A hacker's HR message for the IT industry

Dominique Karg ponders the best way to cultivate the next generation of employees

All children at some point will be asked what they want to do when they grow up. Few will declare themselves set for a life as a hacker – and fewer still declare themselves CEO material. Should they be nurturing different skill sets?

There has been much debate about the GCSE exam format. On one side are those who argue it should be scrapped in favour of a complex testing process that produces stronger candidates; others believe this disadvantages youngsters who buckle under examination pressure.

All too often, children who question teachers in the classroom are labelled as trouble makers, and those who like to take things apart as delinquent. But surely those behaviours hint at the ability to acquire skills that are exactly what is needed in today's world?

I like to hire people who question everything and challenge the rule book – so long as it is legal. Let's face it, if what we think we know is never challenged, how do we ever learn more or improve?

My instinct is not just to try something I know works, but look for ways it doesn't. That is from my hacking experience. As a businessman, I also recognise that just because something has always been done a certain way does not necessarily make it right. I need to constantly evolve, and ensure my business does too, if we are both to survive.

The same is true for technology. It too is continually evolving and employees who are scared of change will hinder advancement.

In the classroom, children need to embrace exploration and get excited by discovery, not run from the prospect. As we continue to rely on technology even for the most basic workplace functions, the ability to look at a problem from every conceivable angle and discover a working alternative becomes a necessity.

I don't claim to be informed enough to judge whether school exams need a shake-up, but I do know that the curriculum and teaching practices need revolutionising to ensure technology is not just used as a tool for learning other subjects, but studied in its own right.

When playing video games as a child, I would always look for ways to "break" the code to secure myself additional ammo, extra units or create different guises. There will be some who see that as cheating, but is it?

Surely I'm just using my skills effectively. For me, the fun of the game is beating the game designers. If it gives me an edge, shouldn't that be applauded, not something to be ashamed of?

I would not have got far in my career if I gave up at the first hurdle. I wouldn't have made many sales if I stopped with the first "no". We need our youth to value tenacity, not just an A*.

I dropped out of university but that does,not make me a failure. In fact, I have a fire in my belly and a passion for security that I have used to get where I am today. As an employer it means I don't just look at a CV to see what grades a person achieved when they left full-time education, but what they have done with them since.

As parents, we can become fixated on our children's grades. Yes, they are important, but they are not everything.

Perhaps we also need a "common sense" examination. I have interviewed a few grade-A and 1:1 students over the years who struggle to function in the normal working world. Perhaps the education system has failed them!

I would not suggest that every primary school child be given a computer and taught how to break into government databases (although I also don't necessarily see the harm as it would certainly keep these establishments on their toes), but I think inquisitiveness should be actively encouraged rather than seen as an evil that needs to be eliminated.

If a child has a natural talent – be it football, mathematics, or code-breaking – this should be the focus rather than the parts of the subject that are likely to appear on the examination paper.

We need employees who are willing to stand up for what they believe and question what they think is wrong. Perhaps then rogue bankers wouldn't cripple our financial institutions, or think they have valid defences for doing so.

And in my experience, the best person for the job is someone with passion. Certainly, the best security professionals are passionate about security. The basics are important but so is creativity and flair.

Just as I recognised my skills as a hacker at an early age, as an employer I recognise the skilled individuals within my workforce and try to deploy them appropriately. What I think is important is passion, creativity, morality and tenacity. Those are the main qualifications I'm looking for from future employees.

Dominique Karg is co-founder and chief hacker at AlienVault