Career HR
Post #4742 · source on Telegram
InfoSec jobs yell “Apply Now” yet still reject you Twitter meme
Description
Dark-mode screenshot of a Twitter post from user “H3KTIC.” First tweet reads: “infosec job: HIRING!!! APPLY NOW!!!!! me: *applies* infosec job: not you.” Under it is the blue link “Перевести твит,” a timestamp “23:05 · 05.08.2022 · Twitter for iPhone,” and engagement stats: “90 ретвита(-ов)”, “Твитов с цитатами: 13”, and “1 336 отметки(-ок) «Нравится».” A reply from the same account adds, “literally applied to 100+ jobs before I landed one in this ‘undersaturated’ industry idk where id be if no one gave me a chance.” The meme highlights the irony of cybersecurity hiring: constant “talent shortage” headlines versus candidates facing endless rejections, capturing common frustrations for developers navigating infosec career pipelines
More like this
More like this in Career HR →
Use J and K for navigation
Comments
29Comment deleted
Turns out “zero-trust architecture” was HR’s hiring strategy all along - every résumé gets a 403 for lacking five years’ experience in last month’s CVE
InfoSec hiring: "We need someone who can bypass our impossible requirements, but not someone skilled enough to bypass our terrible security practices once they're in."
The infosec industry: 'We desperately need talent!' Also the infosec industry: 'Sorry, we need someone with 10 years of experience in a technology that's existed for 3 years, plus CISSP, OSCP, CEH, a PhD in cryptography, and prior experience preventing nation-state APTs - for this entry-level SOC analyst position paying $45k.' It's the cybersecurity equivalent of requiring OAuth 2.0 experience for a job posted in 2005 - technically impossible, yet somehow still in the job description
Infosec hiring: the only shortage where 100+ CV payloads yield zero shells
Infosec posts: “HIRING NOW!” Reality: Zero Trust hiring - default deny. Only mTLS (referral) plus a CVE you authored returns 200; everyone else gets 403: Not You
Nothing says “infosec talent shortage” like an ATS configured as a default‑deny WAF requiring CISSP+OSCP and five years’ experience with last quarter’s CVE - applicants dropped to /dev/null
There must be a problem with them for sure. Comment deleted
definetly Comment deleted
Nah, companies never even see resume, they basically want 5 year experience for a entry level post Comment deleted
Classics Comment deleted
can somebody explain? Comment deleted
there's loads of companies complaining about people not wanting to work anymore, even though it's because their salaries are shit and they don't take what they can get. Comment deleted
thanks Comment deleted
what is an infosec job? Comment deleted
IT security Comment deleted
Cert collection job Comment deleted
Same as network admin Comment deleted
C I S C O Comment deleted
May be you should alter their systems with your CV to pass first stage? 😅 Comment deleted
You have to be the worst dev ever to not be able to find a job wtf, I passed 4 interviews last year just for fun and because I am always open to improve Comment deleted
Wow you're so cool, tell us more Comment deleted
Salty legacy php dev Comment deleted
It's not a dev job lol It's informational security Comment deleted
ig some dev jobs can be described as infosec too, but they're crucially different because companies don't want to invest into security because good security doesn't result in monetary gain. Comment deleted
Good security results in no monetary loss due to breaches Comment deleted
yes, but that's long term and non-guaranteed, so management usually ignores or severely underfunds security. Comment deleted
ofc that's a generalization and it ultimately comes down to the company and the competence of their management Comment deleted
That depends country to country also Comment deleted
If you don’t have certs, no jobs… Comment deleted