How to Break Into Security, Miller Edition
Summary: In a Krebs on Security interview, former NSA global network exploitation analyst Charlie Miller described five years at the agency as paid on-the-job training in information security, but said the classified nature of the work left him with little he could show employers afterward. Miller, then a principal research consultant at Accuvant LABS, said he could not discuss what he knew or how he knew it, and had a lot of trouble getting a good job after leaving the NSA.
What you should know: Miller's answer to how to build a security career is a portfolio of CVEs and conference talks, not certifications - he holds a CISSP and a GCFA and says neither would attract him to a candidate. For security leaders hiring, that means the resume in front of you may say almost nothing about whether the person can find a bug.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026