Ep32: Cybersecruity is more than learning how to code

Speaker: 00:00:00

Maturing and cybersecurity means

understanding that we need diverse

2

: 00:00:03

talents to solve complex problems.

3

: 00:00:06

And today I want to talk about how

gatekeeping security engineering

4

: 00:00:10

rules based solely on coding ability.

5

: 00:00:12

Is holding us back.

6

: 00:00:14

It's why we're missing out on some

of the brightest minds who could be

7

: 00:00:17

designing world-class security solutions.

8

: 00:00:20

Even if they aren't ready to

write the code themselves yet.

9

: 00:00:24

So, let me start with a story.

10

: 00:00:26

So imagine a brilliant individual

who understands risk management

11

: 00:00:30

can identify vulnerabilities from

a mile away and has an incredible

12

: 00:00:34

vision for securing infrastructure.

13

: 00:00:36

They have understand how networks operate.

14

: 00:00:39

They grasp how attackers think, and

they know how to design robust layer

15

: 00:00:43

defenses, but there's one problem.

16

: 00:00:45

They haven't had the chance to

master Python or Java or whatever.

17

: 00:00:48

The programming language, a

specific job posting demands.

18

: 00:00:52

The unfortunate reality, many

companies overlook them because.

19

: 00:00:56

You know, I'll have a bullet point

about proficient coding skills.

20

: 00:01:01

Sure coding is important.

21

: 00:01:02

Writing scripts, automating

tasks, creating tools.

22

: 00:01:05

These skills can be extremely

useful in cybersecurity.

23

: 00:01:08

But they are not the

only skills that matter.

24

: 00:01:11

We need people who can

see the big picture.

25

: 00:01:14

Who can envision secure

systems from end to end.

26

: 00:01:17

We need architects, visionaries,

communicators, and strategists.

27

: 00:01:21

Without those people, our teams end

up building highly functional code.

28

: 00:01:27

Without a cohesive well-designed

strategy behind it.

29

: 00:01:30

And let me tell you why this matters.

30

: 00:01:32

When we gatekeeper based on coding, we

create barriers that prevent us from

31

: 00:01:36

building diverse and well-rounded teams.

32

: 00:01:38

Cyber security.

33

: 00:01:39

Isn't just a technical problem.

34

: 00:01:41

It's a human problem.

35

: 00:01:42

We need people who can sit down

with business stakeholders,

36

: 00:01:46

understand their needs and

translate that into secure systems.

37

: 00:01:49

We need professionals who

can work across disciplines.

38

: 00:01:53

Bringing together it

operations and compliance.

39

: 00:01:56

And yes, we need coders too, but they

aren't the only heroes in this story.

40

: 00:02:01

Think about some of the best

solutions you've seen in your career?

41

: 00:02:04

They probably didn't come from a

single person coding alone in the dark.

42

: 00:02:08

They came from collaboration

from someone saying.

43

: 00:02:12

What if we approach this differently

or how do we build a system

44

: 00:02:15

that addresses all the risks?

45

: 00:02:17

Not just the ones we

know how to code against.

46

: 00:02:20

Those questions often come from

people who think strategically.

47

: 00:02:24

People who understand security.

48

: 00:02:27

As a holistic discipline.

49

: 00:02:29

And coding skills can be learned.

50

: 00:02:31

But that kind of vision that takes

talent experience and perspective.

51

: 00:02:35

And let's not forget the power of

effective communication cybersecurity.

52

: 00:02:39

The ability to articulate security

needs a non-technical stakeholders.

53

: 00:02:44

Is just as important as

writing a flawless script.

54

: 00:02:47

Imagine someone who can walk

into the room full of executives

55

: 00:02:50

and explain in plan language.

56

: 00:02:52

Why a particular vulnerability matters and

what steps need to be taken to address it.

57

: 00:02:58

That kind of skill can make or break

the success of a security initiative.

58

: 00:03:03

It's not about how many

lines of code you write.

59

: 00:03:06

It's about how effectively

you can advocate for security.

60

: 00:03:09

In a world where not everyone

speaks the language of technology.

61

: 00:03:12

If you're listening to this

and thinking, yeah, that's me.

62

: 00:03:15

Right.

63

: 00:03:15

I know someone like that.

64

: 00:03:17

Then this episode is for you.

65

: 00:03:19

Let's stop measuring potential.

66

: 00:03:21

By how many lines of

code someone can write?

67

: 00:03:23

Let's recognize the people who can

architect solutions, who can see the gaps,

68

: 00:03:28

who can build secure designs, even if

they aren't the ones pushing the commits.

69

: 00:03:33

Let's celebrate those who can

visualize the forest and not

70

: 00:03:36

just the individual trees.

71

: 00:03:38

So, how do we change us?

72

: 00:03:40

Well, it starts with hiring managers.

73

: 00:03:42

To those of you who are hiring managers,

take a step back and ask yourself.

74

: 00:03:46

Are you building a team that's diverse

in skillset in thinking and inexperience.

75

: 00:03:51

Are you allowing candidates

to showcase their strengths?

76

: 00:03:53

Beyond coding exercises.

77

: 00:03:56

Maybe it's time to consider hiring

that candidate who impressed you

78

: 00:03:58

with their security vision, even if

they couldn't ACE the algorithm quiz.

79

: 00:04:03

And this change doesn't stop at hiring.

80

: 00:04:06

It extends into how we grow

talent within our organizations.

81

: 00:04:09

If you're in a leadership position.

82

: 00:04:11

Are you encouraging your team members to

broaden their skills beyond the keyboard?

83

: 00:04:16

Are you offering opportunities

for people to take on roles

84

: 00:04:19

that emphasize architecture,

communication, or strategic thinking?

85

: 00:04:23

We need to stop pigeonholing talent

based on where someone started.

86

: 00:04:27

And recognize where they could

go with the right guidance.

87

: 00:04:31

For those of you who are trying to

break into the field or trying to

88

: 00:04:33

move into security engineering roles.

89

: 00:04:35

I want you to hear this

not being able to code yet.

90

: 00:04:39

Doesn't mean you don't belong.

91

: 00:04:42

There are so many aspects of

cybersecurity that need your

92

: 00:04:45

insights, your ideas, and your skills.

93

: 00:04:47

Keep learning, keep growing and

don't let anyone make you feel like

94

: 00:04:50

you're less than because you haven't

written thousands of lines of Python.

95

: 00:04:55

You'll get there.

96

: 00:04:56

And even if you don't want to

code, there's still place for you.

97

: 00:05:00

Cybersecurity is evolving.

98

: 00:05:01

The threats we face are becoming

more sophisticated and the

99

: 00:05:04

stakes are getting higher.

100

: 00:05:06

To keep up.

101

: 00:05:07

We need diverse teams with diverse skills.

102

: 00:05:10

Teams made up of people who think

creatively, who can anticipate

103

: 00:05:14

the unexpected, who understand

both the technical details.

104

: 00:05:17

And the broader picture.

105

: 00:05:19

The future of cyber security depends

on is embracing all kinds of talent,

106

: 00:05:23

visionaries, architects, strategic bets.

107

: 00:05:26

Communicators coders analysts.

108

: 00:05:28

We need everyone.

109

: 00:05:30

If we're going to stay ahead

of the threats we face.

110

: 00:05:33

Let's dismantle the gatekeeping and build

teams that reflect the true diversity

111

: 00:05:37

of what it means to secure our world.

112

: 00:05:40

I want to challenge you today, whether

you're a hiring manager, a team lead, or

113

: 00:05:44

an aspiring cybersecurity professional,

or someone who's just passionate

114

: 00:05:48

about making our industry better.

115

: 00:05:50

Challenge the norms.

116

: 00:05:52

Ask yourself.

117

: 00:05:53

If you're doing enough to break down the

barriers, to create opportunities and to

118

: 00:05:57

bring in voices that aren't being heard

right now, because in cybersecurity,

119

: 00:06:01

the more perspectives we have.

120

: 00:06:03

The stronger we become.