IT Security mentoring – IT Security Guru

By Erhan T, finalist in the Security Serious Unsung Heroes Awards

As an ambassador for the Cyber Security Challenge UK, I
often volunteer my time to be present at career fairs to support and answer
questions from the next generation of possible cyber security professionals.
The first question I am often asked is “how do I get into Cyber Security?” I
talk through the variety of ways from apprenticeships to formal education
(university), to even good-old self-taught via free resources online however
one thing I always recommend regardless of the approach is a mentor. As a mentor for several
aspiring students, who gain an experienced mentor with industry expertise, will
find that they gain exposure to the breadth of technical challenges and soft
skills all security professions must possess when tackling crucial decisions as
part and parcel of working in this industry. This real-world perspective will
complement the academic study which is also essential for any technical
questions they may have as well as the softer skills to aid with any tricky
decision-making choices we all must make as we progress on our career paths as
security professionals.

Before anyone embarks on their mentor seeking journey I
would suggest that they ask themselves the four questions below?

1. Am I willing to dedicate my time to this?  – Mentors may often give you recommendations to
   your challenges which will require you to go away and do some
   exploration/reading. Mentors will want to see you are motivated and are willing
   to react to the advice provided.
2. Am I eager to learn? – Security professionals
   should be willing to keep learning through certifications, reading and online
   resources. One thing any security professional will tell you is that our
   industry moves fast!  I often feel that I
   have been away for a whole year following a two-week vacation!
3. Am I willing to try new approaches? – Sometimes
   as a mentee you may not like what you hear, your mentor may explain that your
   past approach was ineffective and suggest a different approach.  I recall in the past as a mentee for my own
   mentor when I didn’t like an answer I received. I would ask myself “surely that
   can’t be right” but I remember reflecting and then thankfully came across a
   quote by the motivational speaker Tony Robbins who puts it very nicely and said,
   “Success Leaves Clues, but they must be
   acted upon”.
4. Do you know which area of cyber security
   interests you? I’m often asked, “What do
   people do in Cyber Security? to which I often respond, “It depends on the role you have” When I
   last checked there were officially 80+ different job types in Cyber Security
   and the list keeps growing. I recommend every potential mentee to not silo
   themselves and instead explore the different areas to identify the areas they
   prefer. (red team, blue team, Information assurance etc.)

When looking for a mentor, they should provide the following
qualities:

• Be willing to listen – no question should be a
  silly question and your mentor should be willing to listen and respond no
  matter what you ask. We are all on a learning journey.
• Open and transparent to share – Mentors are
  often established in the field and can often link you up with others in the
  industry to help with specific challenges you may have. We shouldn’t overlook
  the power of networking!
• Provide advice to aid with your career
  progression – Mentors should be able to provide specific advice on educational
  opportunities (certifications to take) as well as advise on industry experience
  opportunities that may be open to you. As I often tell my mentees, “Experience + Education = Destination”.

Comments are closed.