.

What am I doing wrong?

<<

Joshsevo

User avatar

Sr. Member
Sr. Member

Posts: 281

Joined: Tue Dec 29, 2009 11:00 pm

Post Tue Nov 15, 2011 2:23 pm

What am I doing wrong?

So a few of you know on the forums and a few of you have helped with finding a suitable job.

Still no luck finding a job.  All that talk about certs only help you get in the door is spot on.  I have a few certs but no job offers.  I've had a few interviews, mostly phone interviews.  I've been let gently a few times.  one time I had them tell me they didn't like my personality as the only reason I wasn't hired.

So maybe it's me.  Maybe it's my resume, maybe my cover letter, but it's probably my experience.

Give me a critique on my CV & Resume and let me know what I can improve on or what I can remove.

I have a few different versions of my resume and can tailor all of them if need be.

A quick overview of my skills
Sec+
CEH
CHFI
Active Secret Clearance
Prior Military
Disabled Veteran

Computer Forensics Intern for the past 1.5 yrs.  Doing bookmarking, finding contraband, locating emails, pictures, Wmv's etc....  Worked with EnCase & FTK.

Technical Support installing print drivers, completing part orders, multi tasking is a must here.  Worked here 4.5 yrs.

Bachelors Degree in CIS (dual majors in Network Security & Computer Forensics)

Working on my Master's degree currently in Computer Information Systems Security management.

Willing to relocate on my own dime if given the opportunity

Member of the FBI's Infrgard Security community.  ( you need a background check for this)

Resumes & CV will follow:
Security+, Network+, C|EH, CHFI, CPT
<<

Joshsevo

User avatar

Sr. Member
Sr. Member

Posts: 281

Joined: Tue Dec 29, 2009 11:00 pm

Post Tue Nov 15, 2011 2:24 pm

Re: What am I doing wrong?

Dear hiring manager:
I am currently a recent graduate with a Bachelors degree in Computer Information systems with dual majors, Computer Forensics & Network Security.  For the past year I've had a internship with a local Computer Forensics firm where I handled cases that ranged from fraud, company espionage, to Child Exploitation.  I have certified in CEH (Certified Ethical Hacker), Security+, and my CHFI (Computer Hacker Forensics Investigator).  I am currently enrolled in school for my Master’s Degree in Computer Information Systems Security.

I am volunteering my nights at a local Computer Forensics firm named PenrodEllis Forensic Data Discovery where I have done a large variety of tasks in the two years that I have been there.

Throughout the cases that I worked on I was tasked with bookmarking suspected emails, documents, pictures as well as finding recent internet activity.  Then finding any links that associated the user to those links and the times they were accessed.  The software that was used to bookmark these pieces of evidence was FTK 3 and also EnCase.  Other software that was used in conjunction with the cases was FTK, Imager, FTK Registry viewer.  I am currently working on my ACE certification and should have it within a month.  I also have moderate experience with EnCase and feel comfortable using it on a daily basis.  I plan on applying for this certification within a yr. as by then I will have met the minimums of 3 yrs. of experience using it.

Other duties that I was tasked with was writing reports using MS Word 2010 (One note) and also using pre-made "search words" to look for the evidence left behind by the suspect.  Using the proper Chain of Custody during the acquisition and throughout the entire life of the case/HD is something that is second nature to me. 

I have been recently accepted into the FBI's Infragard National Security Protection community.
I am willing to travel extensively and also relocate for the job if it requires it.
Thank you for your time and consideration.
Sincerely,
Josh XXXX
Security+, Network+, C|EH, CHFI, CPT
<<

Joshsevo

User avatar

Sr. Member
Sr. Member

Posts: 281

Joined: Tue Dec 29, 2009 11:00 pm

Post Tue Nov 15, 2011 2:25 pm

Re: What am I doing wrong?

RESUME---



Josh Carpenter
Targeting Entry Level Network Security/Jr. Admin
 Recent graduate from Devry University with a Bachelors in Computer Information Systems with dual tracks in Computer Forensics & Network Security.
 Active Secret Clearance
 Currently working on CPT (certified Penetration Tester) certification which requires use of Red Hat Linux and a large variety of Network Security tools to complete the required “flags”.
 I am currently certified in CEH, Security+, CHFI.  These certifications work with the DoD 8570.  I am currently working on my ACE certification and should ascertain it within a month.
 Some of the responsibilities given to me were the following: exposure and use of forensic write-blocking devices and software, research on different programs which had forensic interest for the particular criminal case being worked on, (i.e. Limewire, etc.), and the use of a Shadow Drive and its utility in a criminal case, etc. In addition, I did a significant amount of work using a Forensic software called EnCase and FTK, in which I looked for keywords, sorted the case by different markers, viewed jpegs and text documents of forensic interest, and put the evidence of significant value in designated folders.
 Currently volunteering at a local Computer Forensics Company where I was tasked with attaching write blockers to device prior to acquisitions of hard drives of different types along with helping and sometimes involving cases that made headlines in the local media.  The internship has lasted 2 years.
 Intermediate experience with reports regarding the Network state and using reports to document the different techniques used to gain access to the network and tools used and information found.
 Worked on a myriad of cases ranging from Child Exploitation to Fraud, Corporate espionage etc..
 Quickly learn and master new technology; equally successful in both team and self-directed settings; and proficient in a range of computer systems, tools and testing methodologies
Education
Devry University – Westminster, CO
B.S. in Computer Information Systems program 
Concurrent Employment with College Studies:
Junior Computer Forensics Analyst (2010 to Present): PenrodEllis Forensic Data Discovery

Keller University- Westminster, CO
Master’s Degree- Masters of Information Systems Security (Degree expected: April, 2013)

Technology Summary
Certifications: CEH (Certified Ethical Hacker), CHFI (Computer Hacker Forensics Investigator), Security+
Systems: Windows Vista, XP & Windows 7, Linux (Ubuntu),
Software: FTK, EnCase, Helix, FTK Registry Viewer, FTK Imager, Mandiant Web Historian, Regripper, Sluethkit, Skype Log Parser, Perl and Python, Exiftool, Linux CLI, NMAP, Nessus, GFI,


IT Experience
Epilog Laser-Golden, CO
 NOC, Technical Support:  (2007 to current) Handled technical troubleshooting within a commercial, government and residential networks for the last 4.5 years
 Setup networks that allowed the customers to use their laser engraver to keep their business up and running.
 Completed customers part orders ranging from a few dollars to $45,000.
 Worked with the IT Department and a third party database design company for the new Technical support department and what should be included in it.

PenrodEllis Forensic Data Discovery -Denver, CO
• Junior Computer Forensic Analyst: (2009 to current)
• I gained knowledge of the team approach in gathering and analyzing case evidence. I assisted with peer to peer investigations involving the trading of child pornography and have used the comparison of hash values to locate images and videos of suspected child pornography. I learned the basics of a computer related criminal investigation. In addition, I gained experience previewing computers in a forensic manner using the EnCase software and FTK 3.
• Extensive use of Tableau write blockers and the documentation associated with use of them.
Available for Relocation & Travel
Security+, Network+, C|EH, CHFI, CPT
<<

Joshsevo

User avatar

Sr. Member
Sr. Member

Posts: 281

Joined: Tue Dec 29, 2009 11:00 pm

Post Tue Nov 15, 2011 2:41 pm

Re: What am I doing wrong?

I am on about every job board that exists and usually look for new jobs at lunch each day.

Should I go out and get more certifications?

There has to be an understanding that I am a married man with a 2.5 old son so me quitting my job and working for peanuts is not finnacially feasbile. 

I am at the point that I will quit my FT job and get a security guard job working nights so I can go to my Forensics internship more often and during the day so I can get more experience.  This is my plan that I have been tossing around in my head for the last few months and will act upon it in March/April time frame if no job is found.
Security+, Network+, C|EH, CHFI, CPT
<<

lorddicranius

User avatar

Sr. Member
Sr. Member

Posts: 448

Joined: Thu Mar 03, 2011 3:54 am

Post Tue Nov 15, 2011 2:50 pm

Re: What am I doing wrong?

Just a couple things I noticed as I glanced through...

1) I wouldn't call being a disabled veteran a skill ;)
2) On the resume, unless you modify the "targeting" line (aka objective") each time you send it in, and that line reads exactly for the position you're submitting it for, remove it from your resume.  If you submit you're resume with an objective that doesn't match the position you're trying to get, you're shooting yourself in the foot right from the get-go.
Last edited by lorddicranius on Tue Nov 15, 2011 2:52 pm, edited 1 time in total.
GSEC, eCPPT, Sec+
<<

cd1zz

User avatar

Recruiters
Recruiters

Posts: 566

Joined: Sun Oct 03, 2010 9:01 pm

Post Tue Nov 15, 2011 2:50 pm

Re: What am I doing wrong?

Josh,

I am in Denver. I just got a great security gig locally and can give you some constructive criticism. Send me a PM with your email address.

-C
<<

Joshsevo

User avatar

Sr. Member
Sr. Member

Posts: 281

Joined: Tue Dec 29, 2009 11:00 pm

Post Tue Nov 15, 2011 3:03 pm

Re: What am I doing wrong?

But I am very skilled at being disabled.  I've worked at it for years.  LOL good catch.

When I apply at jobs I remove the "targeting" line.  For example if I am trying to get an entry level System Admin.  I change that to "targeting System Admin positions"........Should I just remove this completly from all my resume's?


lorddicranius wrote:Just a couple things I noticed as I glanced through...

1) I wouldn't call being a disabled veteran a skill ;)
2) On the resume, unless you modify the "targeting" line (aka objective") each time you send it in, and that line reads exactly for the position you're submitting it for, remove it from your resume.  If you submit you're resume with an objective that doesn't match the position you're trying to get, you're shooting yourself in the foot right from the get-go.
Security+, Network+, C|EH, CHFI, CPT
<<

lorddicranius

User avatar

Sr. Member
Sr. Member

Posts: 448

Joined: Thu Mar 03, 2011 3:54 am

Post Tue Nov 15, 2011 3:24 pm

Re: What am I doing wrong?

I don't think removing it completely is necessary, just as long as you're changing it for each position you submit it for so that it matches said position.  It's one thing that seems to be repeated every time Lee Kushner and Mike Murray do a preso on infosec careers (Lee keeps seeing it in his work as a recruiter).

Lee doing a talk at the OWASP NYC 2008 meeting:
https://www.owasp.org/index.php/OWASP_J ... _Resources

And here's 3 talks both Lee and Mike have done at DEFCON:
- https://www.defcon.org/html/links/dc-ar ... tml#Murray
- https://www.defcon.org/html/links/dc-ar ... ml#Kushner
- https://www.defcon.org/html/links/dc-ar ... ml#Kushner

Some of the points are repeated throughout the videos, but I've found some good information watching these.
GSEC, eCPPT, Sec+
<<

millwalll

Post Wed Nov 16, 2011 4:50 am

Re: What am I doing wrong?

ok with your cover note (RESUME) I always got told this it to explain why you are good for the job. So you should try relate to the job you are applying for if this is a junior position then you should say things like you pick things up quickly you are always eager to learn and love a new challenge. And you really want work in security so much so you spending your own time and money to help progress this. Because at the moment it seems like your RESUME is telling me the same stuff that is in your CV.

The CV just seems like a list of points and jobs that don't really tell me much. These days with the job market is so hard the CV is there to sell you before it was a foot in the door now you really need to sell yourself and what you are good at what you do.

if you send me a PM with your email I am happy to send your my CV and Cover note that may help.
<<

Triban

User avatar

Hero Member
Hero Member

Posts: 620

Joined: Fri Feb 19, 2010 4:17 pm

Post Wed Nov 16, 2011 10:39 am

Re: What am I doing wrong?

I agree with Jamie about the resume and letter looking very similar.  For your resume I would remove some of the wording.  Hiring managers like bullets, short and too the point.  Don't put in that you are currently working on a cert.  If you have the certs, list them in their own section along with education

Education:
Devry University
BS in Computer Info Systems - concentration in Computer Forensics

Certifications:
CEH, Security+, CHFI (you can expand the names and put the acronyms in parathesis).

About your clearance, you probably want to list you have a security clearance, but not the level of the clearance.  Might as well put a sign on your forehead that read "I know lots of important secret stuff come social engineer me!"  It would also probably be listed away from skills or stated in your cover letter or in your job search profile on the job boards.

Create a section of "Expertise"  put those bullet items that you REALLY want to highlight, things like

Expertise with Encase product
Expertise with IDS/IPS log review
etc...

Then move into listing technical skills:
Analyzing logs to determine the history of activity on a system....
Utilizing Wireshark to analyze packet captures....  (I am just throwing these down for looks, they may not apply).

You want the resume to be clear and concise.  Don't be afraid to go beyond a single page but don't clutter the pages.  Mine is currently two full pages with my job history on the second page along with my education.  I've been out of school for almost 12 years now so my education is not something I need to emphasize.  I want employers to see my skills and expertise first.

Also get involved with the community if you aren't already.  Look at the Security Bsides schedule network!! 

Technical skills are important, but some hiring managers look for soft skills as well.  Its great that you can probably rebuild the entire history of use on a suspect system but if you can't write the report up properly or communicate with the non-tech folks about the details, you may have problems.  We are no longer the little geeks stuck in the basement never to see the light of day, we need to be able to talk business and understand goals beyond our dimly lit labs. 

Also speak with confidence, don't claim to be an expert in anything since a good interviewer will test that statement and you may end up looking like a jackass.  If you don't understand a term, don't pretend to, maybe go with, "I haven't worked with it, but I am aware of it..." or something along those lines.  Then note it and google for later.

Good luck man, and keep the chin up.  There are jobs out there and you need to show that you aren't just looking for a job but want to build a career!  Maybe in an interview, pull a "What can I do for you?"  when they ask you if you have any questions.  Oh Questions!  make sure you have a few.  Phone interviews are your time to shine, you won't have to wear a suit, you can be in a comfortable environment so the pressure will be a bit lighter.

Ok, that is all for now.
Certs: GCWN
(@)Dewser
<<

Joshsevo

User avatar

Sr. Member
Sr. Member

Posts: 281

Joined: Tue Dec 29, 2009 11:00 pm

Post Wed Nov 16, 2011 2:07 pm

Re: What am I doing wrong?

Thanks for all the suggestions.  I will redo my resume in the next few days and repost the new one.

It's hard to come up with explainations of what I do or the Forensics stuff when I don't have much to say in general.  but again i will use everyone suggestions and their resumes as a reference and go from there.

I keep my chin up.  I have a decent job that pays the bills (barely) but looking to get rewarded for the 4.5 yrs of school and the hard work I've out into this new career field.
Security+, Network+, C|EH, CHFI, CPT
<<

millwalll

Post Mon Nov 21, 2011 6:12 am

Re: What am I doing wrong?

You will be fine! Are you basked in the usa or UK ? I hope you got my CV and cover note and hope it helps.
<<

Joshsevo

User avatar

Sr. Member
Sr. Member

Posts: 281

Joined: Tue Dec 29, 2009 11:00 pm

Post Mon Nov 21, 2011 5:07 pm

Re: What am I doing wrong?

I am in the USA and I did get them and looked them over and copied it word for word.  Thanks.  Just kdding.
Security+, Network+, C|EH, CHFI, CPT

Return to Career Central

Who is online

Users browsing this forum: No registered users and 0 guests

.
Powered by phpBB® Forum Software © phpBB Group.
Designed by ST Software