What to check when screening
- Ask about incidents they investigated and the tools they used, such as a SIEM.
- Check their grasp of networks and systems, the base of all security work.
- Certifications like CompTIA Security+, CEH or ISO 27001 training are useful signals.
- Look for clear writing, since findings must be understood by managers.