BSides Leeds Careers Day Programme

"IN THE REALM OF INFORMATION SECURITY, COLOURS

"IN THE REALM OF INFORMATION SECURITY, COLOURS

CONVERGE, AND UNITY BECOMES STRENGTH. RED, BLUE, AND CONVERGE, AND UNITY BECOMES STRENGTH. RED, BLUE, AND PURPLE INTERTWINE TO FORM AN UNSTOPPABLE FORCE; A PURPLE INTERTWINE TO FORM AN UNSTOPPABLE FORCE; A

TESTAMENT TO COLLABORATION, INNOVATION, AND SHARED

TESTAMENT TO COLLABORATION, INNOVATION, AND SHARED

PURPOSE. IN THIS VAST INTERCONNECTED NETWORK, WHERE PURPOSE. IN THIS VAST INTERCONNECTED NETWORK, WHERE THREATS LOOM AND VULNERABILITIES HIDE, WE STAND AS ONE, THREATS LOOM AND VULNERABILITIES HIDE, WE STAND AS ONE, FOR EACH MEMBER HOLDS A CRUCIAL ROLE. WHETHER WE TEST, FOR EACH MEMBER HOLDS A CRUCIAL ROLE. WHETHER WE TEST,

DEFEND, OR ANALYZE, REMEMBER THAT OUR DIVERSITY DEFEND, OR ANALYZE, REMEMBER THAT OUR DIVERSITY EMPOWERS US, OUR EXPERTISE ENRICHES US, AND OUR EMPOWERS US, OUR EXPERTISE ENRICHES US, AND OUR

COLLECTIVE EFFORTS FORTIFY OUR DEFENSES. TOGETHER, AS A COLLECTIVE EFFORTS FORTIFY OUR DEFENSES. TOGETHER, AS A VIBRANT TAPESTRY OF MINDS, WE SHAPE A SAFER DIGITAL

VIBRANT TAPESTRY OF MINDS, WE SHAPE A SAFER DIGITAL

LANDSCAPE. EMBRACE YOUR ROLE, UNLEASH YOUR POTENTIAL,

LANDSCAPE. EMBRACE YOUR ROLE, UNLEASH YOUR POTENTIAL, AND LET US FORGE AHEAD, AS ONE BIG TEAM, SAFEGUARDING AND LET US FORGE AHEAD, AS ONE BIG TEAM, SAFEGUARDING THE REALM OF BYTES AND BITS WITH UNWAVERING THE REALM OF BYTES AND BITS WITH UNWAVERING

DETERMINATION. " DETERMINATION. "- CHATGPT (2023) CHATGPT (2023)

LEE GILLBANK @YORCYBERSEC

HUMPHRIES @SAFESECS

THE

BSIDES LEEDS 2023

BSIDES LEEDS

TEAM WOULD LIKE TO WELCOME YOU TO VS. BLUE VS. PURPLE 2023

THE TEAM WOULD LIKE TO WELCOME YOU TO RED VS. BLUE VS. PURPLE

HTTPS://APP.GATHER.TOWN/APP/C7MV3IJYNUWWB6

JC/BSIDES%20LEEDS

USER GUIDE - HTTPS://WWW.REUNIVOUS.COM/GUIDE

GATHERTOWN GATHERTOWN

SPEAKER SCHEDULE SPEAKER SCHEDULE

MELANIE

SAM

DESTINATION UNKNOWN: CAREER MUSINGS OF A FORMER <REDACTED> AGENT

LIAM

MEET THE MEET THE SSPEAKERS PEAKERS

LINKS & SOCIALS

HTTPS://WWW LINKEDIN COM/IN/NATASHAHARLEY/

13:30PM-14:0OPM

LINKS & SOCIALS

@LADYCYBERROSIE

HTTPS://WWW.LINKEDIN.COM/IN/ROSIELADYCYBER/

JOIN US FOR EXABEAM CTF

HTTPS://WWW.EXABEAM.COM/TP/EXABEAM-CTF/EMEA-06-23-23/

JOIN US FOR EXABEAM CTF

A CAPTURE THE FLAG COMPETITION!

FRIDAY 23RD JUNE | 1 TO 3 P.M. BST

PUT YOUR SECURITY SKILLS TO THE TEST!

CHALLENGE YOURSELF AND COMPETE WITH PEERS IN A FORMIDABLE GAME OF EXABEAM CTF. GET A FIRSTHAND VIEW INTO THE POWER OF EXABEAM ADVANCED ANALYTICS – EXPLORE THE POWER OF AUTOMATION AND THREAT HUNTING USING EXABEAM BEHAVIOR ANALYTICS.

YOU’LL BE PRESENTED WITH A SERIES OF CHALLENGES. WHEN A CHALLENGE IS SOLVED, A “FLAG” IS GIVEN AND POINTS AWARDED. GET THE TOP SCORE AND EARN BRAGGING RIGHTS AS AN EXABEAM CTF CHAMPION! ALL COMPETITIONS INCLUDE TUTORIALS THAT GUIDE USERS THROUGH THE EXABEAM SOLUTION SO YOU CAN FAMILIARIZE YOURSELF BEFORE THE GAME BEGINS.

NEW TO EXABEAM OR CAPTURE THE FLAG? NO PROBLEM. FUN WILL BE HAD! EXABEAM TECHNICAL EXPERTS ARE ON HAND TO OFFER IN-GAME SUPPORT.

COMPETING AGAINST YOUR PEERS MAKES YOU HUNGRY? NO WORRIES! EXABEAM WILL PROVIDE A LUNCH VOUCHER FOR EVERYONE.

WANT TO WIN SOME PRIZES? DON’T MISS THE CHANCE TO JOIN US AND WIN A REMOTE CONTROL F1 CAR AND SOME EXABEAM #BESTSWAG GOODIES.

SPACE IS LIMITED. SECURE YOUR SPOT AND REGISTER TODAY!

TALK SYNOPSIS TALK SYNOPSIS

12:30pm - 13:00pm

JOSH JACKSON

LIE ON YOUR CV - A BRIEF

GUIDE TO ENTRY LEVEL

CYBER TALENT

Do I need a degree? How much experience do I need? What kind of roles should I apply for? These are all questions I receive frequently from my friends and acquaintances when they ask me how they should go about getting a job in cyber. On the other side of the fence, I find that employers are often hesitant to post entry-level positions for cyber jobs due to fears around lack of experience and understanding of the field.

With this talk I aim to shed some light on what hiring managers are looking for in cyber-talent, how beginners can tailor their learning and skills to break into the industry, and how employers can best support entry-level talent in their entry into the work force to ensure that their skillset grows to fit the needs of the industry and their team. I would also like to specifically highlight the pros and cons of hiring candidates from different backgrounds (e g , university educated, complete novice, academy graduate, etc.) so that employers can make informed decisions the kind of skills different individuals may bring to the table.

I plan to close out the talk with some brief conversation around my experience with the industry so far, and how I've been able to grow rapidly in this space through my exposure to both red team and blue team sides of the field, ultimately culminating in the development of a continuously growing SOC that takes a purple team approach to its service delivery at my current employer. I believe it would be of benefit for others to hear first-hand how important it is to have knowledge of both sides of security in order to become a more well-rounded security professional and deliver a better service to our clients.

13:00 - 13:30pm

GERARD BARRETT

UH OH, HOW DID I GET HERE?

The tried and true method of degree then masters is failing a lot of people due to the volume of applications companies now get There are other ways to get noticed and I'll talk about my own route involved a lot of Twitter and Zoom calls during the pandemic.

13:30pm - 14:00pm

ROSIE ANDERSON & NATASHA HARLEY

DECODING CYBER CAREERS

This AMA (Ask me Anything) session with two seasoned recruitment professionals will aim to showcase the wide range of diverse cyber careers available

14:00pm- 14:30pm

MELANIE OLDHAM FACILITATING GROWTH THROUGH CAREERS IN CYBER

The YCSC is a non-profit organisation providing networking and development opportunities, knowledge sharing, and support for the government’s commitment to local cybersecurity ecosystems.

In this presentation we will demonstrate how the YCSC is utilising cybersecurity to help bring prosperity to Yorkshire. Our community of professionals, academics, students and government bodies encourage everyone with a passion for cybersecurity to get involved.

The YCSC runs a variety of research, school visits, webinars, skills programmes and masterclasses. We also offer mentorship initiatives designed to help young people find their way into the industry, champion careers in cyber and improve awareness of employment opportunities.

We are proud to provide cybersecurity qualifications to students from low-income areas throughout the region. Giving the next generation access to cybersecurity apprenticeships and rewarding careers in Yorkshire and the wider UK. If you want to see how you can help Yorkshire thrive, come along our talk, ‘Facilitating Regional Growth Through Careers In Cyber’

14:30pm - 15:00pm

MICHAEL NDON STOP BREAKING INTO CYBER SECURITY

Do you want to have a career in cybersecurity? Listen in as I talk through how best you can achieve your goal. Here's a breakdown of what we will run through: - I will start with the narrative often painted with the slogan 'break into cybersecurity' - What does it really mean to 'break into cybersecurity'? - Rather than 'break in' , try to find the right keys (I will outline practical steps each one can take) - The way forward - Questions??

15:00pm - 15:30pm

SAM HUMPHRIES

DESTINATION UNKNOWN: CAREER MUSINGS OF A FORMER <REDACTED> AGENT

The journey into, and through, cyber security doesn’t always take a straight or obvious path. Having celebrated her 23rd infosec ‘birthday’ , Sam will share her somewhat obscure story from agent to security strategist and keynote speaker. This talk is aimed at folks of all levels, whether you're just getting started in the industry, looking to career change into infosec, feeling stuck in your career, or just looking for some meme-based entertainment.

During this session she’ll talk about transferable skills, finding opportunities, and will provide tips on tackling the everpresent imposter syndrome. Did she mention memes? There will be memes. And maybe a prize for the person who can figure out the name of the agency.

15:30pm - 16:00pm

LIAM FOLLIN HOW TO GET AWAY WITH HACKING

A no-nonsense talk on how to actually break into penetration testing, from someone who went from apprentice to CTL in 4 years Focusing on the best ways to build ‘hard’ skills fast, the importance of ‘soft’ skills, and why you don’t need to pay harder to get started ;).

M

M E

E

E T O U R S P O N S O R S

E T O U R S P O N S O R S