What do you do if you want to stand out as an Information Security professional?

To stand out as an Information Security professional, continually deepen expertise through advanced certifications such as CISSP, CISM, or OSCP. Contribute to the community by publishing research, speaking at conferences, or mentoring others. Develop a holistic understanding of security by staying abreast of industry trends and emerging threats. Cultivate soft skills like communication, leadership, and problem-solving to effectively convey complex security concepts and lead teams. Demonstrate practical experience through hands-on projects, bug bounties, or participating in Capture The Flag (CTF) competitions. Lastly, maintain a strong professional network by actively engaging with peers and conferences, and seeking mentorship opportunities.

During one of penetration testing project, the client kept on saying that they had very secure environment and have implemented many controls. I accessed the wifi router and tried the default credentials which surprisingly worked. I had access to the entire network and could block/allow any system from using the network. Lesson to be learned is, never be over confident about the security of your network as that is the biggest hinderance in improving its security.

I always suggest young aspirants of cyber security to get at least one certification at the start to show their commitment. If it is difficult for them to afford a certification, they can polish their skills on free platforms such as Hackthebox, tryhackme etc. Not only can they learn on environments close to real life, they can also mention their rank on CVs or profiles to prove their skills to potential employers and help them land a job.

I have two pieces of advice on this one. First actively go for certs that will benefit your career path as well as take time to do ctfs. They keep you fresh. Second, spend time sharing the things you learn through blogs or articles. That solidifies the things you've learned in your own experience and also set you apart as an educator.

I am not agree with certification as they not proves your expertise. Instead, you will need to enhance your expertise and do hands on experience. They are number of people who are facing cybersecurity problems and you may build your skills by helping them.

I agree with this thought. I know a lot of people who want to be the master of everything. But the reality is you can't be a One-Stop shop. It looks better if you're an expert at one thing as opposed to trying to be an expert in everything

One of the things I've always said about people who really make it far in cyber security, are the ones who actively love learning and continue to learn regardless of what stage you are in your career usually are the ones who continue to excel. There should never be a time where you feel you know everything, I have found. From the newest of people and there's always room for growth.

I understand the importance of continuous learning and experimentation in our dynamic field. To stand out as an Information Security professional, I immerse myself in the latest developments by following reputable sources, participating in online courses, and attending conferences. I also engage in hands-on activities like labs and simulations to hone my skills and tackle real-world challenges head-on. Embracing this mindset not only keeps me updated but also helps me stay ahead of emerging threats and technologies. Even some websites are provide gamification in learning which makes learning simple.

As I said above, writing a blog on something like LinkedIn and sharing the knowledge that you have is a really important part of your growth. A lot of times people feel like they don't have enough knowledge to share, but it's important as part of your growth path to share even the little things you learn as they can benefit people who are coming into the field after you.

Write about your experiences, what you think is basic knowledge is a mystery for other people. Share your insights, write articles about what you have lived in a project and you will help our colleagues to grow and thrive while you get your point of view known. Security professionals are valuable and our experience very much so, many companies don't even know what they need to protect themselves, even that they need to be protected.

To stand out as an Information Security professional, it is crucial to conduct ongoing self-assessments of technical and interpersonal skills. Staying up-to-date on the latest threats and best practices enables you to anticipate and prevent security incidents. Additionally, developing communication skills and aligning security strategies with the company's objectives and risk landscape demonstrates value and relevance. Effectively assessing and managing risks, and proposing suitable solutions, are also essential to distinguish oneself in the market

Try participate in forums and attend events and seminars about information security. Try volunteer to solve problems and this way you will build skills and reputations.

Study a lot, consume cybersecurity media, such as podcasts, get involved in the infosec community, participate in in-person events, build your professional relationship network.