Life Skills: Master Your Destiny

Nobody is going to own your career like you.

No one is going to fight for your promotion. No one is going to push for your raise. No one is going to tap you on the shoulder and tell you about the sick new job that just opened up on another team. Your manager might be great, your mentor might be generous, your coworkers might be genuinely rooting for you. But they're all fighting their own battles, managing their own calendars, and trying to hit their own goals. That's not cynicism. That's just how it works.

The biggest tip I can give to new professionals, especially in cybersecurity, is this: take your career into your own hands. Look at new jobs. Look for vertical progression. Sharpen your own skills. Adversaries are sharpening theirs every single day, and you would be surprised just how good you can be if you actually work at it.

Here's what that looks like in practice.

1. Always be looking

This one gets people uncomfortable, so let me be clear: I'm not telling you to job hop every year or quit the second things get hard. I'm telling you to know the market.

Read job postings in your field, even when you're happy. Notice what skills keep showing up. Notice what the salary bands look like. Notice which companies are hiring and which teams are growing. This does three things for you. First, it tells you what the industry values right now, which is not always what your current company values. Second, it gives you leverage. You can't negotiate from a position of strength if you have no idea what you're worth. Third, it keeps you honest about your own growth. If the postings for the job one level up from yours list ten skills and you only have three, that's useful information.

Update your resume twice a year whether you're looking or not. You will forget what you accomplished. Write it down while it's fresh.

2. Own your skill development

Your employer's training budget is not a career plan. If your company pays for a cert, take it. If they send you to a conference, go. But do not mistake their investment in you for your investment in you. Those are different things, with different goals.

Pick one technical skill and one non-technical skill to work on each quarter. Technical might be a scripting language, a specific tool, a cloud platform, or a certification. Non-technical might be writing, public speaking, running a meeting, or reading a financial statement. The people who move up fastest are almost never the most technically gifted people in the room. They're the ones who can do the work and explain it to a director who has six other problems on their plate.

Build a home lab. Break things. Write about what you learn, even if nobody reads it. The writing is for you. It forces you to actually understand what you did, and ten years from now when someone asks "have you ever dealt with X?", you'll have a paper trail instead of a vague memory.

3. Advocate for yourself, out loud

Your manager is not a mind reader. If you want a promotion, say the word "promotion" in a one-on-one. If you want to work on a specific project, ask for it. If you think you're underpaid, bring numbers. I have watched so many talented people sit quietly for three years waiting to be noticed, while the person one desk over who asked for everything got everything.

Asking is not rude. Asking is the job. The worst thing that can happen is your manager says no and tells you why, and now you have a roadmap. That's a good outcome. The bad outcome is never asking and spending years wondering why nothing changed.

Keep a running doc of your wins. Incidents you handled, projects you shipped, problems you solved, metrics you moved. When review season comes around, you want to walk in with receipts, not try to remember what you did nine months ago at 2 a.m.

4. Build your network before you need it

The best jobs I've ever heard about were not on a job board. They were in a DM, a Slack channel, a text from an old coworker who remembered I existed.

Stay in touch with people you liked working with. It does not have to be weird or transactional. A "hey, saw this and thought of you" message every few months is enough. Go to the meetup. Go to the conference, even just once. Post occasionally on whatever platform your industry lives on, even if it's just sharing something you read. You are not trying to become an influencer. You are trying to make sure that when someone on your network has a great opening, your name is the one that pops into their head.

The cybersecurity field is smaller than it looks. The person you help today is the person hiring for your dream role in four years. Behave accordingly.

5. Know when to leave

Loyalty is a wonderful trait in people and a terrible financial strategy. The uncomfortable truth is that in most of tech and security, the fastest way to a meaningful raise is to change jobs. Internal promotions tend to come with small bumps. External offers tend to come with real ones.

That does not mean you should leave at the first sign of friction. Growth requires some friction. But if you've been in the same seat for two or three years, you're not learning anything new, your comp has not kept up with the market, and your asks keep getting deferred to "next cycle", you have your answer. Start looking. You don't have to take an offer, but you should know what's out there.

Closing thoughts

Your career is the single longest project you will ever work on. Forty years, give or take. Nobody else is going to manage it for you, because nobody else can. Your manager will change. Your company will change. The industry will change. The only constant is you.

Take the cert. Send the message. Ask for the promotion. Apply for the job even if you only hit seven of the ten requirements. Write the post. Go to the meetup. Update the resume.