today I landed my first job in #infosec as a cyber security consultant in a security firm! any tips from you guys?
@hi3ronym0s congratulations! I recommend that you take it all in, celebrate the small victories, and create a plan for how you will learn the different things you need to learn at your new job. Work with your manager to come up with SMART goals and OKRs so you have something to look forward to. Best of luck! ❤️​

Congratulations @hi3ronym0s. I'll spitball you some advice from the top of my head.

Having worked various areas of #cybersecurity for almost 20 years and recruited quite a few people, I'd say:

- Be humble. #infosec people have a tendency to think everybody else are idiots. They're mostly not. They just have a different perspective.

- Be kind. A lot of the time your job will be to explain to people why what they've done sucks. Don't be an asshole about it. You'll get further with kindness.

- Become really good at something. Don't just skim the surface. Dig deep in a few areas. You will float to the top soon enough, and having deep understanding of a few fields makes it easier to understand the others - and to appreciate that things are not always as easy as they seem.

- Understand that with security everything is about risk, risk and risk based decisions. So understand risk, and understand that not all risks are security risks. And that sometimes you take risk to have a chance at a reward. Our job is to make sure risk isn't ignored or poorly understood.

- Connect with the community. Hang out with #cybersecurity people online, go to conferences, contribute to open source projects. Building a network and learning from the people in it will boost your learning and hence career.

- Be patient. In #cybersecurity everyone wants experts, but becoming an expert takes time. Take that time. Don't chase advancements too quickly. You'll float to the top and become one of those people who can talk the language but cannot really do the job. You don't want that.

- Have fun and manage your frustration. Working with security can be really stressful and aggravating at times, and you can easily become frustrated and cynical about the world because "no one understand anything and security is always bolted on last minute and we are stuck with the fallout". Just expect it, and as @weopentech said, celebrate the small victories.

@FrodeHommedal @weopentech thank you so much for taking the time!

@FrodeHommedal @hi3ronym0s Perhaps a corollary to a few of these points: Accept that you will be dealing with competing priorities, and your priorities will not always line up with theirs. The best way to counter this is to learn to be persuasive in a constructive and positive way.

This has been more of a case with production stability and scaling for my career, but I think it applies to many disciplines.

@FrodeHommedal @hi3ronym0s @weopentech This is a superb distillation of what I try to teach (and practice, of course). Thank you.
@mkb @hi3ronym0s @weopentech Good to hear that my experience and opinion rings true to more of you 🙂