One of the big questions that I often get is: How does someone become successful in a cybersecurity career? In this blog I want to share with you the three key lessons I’ve learned during my 18-year journey in the cybersecurity industry. These lessons have paved the way for my success, and I believe they can do the same for you, whether you are considering a career in cybersecurity, new to the field, or have been around the block a few times.

Key 1: Communication
In cybersecurity, effective communication is essential. From writing incident reports to presenting penetration test results and explaining the importance of security awareness to employees, everything hinges on how well we convey information. Delivering a briefing on an incident, writing a report on a compromised organization, or convincing your CISO to invest in new security controls all require not only technical expertise but also the ability to communicate complex concepts to both technical and non-technical audiences.

It’s important to remember that effective communication extends beyond your peers and co-workers. You also need to convey your thoughts clearly to your boss, customers, and even C-level executives. This means both your written and spoken communication skills are equally important. The secret weapon to effective communication is listening – not just hearing, but truly understanding. Remember the saying, “Seek first to understand, then to be understood.” Good communication is about making conversations safe, actively listening, paraphrasing, acknowledging feelings, and choosing your words wisely. For example, using “I” instead of “you” fosters understanding in a conversation.

Key 2: Continuous Learning
Regardless of your role in cybersecurity, continuous learning is crucial. Stagnation is the worst thing for your career. Fortunately, we live in the golden age of affordable cybersecurity training, with numerous resources available for free. Whether it’s reading books, listening to podcasts, or participating in hands-on labs through platforms like Try Hack Me, Hack the Box, or TCM Security, the opportunities for learning are endless. Additionally, following industry experts like Tib3rius and Jason Haddix can provide invaluable insights. Remember, the best way to reinforce your knowledge is to teach others. Sharing knowledge not only strengthens your own understanding but also contributes to the collective growth of the cybersecurity community. Start a blog, submit a talk proposal for a conference, or find other ways to share your knowledge. You never know, your contributions could be making an impact on someone’s career!

Key 3: Empathy
Empathy is often overlooked but is an immensely powerful aspect of success in cybersecurity. Lack of empathy can lead to dysfunction in all areas of our lives, including our approach to cybersecurity challenges. Take a moment to reflect on situations where a little more empathy could have made a significant difference. Could you have been more understanding towards a user who clicked on a phishing link? Could you have approached delivering pen test results to a client with less confrontation? Consider any arguments you’ve had with co-workers or managers – were those situations solely their fault, or did you contribute to the problem as well?

Empathy starts with self-awareness, considering how you’d like to be treated. It’s about respecting others, putting yourself in their shoes, and embracing kindness. These qualities are crucial not just in our industry but also in the world. For an in-depth exploration of empathy in cybersecurity, I highly recommend checking out the podcast Cyber Empathy, hosted by Andra Zaharia.

Conclusion
In summary, success in cybersecurity boils down to three keys: communication, continuous learning, and empathy. Equipping yourself with excellent communication skills, constantly expanding your knowledge, and cultivating empathy will set you on a path towards a successful career in cybersecurity.

Looking for a weekly cybersecurity and privacy podcast with more great content like this?
Check out my podcast Shared Security. Subscribe wherever you like to listen to podcasts!

Watch the video for this blog on YouTube:

*** This is a Security Bloggers Network syndicated blog from SpyLogic.net authored by Tom. Read the original post at: https://www.spylogic.net/2024/01/the-three-keys-to-success-in-cybersecurity/