How did you transition from your military career to your current role in InfoSec?
Jeff Schilling, CSO, Armor (JS): I was doing cybersecurity in my role as the Chief of Current Operations with Army Cyber Command.
So for me, it was about orienting myself on the cyber threat to civilian industry which is markedly different than the threats I encountered in the DoD.
I feel fortunate to have had the opportunity to have run a civilian incident response team for 18 months that gave me a great perspective on threat actors for over 300 different companies.
Was it a natural fit, or did you have to make adjustments?
JS: Cybersecurity is not much different than the security operations we do as soldiers in our current conflicts in the Middle East.
That is one of the great experiences that soldiers bring to InfoSec, experience in managing security operations. The technology is easy to teach, leadership skills and an operational mindset are hard to find in the security field.
What advice would you give to service members who are interested in InfoSec?
JS: Make cybersecurity your hobby, learn how the technology works. That will be your gap in knowledge when you join the civilian workforce. Set up your own computer lab in your house or in the public cloud and learn how a firewall, IDS/IPS works.
Are there any particular strengths that you feel veterans bring to the InfoSec market?
JS: Operational experience and leadership.
Those are the two biggest gaps I find in the market today that veterans can fill. Most folks in InfoSec want to be the “talent” and individual contributors. Former military folks naturally gravitate to leadership roles and thrive.
Anything else you would like to add?
JS: Don’t expect to get a job in InfoSec just because you are a veteran.
Like most fields, there is a barrier of entry that requires you to have a base of knowledge that will make you a value add to the team. Make cybersecurity your hobby, get hands on experience through volunteering and through social clubs who do weekend “capture the flag” competitions.
Tinker in your own cybersecurity lab and learn how the technology works.Get certifications that are relevant to the career path you want to go.
In most cases, you can use your GI Bill to pay for those classes and certifications.