Discussion

Ask HN: I'm now responsible of the security of a scaleup, how do I handle this?

Hi,

I used to be just a regular software engineer, now I'm "responsible", of the cybersecurity of a 30 people startup/scale-up, on top of actually building/maintaining features.

We can't afford a full time security expert for now, we're going to raise more money soon, but for now I'm +/- the only guy with cybersecurity experience.

We have huge clients, a big leak/hack would be a death sentence for the company IMO, and disastrous for a lot of people.

I found a few weaknesses on a few websites and on our own(it was just luck really), but I'm no expert, mostly self taught since I was a kid, I'm no junior but I'm far from an actual senior dev, most of the team is not really experienced(just smart bootcamp grads).

We're going to have a red team/agency audit us soon(we're going to get ripped to pieces, 100%)

How do I go ASAP from the scared relatively inexperienced guy I am who feels like the weight of the world is on his shoulders, to a guy that can actually handle this?

What course, book, MOOC website, SaaS, tool would you advise me to go through to handle this?

Thanks a lot

43 points codinmath 3 years ago 29 comments

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton