Best Interview questions for hiring a Security expert?

I'm an all rounder Sysadmin, starting to move slightly into the management side as time goes on.

More and more of my time has been dedicated to security, and my company is on board with hiring a security "expert." as there's a definite need.

We received 48 resumes. the top candidates skill/experience wise had some big red flags (Companies that don't exist, educations at institutions that have no presence online whatsoever, or absolutely zero work experience in my country, with typos all over the resume (communication skills?)

The rest of the applicants look like VERY junior "analysts" that just sift through SIEM logs and defender etc. Nobody with network experience, Actual implementation of these tools etc, Hardening Servers/network/Image, etc.

Most of the resumes are just generic. List some tools, List employers, What they did with a surpising amount of oddly specific "metrics" (Reduced xyz by 20%, Prevented 70% of XYZ, etc)

We found 4 we're going to interview. Our interview process is very restricted - each candidate has to be asked the same questions. Does anyone have a "Go to" question when hiring a peer? or remember a great question when they were being interviewed?

I have a few like "Tell me about your most challenging project, or one that you're most proud of. What was your role in it?

"How do you stay current/up to date on the latest technology/security/news, What is your learning style?"

"What is your understanding of this role and why do you see yourself as a good fit?"

But I'm looking for the question that'll kind of let me know that they're passionate about it, and will dig in.

Any suggestions? submitted by /u/sudz3
[link] [comments]


http://dlvr.it/TBd4Mm