The internal process of trying to convince/poach people to leave their cushy IT security jobs to join the Incident Response team is like trying to crew-up a pirate ship. Same pay, more stress, and shitty hours...but, but swashbuckling excitement!* And we can't offer the prospect of prize money nor have the last resort of the "press" (i.e., kidnap them and get them aboard just as the ship sets sail) *occasionally, ymmv, have to be vague when telling war stories #DFIR #InfoSec