On a recent flight, I struck up a wonderful conversation with a mother, who ironically was a flight attendant. She was traveling with her two college-bound sons on vacation. In our discussion, she asked what I did for a living and discovered that I worked in cybersecurity; she mentioned her sons were studying cybersecurity at college.
She asked what was one important thing for them to do after graduating to help them get a job.
My response: Networking.
We all can account that cybersecurity is constantly changing and at the same it’s still the same. However, we are always leveling up our skills to protect our organizations and our own networks. Now, as important as technical knowledge and certifications are, networking is a powerful yet under appreciated tool.
Professional networking is vital for second career professionals, or professional growth for students, new cybersecurity professionals, or even seasoned veterans. Having a network can potentially open doors that would otherwise have never occurred and provide insight into what is happening down river with other security professionals.
Why Networking Matters
When most people think about networking, they think about socializing. In cybersecurity this relies on expanding connections with friends, mentors, and other acquaintances in various environments to gain support throughout your professional career.
Networking can be scary, especially for people who aren’t a “people”-person, or students just getting into the cybersecurity field, or those might feel imposter syndrome. However, through networking, you can gain knowledge from professionals with your networking efforts since you have the opportunity to hear their thoughts and experiences more than what you might get in academic setting, a paid consultant or a certification course.
How to Build Your Network
Okay, so we understand, it’s important to have a network. BUT, how do we go about building that network?! So, here are some tips to start and maintain your professional network.
Join Professional Associations
Several professional networks are available in most large cities and areas in the US, Canada, and Europe, and other major countries of the world.
ISC2 Local Chapters will host events and conferences to ensure you constantly learn new things while meeting other professionals, all dedicated to improving security worldwide. The ISC2 association’s goal is to support a safe and secure world. The chapters are built on the Connect, Educate, Secure, and Inspire pillars. You can find more information on their website and where the nearest chapter is to you: https://www.isc2.org/chapters
ISSA focuses on bringing cybersecurity professionals together, from students to CISOs. Its mission is to promote a secure digital world, as it is a nonprofit organization for the information security profession committed to promoting cyber security globally.
Website: https://www.members.issa.org/page/chapters
ISACA deals with IT governance, Risk management, and cybersecurity and has a considerably large community of professionals. They work to empower IT professionals to help advance digital trust so organizations can grow and thrive.
Website: https://www.isaca.org/
InfraGard is a cooperative undertaking between the FBI and members of the private sector. It provides opportunities for individuals who are invested in critical infrastructure protection. One important note is that to join an Infragard chapter, you are required to undergo a background check.
Website: https://www.infragard.org/
OWASP is geared towards application security. OWASP hosts local chapter meetings and conferences for professionals to network, collaborate, and exchange ideas. You can find a local chapter and a calendar of their events on their website: https://owasp.org
Local meetups and CTF events
While the professional networking groups are local meetings, there are other groups that could meet in your local area. Meetup.com, Facebook or a Google search could turn up some of these groups for you to attend. These are great ways to be hands-on in the community and volunteer which leads to greater networking. We can give our time, talent and treasure. Volunteering provides the opportunity to do all three. Websites like Meetup. com is also home to a number of in-person cybersecurity events, from expert talks to live hacking labs.
Attend Conferences and Industry Events
Conferences present an opportunity for professionals to meet new young talent in their field, share their experiences, and even brainstorm on a potential research or project. Numerous conferences also organize abbreviated networking sessions, roundtables, and “hallway tracks,” informal conversations where many professionals connect for the first time.
Conferences like BlackHat, DEF CON, and RSA are some of the largest venues for networking and meeting other security professionals. These conferences host over 10,000 in attendance and up to 30,000 people. Some of the smaller ones, like InfoSec World, Wild West Hackin’ Fest, ShmooCon provide can provide a great opportunity to meet people and network and have around 2000 people.
BSides Conferences (bsides.org)
The BSides conferences dedicate themselves to advancing information security knowledge-sharing through global events, conferences, and seminars. They provide the opportunity that there is an annual conference in your community where security professionals, researchers, and entrepreneurs can connect with experts from across the field, contribute their research, and network with like-minded individuals.
Since 2009, B-Sides events have taken place in over 50 cities in North America, Europe, South America, and Asia. Each event is unique, based on the interests and skills of the local community. Security, hacking, privacy, and related issues are common themes in B-Sides events. In addition to speeches and panels, several of the events provide guests with hands-on opportunities, such as capture-the-flag (CTF) competitions.
To find your local BSides event, check out bsides.org or do an internet search for BSides AND <insert your city>
Online Communities
In the world of digital, your networking reach far extends beyond being physically present at an event. You can emulate this on online platforms—be it LinkedIn, Twitter, or Reddit—where cybersecurity experts share content amongst themselves to discuss and perhaps collaborate in solving a particular issue faced by everyone within this space.
One such community I have vested in is the Simply Cyber community or #Team SC.
Simply Cyber – TeamSC
Dr. Gerald Auger’s Simply Cyber community thrives on networking and engaging discussions, primarily through online platforms like YouTube, LinkedIn, and Discord. Through his daily cyber threat briefings and live chats, community members can network in real-time, exchanging ideas, experiences, and solutions related to cybersecurity. These sessions are more than just information delivery as they foster a sense of belonging, where members can openly discuss challenges, stay updated on cybersecurity developments, and build professional relationships.
Gerry emphasizes the importance of online interaction as a valuable tool for networking, enabling individuals from around the globe to connect, collaborate, and grow in their cybersecurity careers.
This mix of online interaction and in-person engagement makes Simply Cyber Con a hub for growth, learning, and professional networking in the cybersecurity field. For more information check out: https://www.simplycyber.io/ or look up Simply Cyber on YouTube.
Maintaining that Network
Okay great, you’ve got 1000 connections on LinkedIn, hundreds of followers on X and now do we sit back and wait? No! Now, like a farmer, we need to cultivate and nurture our network!
Maintaining a healthy professional network in cybersecurity requires consistent effort and strategic engagement. First, leveraging online platforms like LinkedIn or X lets you stay connected with peers, mentors, and industry leaders. Regularly updating your profile and participating in relevant discussions can keep you visible within the community. I’ve seen advice recommending connecting with a new person daily and commenting on five different posts. Sharing and creating your posts based on projects (not sharing anything confidential from work), case studies, presentations you’ve attended, or questions to your network are all excellent examples of posting.
Consider joining specialized groups, Discord groups, or other forums where cybersecurity professionals gather to share insights, job openings, and resources. Engaging in these spaces helps foster relationships and can lead to valuable opportunities.
Another effective way to maintain your network is through participation or volunteering in local events and conferences, such as those hosted by organizations like ISC2 or ISSA. Attending these gatherings broadens your knowledge and provides opportunities to meet face-to-face with other professionals. Remember, follow-up is key, and always try to connect with individuals you meet by sending a quick message to express your appreciation for their insights. By cultivating these relationships and offering support when possible, you can maintain that strong network you’ve built up.
The Benefits of Networking
Networking offers several advantages regardless of your career path. Within cybersecurity, it plays a vital role in career advancement, continuous learning, and building a support system. Many job opportunities in the field are filled through referrals and recommendations, making it valuable for accessing roles that may not be easily discoverable. Networking also helps professionals stay updated on the rapidly changing landscape of cybersecurity, allowing them to learn about emerging threats and defenses from peers across the globe. Additionally, it creates a support system for navigating challenges, whether technical issues or career transitions, offering professional guidance and personal encouragement when needed.
WrapUp
So, build the network through professional Networks, local meetup groups, conferences, or online communities. Maintain those connections through social media like X(Twitter), Reddit, or LinkedIn or by volunteering. When at conferences let folks know you’re attending and work to meet up over coffee in the HallwayCon!
Networking is not just about making connections, but rather NETWORKING IS DEVELOPING RELATIONSHIPS that are going to help you advance in your career, provide support, and allow YOU TO CONTRIBUTE MEANINGFULLY AS A CYBERSECURITY PROFESSIONAL.
Whether you are a new influencer or have been navigating the space for years, having a robust professional network can open doors of possibilities.
Developing your network is the single best thing you can do for personal and professional growth.
So what are you waiting for? Go join your local cybersecurity chapter, sign up to volunteer to help at a conference, or make some new connections on LinkedIn, X or Reddit!
Thanks for stopping by and have a secure day!
Leave a Reply