Blog

Un jeu vidéo pour améliorer le processus de recrutement

October 26, 2017
Pieter Danhieux

It's no secret that we believe strongly in the power of gamification at Secure Code Warrior to engage developers to code securely. It's what we do, and the results have been amazing so far. But what about using an actual video game to assess potential new hires? Is that going a step too far, or could it possibly be an effective practice?

That's what the startup Scoutible is doing, and I have to say I'm intrigued by their approach. Scoutible assesses potential hires using a video game - not gamified assessments, but an actual video game experience - and checks how the person behaves in certain situations. The game captures "millions of data points used to measure a candidate's various attributes" during just 20 minutes of gameplay, and uses those data points to rate how the candidate would do for the job in question.

There's a lot to like here, and a lot to learn from as well. The product is flexible to meet their customers'needs, and it targets a problem that many people responsible for hiring have known for a long time. Self-reported assessment, like Myers-Briggs, just aren't reliable. They allow you to "game" the system, or at least try to, by not being entirely honest. In a game, you have an objective and must adapt and problem solve to meet that objective. It's quite simple, and ingenious if it works as Scoutible claims. I can't wait to hear more about it.

Gaming versus gamification

Scoutible's approach makes sense for their target audience and use case. At one point in Secure Code Warrior's journey, we considered the value of a full gaming platform, or mini games built into the training, but in the end that angle didn't really add enough value for our purposes. The end users who take our security training know they are supposed to be learning.

Within our Secure Code Warrior platform, we measure the secure coding skills of a software developer while using game-based elements to keep them engaged. That means keeping these questions in mind:

  • Do they understand the most common software security weaknesses?
  • Can they fix common security bugs using framework specific security functions?
  • Are they confident about their software security skills?
  • What are their strengths and skills gaps in terms of secure code?

Caring by design

There's another reason I can relate strongly with Scoutible's product. Not only is it a benefit to the hiring company, but also to the candidate. Not all strong candidates you'll encounter are good at interviewing. For some, it's just not in their personalities. For others, they might never have been taught the fine art of interviewing, or maybe they're new to the workforce and this is their first interview.

This is where I see a similarity with software developers. Sadly, there just isn't a focus on security in many university programs. Aspiring developers are told "You'll learn it on the job." They leave school knowing how to make their code work, but they unknowingly perpetuate all of the same vulnerabilities that we've been fighting against for 20 or more years.

When developers do get that job and ask to learn about security, they have even less time than when they were in school. They're paid to produce functional, effective software, and many of the developer security training courses ... well, they're boring. Let's be honest.

What if you could get your developers, new and old, to care about security without really thinking about it? How do you make training interesting, engaging, and even fun, while also still being effective?

That's our challenge, and just like Scoutible's, it's a very real one. Just because the problem is incredibly serious doesn't mean the solution has to be mundane and boring. We've tried that already. We prefer to inject a little fun, excitement, competition, and engagement into our solution. So far, it's worked very, very well.

I thought if we could build a tool that felt like a game, and incorporated tests for the appropriate personality and cognitive attributes, we could address many of the problems I'd been studying.

https://www.inc.com/kevin-j-ryan/scoutible-video-game-reinventing-the-hiring-process.html

Slogan

Govern AI-driven development before it ships

Measure AI-assisted risk, enforce secure coding policy at commit, and accelerate secure delivery across your SDLC.

book a demo
Slogan

Explore more blogs

Lorem ipsum diam quis enim lobortis scelerisque fermentum dui faucibus in ornare quam viverra orci sagittis eu volutpat odio facilisis.

browse all
Case Study
Filter Label
This is some text inside of a div block.

Supercharged Security Awareness: How Tournaments are Inspiring Developers at Erste Group

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Suspendisse varius enim in eros elementum tristique. Duis cursus, mi quis viverra ornare, eros dolor interdum nulla, ut commodo diam libero vitae erat. Aenean faucibus nibh et justo cursus id rutrum lorem imperdiet. Nunc ut sem vitae risus tristique posuere.

Learn More
Case Study
Filter Label
This is some text inside of a div block.

Security as culture: How Blue Prism cultivates world-class secure developers

Learn how Blue Prism, the global leader in intelligent automation for the enterprise, used Secure Code Warrior's agile learning platform to create a security-first culture with their developers, achieve their business goals, and ship secure code at speed

Learn More
Case Study
Filter Label
This is some text inside of a div block.

One Culture of Security: How Sage built their security champions program with agile secure code learning

Discover how Sage enhanced security with a flexible, relationship-focused approach, creating 200+ security champions and achieving measurable risk reduction.

Learn More
Blog
Filter Label
This is some text inside of a div block.

The Future of AI Software Governance Is Built on Strong Partnerships

Discover why Secure Code Warrior is becoming a channel-first company and how trusted partners help organizations adopt AI Software Governance securely and at scale.

Learn More
Blog
Filter Label
This is some text inside of a div block.

Citizen AI by Secure Code Warrior: Build an AI-Ready Workforce

Secure Code Warrior's AI literacy program for non-developer employees.

Learn More
Blog
Filter Label
This is some text inside of a div block.

Why most CISOs are navigating AI adoption blindfolded (and how they can remove it)

Today, Secure Code Warrior issued an all-new white paper covering a prescriptive, directional AI adoption model that security leaders can use to identify their adoption stage and make real progress in bringing the AI security risks within their organization under control.

Learn More

Secure AI-driven development before it ships

See developer risk, enforce policy, and prevent vulnerabilities across your software development lifecycle.

Book a demo
trust score