by
n37sh@rk
Mass Media
: EC-council hacked, irony at his best?
(0) by
j0rDy
Web Applications
: SQL Injection into an INSERT statement.
(6) by
eyenit0
Network Pen Testing
: Solution for sipXtapi INVITE Message CSeq Field Header Remote Overflow
(1) by
m0wgli
Web Applications
: dns
(2) by
H1t M0nk3y
Other
: BSides Boston
(0) by
3xban
Career Central
: InfoSec in Central, FL
(2) by
tturner
Web Applications
: Web vulnerability scanner
(4) by
H1t M0nk3y
EH-Net News Feeds
Latest Additions
Privacy Notice
for TDCC & All Properties
Free Business and Tech Magazines and eBooks
© 2013 The Ethical Hacker Network
Joomla!
is Free Software released under the GNU/GPL License.