Mending cyber-security recruitment

Cyber-recruitment needs to throw away the handbook. Haris Pylarinos at Hack The Box explains why businesses should take cues from shows like "The Traitors"

 

In the realm of cyber-security, where digital battles rage and data breaches threaten organisations, the stakes are high.

 

This is much like the recent gripping reality BBC series “The Traitors,” where contestants fight for survival, and betrayal awaits around every corner. Though the finale aired a few weeks back, it left a lingering impact on viewers who savoured every moment of the hit TV show.

 

As we reflect on what 2024 holds, there are valuable lessons we can draw for cyber-security.

 

Currently, there’s a severe shortage of over 4 million cyber-security experts, and cyber-attacks are on the rise. Given these challenges, you would expect recruitment strategies to adapt and address this gap. However, the reality is different – current recruitment strategies for cyber-security are failing.

 

So, what’s the connection between cyber-recruitment and "The Traitors," and what insights can we learn?  

 

Identify the hidden cyber-heroes 

The main issue with current hiring in cyber-security and business is clear: there’s an excessive emphasis on university degrees as the sole measure of success for new candidates. This red tape is holding back an untapped and hidden pool of highly skilled cyber-talent waiting in the wings to plug the gap. 

 

This is where "The Traitors" shines as a prime example of a masterclass in recruiting diverse individuals. The producers are strategic here, and the team of traitors represents a cross-section of society, including individuals from various generations, such as Gen Z and boomers, each bringing unique skills and perspectives to the table.

 

This approach to recruitment is ideal – actively seeking different types of candidates and then assembling a team, understanding their unique strengths as well as weaknesses.

 

Instead of fixating on a single type of candidate, like someone with a cyber-security degree, recruiters should welcome all individuals, whether they’re self-taught hackers, ethical hackers, or from various walks of life. Embracing diversity in skills, experiences, and backgrounds not only enriches the team but also creates a more collaborative environment.

 

The reality is that diverse teams also lead to fewer errors, as you have multiple approaches and skills addressing problems from different standpoints. This is absolutely vital in cyber-security, where varied approaches are needed to counter ever-evolving cyber-criminal tactics.

 

Practical challenges for candidates 

At the start of 2024, we spoke to 3,000 professionals across the US and UK about cyber-recruitment, and nearly two-thirds (64%) said current hiring processes aren’t fit for purpose, particularly in properly assessing candidates’ practical skills. This is crucial because these skills are precisely what’s needed to outsmart cyber-criminals.

 

Just like in "The Traitors," where contestants face a series of practical and mental challenges, the world of cyber-security often demands individuals to navigate unexpected scenarios. In both contexts, success is found in those who demonstrate adaptability, problem-solving skills, and the ability to think on their feet.

 

So, the question arises: How do we recruit professionals who possess these practical skills and can excel in diverse and unpredictable situations?

 

During the interview process, it’s absolutely crucial the structure focuses on practical assessment so candidates can demonstrate their expertise and mindset against real-world tactics. Challenge them with hypothetical scenarios and assess their problem-solving approach. Look for professionals who exhibit a hacking mindset and an ability to handle high-pressure situations.

 

Another avenue for businesses to explore is tapping into existing talent within their IT or engineering teams who show potential for problem-solving and cyber-security, and working with them on a potential career move.

 

If the show taught us anything this year, it’s the importance of expecting the unexpected. The winner who can lead with this approach is a formidable force against cyber-criminals and a valuable asset to any team.

 

Developing immunity for your teams 

Similarly, to triumph in ’Traitors,’ you must master the here and now while preparing for what lies ahead. This same principle applies to business and training your current cyber-security skills. It’s not just about hiring future talent correctly; you must also invest in your existing team.

 

In anticipation of cyber-criminal tactics, businesses need to prepare their teams. For instance, the NSCS has warned of the anticipated rise in global ransomware threats with AI. Staying ahead requires investing in up-to-date security training, such as AI-focused upskilling, to create resilient teams and establish their own immunity shield.

 

While "The Traitors" may have concluded for another year, offering a playful analogy to the battles in the cyber-security world, our sector still grapples with significant challenges.

 

Cyber-recruitment needs a complete overhaul, with outdated practices plaguing businesses needing to be scrapped. While the grand prize may not come in the form of a cash reward like the show, mastering cyber-recruitment will certainly save businesses from costly attacks and ensure a safer digital future.

 

---

 

Haris Pylarinos is CEO and Founder at Hack The Box. For further insights, read Hack The Box’s latest report ‘Securing the future of cybersecurity: From classroom to every career stage

 

Main image courtesy of iStockPhoto.com