Mark Harris

In general, you want to start with a class of solutions called UVM or Unified Vulnerability Management tools that help you discover vulnerabilities in devices and application access methods to and from those devices (whether they are user devices or IoT/OT devices). Starting with a UVM platform is always best, because the most efficient and cost-effective solutions are cloud-based, agentless, and collect the data they use to analyze vulnerabilities from a multitude of other vulnerability and network tools already implemented in your network and public cloud environments. In other words, slapping a hardware appliance in the network is fine for current analysis of vulnerabilities in that network, but UVM concentrates on proactive analysis.

A significant number of security problems are resolved by using the techniques mentioned above and combining them to come up with the BEST solution - not necessarily the least expensive, most complex, or even the one that most closely matches your current approach to solving the problem. Always keep a security framework in mind. Whether it's MITRE ATT&CK, NIST, or Cyber Attack Chain, these models keep you organized and help identify the problem - the best place to start any problem-solving exercise. Look for solutions beyond security such as consolidation and cost reduction. Look for ways to update or automate repetitive, but important, security tasks. Consider solutions that change the way users access applications or categorize data.

Hands-on, Hands-on, and a little more Hands-on. Structured courses are fine, but nothing beats some hands on experience to fill in the gaps in knowledge. As the approach to building networks continues to change, it's important to learn the basics with online training and real-world videos of networking professionals solving problems. I would also encourage the subordinate to do some research on any current "network transformation" projects and learn where things are going in networking and why. Many of these videos and information can be found on LinkedIn Learning and in addition, I'd invite the subordinate to Zoom calls and meetings as these issues were being discussed, and serve as a technical mentor to explain the concepts addressed.

For Internet-bound traffic decryption (vs. TLS/SSL decryption & WAF protection of on-premises servers): 1. Use a 3rd-party cloud proxy. Firewalls (even virtual firewalls) do not perform as well as proxy-based solutions with built-in load balancers and Single-Scan multi-action proxies. Avoid on-premises, edge devices as much as possible to save on cost and complexity. 2. Enforce the use of the latest TLS version on the client device. 3. With client agents, take advantage of DTLS performance enhancements as a transport mechanism to the cloud proxy.

Technical Support - Entry-Level Support positions are a great place to start with network security (as well as other technologies). The key is to work on as many cases as possible and follow-up on every case with the network security concept needed to solve the problem. Research networking and security terms discussed in the case, determine how each applies to resolving the issue, and if possible, replicate the issue and resolution yourself. Sales Engineering - the key to learning here is to put yourself in the customer's environment whenever possible. Ask questions about the problem before offering solutions and remember to ask what the customer's preferred solution would be and what pain points they experience then research solutions.

Communicate - let your sales partner know how you would like to work and what methods work best for each and where they need help. Listen for things like how they like to present to customers, motivations, and skills they feel they need help developing. Compliment - look for ways to compliment your team member, especially when there is a different approach or weakness they express, and find ways to use your partner's skills to enhance your own. Don't assume all account managers are the same and adjust based on personality. Coordinate - discuss the desired approach with your sales partner as well as their management. Make sure to coordinate with your account manager to discuss any communication you've had with the customer on your own.