how to social engineer your way into dream job derby con2016
TRANSCRIPT
“How to Social Engineer your way into your dream job!”
Jason Blanchard Professional Social Engineer - Marketing T: @BanjoCrashland
“A few things before we begin.”
• When I get nervous I tell jokes. • I am prone to anxiety and panic attacks
– Symptoms • Increased heart-rate • Muffled sounds • Thousand-yard stare • Become WAY too self-aware
– Why? • Self-doubt • Fears of being judged and criticized and rejected
– Most of you will not notice, it will be internal – “But… this is my mutant-ability.” – “Why am I tell you this?”
• The company I work for is a sponsor, but I am not speaking on behalf of them.
• Your current employer may not appreciate all the things I am about to talk about.
“… no, not really.”
What you may be thinking?
Friends….
“I was born a Nigerian Prince!”
• The natural born marketer… • Social Engineering vs. Marketing
– “Please… for the love of God - click the link!”
• Deception vs. Persuasion • Scam Artist vs. Salesperson
– Belief • Right Person • Right Skills • Right Position • Right Team • “I’m here to bring value… to serve.”
• Confidence vs. Arrogance My only meme… :)
“Why are you in this talk?” • Curiosity
• Skill development
• Currently searching for work
• Unhappy with current job…
• Undecided
• You want your dream job!
• Golden Hand-cuffs?
“Are you in a DIP?” • Dream Job now?
• Quit vs. Keep Going – Make a list of wants
– Evaluate current job
– “Am I in a dip?”
• the dip – By: Seth Godin
– @ThisisSethsBlog
“If you pursue your dream job you will…” • Grow to be courageous
– “Shy?” – “Let’s test your level of shyness!”
– “What if…”
• Stretch your skills
– “I never had a reason to learn this before.”
• Fail _A_LOT_
– “Damn… this sucks.”
• Wreck your life
– “What was I thinking… I want to go back to the way it was.”
– “This is awesome!”
• Discover you already work at your dream job…
• Maybe succeed... – “Crap, now what?”
Hire Jason Blanchard?
• Credibility: – US Army: Combat Camera – Full Sail University – A Lost Cookie Productions – A Comic Shop / The Geek Easy – Bold Hype – DC Comics – Warner Bros. – Diamond Comics | Free Comic Book Day – SANS Institute
• Penetration Testing – Marketing Manager • SANS NetWars – Marketing Manager
“Don’t be like me…”
Buffet Style
“Be like you…?” • “Where do I fit?”
– The Looks
– The Brains
– The Wild Card
– The Muscle
What’s the scope of this project?
• Budget: – “How much am I willing to spend to get my dream job?”
• Timeline: – “I want to have my dream job in 5 years or less.” – BUT… Tomorrow – Next Week – Next Month
• The keys to an effective sustained marketing campaign... – Get people to know you exist. – Give them a reason to care. – Amaze them once they do. – Repeat…
– Target Audience
Reconnaissance • “Who are my target companies?”
– How big are the walls? – Where are the cracks? – Who are the gate keepers? – Who is vulnerable to persuasion? – “But how do I figure this stuff out?”
• Let’s live demo – shall we. • OSINT Gathering
– “How much is too much?”
• “What are the skills I need?”
– Hiring Blogs / Interview Questions • http://sockpuppet.org/blog/2015/03/06/the-hiring-post/
– Developing skills • Training & Certification • CtF’s
– www.holidayhackchallenge.com – www.pivotproject.org
Scanning • Networking – STOP BEING SHY!
– “Never deny someone the opportunity to find out how awesome you are.”
– CtFs – B-Sides / DerbyCon – Training Events – Recruiters
• “Recruiters are my friends.”
• Social Media – LinkedIn
• InMail
– Twitter • Influencers
• Informal Interviews w/ Organization
I found him… lower left corner.
Exploitation • Resume dev
– “What makes a good resume… IDK? • Tailoring your resume to the job post.
• Delivery methods
– “Please click on this thing I sent you.”
– FAX?
– Conferences • Spinning wheels, plinko, and you!
• The hotel bar
– Leonard Nemoy & Jonathan Frakes
– Landing Pages • Hireme.com
– Remarketing – Google Display Ads
– Your new email account
– Social Media • Highly Targeted Advertising
– Facebooks Ads
Promoted Ads
Pivoting • Interview Process
– How to practice – learn to talk to strangers. – Interviewing when you already have a job. – Google Street View
• Metric Reviews – Periodic: “What is working vs. what is NOT working”
• Exploit Refinement – “Are my delivery methods working – responses?” – “Am I being annoying/arrogant?” – “Are these methods actually keeping me from finding work?? – “What methods of comfort are limiting me from succeeding?” – “When was the last time I talked to someone face to face?”
STOP! • “What are you thinking right now?”
– Hesitation – Doubts – Fears – Charlatan – Excited – Overwhelmed – Apathetic – Determined – Ugh… – Sigh… – *sadpanda
WEEEEEEEE!!
Owning! • Offers
– Negotiating • Salary
– Bonuses
• Benefits – InfoSec Conferences & Out-of-Industry Conferences – Training – Skills Development
• Countering • Multiple offers
– Decision making process
• Giving notice to current employer – Counter-offers – Deciding to stay, things need to change
I’m not sure this is a meme.
Questions?