Cy Says Blog & Podcast

We all know the catch-22; I can't gain experience without a job, but the job requires experience. According to Brandt experience is the number one qualifier for a career and the proverbial silver bullet approach is networking. Given the large reset of the global economy due to the pandemic, layoffs have plagued every occupation. Brandt predicts tech jobs will be more layoff resistant but not completely immune. The idea of remote work also continues to be a way of lowering costs in terms of labor and office space.

The eco-system for cyber needs to be revamped for the future according to Eric Dunker Ph.D., Vice President of Workforce and Economic Development at Arapahoe Community College. Partnerships and pathways must be the new school approach. Colorado's bipartisan support of apprenticeship has propelled partnerships in the tech space with region-wide incentives. It's not a notion of either apprenticeship or college but how both can work in tandem.

When deciding on a new hire your HR has to be realistic about qualifications for the role. They also have to find the best ratio of no pedigree but experienced workers (Bulldogs) to hyper-specialized professionals (Brain surgeons). Shorten that fantasy laundry list of qualifications to essential skills because those that meet the fantasy requirement (Unicorns) have jobs already. Don't forget bulldogs often become brain surgeons. 

Dave Stapelton Chief Information Security Officer at Cyber GRX (Global Risk Exchange) details his journey from accounting to cybersecurity. He discusses how the role of CISO has evolved, why security programs are stigmatized as cost centers, and ways the cost center narrative can be changed.

Paul Cummings shares all the free training options for getting into cybersecurity. He names SANS Cyber Aces, Try Hack Me, Range Force, Evolve Security, Cyber Skills 2 Work, and his organization Whole Cyber Human Initiative as go-to training programs. Tony adds IT Pro TV To the list and urges users to treat these opportunities with the same discipline as paid training.

Erica Wilson current VP, Global Cybersecurity and Privacy Risk Management at RGA gives us a glimpse of her career journey and then explains fundamental things she has learned along the way. For instance, the importance of building a network prior to looking for a career and how to best reposition yourself with interdisciplinary skills. Erica urges those looking to get into cyber to study the companies they wish to work for and consider peripheral roles that may set them in desired roles later.