WEBVTT 1 00:00:00.140 --> 00:00:01.220 My name is Curtis Smith. 2 00:00:01.220 --> 00:00:04.170 I'm a cyber security engineer. 3 00:00:04.170 --> 00:00:06.440 Cyber security engineer 4 00:00:06.440 --> 00:00:08.820 line:15% looks at threats and vulnerabilities, 5 00:00:08.820 --> 00:00:12.980 line:15% whether it be infrastructure, people, things, 6 00:00:12.980 --> 00:00:17.980 line:15% and you try to devise countermeasures to those threats. 7 00:00:18.890 --> 00:00:23.163 line:15% Many of the projects are network defense type projects, 8 00:00:24.010 --> 00:00:26.940 line:15% whether it be Wi-Fi, cell phone. 9 00:00:26.940 --> 00:00:28.400 line:15% Cell phones are predominant. 10 00:00:28.400 --> 00:00:29.780 line:15% They're ubiquitous, right? 11 00:00:29.780 --> 00:00:31.520 line:15% Everyone has a cell phone. 12 00:00:31.520 --> 00:00:35.440 line:15% They're used for video, they're used for photography, 13 00:00:35.440 --> 00:00:37.770 they're used for word processing and things of that nature, 14 00:00:37.770 --> 00:00:40.020 so that's the number one attack vector. 15 00:00:40.020 --> 00:00:44.480 So trying to allow people the flexibility 16 00:00:44.480 --> 00:00:46.620 to use these things while keeping them secure 17 00:00:46.620 --> 00:00:50.690 from themselves in most regards is very challenging. 18 00:00:50.690 --> 00:00:53.600 So I was more of a network infrastructure person. 19 00:00:53.600 --> 00:00:58.600 So I've expanded my capabilities to Wi-Fi, 20 00:01:00.020 --> 00:01:04.540 line:15% and understanding pen testing methodologies, 21 00:01:04.540 --> 00:01:06.640 line:15% 'cause that's what hackers use. 22 00:01:06.640 --> 00:01:07.670 line:15% They use pen testing. 23 00:01:07.670 --> 00:01:09.740 They assess an environment. 24 00:01:09.740 --> 00:01:11.500 They do different things. 25 00:01:11.500 --> 00:01:12.790 So there's an attack life cycle. 26 00:01:12.790 --> 00:01:14.830 So understanding that attack life cycle. 27 00:01:14.830 --> 00:01:16.530 So looking at things from their perspective. 28 00:01:16.530 --> 00:01:18.180 So if I can look at it from their perspective, 29 00:01:18.180 --> 00:01:22.253 I'm better able to secure a network. 30 00:01:23.260 --> 00:01:26.050 My job is to just solve problems, right? 31 00:01:26.050 --> 00:01:31.050 So we scan an environment for threats, 32 00:01:31.530 --> 00:01:32.997 for vulnerabilities to that environment, 33 00:01:32.997 --> 00:01:35.190 and then take steps to mitigate it. 34 00:01:35.190 --> 00:01:38.110 line:15% So typical project management types 35 00:01:38.110 --> 00:01:40.490 line:15% of things come into play. 36 00:01:40.490 --> 00:01:42.530 line:15% Each project, it's like a good book. 37 00:01:42.530 --> 00:01:45.550 line:15% It has a beginning, middle, and an end. 38 00:01:45.550 --> 00:01:50.550 And you try to do it as cost-effectively as possible. 39 00:01:51.220 --> 00:01:55.613 But in some instances, if the threat is, 40 00:01:56.580 --> 00:01:58.190 so you do a risk assessment, right? 41 00:01:58.190 --> 00:02:03.190 So if the cost of remediating the issue 42 00:02:03.550 --> 00:02:08.420 is less than the cost of the issue device, environment, 43 00:02:08.420 --> 00:02:11.920 line:15% then it's up to the employer to determine, 44 00:02:11.920 --> 00:02:13.260 line:15% or the customer to determine 45 00:02:13.260 --> 00:02:15.010 line:15% if they want to expend that money. 46 00:02:15.010 --> 00:02:16.500 line:15% Now if it exceeds that, 47 00:02:16.500 --> 00:02:19.398 line:15% then you get law of diminishing returns, right? 48 00:02:19.398 --> 00:02:20.690 You don't wanna spend more 49 00:02:20.690 --> 00:02:23.610 to insure a vehicle than it's worth. 50 00:02:23.610 --> 00:02:25.583 So similar methodology comes into play.