I have been in infosec longer than my HN account and I am a technical person, and that's all I ever want to do.
There are companies actually and seriously concerned about gettinf hacked, there are companies that are concerned about getting sued when they get hacked (not much care about it otherwise) and then you have the in-betweens where upper management and the board do give a damn but middle management politics gets in the way, security is driven by managers who want to buy products and vendors and then go cheap on talent and whine about talent shortage.
When it comes to hiring talent, actual skills to my surprise are of little consequence. Even managers that know better just fill seats with bodies and they wonder why when they do get the rare talent, that environment where skills/talent isn't rewarded can't retain skilled people.
Another problem is security managers often moved over from IT or they haven't done anything technical in recent decades. They think it's like hiring help desk or network admins.
And don't get me started on the "return to office" bullshit. It wouldn't be so bad if that didn't imply return of office politics. People skilled in inter-personal politics (read: brown-nosing) get ahead and fester a culture hostile to technically passionate people. Best I can put it is, imagine wanting an HN experience but you get an instagram experience but in real life.
At my work I have found talented people and referred them but the whole anti-remote work stuff gets in the way. My self included, I will work for as little as half my current pay, if not less, to be allowed to work remotely full time.
As far as actual talent shortage, I would say there is more of a pay shortage. Plenty of people who can fill a seat but actual hackers are rare.
Most HNers who are into SWE, with a sprinkle of networking knowledge and enough humility to do entry level security work would make a killing in security (which has many sub-fields) in my opinion.
Too comment starts by saying it's a talent shortage. A management talent shortage? Sure. But for skilled workers it is a pay shortage, not that I personally have any complaints but managers prefer getting 10 untalented people over 2, as if it adds up.
Comments
Oh boy, this is quite the issue alright.
I have been in infosec longer than my HN account and I am a technical person, and that's all I ever want to do.
There are companies actually and seriously concerned about gettinf hacked, there are companies that are concerned about getting sued when they get hacked (not much care about it otherwise) and then you have the in-betweens where upper management and the board do give a damn but middle management politics gets in the way, security is driven by managers who want to buy products and vendors and then go cheap on talent and whine about talent shortage.
When it comes to hiring talent, actual skills to my surprise are of little consequence. Even managers that know better just fill seats with bodies and they wonder why when they do get the rare talent, that environment where skills/talent isn't rewarded can't retain skilled people.
Another problem is security managers often moved over from IT or they haven't done anything technical in recent decades. They think it's like hiring help desk or network admins.
And don't get me started on the "return to office" bullshit. It wouldn't be so bad if that didn't imply return of office politics. People skilled in inter-personal politics (read: brown-nosing) get ahead and fester a culture hostile to technically passionate people. Best I can put it is, imagine wanting an HN experience but you get an instagram experience but in real life.
At my work I have found talented people and referred them but the whole anti-remote work stuff gets in the way. My self included, I will work for as little as half my current pay, if not less, to be allowed to work remotely full time.
As far as actual talent shortage, I would say there is more of a pay shortage. Plenty of people who can fill a seat but actual hackers are rare.
Most HNers who are into SWE, with a sprinkle of networking knowledge and enough humility to do entry level security work would make a killing in security (which has many sub-fields) in my opinion.
Too comment starts by saying it's a talent shortage. A management talent shortage? Sure. But for skilled workers it is a pay shortage, not that I personally have any complaints but managers prefer getting 10 untalented people over 2, as if it adds up.