Why You Should Learn to Code in the Cybersecurity Field

?? Throughout my journey in cybersecurity, I have learned a lot about every evolving field. One thing I learned is that it does not matter how many certificates you hold on your belt when it comes to cybersecurity, but your technical skills, and that one valuable skill is being able to program. When I started working in the cybersecurity field, I was learning Python programming, but I was not taking it as seriously as I wish I could have. I was doing a project-based approach, but in my head, I didn’t make it urgent to be good at programming. But something changed.

??When I was leaving the Marine Corps, I decided to attend a coding boot camp specifically targeting Python programming and databases. This was a way for me to become proficient in Python quickly, and I also utilized three months to prepare for my transition out of the military.

?? One day, during my part-time job, my project manager asked me for assistance with a programming-related / scripting project using JavaScript. I knew how to program, and I understood the basics. But never in my cybersecurity career was I asked to take on programming-related projects. A few months in, I was able to sustain and complete the project, but what helped me during this situation was my backend knowledge of programming and scripting.

?? The fact that I was able to take the lead in this scripting and programming-related project made me stand out quickly among my peers. I was looked at differently when it came to being just a regular technician but more of a developer. My project manager even referred me as a software developer because I could help the company complete the project and save the company money by not having to onboard an entire developer or open a contract to hire someone to complete the work.

?? So why should anyone in the cybersecurity field learn to program or scripting? Well, it’s simple: you bring skills that eventually will climb you up the ladder into a more advanced portion of the cybersecurity field. Unlike computer science, you don't have to learn programming or scripting in cybersecurity, but not knowing how to program or script in cybersecurity will limit your potential to advance.

We can even look at the numbers as they speak for themselves.

86% of developers do not take application security seriously.

67% of developers have shipped out vulnerable code with known cybersecurity vulnerabilities.

33% don’t know what makes their code vulnerable.

36% attribute the priority of meeting deadlines as a primary reason their coding still possesses vulnerabilities.

??We need to look at the bigger picture regarding the future of cybersecurity. Yes, there will always be a need for logical and physical network security. However, real cybersecurity vulnerabilities lie in applications’ software and root code files. When cybersecurity professionals can understand how code is written and what is considered not safe coding practices, this can mitigate many cybersecurity vulnerabilities.

??Cybersecurity professionals with an understanding of coding, such as using any programming language such as Python, javascript, golang, bash, and PowerShell, also have the power to automate tasks and create tools that can help eliminate manual tasks performed by the cybersecurity teams. This is another reason why a cybersecurity professional with a programming background will always stand out from someone with just a simple cybersecurity background in technical infrastructure. I am telling you this from my personal experience.

A survey by ISACA highlighted that employers prioritize candidates with hands-on experience and technical skills, including programming, over traditional qualifications such as university degrees.

According to the ISC2 Cybersecurity Workforce Study, the majority of cybersecurity workers are satisfied with their jobs, and those with additional technical skills, such as programming, find it easier to advance in their careers.

A University of Tulsa report highlights that while programming is not strictly necessary for all cybersecurity roles, it significantly enhances one’s competitiveness for top positions in the field.

?? It’s a slow process, but once you become good at it, you will see your technical value move up quicker compared to someone who needs help understanding how to program. Imagine attending the interview and not only going to school for cybersecurity, or maybe you have received valuable certificates, but also understanding how to program in Python very well.

You have a GitHub dedicated to all the Python programming projects you created, from simple automation to advanced cybersecurity tools you developed. And maybe you attended coding boot camp, and now you have the credentials for coding boot camp on your belt. I promise you that you’re going to stand out. A cybersecurity professional who knows how to program is a unicorn. It’s hard to find.

Reference: 67% of app developers have shipped code with known vulnerabilities | Security Magazine

Reference: What Cybersecurity Professionals Really Need to Know About Programming | The University of Tulsa (utulsa.edu)

Reference: Cybersecurity job statistics (2021–2023 edition) (comparitech.com)

Reference: ISC2 Cybersecurity Workforce Study: Looking Deeper into Workforce Culture and DEI

?? Follow me for more in-depth content: https://medium.com/@jamesbalsa