In the world of cybersecurity, there is a growing recognition that innovation can come from unexpected places. As organizations seek more adaptable and innovative experts, a new breed of cybersecurity professionals is emerging, with backgrounds that defy traditional norms. From gamers with artistic minds to former roadies and sound engineers with technical prowess, it has become clear that the most valuable cybersecurity talent often comes from unconventional sources.
Unconventional Backgrounds and Experiences Yield Valuable Talent
Artistic individuals, including advanced gamers, possess problem-solving skills that are highly adaptable to today’s challenges. Former roadies and sound engineers, with their unique perspectives and skill sets, are now making significant contributions to the cybersecurity industry.
In the previous generation of cybersecurity professionals, talented roadies and sound engineers were well-represented. These individuals had acquired the necessary skills to transition from analog to digital audio and manage complex systems for studio and live stage events. Their experiences in dismantling and understanding intricate systems translated well into the cybersecurity field. If you think orchestrating a timely attack against a client is challenging, try swapping out a guitar at a major concert while ensuring the musician’s sound reaches the farthest back rows night after night, amidst thousands of fans.
In the search for talent among the current generation, networking within the gaming community has proven fruitful. Engaging with academic programs like CyberPatriot at the high school level and the Collegiate Cyber Defense Competition at the college level has also been effective. Additionally, taking an unconventional approach and networking with content creators has yielded positive results. Just as photographers and videographers develop innovative lighting techniques, security researchers are presented with products to test and extract information from.
The Gaming Community as a Talent Pool
Individuals with artistic backgrounds often possess a mindset and skill set that make them valuable in penetration testing. Their natural inclination to question and understand how things work enables them to gain unauthorized access by dismantling systems. Gamers, both in traditional and e-gaming realms, exhibit these qualities and are highly inquisitive.
Gamers possess essential traits for excelling in security research. Their inquisitive mindset and attention to detail seamlessly translate to the challenges of cybersecurity, making them valuable resources for organizations seeking skilled penetration testers and security researchers.
In the current landscape, staffing an organization with talent around the clock poses a major challenge due to the 24/7 nature of security. While traditional professionals may cover the 9-to-5 environment, around-the-clock coverage is still necessary. Many gamers adapt well to odd shift hours and possess a selective, problem-solving-oriented mindset that aligns with the gamer culture. They enjoy puzzles and have an engineering or project-oriented mindset, often identifying themselves as “makers.”
For offensive security penetration testers and security researchers, problem-solving abilities are a priority. It has been observed that gamers, both in traditional and e-gaming realms, possess the necessary attention to detail and other skills to excel in security research.
Embracing Diversity in Talent
The cybersecurity talent pool is diverse, attracting individuals with military and law enforcement backgrounds, as well as those who thrive in traditional work environments and possess strong problem-solving skills. To foster innovation and capability in cybersecurity, it is crucial to embrace diversity and explore unconventional recruitment channels.
Statistics indicate a need for more attention to science, technology, engineering, and math (STEM)/science, technology, engineering, arts, and math (STEAM) school programs to encourage interest and inclusion in science and tech-related fields. Additionally, the prevailing notion that advanced degrees are necessary for candidates is not entirely accurate. Many collegiate programs are outdated and do not align with current job requirements. Therefore, individuals should carefully consider their career goals and whether pursuing management roles in the next five to 10 years is part of their plan. Employers are often willing to provide training and support for those aspirations.
Another important fact is that the field of cybersecurity remains male-dominated, with women comprising only about 25% of the industry. Efforts should be made to create opportunities and attract more women to enter this field. In 2020, there were approximately 6.65 million male undergraduate students compared to 9.2 million female undergraduate students. Projections for 2030 suggest an increase in both male and female students. To encourage greater female representation in cybersecurity, employers should provide mentorship, support, and opportunities for women to pursue education and careers in this field.
By addressing these challenges and embracing individuals from unconventional backgrounds, the cybersecurity industry can work towards achieving a more balanced and diverse workforce.