您可以轉行從事網路安全嗎？

Dr Leila Powell, a former astrophysicist, made a significant career change in 2015 when she transitioned from studying the cosmos to working in the field of cyber-security. In her previous role, she pondered profound questions about the formation and collision of galaxies. However, she reached a point where she desired to make a more immediate impact on people's lives. Dr Powell stated, 'The pursuit of understanding the universe is really important, but I got to a point where I felt like I wanted to do something that impacted people’s daily lives more. ' Alongside her desire for meaningful work, she was also seeking better pay and working conditions. Many individuals in academia face challenges such as job security and lower salaries compared to those in the private sector. Now, Dr Powell serves as the lead security data scientist at Panaseer, a company dedicated to helping organizations identify vulnerabilities in their cyber-security measures. Cyber-security encompasses a variety of roles aimed at safeguarding organizations and their technological assets from cyber-attacks. Some professionals focus on preventing incidents by enhancing the security of applications, networks, and devices, while others assist organizations in maintaining operations or recovering from attacks. According to a report from a cyber-security organization, 39% of new hires in the sector come from non-IT backgrounds. Dr Powell discovered her current position through an advertisement that sought candidates with data expertise. She found the challenge appealing and decided to apply. 'Because I was coming from a different industry, I would see things in the data that I might not have seen had I been looking for something in particular,' she explained. Now, when she recruits new team members, she values diverse backgrounds and encourages individuals who may doubt their qualifications to explore opportunities in cyber-security. 'If I hadn’t seen that advert, it would never have crossed my mind that cyber-security could be an industry I could get into,' she remarked. The demand for cyber-security professionals is immense, with ISC2 estimating that four million additional workers are needed globally. Amanda Finch, the chief executive of the Chartered Institute of Information Security, argues that the issue is not a lack of skills but rather the challenge of attracting skilled individuals to the field. 'I would argue that it's not necessarily a skills gap because the skills are out there,' she stated. Finch also noted that many people are unaware of the various aspects of cyber-security. 'A lot of security is about people, process, and technology,' she added. In annual surveys, companies often report that communication, analytical, and problem-solving skills are more critical than technical skills. For newcomers to the field, the financial rewards can be substantial. A survey of over 2,000 cyber-security professionals in the UK revealed that those with one to three years of experience can earn between £40,500 and £58,000 in digital forensics and between £39,500 and £55,000 in threat intelligence roles. CIISec recommends that organizations seeking to fill cyber-security positions consider the transferable skills that career changers can offer. Finch advises companies to break down job responsibilities to better identify the necessary skills. For instance, if a role involves analyzing logs and trends, they need someone with strong analytical abilities. If the job focuses on incident management, they require someone who can perform well under pressure and communicate effectively. Calum Baird, who spent nearly a decade working for Police Scotland, acquired valuable skills during his tenure there. His experience included response policing, violence reduction, digital forensics, and cyber-crime investigation. Currently, he is a digital forensics and incident response consultant at Systal Technology Solutions, where he assists clients in investigating and recovering from cyber incidents, including ransomware attacks. 'The police taught me how to quickly assess risk and prioritize based on that risk, which is a skill that's very helpful when it comes to dealing with cyber-incident response,' he explained. While the stakes in cyber-security may not be life and death, the financial implications for businesses can be significant. Baird's communication skills, honed during his time in law enforcement, are invaluable in his current role, which often involves supporting clients during their most challenging moments. 'The soft skills are sometimes understated in cyber-security,' he noted. 'That ability to speak with the client, to put them at ease, to clearly explain the process and reassure them that they've got someone on their side fighting their corner. ' Baird has a lifelong passion for learning new skills, which he believes is essential in both the police force and the private sector. 'There are just so many devices, so many operating systems, so many different applications out there that you won't find anyone that knows everything in depth,' he said. 'A key skill in cyber-security is the ability to find a topic and dig deeper. ' Rebecca Taylor, who studied English and creative writing at university, is another example of someone who successfully transitioned into cyber-security. She currently works as a threat intelligence knowledge manager at Secureworks, a company that specializes in threat detection and response technology. Taylor began her career as a personal assistant, where she performed administrative tasks. However, she quickly recognized that cyber-security was a rapidly evolving field that aligned with her desire for continuous learning. After gaining experience in resource coordination and change management, she became an incident command knowledge manager, contributing to the ransomware response team. 'I loved it,' she said. Taylor collaborates with colleagues from diverse academic backgrounds, and she believes her humanities education enhances her ability to process information effectively. 'If I reflect on my English and creative writing degree, it was about reading significant volumes of text and being able to pull out the interesting parts,' she explained. Her writing skills also play a crucial role in creating blogs and other materials that communicate cyber-security threats. 'There's a huge perception that cyber-security is going to be all technical chat, coding, and AI,' she said. 'But there's so much more to cyber than technical. I wouldn't describe myself as a technical individual. I'm just someone that has found a passion for distilling useful information.