
This is software (AWS) generated transcription and it is not perfect.
My name is zak. How ? I am a manager of information security at carbon. I, um, really, what shape my career the most was going to the university of utah. Azan student. I did both my undergrad and my master straight to you. Um, in my first job out of college, actually was from a professor at the u ah, i just really enjoyed his class a law. I thought it was a great class, and so i would always talk to him. And then at the end of the class, he asked me for my resume. Um, so i gave it to him, and then within three weeks i actually had a job. Ah, which is highly unlikely. I think i think it was pretty lucky to get that. Um but with that being said, i busted my butt. I worked my tail off to get where was i ? Ah, within a year or so, i've kind of outgrown my position. I was one of the top performers for the company that i was hired out on decided to move on. But with that being said, i also use connections from my time at the business school to develop. Skills and friends, and they actually help me. My network actually helped me get another job, which is really one of the biggest takeaways from my career. I think is that networking and being able to connect with people while in school will greatly help shape your career. I don't think there's any way i would be ram today without the network and without the people that i have connected with, ah, both at the u and outside of the u it is very important, um, that that is, uh, that that is done, and that you take advantage of the time at the school to meet and get to know as many people as possible, because there are a lot of great people that go there, and they're going to be a lot of very successful people that are in your class, and that can either help you, or you can help them later on in their career.
For the most part, i handled one of our product lines, which was, ah, a company that was acquired by carbonite, so i handle all of the information security aspects for that product line, which you can kind of think of as a separate cust or a separate company into itself. So on that perspective, i managed firewalls, so we do a lot of the big banners of firewalls. We were back a company, so we saw a lot of customer data, so i'm in charge of managing the firewalls in and out of our production environment. I'm in charge of the r sim and our vulnerability, scanning on and results and trying teo remediate the findings from the scans. I'm also in charge of helping secure new products that the company is developing and over acquiring. Ah, and that can be from doing penetration tests on the product itself on the software that could be from environment. Why once and you environ this one up to support a new product ? Um, and also really, i think of my job as well as trying to help others in the organization think about security doing their day to day tasks because one of the biggest attack vectors is the human element. And if you can protect the humans more than likely, you can protect your company within certain, ah, certain, reasonable, ah, within a certain reasonable, like chance or whatever just really depends. I think. Ah, an information security regardless, it's not. It's not if you're going to get breached its win, and so the best tactics you can put in place to protect it was a little states you're most vulnerable, you're most vulnerable assets, and that could be the human asset that khun b physical hardware that khun b software um, and to put controls in place to help mitigate when that reach curse working hours are i mean, lucky for me, i can kind of set my own hours for the most times in the office between seven and eight a m and leave between four and five p m different days kind of different matter kind of depend. I can get in at seven and leave at six i can also work weekends and nights just kind of depends on what's going on on this part of my position as well. I'm always on call, i don't get called frequently, but i basically always have to have my phone on me in case something happens because i'm on the incidents, the incident response team, so if something does happen, i will be on the hook to be there and to show up. I mean, so. The tools and soft programs. When
Old necessary we used as well, um, our sin. We use splunk, which is a great tool to know and is a highly competitive market. Ah, to be a part of if you get smart certifications, they pay a bunch of money. Um, let's. See what else i constantly amusing and map. Ah, have youse burp sweet. I've used ah kalli lennox as well, which is a penetration testing platform. Really cool tool. Honestly, the tools i like the most are ah, anything that lets me get my hands a little dirty czar like callie lennox like and map. I like tinkering smokers more for reporting. We also my work. We used log stash. So doing a lot with that. Ah, i don't know it's all it's all the same to me. I think i think tools are cool, but your work is what you make it. And if you want, if you want to like something, you can like something. Uh, it just don't matter and how you use it. I love you. Go. Um, i think, it's. Great. I love to be in a learning environment and information security is that because their new attacks that have found every single day there's always something new coming up ? Um