Naomi Buckwalter

Okay, this is pretty cool. My #cybersecurity intern passed her Security+ today.

She's only been in tech for 2.5 months. Before this, she was a professional opera singer and a remote English teacher to international students.

She studied her butt off for 2 months and took 11 practice exams in the final week. She made hundreds of flash cards, watched hours of videos, and did hands-on labs.

And this was all done while working full days as an intern. A role in which she absolutely CRUSHED.

I'll be making her a full-time offer next month. I really hope she accepts.

Because this lady is going to FLY.

Whenever people say they're giving up on getting into #cybersecurity, I die inside a little. These folks have spent hundreds of hours studying and learning cybersecurity. Not to mention thousands of dollars on education and certifications.

But rejection after rejection after rejection really gets to people. The gates seem insurmountable to overcome. So they give up.

My heart breaks because it's just so vastly unfair. I got into cybersecurity because someone gave me a chance. I didn't have certifications, hours of self-study, or formal education on security.

In other words, there were no gates for me to overcome.

I wouldn't say I'm particularly smart or talented. I'm certainly average in more ways than I'm not. I just happened to be born at the right time.

Here's what I'm saying. The same combination of work ethic and luck that got me into cybersecurity in 2007 wouldn't get me anywhere close in 2024. I would be laughed out of the interview room.

When we put up gates, we hurt everyone. We hurt ourselves and we hurt the next generation. So break down the gates. Hire and train the next generation. Show the next generation what good Information Security looks like.

Because good Information Security won't be possible without them.

#informationsecurity

It's literally this easy to not ghost a candidate, honestly.

#cybersecurity

Whenever I post about needing new folks in #cybersecurity, someone always says:

“Cybersecurity is like surgery. You don't want just anyone coming off the street to perform surgery on you, right?“

Let's think about this. Let's say that being in cyber IS like being a surgeon. After all, we oversee the health of our networks, systems, and data. Our jobs are vitally important.

But here's the thing. Surgeons spend over a DECADE in school, residency, and fellowships. They have to pass board exams and earn certifications. They constantly hone their skills through continuing education.

Surgeons don't just walk off the street and start practicing on people. They are first educated, then given hands-on experience, all while learning from veteran doctors, nurses, and teachers.

Cybersecurity is the same. We need to educate, train, and mentor those trying to break into our industry.

But we refuse. We want people to “hit the ground running“. We want immediate ROI. We want superstars and unicorns.

Teaching takes patience, courage, and yes, a little risk. But it'll be worth it in the end. Because in the end, we'll have trained the next generation of cybersecurity professionals.

And who knows? Maybe one day, they might just save my life.

And they might save yours, too.

100 words. No ridiculous requirements. No gatekeeping.

It can be done.

#cybersecurity

I don't care if we're strangers, I'll share your W because I want to see more positivity in this world goddammit.

#cybersecurity

My new year's resolution is to stop helping people get into #cybersecurity.

Haha just kidding. I'm not going anywhere. Sorry, haters.

✊