|
| 1 | ++++ |
| 2 | +title = "Obligatory look back" |
| 3 | +tags = [ |
| 4 | + "career", |
| 5 | + "security" |
| 6 | +] |
| 7 | +date = "2025-12-23" |
| 8 | +toc = true |
| 9 | ++++ |
| 10 | + |
| 11 | +# Here we are... |
| 12 | + |
| 13 | +...at the end of 2025. Another year, another obligatory blog post looking back on a year where I've barely posted anything but a lot has happened. |
| 14 | + |
| 15 | +# Job changes |
| 16 | + |
| 17 | +While late 2024 saw [my formal move to offensive security](https://www.maclaren.dev/posts/2024-09/seeing_red/) on a career front, 2025 really solidified it. I've moved over to [Huntress](https://www.huntress.com/) to lead up their internal Offensive Security team. |
| 18 | + |
| 19 | +This is an awesome opportunity to join a very hot company, somewhat detach myself from the AI bubble, and really expand my career beyond just doing and into building. We've got a cool problem space here, real threats to manage, and some amazing intel to work with. I'm hugely optimistic for 2026 as I continue to build out this program and begin to hire the team! |
| 20 | + |
| 21 | +There's no bad blood with my former team at GitHub - this was simply too good of an opportunity to pass up. If you're interested in getting into red teaming/offensive security, GitHub is hiring at the time of writing this, and I'm hoping to be as well in 2026! |
| 22 | + |
| 23 | +# AI ramblings |
| 24 | + |
| 25 | +I mentioned detaching myself from the AI bubble - I mean this specifically in the sense of working at a company that is (almost) exclusively focused on AI. |
| 26 | + |
| 27 | +I use AI tools daily. AI tools draft a bunch of my code, ideate on concepts, assist with research (NotebookLM is a godsend), and are just generally great rubber-ducky style tools. Love 'em, pay for them, and support the companies that are making them. With that said, I do think there's a huge bubble there - whether it's [circular financing deals](https://en.wikipedia.org/wiki/AI_bubble), massive investment tied almost exclusively to speculation on potential future outcomes, or simply the obvious and misguided attempts to replace a lot of skilled human work with AI I felt it probably prudent to hedge my bets a bit. |
| 28 | + |
| 29 | +I don't think it's reasonable, or even remotely intelligent, to try to avoid AI tooling in the technology world these days. If you avoid it, you're simply going to be left behind by others who are harnessing it well. but, as the rice comapny says - with great power comes great responsibility. **You still own your output even if it's AI-generated/augmented**. |
| 30 | + |
| 31 | +# Travel |
| 32 | + |
| 33 | +2025 was an interesting year for travel in that I didn't do a lot, but I had some fun. |
| 34 | + |
| 35 | +On the work front I had the opportunity to spend some time exploring Microsoft HQ in the early summer. That part of the world is gorgeous, and the Microsoft campus is no exception. It's a bit dystopian being on a tech campus that's about the size of my neighbourhood, but I definitely see the draw of workin there if you have an in-office position - they really have everything within walking distance. SeaTac is still a nightmare of an airport though. |
| 36 | + |
| 37 | +I also had opportunties to go to [NorthSec](https://www.maclaren.dev/posts/2025-05/nsec2025/) where I helped host a panel on AI topics, and attended my first [Objective By The Sea](https://objectivebythesea.org/v8/index.html) conference - this time in Ibiza, Spain. OBTS was an absolute blast, and given the intimiate nature it was an outstanding opportunity to make friends, talk shop, and learn first-hand from some of the best in the industry when it comes to macOS research and threat intelligence. While DEFCON holds a special place in my heart, OBTS is certainly on my do-not-miss list... The tropical venues don't hurt either! |
| 38 | + |
| 39 | +# Trying something new in 2026 |
| 40 | + |
| 41 | +By and large my push for 2026 is to be more purposeful about blogging/posting/whatever interesting tidbits I come across. These may be code snippets, troubleshooting tips, war stories, tools, etc... I'm not sure, but the one that that has been a constant for me is that if I don't have something in writing (or more accurately, if I can't link to something) it doesn't exist. I have a decent memory, but that only goes so far when it comes to deeper reference material or knowledge sharing. To be clear - this isn't an attempt at content farming or grinding for the algorithm, I just want to get thoughts on paper or other mediums in a more reliable form. |
| 42 | + |
| 43 | +Let's see if it happens /shrug |
0 commit comments