Futile Efforts: A Decade in InfoSec
Your efforts are futile. Long hours, high stress, constant conflict, and burnout-for what? So your cloud team can expose yet another S3 bucket full of unencrypted credit cards? So your EDR vendor can wreak havoc on your enterprise? So your CISO can ask, “But what are we doing about AI?”
InfoSec teams protect an organization’s data, systems, and networks from threats like cyberattacks, unauthorized access, data breaches, and other security incidents. Sounds like a cool job, right? But the real ones know the truth-InfoSec is a joyless, thankless job steeped in fear and angst. And when the inevitable finally happens and a breach occurs, the business acts like Vizzini from The Princess Bride: “Inconceivable!”
After a decade in the mud, I’ve learned 3 key lessons to achieving meaningful progress while staying sane. Spoiler: it has nothing to do with my ability to use Wireshark or Metasploit. This isn’t another talk about tooling, frameworks, or exploits-it’s about the human side of security. Whether you’re new to InfoSec, a seasoned engineer, or stepping into leadership, this talk is packed with practical advice for thriving in InfoSec while making a real impact-without burning yourself out.