Cy Says Blog & Podcast

In the ever-evolving landscape of cybersecurity, John Jones found himself facing a difficult challenge - the transition into the cybersecurity career field without experience. His background consisted of experience in IT Operational Support, Customer Service, and project experience in a healthcare infrastructure. However, his journey took a turn when he discovered CyberUp, an ally that helped him break through the barriers and also provided a structured path to success.

John is an aspiring cybersecurity professional who struggled with the initial difficulty of entering the cybersecurity field, hindered by a lack of experience. This common stumbling block for many aspiring cybersecurity professionals became the drive for finding a program that could bridge the gap and open doors to organizations willing to invest in training new talent.

The turning point for John was CyberUp, a program that served as more than just a stepping stone; it was a catalyst for his growth. CyberUp not only connected him with First Bank, an organization ready to nurture and develop new talent but also provided a structured framework that became instrumental in maintaining focus and setting goals in his cybersecurity career.

As an Information Security Analyst with First Bank, John's favorite project involves testing Insider Threat Management tools. This not only showcases his technical ability but also highlights his creative thinking in enhancing the effectiveness of security measures. Beyond the apprenticeship program, John is focused on furthering his education and professional development. His goals include studying for certifications, exploring different product suites, diving into networking topics, and gaining insights into lean Six Sigma.

One of the persistent challenges in cybersecurity that John noticed is that effective communication is important, especially to those without a technical background. John recognizes this challenge and emphasizes the need to convey the 'why' behind security policies in a way that resonates with non-technical individuals. This skill, he believes, is crucial in making cybersecurity principles understandable and actionable.

While John doesn't have a favorite quote or affirmation, his philosophy in cybersecurity revolves around patience with the learning curve and being humble. John acknowledges that the field is vast and ever-changing, and embracing the constant learning process is key to success. John also advises prospective CyberUp candidates, emphasizing the importance of honing written and verbal communication skills. In cybersecurity, clear articulation of technical concepts is as vital as the technical knowledge itself.

John's apprenticeship experience instilled confidence in his new career and gave him a sense of direction. The collaborative learning environment with fellow apprentices stood out to him as the best part of the experience. The camaraderie and shared growth within the program created a community for John that fueled motivation and mutual support.

As we embark on a new year, a season of hopefulness and optimism surrounds us. Individuals and organizations alike are contemplating the future, anticipating the exciting developments that will unfold in the next 12 months. At CyberUp, we are no exception. Our goals and budget were established in December, and we stand "ready" to face whatever challenges and opportunities the year may bring.

In my pursuit of personal and professional growth, I recently tuned in to The Mel Robbins Podcast. There, she offered a perspective on planning for the upcoming year that deeply resonated with me. Robbins emphasized the importance of understanding where we've been to chart a course forward. Without a clear understanding of what is and isn't working, creating a plan for abundance becomes a challenging task. Just as the quality of directions shapes your journey, this insight struck a chord with me for various reasons.

Reflecting on CyberUp's journey from 2023 into 2024, four core themes emerge: interesting, planning, scaling, and welcoming. Let's delve into each of them:

Interesting:

For many, 2023 was undeniably "interesting." The global landscape is rife with complexities—wars, inflation, social challenges, and more. With the added uncertainty of an election year in 2024, individuals and companies find themselves reassessing everything. While I won't delve into the details, acknowledging the interconnectedness of our shared experiences on this planet is crucial. Despite the weight of external factors, we must remain flexible and resilient in pursuing our mission. As Dori wisely advises, "Just keep swimming."

Planning:

Entering 2024, CyberUp recognized the need for an updated strategic plan. Our previous plan, crafted over three years ago, needed revisiting given the evolving landscape of cybersecurity, apprenticeship, and STEM. Before delving into the planning process, we took the time to assess the current state of cybersecurity offerings nationally. This comprehensive analysis informed our unique value proposition—focusing on both youth and adult programming, offering flexibility in training, and maintaining a high-quality candidate pool.

Scaling:

With over 15 years of nonprofit experience, I've engaged in numerous strategic planning efforts. Unlike traditional expansion models, CyberUp's strength lies in a proven organization and model that works. While continual process improvement remains a priority, our core focus is on scaling—maximizing every aspect of our program to be as effective as possible for a broader audience. Central to this effort is enhancing employer engagement, a critical aspect of workforce programs like ours.

Welcoming:

A blend of the last two themes, "Welcoming" serves as a call to action. Our plan includes a challenge to companies nationwide: join us in creating a movement toward adopting a skills-based hiring model. This challenge aims to encourage companies to rethink and reimagine their hiring practices, fostering diversity, equity, and a thriving work environment. Stay tuned for more details on this initiative in the coming months.

As we look ahead, the Board of Directors and the CyberUp team are committed to our current programs and have set ambitious goals to elevate the cybersecurity workforce in St. Louis and beyond. Our role, along with that of other organizations, in shaping the talent pipeline is crucial. Join us in our mission to elevate the cybersecurity workforce.

Over the next three years, we aspire to:

• Ignite the passion for cybersecurity in 3,500 youths through our PowerUp program
• Develop the cybersecurity skills of 525 individuals through our LevelUp Training program
• Transform 244 jobs into apprenticeships and skills-based hiring programs
• Inspire 280 volunteers to invest their time in those we serve

While the year and our plan are just beginning, here's to your ambitious goals for 2024! We invite you to share your aspirations with us. We are excited to kickstart the year, grateful for the support received over the years, and ready to make a positive impact with your collaboration. Welcome to the realm of skills-based hiring—we're delighted to have you on board

Charles Long Jr. is a determined lifelong learner who wanted more in life. Charles started as a Janitor at a local casino however, he knew he wanted more for himself and his family and that is when he decided to pursue a new career in cybersecurity. With some assistance from CyberUp, he dove into the challenge and proved his determination. That's when his adventure with CyberUp kicked off, providing him not just with a roadmap but also with a boost of confidence throughout his apprenticeship program.

According to Charles, CyberUp wasn't just about learning technical skills – it played a crucial role in building up his self-confidence. In the world of cybersecurity, confidence is your secret weapon. For Charles, "Details Matter" is not just a saying – it's a way of life in the cybersecurity realm. It's about that meticulous mindset, the precision, and the undivided attention to detail that makes all the difference.

Of course, Charles didn't skate through his journey without facing challenges. Self-confidence was a bit of a struggle, and visualizing himself in a cybersecurity role was an uncomfortable feeling for him due to his lack of confidence. He constantly questioned himself and wondered if he could even do the job and do it well. But with CyberUp’s assistance offering constant support and assurance, Charles conquered those fears and came out on top.

So, what's the value Charles got from CyberUp? In his own words, "a career." It’s not just about learning the ropes; it's about CyberUp opening doors to a fulfilling career in the ever-evolving field of cybersecurity. Charles reflects on some of his favorite projects during his apprenticeship with Object Computing. He found joy in working on audits, getting that ISO certification stamp, and diving into various Governance, Risk, and Compliance (GRC) initiatives. As an Associate IT Engineer, he's not just contributing; he's jumpstarting security programs and playing a key role in his company's success.

Moving forward, Charles has his eyes set on continuous learning and hints at potential roles like a forensic analyst or a cybersecurity pro testifying in court. Despite some initial hesitation, Charles is all in for becoming a mentor and contributing to CyberUp's youth program, PowerUp. Public speaking might not be his forte, but his willingness to volunteer and share his experiences shows a genuine commitment to giving back and helping others find their way in the world of cybersecurity.

In a nutshell, Charles Long's journey is more than a success story – it's an inspiration for anyone eyeing a career in cybersecurity. From janitor to Associate IT Engineer, his story is a testament to the transformative power of determination, continuous learning, and a bit of mentorship.

As CyberUp continues to empower individuals like Charles, it's not just changing lives; it's reshaping the entire landscape of cybersecurity.

Elliott Thompson's journey from military service to a flourishing career in cybersecurity is a testament to perseverance, adaptability, and lifelong learning. Following his retirement from the Air Force, Elliott found himself joining the 43% of veterans who leave their first civilian job within their first year. While reflecting on what he wanted to do next, he kept revisiting a unique opportunity that was lingering at the back of his mind – CyberUp’s cybersecurity apprenticeship program.

Military Roots

The Thompson family has a strong military legacy. Elliott’s mother, an Army veteran, and his father, a Marine veteran, provided a strong foundation of discipline, values, and a love for their country. Inspired by his older brother's Navy service, Elliott committed to joining the Air Force in 2001. The tragic events of September 11th further solidified his resolve to serve his nation. Throughout his twenty-year military career, Elliott explored a range of specializations, including transportation, logistics, contract operations, and supply chain management. His experiences instilled discipline and an acute attention to detail, qualities that would prove essential in his future career.

Transition to Cybersecurity

Navigating the transition from military to civilian life proved to be more challenging than Elliott expected. The corporate world was not what he anticipated and he quickly recognized his initial plan was not sustainable long-term. Although he first learned about CyberUp more than a year prior during the Transition Assistance Program (TAPS), Elliott still found himself intrigued with the idea of a cybersecurity apprenticeship. He decided to explore a new career in the world of cybersecurity through CyberUp’s LevelUp Training and registered apprenticeship programs.

The CyberUp Experience

“CyberUp gave me the opportunity to be an apprentice with Centene and my smile has not faded since I started this position. Every day is a challenge yet every day is everything that I hoped to be doing,” says Thompson. The CyberUp program provided Elliott with the guidance and support needed to make the transition to cybersecurity. As an apprentice at Centene, he is leveraging his military background to quickly adapt to the intricacies of cybersecurity. “Elliott’s dedication, excellence in delivery, and professionalism have quickly established him as a key member of our team,” stated Brian Peterson of Centene.

“CyberUp is dedicated to supporting military veterans, spouses, and dependents as they pursue careers in cyber,” said CyberUp Executive Director, Tony Bryan. “Our mission is to elevate the cybersecurity workforce by igniting curiosity, developing talent, and transforming career pathways. Everyone benefits when veterans and their families bring their commitment to mission and core values to the cyber community.”

Elliott's story is a testament to resilience, adaptability, and the power of continuous learning. It serves as an inspiring example for others transitioning from military to civilian life and seeking to redefine their careers. His success story underscores the importance of seizing opportunities, following one's passion, and adapting to change with determination.

In the digital age, where information is power and data breaches loom large, having a robust cybersecurity team is non-negotiable for businesses. However, the path to assembling such a team is not a one-size-fits-all scenario. Companies often face the dilemma of whether to buy, build, or borrow talent for their cybersecurity endeavors. In this blog post, we’ll explore these approaches, weighing the pros and cons to help you make an informed decision. In this week's LevelUp Cyber Live, we covered the concept of building, buying, and borrowing talent. 

Buying Talent: The Fast-Track Solution

When time is of the essence and expertise is urgently needed, buying talent seems like the logical choice. This involves recruiting seasoned cybersecurity professionals externally, sometimes at a premium cost. The advantages include immediate access to expertise, specialized skills, and an existing network of industry connections. However, the downsides encompass high expenses and potential cultural integration challenges within the existing team.

Building Talent: Cultivating Homegrown Experts

Building talent refers to investing in existing employees or new recruits and nurturing their skills through training, certifications, and hands-on experience. This approach fosters loyalty, ensures a deep understanding of the company’s systems and values, and is often cost-effective in the long run. On the flip side, it demands time, patience, and consistent investment. Additionally, the evolving nature of cybersecurity requires continuous learning and adaptation, making ongoing training a necessity.

Borrowing Talent: Collaborative Solutions for Flexibility

Borrowing talent involves outsourcing specific cybersecurity tasks or projects to third-party experts or agencies. This approach offers flexibility, scalability, and cost-efficiency. Organizations can access a pool of specialized skills without the burden of long-term commitments. However, communication challenges, potential security risks associated with sharing sensitive information, and the need for stringent vendor management are key concerns.

The Hybrid Approach: Striking the Right Balance

In reality, many organizations opt for a hybrid approach, combining elements of buying, building, and borrowing talent. This strategy allows for flexibility, enabling companies to scale their cybersecurity efforts according to their needs. For instance, they may hire experienced professionals for critical roles, invest in training programs for existing employees, and collaborate with external experts for specialized projects.

Apprenticeship Intermediaries Role in Buying, Building, or Borrowing

Apprenticeship intermediaries play a pivotal role, providing a unique solution that integrates seamlessly with the concepts of buying, building, or borrowing talent. These intermediaries act as conduits, connecting businesses with skilled professionals and fostering an environment where novices can learn from seasoned experts. For companies opting to buy talent, apprenticeship intermediaries curate a pool of pre-trained cybersecurity specialists, ensuring a swift and efficient onboarding process. In the context of building talent, these intermediaries facilitate structured apprenticeship programs, where aspiring cybersecurity professionals can gain practical experience under the guidance of mentors. This not only nurtures homegrown talent but also creates a sustainable pipeline of skilled individuals tailored to the organization’s specific needs. Moreover, for those looking to borrow talent for specific projects, apprenticeship intermediaries offer a roster of agile, adaptable apprentices who can seamlessly integrate into collaborative ventures. By bridging the gap between theory and practice, these intermediaries not only support businesses in their talent acquisition endeavors but also contribute significantly to the growth and dynamism of the cybersecurity industry as a whole. Their role is not just transactional; it's transformational, shaping the future of cybersecurity by empowering both businesses and budding professionals to thrive in the digital landscape.

Conclusion: Making the Right Choice

The choice between buying, building, or borrowing talent for your cybersecurity team depends on various factors such as budget, timeline, existing skill sets, and the nature of your cybersecurity needs. A careful evaluation of these factors, coupled with a clear understanding of your organization’s goals, can guide you toward the most suitable approach.

Ultimately, a successful cybersecurity team is not just about the individuals involved but also the collaborative spirit, continuous learning, and adaptability ingrained within the organization’s culture. By investing in the right mix of talent acquisition strategies, businesses can build a resilient cybersecurity ecosystem that safeguards their digital assets in an ever-changing threat landscape.

In the pursuit of cybersecurity excellence, the key lies in making informed decisions, leveraging the strengths of your team, and remaining agile in the face of evolving challenges. Whether you choose to buy, build, borrow, or blend these strategies, the ultimate goal remains the same: fortifying your digital fortress against the myriad threats lurking in the virtual realm.