“I’ve realized that everyone is a fraud, so I try not to feel too bad about it.” – Tina Fey
Last year about this time I picked up the school newspaper and read an interesting article about Imposter Syndrome and how faculty and staff of the university could help first generation college students overcome it with different methods. I had always referred to part of the feeling of imposter syndrome – the feeling like you aren’t as competent or intelligent as others as “living a lie”. It is one thing to use self-effacing humor to deflect tension and become more approachable, but it is another when the belief is real to the point where it makes you question your value and contributions to academia or industry.
Personal Experience with Pilots and Cybersecurity Experts
I have spent a fair amount of time around both fighter pilots and high-level cybersecurity professionals the past 30 or so years. I have found fighter pilots to be very congenial, willing to tell of their experiences and receptive of people who want to learn more about their craft, especially those whom they can mentor. Sure, their high self esteem is readily apparent, but some of it is out of necessity in light of their fight-or-die profession.
However, I’ve also personally witnessed high self esteem, but without a congenial approach. Obviously, it’s just been my personal experience, but at times, I’ve watched high-level cybersecurity experts (especially those in the threat hunter and offensive testing realms) seem to believe that their worth and knowledge is much greater than co-workers and the general public. Now, there’s might be an element of truth to the belief – as we need cyber talent that is knowledgeable and capable. But it can be to the point where some are dismissive of other’s ideas and thought processes. It can also make others afraid to speak up due to fear of being ridiculed for their lack of knowledge. One friend of mine who is a top-level ethical hacker agrees with this assessment and pleads guilty himself, jokingly noting, “Nerds have egos too”.
Too Much Ego Makes for a Dangerous Cyber Space
The problem isn’t in having an ego. The world needs high-level cybersecurity experts – clearly. But there’s a danger in a dismissive attitude – especially in this field. In times of crisis or in times of cybersecurity talent shortages, too much ego fuels or exacerbates low self-esteem and drives people away from the industry. It is a real thing that many cybersecurity trainees and inexperienced operators have cross-trained from another field to survive, find something that interests them, or simply were looking to improve their net worth.
We cannot afford a promulgation of behaviors that fuel imposter syndrome in the business of security. We do not want people to be afraid to ask questions, express ideas based on curiosity, or engage in career development opportunities. We want the workforce to grow more knowledgeable through reinforcement the person belongs to an organization that believes in them. Finally, as hard as it may be for people who started coding when they were in their infancy, find a way to show empathy. We want curious people in national security. Let’s be careful that we’re not slowing our progress down with our egos.
