--- title: The Perks of Being a White Hat Hacker description: The Perks of Being a White Hat Hacker --- # The Perks of Being a White Hat Hacker [Speaking Engagements](https://www.mitnicksecurity.com/in-the-news/tag/speaking-engagements), [Penetration Testing](https://www.mitnicksecurity.com/in-the-news/tag/penetration-testing), [Dec](https://www.mitnicksecurity.com/in-the-news/tag/dec), [Cybersecurity Expert](https://www.mitnicksecurity.com/in-the-news/tag/cybersecurity-expert), [Fbi](https://www.mitnicksecurity.com/in-the-news/tag/fbi), [Hackers](https://www.mitnicksecurity.com/in-the-news/tag/hackers), [Kevin Poulsen](https://www.mitnicksecurity.com/in-the-news/tag/kevin-poulsen), [Myspace](https://www.mitnicksecurity.com/in-the-news/tag/myspace), [Nokia](https://www.mitnicksecurity.com/in-the-news/tag/nokia), [Pacific Bell](https://www.mitnicksecurity.com/in-the-news/tag/pacific-bell), [Mitnick Security](https://www.mitnicksecurity.com/in-the-news/tag/mitnick-security), [Sun Microsystems](https://www.mitnicksecurity.com/in-the-news/tag/sun-microsystems), [Cyber Liability Insurance](https://www.mitnicksecurity.com/in-the-news/tag/cyber-liability-insurance), [Black Hat](https://www.mitnicksecurity.com/in-the-news/tag/black-hat), [Information Systems Protection](https://www.mitnicksecurity.com/in-the-news/tag/information-systems-protection), [Kevin Mitnick](https://www.mitnicksecurity.com/in-the-news/tag/kevin-mitnick), [Network Security](https://www.mitnicksecurity.com/in-the-news/tag/network-security) [ Mitnick Security| ](https://www.mitnicksecurity.com/in-the-news/author/mitnick-security) 11.25.2016| 3 MIN READ TIME The term “hacking” carries so many negative implications in the corporate world that few companies can perceive hackers as a force for good. Many erstwhile criminal hackers have discovered, however, that their skills are transferrable to that corporate world and that they can use those skills on the positive side of the law to develop careers as cybersecurity analysts.  Some of the more notorious black hat hackers from the past several years have successfully made this transition. Consider, for example, **Kevin Mitnick**, who, at the height of his black hat hacking activities, lifted source code from DEC and Nokia and roamed freely within networks operated by Sun Microsystems and Pacific Bell. Following several arrests and many years in jail for his activities, Mitnick formed MitnickSecurity.com, which is one of the most successful white hat hacker cybersecurity analyst firms in the country. Another California-based hacker, Kevin Poulsen, utilized his hacking skills to break into phone systems and to manipulate those systems to win cars and cash from various contests. Poulsen evaded the FBI for more than 18 months before he was apprehended and served a short prison sentence. Following his release, he used his skills to nab a sex offender who had been targeting children on the social media platform MySpace. Corporate demand for hackers with skills that match Mitnick’s and Poulsen’s hacking abilities has opened a path for programmers to start their careers as cybersecurity analysts without participating in illegal or improper activities. Network security companies are offering starting salaries of $50,000 to $100,000 per year to programmers that have cybersecurity experience. The perks of being a white hat hacker might not include the thrills that come with illicit hacking activities, but cybersecurity analyst positions also carry none of the criminal liability risks that hackers face every day when they target private or government information systems networks. A white hat hacker will attempt to penetrate the security systems of a cybersecurity analyst company’s clients. They will scan network access ports and look for defects in operating systems and ineffective patches on those systems. He may attempt to contact low-level employees for password information or attempt to connect with a company’s internal personnel in the same manner as a black hat hacker. In most cases, a cybersecurity analyst company’s activities will be authorized by a small internal group from a client company that wants to test the integrity of its security systems. The challenges faced by white and black hat hackers are identical. Where white hat hacking is concerned, the hacking activities are authorized and do not expose the cybersecurity analyst to criminal liability. As companies become more aware of the risks and liabilities that they face when their electronic systems are compromised, more of them are procuring cyber liability insurance to cover financial losses associated with those risks. Cyber liability insurance companies rely on white hat hacker’s services in the underwriting of those insurance policies. When a cybersecurity analyst determines that a company has erected more robust defenses against hacking and network incursions, that company’s cybersecurity insurance premiums will be substantially lower. If the analyst’s report shows reveals less adequate defenses, the target company will also then have an opportunity to improve weak systems and to get a more favorable insurance premium quote. A small subset of hackers will always exist outside of the legitimate world of white hat hacking, virtually guaranteeing long-term employment for cybersecurity analysts. Companies that want the best protection for their information systems and networks will benefit from hiring an analyst that thinks like a black hat hacker in order to level the cybersecurity laying field. Source: [TechFor.Us](http://http://www.techfor.us/2016/11/the-perks-of-being-a-white-hat-hacker/) # Related Resources [![](https://www.mitnicksecurity.com/hs-fs/hubfs/Screen%20Shot%202020-08-14%20at%203.48.55%20PM.png?width=350&name=Screen%20Shot%202020-08-14%20at%203.48.55%20PM.png) by Mitnick Security | 08.16.2019 | 1 min #### Advice from Kevin Mitnick Featured in the Wall Street Journal Op-Ed Kevin Mitnick was interviewed by Mr. Maniloff who is an attorney at White and Williams LLP in Philadelphia and an adjunct professor at Temple University’s Beasley School of Law. Continue Reading Knowbe4, Cybercrime, Kevin Mitnick, Wsj, Op-ed ](https://www.mitnicksecurity.com/in-the-news/advice-from-kevin-mitnick-featured-in-the-wall-street-journal-op-ed) [![](https://www.mitnicksecurity.com/hs-fs/hubfs/Images/Events/In%20The%20News/kevin-ku-w7ZyuGYNpRQ-unsplash.jpg?width=350&name=kevin-ku-w7ZyuGYNpRQ-unsplash.jpg) by Mitnick Security | 12.12.2018 | 3 min #### 12 Ways to Defeat Two-Factor Authentication Everyone knows that two-factor authentication (2FA) is more secure than a simple login name and password, but too many people think that 2FA is a perfect, unhackable solution. It isn't! Continue Reading Speaking Engagements, Tw-factor Authentication - Roger A. Grimes, Chief Hacking Officer, Data-driven Defense Evangelist, Security Awareness Training, Knowbe4, Simulated Phishing Platform, 2Fa Solution, Kevin Mitnick ](https://www.mitnicksecurity.com/in-the-news/12-ways-to-defeat-two-factor-authentication) [![](https://www.mitnicksecurity.com/hs-fs/hubfs/Images/Events/In%20The%20News/simon-abrams-k_T9Zj3SE8k-unsplash.jpg?width=350&name=simon-abrams-k_T9Zj3SE8k-unsplash.jpg) by Mitnick Security | 11.26.2018 | 1 min #### We Need to Talk About NIST’s Dropped Password Management Recommendations Passwords and their protection are among the most fundamental, essential aspects of enterprise data security. They also make up the bane of most users’ relationships with their enterprise devices, res... Continue Reading Speaking Engagements, 2Fa, Biometric Security, Two-factor Authentication, Fraud Prevention, Password, Password Management, Kevin Mitnick Security Awareness Training, Multifactor Authentication (Mfa, Password Reuse, Kevin Mitnick ](https://www.mitnicksecurity.com/in-the-news/we-need-to-talk-about-nists-dropped-password-management-recommendations)