You're navigating a Cybersecurity career. Which time-wasting activities should you steer clear of?

Always know your value to the business in the role you’re in. If you love tech then find the cyber tech niches that challenge you the most and don’t ever stop learning. If tech isn’t your thing, or you’re not as good at it then find the people and process related functions that you’re good at and challenge you at the same time. Either route will make you more valuable, and you will identify that value on the way, through complements, mentors, and coaches that see you. Once you’ve nailed that, always make sure you’re in the position that you are valued, and help others find their way.

Avoid: Spending excessive time on social media, news websites, or non-work-related forums during work hours. Instead: Schedule specific times for breaks and limit browsing to those periods. Excessive Meetings: Avoid: Attending unnecessary meetings that do not contribute to your work or professional growth. Instead: Advocate for clear agendas, time limits, and only attend meetings where your input is necessary.

When I started my cybersecurity career, I wasted a lot of time on unimportant activities and regret it now. I'm now fully focused on research in cybersecurity, and I've learned that wasting time can set you back by years. Avoid getting overloaded with certifications that aren't essential. Focus on gaining practical experience and knowledge that will truly advance your career.

Avoid "time wasters", these are people that either have too much time on there hands or folks that dont know how to get to the point in a polite but quick manner. notable exceptions is quality time with family and 'real' friends. We also may have to ask our love ones not to disturb during business hours unless critical - what is critical? thats u, so you can have a work / life balance. Recommend viewing other contributors to this thread wisdom and advise. In conclusion here is 2 sides of the coin: I dont respect people who dont respect my time. Famous Middle East proverb: if you dont make time for friends & family = when you have time you wont have either friends or family and will find yourself alone. Hope this helps. David David

This is very important, lot of beginners are so eager to post certs and receive congratulatory messages, it’s so unnecessary, you need to narrow down the certs to take and begin working towards it, you might get some certificate of participation along the way which is okay but avoid cert overload.

Perspective Cybersecurity is not just technology realm. It is a business enabler. Know your business first as that will ensure that you can optimally support it via cyber security measures Emerging technologies: Find out what are the emerging technologies and how it can impact your main core business. Going with the flow is great, but it is futile if the technology can't assist the business. Use your analytical skills to provide feedback to the business Learn Risk Management: Embrace the risk and learn about it. Risk influences the decision making. Be the conduit to provide perspective of cyber security risks and use the enterprise risk management. Ensure to raise the risks with the exec team fast, that are outside risk appetite promptly

Becoming a specialist in a particular tool or platform, like spending all your time mastering one specific firewall, can limit your perspective. Cybersecurity is broad, and having a well-rounded knowledge base can be more beneficial. Don’t ignore other aspects of the field like threat intelligence or incident response.

Don’t get too fixated on one technology or tool. Cybersecurity is a broad field that requires a versatile skill set. Stay open to learning and using different technologies to solve problems effectively.

Focusing solely on technical aspects can blind you to one of the biggest issues in cybersecurity: the users. Regular users, often trusting and creatures of habit, are the most targeted audience. They can be easily misled by trusted logos or email addresses with slight alterations, such as an extra 'I' or a '1' or 'L.' Educating users to recognise these subtle tricks is crucial for effective cybersecurity. Understanding human behaviour, alongside technical knowledge, provides a more comprehensive approach to tackling security challenges

Embrace a Holistic View Cybersecurity is not just about understanding technology; it's also about grasping the bigger picture, including policy, law, and human behavior. Focusing solely on the technical aspects can lead to a narrow perspective, missing out on the broader context in which security operates. Broaden your view by staying informed about industry trends, regulatory changes, and emerging threats. This comprehensive awareness makes you more adaptable and better prepared to tackle complex security challenges.

Cybersecurity is a field where staying within your comfort zone will leave you behind. While this makes it challenging, it also makes it very fun and engaging. Every day is an opportunity to learn something new.

Embrace Growth Staying in your comfort zone is tempting, but it's a surefire way to stagnate in the fast-evolving field of cybersecurity. Challenge yourself by learning new technologies and methodologies. Embrace projects that push your limits and force you to grow. Stepping out of your comfort zone allows you to gain experience with a broader range of tools and systems, which is invaluable in a field that thrives on versatility and adaptability.

Navigating a cybersecurity career means being strategic about how you spend your time. Avoid activities that don’t add value to your professional growth. Don’t get too comfortable with familiar tasks and routines; they can keep you from learning new skills and tackling challenging projects. Push yourself to step out of your comfort zone regularly. Focus on continuous learning and take on tasks that enhance your expertise and visibility in the field.

Don’t get caught up in chasing every new buzzword like “AI-powered cybersecurity” or “blockchain security” without understanding their actual impact and application. It’s easy to be distracted by the latest trends, but it’s more important to understand the fundamentals and how to apply new technologies meaningfully.

Focus on Fundamentals The cybersecurity industry is rife with buzzwords and trends that can distract from the core principles of security. Instead of chasing the latest fads, concentrate on building a strong foundation in cybersecurity essentials. Understand the underlying principles that make systems secure, such as encryption, network security, and access control. A solid grasp of these fundamentals will serve you much better than a superficial knowledge of every new trend.

Stay away from the constant hype around buzzwords and trends that don’t add real value to your work. Focus on understanding fundamental principles and how they apply to your role.

These days, we hear a lot about cybersecurity, AI and then AI combined with cybersecurity! Don’t get carried away by these buzz ?? words and instead focus on problem definition and possible feasible outcomes and then map out if you really need to go with cybersecurity or AI solution that can fit that can achieve your results and with expected benefits!

Striving for perfection can lead to unnecessary delays and stress. Aim for excellence but understand that timely and efficient work is often more valuable than perfect work.

Perfectionism will ruin your focus. You will get so caught up in the little details that you will neglect everything else. Remember: Everything has diminishing returns. The more time you spend on a project, the less efficient you will be. Spend your time where it matters most. The ultimate goal of cybersecurity is not necessarily to completely mitigate threats; rather, it is to reduce threats to a level that an organization is willing to accept. It is impossible to completely mitigate a threat, so our goal is to invest our time and resources into the most pressing needs.

Balance and Practicality Striving for perfection in cybersecurity can be counterproductive. The perfect security solution doesn't exist, and chasing it can waste valuable time and resources. Instead, aim for practical, effective security measures that balance risk with usability and cost. Learn to prioritize threats and focus your efforts where they will have the greatest impact. Recognizing that security is about risk management helps you make smarter decisions and avoid the trap of perfectionism.

Don’t spend excessive time on passive learning methods like reading without practicing. Active learning through hands-on projects and real-world applications is far more effective.

One pitfall I notice is people chasing the flag without understanding how they achieved it. This applies to CTF challenges, vulnerable machines, and everything in between. While these resources are excellent for training and gaining hands-on experience, neglecting the theory and technical details behind the vulnerability or attack diminishes their value. Simply looking for a writeup without spending time to understand the underlying concepts offers no benefit.

Learn the concept, take a use case and apply it and if you don’t have a use case, network to discuss the practical aspects of what you learned, give ideas, seek ideas, go for discussion and most important seek views and feedback! Also look for resources, that allow you to contribute towards cybersecurity research projects, take part in bug bounty program (it is okay, if you fail to contribute, you learn practical aspects of cybersecurity looking at other solutions), join those training program that have practical and simulated tasks to test your skills!

- Seek out mentors who can guide you and share their experiences, and help you navigate your career path. - Don’t forget to take care of yourself. Burnout is real in cybersecurity. Ensure you have a healthy work-life balance to maintain your mental and physical well-being. - Hands-on experience is invaluable. Try to get involved in real-world projects, internships, or volunteer opportunities to apply your knowledge and skills in practical settings.

Avoid always thinking "the grass is always greener on the other side". Or more specifically chasing the next job because it pays more or has a better title. Gaining experience in your current roles, learning as much as you can has value and you are banking that experience that will pay dividends later in your career where you become more valuable because you can draw on that depth of experience during things such as strategic discussions and crisis response. What unique learning experience did you miss out on because you jumped too soon to chase money or a title?

Somethings I've learned in my time in the industry: Connecting with peers is key. Ask for advice and always have growth Mindset and; Be humble to learn from everyone.

Limit Information Overload - in cybersecurity, it’s easy to get overwhelmed by the sheer volume of information. Avoid spending excessive time sifting through every news article or blog post. Instead, curate your information sources. Follow a few trusted experts and regularly engage with reputable cybersecurity forums. This focused approach helps you stay informed without drowning in data, allowing you to dedicate more time to skill-building and practical experience.

Prioritize networking and building relationships within the cybersecurity community. Engaging with peers, mentors, and industry leaders can provide insights, opportunities, and support that are crucial for career growth. Additionally, make time for regular self-assessment to ensure that you’re focusing on activities that align with your career objectives and personal development goals.