Creating and delivering custom security trainings, workshops and exercises aimed at engineers and other business roles.
Trainings
Training your employees in security awareness and technical skills is an investment that pays off in reduced risk and increased productivity when engaging with security topics. Training sessions that are well designed and include entertaining and practical examples will also encourage participants to actively engage with security, reducing friction between the security organization and the rest of the business.
I have experience in training engineers in modern security practices that will help them become self-sufficient in identifying and addressing security issues in their work, as well as knowing when and how to escalate those issues inside the company. I can customize the training to the resources, channels and guidelines available in their organization.
My trainings for enginers usually include practical demonstrations of current attacks, common mistakes when attempting to prevent them, lessons learned from previous incidents and modern tools and standards that they can use to reduce security risks.
My trainings for non-technical employees will focus on awareness by providing entertaining demonstrations, engaging the attendees with popular incidents and showing how security is relevant to their work as well as their daily life.
The trainings will be created specifically for the attendees and can be customized to cover any number of specific topics relevant to them such as cloud infrastructure, web application security, phishing, malware, general security hygiene…
Workshops
Workshops are essentially hands-on training sessions, which may be longer or even split into multiple days. For workshops, I will create a customized testing environment where attendees will be able to practice their skills as they acquire them.
Depending on the focus of the workshop, I may create a vulnerable application that we will use as a target for our excersises, deploy unsecured cloud infrastructure so that we can identify its weaknesses together or even simulate a security incident so that we can practice responding to actual threats. Attendees may be able to download or access these environments to practice on their own after the workshop for an agreed upon time.
Exercises
Combining the effectivity of workshops with the convenience of on-demand training, exercises will be accessible for a time period (with or without access to an instructor) so that employees can complete them at their own pace. They can be used as part of the onboarding process for new employees or as part of required or optional training.
In addition to the custom testing environments, all exercises will be accompanied with well written explanations and multimedia materials that will replace the live instruction that would be present in workshops. Exercise materials can be fully downloadable or hosted in any suitable training platform used by the company. I may also provide a completely self-contained training platform for employees to access the exercises.