I didn’t intend to write back-to-back pieces about careers in security. Based on the feedback I received after my last piece and some conversations I’ve had lately, however, it seems that another piece is in order. Although there is plenty of career advice out there from people who are smarter and more experienced than I am, there is one topic that I believe could use some focus.
What is that topic you ask? Quite simply put, it is best for the majority of people in the security field not to feel compelled to climb the corporate ladder. How can I make such a bold statement? What do I mean by this? I’ll elaborate.
In the security field, like in many other fields, there seems to be constant pressure to advance. For whatever reason, the choice to climb the corporate ladder seems to garner far more reverence and respect than the choice to develop expertise and skills in one particular area of specialization. In other words, the decision to go higher and broader seems to be lauded more than the decision to go deeper and more focused. Yet, both are important in their own right.
There are certain times in a security professional’s career when they find themselves at a crossroads – confronted by this issue. One career path is not more “correct” than another one. Which direction is the right one is an individual choice where many factors are relevant. Here are a few of those factors that might help security professionals as they grapple with this topic:
- Work-life balance: At the risk of being provocative, there is no such thing as work-life balance. Life comes first, period. Of course, that doesn’t mean that we shouldn’t work hard, that we won’t have more and less hectic periods at work, that we won’t feel certain pressures on a regular basis, and/or that we won’t feel pulled in many directions. What is does mean is that if we are constantly sacrificing our priorities in life for work, we are probably not in the right job. Some people are better able to work certain jobs than other people are, and that’s okay. If you find yourself constantly pushing life aside for work, you should probably find another job that suits you better.
- FOMO: I’m always perplexed when people talk about “Fear of Missing Out (FOMO)”. I realize that it is something that bothers many of us – it used to bother me too. Then one day, I realized that missing out doesn’t matter. In fact, it can often be the right thing. How so? Let’s say we miss out on a conference, meeting, or other important professional event for a loved one’s birthday party or another such important personal event. Might we be wondering what we missed while we attended the birthday party? Probably. But think ahead 10, 20, or 30 years. We won’t remember what it was we missed professionally, but we will most certainly remember the important personal event we prioritized. FOMO only exists when we think in terms of weeks and months, rather than years and decades.
- Personal goals: How many of us have taken the time to ask ourselves the simple question, “What do I want from life in whole and from my career in part?” If the answer to that question is that we enjoy our job, we make a good living, and we appreciate the flexibility and balance that we have in our lives, there would seem to be no great impetus for climbing the corporate ladder or making a career move. On the other hand, if we want more responsibility, a broader area of experience, and executive-level decision making, then attempting to make our way up the corporate ladder would seem to be the right choice. The point here isn’t to choose one or the other – it is simply to choose the one that fits our respective situations the best and not feel pressured to climb the corporate ladder just because that’s what we’ve been led to believe is the right choice.
- Respect: It is the sad reality of the security field that we don’t show our respect and appreciation for our colleagues enough. That being said, the respect is there. See, one important thing to keep in mind is that respect is earned – not ordained or otherwise granted. If you are a great security professional, people take notice. You shouldn’t feel compelled to attain a specific title, paygrade, or otherwise just to get some respect. The dirty secret in the industry is that just because someone is in a higher-level role, it doesn’t mean that people respect them. Most people can usually tell when this is the case.
- Relocation: Even in 2025, certain roles can only be performed from certain physical locations. I know this first hand, having declined job offers that would involve relocation on multiple occasions. While it may be tempting to jump at an opportunity for a great position in a different location, it should give you pause. Is that really what you want? Some people very much want to relocate, and for them, relocation is an obvious choice. But for those of us that are happy where we’ve put down roots, it is a foolish choice. That new position will never provide us the fulfillment that the choices that led us to put down roots where we have will.
- Metrics: Success depends on how you measure it. One way to measure success is materially – salary, title, number of direct reports, etc. Another way to measure success is who we are as people – character, deeds, those who count on us, etc. I’ll let you guess which one we will care about more as we age.
Climbing the corporate ladder is not for everyone. While rising through the ranks may suit some security professionals, it isn’t for the vast majority of us, in my opinion. When a person decides on one path versus another, they should ensure that they are doing so for the right reasons. Otherwise, in the end, the decision will benefit no one, including the person making it.
Related: Actions Over Words: Career Lessons for the Security Professional
Related: See the Latest From SecurityWeek’s ‘People on the Move’ Section
