If someone interested in computer security that still hasn't chosen a path within the industry comes to you for guidance, what type of job would you recommend nowadays?
In the short-term: forensics. There is a massive lack of skills there, and a massive demand for people. In the longer term, I would say it's real security architecture. So the ability to go in and understand how a system is constructed from a big picture perspective. What happened was that we built systems that were based on threats of 10 years ago. There are going to be a lot of companies in the next 10 years that are going to have to completely redesign and rethink their big picture strategy around security and then there is going to be demand then for people who have the skills of infrastructure architecture combined with the skills of information security.