Example Job Posting
This posting is made up, but it is based on the kind of detail real job postings often include.
Systems Administrator II, Northfield Regional Bank
Northfield Regional Bank is looking for a Systems Administrator to join our team at our main data center in Millbrook. You will support our hybrid environment and help with our migration project.
Responsibilities:
- Manage 300+ Windows Server 2016 and 2019 servers and Active Directory for 1,200 users
- Support our move from on-premises Exchange 2016 to Microsoft 365 by the end of the year
- Maintain Cisco ASA firewalls and Palo Alto VPN appliances
- Administer our core banking platform running on Oracle 12c
- Respond to alerts from our SIEM and help the 2-person security team with patching
Apply by emailing your resume to Jordan Ellis, IT Manager, at jellis@northfieldregional.example
What an attacker learns (try it yourself first)
- Exact products and versions to research for vulnerabilities (Windows Server 2016, Exchange 2016, Oracle 12c, Cisco ASA, Palo Alto)
- A migration is in progress, which usually means mixed systems and confused staff
- The security team is only 2 people, so alerts may go unnoticed
- The location of the main data center
- A real name, job title and email format, which is perfect for a phishing email pretending to be a job applicant with a "resume" attachment