u/EnvironmentalSafe280

I’ve been researching what actually helps people become effective cybersecurity professionals.

A lot of the discussion focuses on technical skills: pentesting, tools, certs, CTFs, SIEMs, etc.

But I keep seeing gaps around things like:
communicating with non-technical people
understanding business risk
executive escalation
audits & governance
knowing when NOT to act
risk acceptance
networking with people
understanding how security fits into the wider organisation
strong IT fundamentals

What areas of cybersecurity do you think are seriously underexplored or under-taught?
Especially areas that matter in real jobs but don’t get much attention in education.

For people who work in cybersecurity and have mentored, trained or hired juniors:
What do you notice new/graduate candidates struggling with most?
I’m particularly interested in things that aren’t obvious from a CV.
For example:
Troubleshooting
Investigating unfamiliar problems
Understanding logs
Networking fundamentals
Using unfamiliar tools
Writing reports
Explaining their reasoning
Knowing what to investigate first
Connecting theory to an actual incident
Are there skills you wish universities taught more effectively?
I’m researching the gap between cybersecurity education and actually being able to perform cybersecurity work, so I’d really appreciate real examples.

For people who are relatively new to cybersecurity:

What was the biggest thing you struggled with when you started?

For example:

• Knowing what to learn first
• Understanding the terminology
• Finding practical exercises
• Staying motivated
• Knowing whether you were improving
• Understanding how everything connects
• Finding a career direction
• Getting feedback

I'm researching ways of making the beginner experience less overwhelming, so I'm particularly interested in experiences from people who are currently learning.

I'm researching possible uses for a small NFC-enabled device in cybersecurity education and I'm trying to separate genuinely useful functionality from gimmicks.

Some ideas I've considered:

• Authentication
• Profile/portfolio sharing
• Lab access
• Identity
• Team formation
• Attendance
• Event networking
• Unlocking learning activities

I'm interested in what people actually think would be useful from a security/technical perspective.

What would you consider a legitimate use case?

And what would immediately make you think "this doesn't need dedicated hardware"?

I've tried to think about what makes practical cybersecurity platforms engaging rather than something you use for a few days and then forget about.

For people learning cyber independently:

What actually keeps you coming back?

Would it be:

• Realistic investigations
• Progression/XP
• Achievements
• Career paths
• AI guidance
• Working with other learners
• Competitions
• Building a portfolio
• Having a structured roadmap
• Something else?

I'm particularly interested in what people have found missing from existing learning platforms.

What would make you genuinely use a platform every week?