Last time, I spoke with Sharka. She’s a pentester who knows how to hack a glucose meter. She also taught me a few things about physical security.
Now I get to talk with Pam Armstrong. Web development eventually led her to healthcare security.
Kim Crawley: Please tell me about what you do.
Pam Armstrong: I work for a large healthcare system on the threat and vulnerability team. I work on their projects side, which means I help stand up and administrate tools for the SecOps side of our team. I also still do some SecOps and work on overall security hygeine. I just started on a team as well to help test mobile apps.
KC: Do OWASP guidelines influence your mobile app testing?
PA: I just started in it, but I’m positive those guidelines will definitely come into play.
KC: How did you get into cybersecurity in the first place?
PA: I started working for a police department in 2001, doing web design and development. Their previous site had been hacked, so I really needed to do what I could to prevent that again. Then the department started doing forensic examinations of computers and phones. That intrigued me, so I started learning more about it. Sadly, many police departments only allow sworn officers to do this work, so I had to be content with just learning some about forensics on my own. In 2010, the City had some layoffs, and I was transferred to the Library. That position just did not hold the same challenge for me, so I started taking college courses online for information security. About a year and a half into those courses, I saw an ad for a security analyst for a hospital system. The ad said they were (Read more...)
*** This is a Security Bloggers Network syndicated blog from The State of Security authored by Tripwire Guest Authors. Read the original post at: https://www.tripwire.com/state-of-security/off-topic/women-in-information-security-pam-armstrong/

