You want to break into the information security industry. What are the best ways to network?

The security field is exciting. However, people who are new to the field gravitate directly to the glamour side of it. Everyone wants to immediately become a penetration tester/hacker. Most are not qualified for that without understanding why we do this. Start by contacting veterans in the field and showing an interest not only in the glamorous side, but also in the foundations of security. The field is in need of professionals who understand the basics just as much as those more advanced. A bottom up approach to your career coupled with much enthusiasm will make you a more desirable candidate. There are plenty of mundane tasks in this field that no one wants to start out doing. However, this is where the meat is. Be a sponge and absorb.

To enter the information security sector, the best networking methods include attending industry events and conferences, joining online groups and communities, connecting through professional social media platforms, participating in local events and meetups, and seeking mentorship opportunities. These strategies provide the opportunity to meet established professionals in the field, learn about trends and technologies, and build valuable relationships to drive career growth and opportunities.

One simple way to connect with others in the field of information security is to join online communities. These are places where you can chat with experts, enthusiasts, and learners who share your interests. Platforms like Reddit, LinkedIn, Twitter, Discord, or Slack have groups dedicated to topics like hacking, malware, or cryptography. You can also take part in webinars, podcasts, or hackathons to learn new skills and meet people in the industry. It's a great way to grow your network and learn from others!

Sure, join online communities to learn the social aspect of what the security community is talking about on these platforms, but remember they're not the same as doing the job and people outside of your team don't have the best perspective on your security operations.

Another way to connect with people in information security is to attend local events like conferences, workshops, or meetups organized by pros or schools. Meeting face-to-face with others in your area lets you swap ideas and learn from each other's experiences. You can find these events on sites like Eventbrite or Meetup, or by following organizers on social media. It's a great way to make connections and learn new things!

Attending local events like local user groups or vendor sponsored events is great to meet people and to get vendor related materials and sales pitches. However, if possible, carving some time out for you team or people you frequently work with within your organization can better help you understand your environment and organizational needs and issues. A simply monthly lunch & learn can do a lot more for your career and progress than attending vendor or local meetup groups.

Building an online presence or personal brand can be helpful if you're looking to become a consultant, advertise your skills, or achieve some public recognition. Be consistent with your efforts, maintain the work you publish and keep it relevant. There have been millions of abandoned blogs, vlogs, and articles written on the Internet.

Seeking a mentor is always a good idea. However, many people seek a mentor with the objective of getting something from them like the benefit of their knowledge and contacts. I suggest approaching mentorship much like an apprenticeship. Provide your services to your intended mentor, help them by applying your skills to the tasks and projects they're working on, be of value and service to them. During the process of apprenticeship, constantly evaluate your progress and what you are learning and don't be afraid to recognize that the mentor you've chosen may not be a good fit for you and move on if necessary.

"Navigate the infosec galaxy by seeking a mentor, your own Obi-Wan, guiding you through the cybersecurity stars." Suppose you're eager to enter the information security industry but find the vastness of the field daunting. By engaging with experienced professionals on platforms like MentorCruise, you express your eagerness to learn and contribute. You might volunteer to assist on a project or seek advice on navigating your career path. This mentorship relationship becomes a beacon, illuminating your journey through complex security concepts and introducing you to a wider network of professionals, akin to being ushered into the broader universe of information security. Or you can ask me...

Another way to connect with people in information security is to be proactive and polite in your interactions. This means starting conversations, following up, and showing appreciation. It's also about being curious, humble, and open-minded, while avoiding arrogance or rudeness. Networking isn't just about getting contacts or favors, but about building real relationships. By being proactive and respectful, you can leave a good impression, gain trust, and make lasting connections that can help you in your career in information security.

Security has so many different layers to it that it is impossible to implement any security measures effectively unless you're respectful and proactive. Being reactive to a security issue is the worst position to be in because you've already been compromised. Being proactive means taking on your organization's operations in a manner that helps prevent security issues from happening. Being respectful to your team and members of your organization is the only way to keep a security program effective. Being the security road block to progress or an impediment to workflow in the name of security is the path to disrespecting the members doing the work you attempt to secure.