AI Isn't Coming to Take Your Cybersecurity job, But Someone with AI Is

AI Isn't Coming to Take Your Cybersecurity job, But Someone with AI Is

In the dynamic world of cybersecurity, the adage "AI isn't coming to take your job, but someone with AI is" has never been more relevant. With the advent of artificial intelligence (AI), we are witnessing a significant shift in how we approach cybersecurity, technology, and business. The fear that AI will replace humans is misplaced. Instead, it's the individuals and organizations that harness the power of AI in creative and innovative ways who are reshaping the industry and leading the charge. One might think this adoption of true AI would be rampant in cybersecurity, but I haven’t found this to be true. There is a technology and popularity inertia that happens in people. Humans, in general, resist change. I invite you to join me in exploring how AI can not only enhance your career but also prepare you for the future of cybersecurity.

No alt text provided for this image

Yesterday I had the honor of speaking at the SANS Institute ’s AI Summit. I spoke about how someone new to cybersecurity can leverage AI for exposure to cyber topics and technologies and even create a tailored learning strategy. I'm a big believer in being an early adopter of new technologies, especially AI. I understand that some of my colleagues might be indifferent or even resistant to AI, but trust me, the early adopters among us can seize AI's potential to give us a competitive edge. I've developed a framework called 'ExIST' — Explore, Immerse, Study, and Translate/Transform. It's a helpful tool for those looking to immerse themselves in the evolving landscape of cybersecurity, technology, and anything else we can explore as people. But today let's look at leveraging ExIST and AI to accelerate our cybersecurity journeys.

First off, 'Explore' – it's the first step of the ExIST framework. Exploration is about exposure. I advise using AI to acquaint yourself with the diverse roles and concepts within cybersecurity. Create a chatbot or use an internet-connected model to scrutinize the subtleties of security operations, incident response, threat intelligence, and compliance. AI can be your compass, guiding you to uncharted paradigms and concepts in cybersecurity.

AI Prompt: What are the most in demand cybersecurity jobs in 2023? List skills and certifications tied to those roles.
No alt text provided for this image

Moving on to 'Immerse' – the second stage of the ExIST framework. Immersion is the fastest way to learn anything. If you were to live in Japan for six months, how much would you learn about the Japanese language and culture? I encourage you to use AI as a tool for deep-diving into a new role or concept within cybersecurity. Suppose you're drawn towards threat intelligence; AI can be a powerful ally, analyzing threat data and illuminating emerging threats. This step allows for a more profound understanding of a particular aspect or role within cybersecurity. One of my favorite immersion techniques is the “5 Books of Stupid” created by flow-state expert Steven Kotler. Steven Kotler's "5 Books of Stupid" is a strategy for rapidly learning the basics of a new subject or domain. It involves selecting and reading five books on the subject, each with specific criteria:

  1. Domain Best-Seller: Start with the most popular, bestselling book on the subject, fact or fiction.
  2. Pop Science: The next book should be more technical but not too heavy, focusing on the subject's main points.
  3. Semi-technical: The third book should use more precise language and offer expert-level detail.
  4. Textbook: The fourth book should be a complex and detailed textbook that focuses on the problems real experts in the field are considering. It may also include a history of the subject.
  5. Macroscopic / Future Book: The last book should look into the cutting-edge future of the subject and its implications.

AI Prompt: What are the most popular books on threat intelligence from the last 3 years?

Next up, we have 'Study' – the third step of the ExIST framework. This is where we put hands on keyboard and intentional learn and practice. Here, AI becomes your personal tutor, aiding in learning new skills within cybersecurity. AI can pinpoint areas where your knowledge might be lacking and recommend appropriate training or educational resources to bridge those gaps. Furthermore, AI can mimic real-world scenarios for incident response and even interviews, offering invaluable hands-on training in a safe and comfortable learning environment.

AI Prompt:  Design a self-paced learning curriculum for cybersecurity but first ask me 10 questions about my learning style, experience, and interests before crafting.
No alt text provided for this image

The final stage in the ExIST framework is 'Translate/Transform.' At this stage, I advocate using AI to translate your knowledge and skills into tangible insights or solutions. AI can scrutinize security data to spot vulnerabilities or threats. Such analysis can then be harnessed to craft proactive security measures or respond to incidents as they occur.

Prompt: Explain chaos engineering as if I am a 5-year-old

In our rapidly evolving cybersecurity landscape, artificial intelligence (AI) is not a threat to our careers but a transformative force that, when embraced, can lead to innovative advancements we can’t even imagine yet. Thanks for reading about how AI can be harnessed to explore the diverse roles and concepts within cybersecurity, paving the way for a personalized learning strategy. The ExIST framework—Explore, Immerse, Study, and Translate/Transform—is a tool to delve into this field, using AI to guide exploration, facilitate immersion, aid in study, and translate acquired knowledge into actionable insights. The power of AI lies in its ability to navigate the complexities of cybersecurity, ultimately assisting us in being able to do more with less. So, rather than resisting change, let us view AI as a catalyst for growth and innovation within cybersecurity and leverage its potential to prepare ourselves for the future of this industry.

Be sure to send this article to anyone it might help. The AI genie is out of the bottle. We need to stay on the cutting edge of technology to remain competitive, my friends.

Javier Gonzalez

CISO | CTO | Business-Driven Strategist | Advisor & Investor | Mentor

1y

Great share here, Chris! AI is going to be the latest tool in the industry that professionals will have to learn and use to stay competitive in the talent market. It won’t replace you. It will be the next guy or gal that knows how to leverage it or protect against it.

Like
Reply
Harlan Carvey

Staff Threat Intel Analyst, Adversary Tactics

1y

If you fear that AI will take your job, someone who's innovating (using AI or not) is going to blow right passed you, while you're in paralysis. I do agree that while AI will *not* replace people in a great many cybersecurity roles, someone using AI will be able to innovate in interesting ways, in part due to the fact that the industry is ripe for innovation. "I encourage you to use AI as a tool for deep-diving into a new role or concept..." Okay, that may be a start, but it's not going to be enough. How is the AI trained? By crawling the Internet? By some more directed means? I've had multiple roles during my time in the industry where I've been "near" or "in" a SOC, and they've all been different. Just look at "EDR" technology...the "D" and the "R" vary pretty drastically across different tech. If you're turning to AI, you're further isolating yourself from intentional, purposeful connections with other humans, and that's going to have a significant, detrimental impact.

Like
Reply
Giselle LaMotte

Marketing and Communication Specialist | Account Management |

1y

Great article Chris! I agree. If you are truly fearful of the potential consequences AI will pose on the job market, wouldn't you want to embrace and proactively engage with AI to help adapt to the "changing job market." Acquiring knowledge about AI empowers you to navigate the transition and utilize it to find new avenues for professional growth.

Mike Ghazaleh

NRDY Tech @ YouTube, Tech Engineer, Entrepreneur & Podcaster

1y

I definitely think AI will take jobs, but not immediately, and not in cybersecurity. I think it will be jobs which are easily automated. It's becoming pretty rare to bump into someone who isn't using ChatGPT for work in some form these days, which is astonishing considering how new it is. Thanks for sharing!

Jason Saputo

Strategic Cybersecurity Leader | CISSP-ISSAP/ISSEP/ISSMP | CCSP | CSSLP | CGRC

1y

I agree. The idea of AI taking jobs from humans is being perpetuated from fear and lack of knowledge. It is a tool like any other; however, the human using it for maximum effect is the one to fear.

To view or add a comment, sign in

Insights from the community

Others also viewed

Explore topics