Looking for your next challenge, join the Photobox Group Security Team

Last year I took on the role of Photobox Group Security CISO and was given a strong mandate to transform the Group's security activities and build a modern security function

After building a great team and creating a strong foundation, we are looking for 3 senior security leaders to take us to the next level:

• Head of AppSec 
• Head of Incident Response
• Head of Cloud Security

If you are looking for an environment where you will make a big difference, where you will learn constantly and will work on an empowered environment, then Photobox Group Security is for you :)

If you know me from my open source contributions, event speaking and leadership roles (past member of Owasp Board and creator of the Owasp Summits), you know that I'm a very strong believer in Openness, Trust, Quality, doing the 'right thing' and building high effective teams.

For more details on how we approach security, see this post I wrote on the Photobox Group Security website  Why join Photobox Group Security and this post from the Group's CTO How we think about Security

If you are interested in these roles, and are around London this week (4th to 8th of June), the best place to meet the team is at the Open Security Summit (https://open-security-summit.org). This is where you will meet most of the team and we will be able to see you in action. As a sponsor for this event we still have some day tickets available, so let us know if you need one

We're hiring at PhotoBox Group Security (5x Senior Security positions)

As some of you might have noticed, earlier this year I became the CISO of the PhotoBox Group :)

Part of the strategy agreed with the Board, is the recruitment of 5x new senior security positions to create the Group Security leadership team.

If you want to join me in this amazing experience, and execute the vision/ideas that you have read many times on this blog, please visit the PhotoBox Group Security website, where you will find details about the following roles:

We also have a couple Contract positions avaiable

Big favour!!!!   

If you know of good candidates for these roles, xplease share the PhotoBox Group Security link with them :)

Finally, we are going to share a lot of what we are doing at PhotoBox Group Security in that site's blog (not only how we are approaching the recruitment of these roles, but also how we use JIRA, like I showed in the Creating a Graph Based Security Organisation - DevSecCon keynote), so keep an eye on it

Security message on recent Ransomware attacks (WannaCry worm)

(In case it helps, here is an email I sent today to all of PhotoBox Group Technology team)

Hi all Tech (TL;DR: high risk of Ransomware, see list of recommendations below)

As you probably have seen in the news, there has been a wide spread Ransomware attack which affected large number of companies worldwide, and is bound to cause more damage next week.

The attack is called Ransomware (a play on Ransom + Software) and has the business model of encrypting all files the affected computer has access to, and then asking for a ransom (i.e. payment) to decrypt the files.