IT infra / support / devops 討論(9)

唔係讀it
識小小python 呃左份工返黎

做酒店inhouse 要學咩先
或者考咩cert
乜柒都未考過 0support 經驗

過埋下星期正式加入失業大軍

想問下CISA/ CISSP 呢2張cert都要5年相關工作經驗，咁要點證明？要搵公司/老細出份文件？

qa未來都唔錯 了解下testing cycle 同埋 唔同stage 有咩testing要做

做support? 都係ccna, az104
可以做番半年，摸下唔同範疇，再揀一範鑽研

垃圾公司？

完約未搵到新工

仆街 掹一條線唔小心掹晒成個bay出黎

A 36-year-old man was admitted to the intensive care unit with an acute exacerbation of chronic heart failure. After a ventricular assist device was placed and anticoagulation therapy initiated, hemoptysis developed, and he expectorated a cast of the right bronchial tree.

The New England Journal of Medicine
https://www.nejm.org/doi/full/10.1056/NEJMicm1806493

點解負評
本質上咪一樣

搵個有CISSP簽你就得，不用點証明

IT 人集結 for 考cert 或分享technical skill
https://t.me/+VrdF0lAEa9hjY2Fl

有無做開Security field 的師兄，平時係要做d咩？

呢個post都真係比較少security 人

你想知真係純cyber sec人做啲咩定DevSecOps人平時Sec個part做啲咩?

如果DevSecOps嘅我就答到少少嘅，主要都係

pipeline入面build stage加返SAST, SCA scan，deploy stage又加個DAST scan，
Terraform code / K8s yaml / Docker image個啲又要auto scan，
最好自動gen埋report起個Jira彈俾dev / infra team跟，
有vuln個陣通常dev佬又會叫你infra層面搞，infra佬又會叫你彈返俾dev佬搞，呢個時候又要做下調解員氹下兩邊拍欄檔一齊搞掂佢

再煩少少個啲就可能搞埋service mesh呀，SIEM，IPS，IDS呢啲我都有幫手逗過下

有vuln個陣通常dev佬又會叫你infra層面搞，infra佬又會叫你彈返俾dev佬搞，呢個時候又要做下調解員氹下兩邊拍欄檔一齊搞掂佢

真係好煩

btw sast 同sca都算DevSecOps?
因為我公司最近都睇緊啲sast sca product 遲啲可有得玩下

無限輪迥黎不過都好正常 個個都唔想自己個邊改野嘅

sast同sca本身其實唔算係，最簡單可以人手trigger scan
但如果你要auto做到每次build每次deploy都scan一次
再check severity俾唔俾過
又gen下report開埋jira咁就算係DevSecOps

好奇巴打個邊，infra佬係咪都行jira個套？

無掂code 我係infra 佬

創造就業係咁上下，devops本身都係無存在必要