FuzzyBoba
FuzzyBoba

How can a penetration tester at service based company can shift to product based comapny

Hi I am working in one of the service based company for 2 years now. My regular tasks include Web,api and Android penetration testing. But I want to improve my skills and also want to get into some product based company. I am trying out from tryhackme for now. But I need more suggestions on road map and also could you please share you interview experience at product based companies for pentesters

6mo ago
Find out if you are being paid fairly.Download Grapevine
ZippyPretzel
ZippyPretzel

I was in security industry before I came to an engineering role before I came to a product based company. Product security is a different beast when compared to traditional service in security, product differs in a few ways. When you’re in product based role your threat modeling and analysis needs to be done by you. Apart from this product security testing needs a system level understanding that you’ll get when you end up engineering some products. Some skills that might help you go a long way in this industry is threat modeling and analysis, cross layer understanding of OSI, elinux and Linux internals, fuzzing, a little bit of programming (few things off of my head). Even for a tradition “pipe hitter” roles in security if you have these skills it’ll be helpful for you.

FluffyQuokka
FluffyQuokka
EY5mo

Following

ZippyPretzel
ZippyPretzel

Following what mate?

Discover more
Curated from across