back

by rietta·11y ago·view on hn ↗
I went through the M.S. Information Security program at Georgia Tech and and glad that I did it. Though at this point in my life I work mostly on building out web applications with Ruby on Rails for startups. Security is a tough sell in most of the industry. Bolting it on after the fact is almost always impossible, which is why I have had to learn so much about startups, their lifecycle, business model development, the customer discovery process, etc, in order to be able to attempt to build more secure software for startups before its too late in the process and bandaids are the only options remaining.

Point is, no matter what you do, there is a tremendous amount of learning to do outside of the university curriculum of your choice.

1 comments
Any particular reason why you aren't taking a job in the infosec industry directly? Compared to being a RoR dev, I think you could be paid much more and have more interesting work.

Helping manage secure dev practices for startups is of course very important, but I think that would be much easier to do if you're either in some kind of CISO or appsec management position in the company, or are part of a third party auditing/pentesting firm that deals with startups.