Hacker Newsnew | past | comments | ask | show | jobs | submit | joebasirico's commentslogin

This article dives deep to help you create the ideal resume, find a new position, do company research, set yourself apart from all the other applicants, and how to nail your interviews and get an offer.


This comment seems to be from the author of the article.


Correct, that's my comment. When you submit a link to HN you it asks for a URL, Title, and Text. The text is automatically added to the posting as a comment.


I wouldn't really consider this a deep dive. Just a rehash of a lot of the advice you see in other articles.

The post and comment is from the author of the "article."


Are there other techniques or topics you think I missed? If so, please add them here to help people.

The purpose of the article is to help people who have been laid off to present themselves as well as possible and to find a new job.

Even though this information may not be completely new, I do still see a lot of the same mistakes being made, both in the applicants we see and the comments I read online. Sometimes just being reminded by a Hiring Manager and a Recruiter that these things really do matter can help.


Highspot | Senior/Principal Security Engineers | Remote USA/Canada | Full-time

The Highspot Security Team is hiring Security Engineers for ProdSec, AppSec, and CorpSec. We’re building a team that has all the best aspects of an agile consulting team (research, speaking and attending conferences, building tools, and delivering real results) with the best things of working at a well funded, rapidly growing, startup (funding, time to get things done and see your efforts make an impact).

We’re tackling fun challenges with great support and investment in our projects. If you want to learn more please reach out to me directly or apply with one of the links below.

Principal Security Engineer - Remote: https://jobs.lever.co/highspot/d8b57286-1395-4bf5-81b3-fbcfb...

Senior Security Engineer - Remote: https://jobs.lever.co/highspot/d1f8016d-e2c8-448b-97a6-11cc6...

Senior CorpSec Security Engineer: https://jobs.lever.co/highspot/86598c91-c701-4c93-8d93-9a5a7...


How are you defining prodsec and corpsec?

Prodsec -> Product security? Does that differ to the appsec role that you also mentioned.

CorpSec -> Corporate security? What would you mean by that?


Highspot is hiring Principal, Senior, and Security Engineers

Location: Seattle, WA. Remote Possible

We're hiring Security Engineers at all levels for our Product Security team at Highspot.

Highspot is a rapidly growing Pre-IPO startup that recently achieved "Unicorn" status in Seattle. We're building security solutions for our platform today with an eye on the company that we will be as we double every year.

Highspot may be growing quickly, but we haven’t lost our inclusive, respectful, and team focused culture. We’re looking for passionate people from all backgrounds who want to learn everything they can. Our team supports each other to achieve our best work. We leave the team and company competition or try harder thinking at the door.

We encourage our team to build tools, speak at and attend conferences, and publish research. We heavily use and rely on Open Source tools and software and we want to build and contribute back to those tools and to develop new techniques to help our security industry grow and improve together.

If this sounds exciting to you and you’re interested in learning more about our team and what it takes to be part of an exceptional, passionate, technical security engineering team, please reach out. We use tools to make our lives easier, make us more effective, and to help us get better security coverage quickly, but manual assessment and vulnerability hunting is where we will make the most impact.

Whether you're a seasoned pro or relatively new to security I encourage you to check out Highspot. Our tech stack is fun (React, Ruby, Clojure) and modern (AI/ML, interesting and complex systems) and we service millions of users and are growing super-fast.

You'll find more information on the specific job postings. We're also hiring a ton of other positions that you can find on our Careers page: https://www.highspot.com/careers/

*Security Engineer* - https://jobs.lever.co/highspot/2c36c5b2-feee-48f5-aed2-80fd3...

*Senior Security Engineer* - https://jobs.lever.co/highspot/d1f8016d-e2c8-448b-97a6-11cc6...

*Principal Security Engineer* - https://jobs.lever.co/highspot/d8b57286-1395-4bf5-81b3-fbcfb...


Highspot | (Senior) Security Engineer (and more!) | Seattle, WA

I'm hiring Security Engineers for my Product Security team, but there are many other incredible positions open at Highspot. Check out the Careers page for more info: https://www.highspot.com/careers/

Are you looking to join a rapidly growing team of security professionals in order to build an industry leading and bleeding edge security team?

Highspot may be growing quickly, but we haven’t lost our inclusive, respectful, and team focused culture. We’re looking for passionate people from all backgrounds who want to learn everything they can. Our team supports each other to achieve our best work leaving the intra-team or intra-company competition or try harder ethos at the door.

We encourage our team to build tools, speak at and attend conferences, and publish research. We heavily use and rely on Open Source tools and software and we want to build and contribute back to those tools and to develop new techniques to help our security industry grow and improve together.

If this sounds exciting to you and you’re interested in learning more about our team and what it takes to be part of an exceptional, passionate, technical security engineering team, please reach out.

We use tools to make our lives easier, make us more effective, and to help us get better security coverage quickly. We understand tools can make us better, but manual assessment and vulnerability hunting is where we will make the most impact.

Whether you're a seasoned pro or relatively new to security I encourage you to check out Highspot. Our tech stack is fun and modern and we service millions of users and are growing really fast.

* Security Engineer - https://jobs.lever.co/highspot/2c36c5b2-feee-48f5-aed2-80fd3...

* Senior Security Engineer - https://jobs.lever.co/highspot/d1f8016d-e2c8-448b-97a6-11cc6...


I recently migrated from LastPass to 1Password. Honestly it's been great. The UI is better, sharing vaults is easier, they have integrations with haveibeenpwned.com, and integrations are seamless. There's no free tier, but the cost feels worth it to me. I was able to get my whole family on 1Password without too much hassle.


This slide deck makes me really uncomfortable.

1.8 Billion Active Users on Facebook in Q3 of 2020

Every user in the US brings gives Facebook about $40 in advertising revenue every quarter

Facebook made $21 BILLION dollars in advertising, just in Q3 of 2020

Facebook has an effective tax rate of between 4% (in Q3 of 2020) and 20% in Q4 of 2019.

You’re worth a bit less than $160/year to Facebook in advertising revenue. They made 70 Billion dollars last year, and have made almost 60B this year already (82% of what they made in 19). They are taxed in the low double digits.

My questions to you: - Did you get $160 worth of value out of Facebook? - What’s your annual tax rate?

My guess is it’s No to the first question and a lot more than 4% to the second.


You seem to think that Facebook managed to get 2.74 billion monthly active users by providing a product that people don’t significantly value. 3.21 billion if you also count Messenger, WhatsApp, and Instagram.


$14/month is on par with other popular media sites like Netflix and Spotify.

Facebook employees and shareholders also pay tax on money they take out of Facebook.


A 4% effective tax rate has a lot more to do with investment in R&D, declaring losses in accordance to the tax code etc.

The optics are terrible, agreed on that.

Regarding your first question, its not about how much value I get out of Facebook, since I'm not paying $160 for it, advertisers are paying for the ability to reach people.


Let’s not pretend that Facebook isn’t ALSO involved in a lot of “technically not illegal but clearly unacceptable to the majority of society” tax avoidance strategies.

They aren’t unique in this sense but it’s just loophole after loophole and is the kind of thing that is at this point a textbook example of failed corporate/ social responsibility.


The $160 is value to the advertiser I don’t see how it would have anything to do with the value to the user. Since FB is free if it gives you even $1 of value you may as well use it.


> $160 worth of value out of Facebook

$13/month for WhatsApp is definitely worth it (if you take out the fact that its part of Facebook)


I also wonder if advertisers get value.

Have I been influenced to spend an additional $160? I’m highly doubtful but who knows!


It doesn't have to be additional spent. If coke can get you to buy their drink instead of pepsi, that's a dollar well spent, from their POV.


What about the other 159?


Thanks for reading my article. I agree this is overkill for this specific Coronavirus outbreak. The point of my article, though, was to show that with little outlay you can prepare yourself for a wide range of risks. In a city I think it’s important to prepare yourself for being able to stay in one place, without external resources, for some time, how much time is entirely up to you.

I see a lot of people here panicking and buying up all the toilet paper and hand sanitizer because they have never thought of this before. It’s best to be prepared, or at least thoughtful about your approach.


Absolutely, I should have made this clearer in the article. There have been many breaches in the past and the more places you put your sensitive data the more likely it is to be lost!


Yea, I'm glad it turned out to be nothing. I was pretty concerned to see my valid credentials in the subject line. The PDF was reasonably convincing, and very threatening. It got me thinking about things like "this can't be real, right? but what if it is? Should I just pay it to make it go away?" I figured if I was thinking those thoughts others might, so it was worth the investigation. Thanks for reading!!


I use the Hoth theme in Slack and through it was pretty cute that they change the name of that theme to Dagobah in dark mode.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: