In this blog post, I want to share with you all the personal and professional journey I’ve been on, leading to my decision to leave the consulting world and return to being an individual contributor with an asset owner/operator. I’ll dive deep into my reasons behind this shift, and I want to apologize upfront for any strong language that might slip through. This topic is close to my heart, and…

In the world of cybersecurity, the role of a penetration tester is not just about identifying vulnerabilities but also about building a relationship of trust with the client. This trust is essential for the client to take the advice and feedback seriously and act on it. Here’s how to establish and maintain this crucial trust: Establishing Trust: More Than Just Pointing Out Flaws As a penetration tester, the initial interaction…

In the ever-evolving landscape of cybersecurity, the trend in job postings towards hyper-specialization – pigeonholing professionals into narrow fields like vulnerability management, identity & access management, or network security – is not just puzzling but also deeply concerning. This approach, widely adopted across the industry, raises several critical questions that need addressing. Why Aren’t Generalists Celebrated? In a field as dynamic and interconnected as cybersecurity, the value of a generalist…