And you thought you were actually interviewing for a job. Sucker! It’s a shady strategy: interviewing CSO candidates for the sole purpose of tapping their smarts. The trend was pointed out to us by Lori Sabat, who runs the information security executive placement firm Sabat Group. Take the case of the Fortune 50 manufacturing company that recently lost its CISO. According to Sabat, the company brought in a number of high-profile candidates for lengthy job interviews, asking each person the natural and necessary question: “What would you do to improve our security posture?”So when all was said and done, who got hired? Actually, nobody. The position was left unfilled. But while the manufacturer didn’t garner a new CISO from the process, it picked up some good security-related intellectual capital. In this case, it isn’t clear that this was the intent from the beginning, so perhaps Sabat is being a little paranoid (and that’s a good thing in security, right?), but she says she’s seen enough similar instances lately to make her think twice about interviewers’ motives. Serious job-seekers aren’t in the position to be coy with their knowledge during the interview process, which puts them at a disadvantage if the hiring company is simply looking for some pro bono consulting. So what’s an interviewee to do? There’s no easy answer, but if the interview process seems to run interminably, candidates should look for a nonthreatening way to bring the interview to a head. Sabat says one job candidate in a similar situation, sensing he was being strung along, started asking more pointed questions. “Let’s be really candidare you really thinking about hiring me? And if so, let’s talk about compensation,” he said. It was an approach that brought about a quick resolution, says Sabat. He didn’t get the job. Related content news Multibillion-dollar cybersecurity training market fails to fix the supply-demand imbalance Despite money pouring into programs around the world, training organizations have not managed to ensure employment for professionals, while entry-level professionals are finding it hard to land a job By Samira Sarraf Oct 02, 2023 6 mins CSO and CISO CSO and CISO CSO and CISO news Royal family’s website suffers Russia-linked cyberattack Pro-Russian hacker group KillNet took responsibility for the attack days after King Charles condemned the invasion of Ukraine. By Michael Hill Oct 02, 2023 2 mins DDoS Cyberattacks feature 10 things you should know about navigating the dark web A lot can be found in the shadows of the internet from sensitive stolen data to attack tools for sale, the dark web is a trove of risks for enterprises. Here are a few things to know and navigate safely. By Rosalyn Page Oct 02, 2023 13 mins Cybercrime Security news ShadowSyndicate Cybercrime gang has used 7 ransomware families over the past year Researchers from Group-IB believe it's likely the group is an independent affiliate working for multiple ransomware-as-a-service operations By Lucian Constantin Oct 02, 2023 4 mins Hacker Groups Ransomware Cybercrime Podcasts Videos Resources Events SUBSCRIBE TO OUR NEWSLETTER From our editors straight to your inbox Get started by entering your email address below. Please enter a valid email address Subscribe