Georgia Weidman

In addition to presenting at cybersecurity conferences, submit cybersecurity-related talks to events aimed at industries and sectors where you seek work. Create public content such as blog posts, videos, and white papers that interest those industries. For instance, if you are targeting banking, study the most common Android banking trojans and how to prevent them or a similar banking-related topic. Developing and advertising relevant services to those sectors is essential, as this will make you competitive in the market. You can find out what regulatory requirements your targeted industries are subject to, become familiar with them, and get certified if necessary.

I’ve had a good deal of success by just asking. Reach out to people you know who run a business or are on a security team and ask if they ever work with 1099s. Some will say no, but just one or two yeses can lead to a steady stream of work. Likewise, post on your social media that you are looking to take on additional consulting work. Check out the job boards on LinkedIn looking for part-time and contract work. Get your name and skillset out there with conference talks, open-source projects demonstrating your coding skills, and blog posts on cybersecurity best practices. Who do you know who owns a small web-based business or works at a local bank? Reach out to them and see if they need cybersecurity services.

Attend local cybersecurity meetups such as a Defcon group, OWASP, ISSA, and NoVa Hackers (or your regional equivalent) and get to know members who are in a position to recommend you or hire themselves. Hone your skills in your chosen field. If you want to be a pentester or malware analyst, immerse yourself in Capture The Flag competitions. These showcase your skills and provide a platform for continuous growth and learning. Many of them, particularly those aimed at beginners, are also recruiting exercises that can lead to job opportunities. Fill in the space in your resume with certifications, contributions to open-source projects, research and conference talks, and a personal blog of your cybersecurity journey.

Consider that to reach your full potential, you will likely make mistakes along the way. Even if you are the talk of X for a day and it feels like the cyber bullies will make you unemployable, there are tons of other opportunities. Many successful security professionals have discussed their most significant setbacks in podcasts, blog posts, etc. An excellent way to raise your spirits is to emulate your role models in overcoming the low points in their careers. Now is also an ideal time to work on a big project you’ve always wanted to do, such as a book or research project. A well-received contribution to the industry will get your career back on track.

It certainly helps to have a client or project lined up when you start your business. I had a DARPA Cyber Fast Track contract (and a firing from my employer) when I first went out alone. Engaging in subcontracting is an excellent way to get revenue while building your company. Contact your cybersecurity network to see if anyone’s team works with contractors. Give talks at conferences, especially in the industries where you seek clients, such as finance and medicine, to get your name in front of potential clients. Put out content that interests your potential clients online, such as blog posts, videos, and podcasts. These may lead to inbound sales, the best kind.

Consider that to reach your full potential, you will likely make mistakes along the way. No one is perfect, and the path to success is rarely linear. However, these mistakes are not failures but valuable learning opportunities that can propel you forward. Learn as much as you can from the experience, but move on to the next steps in your career as quickly as possible. Now is also an ideal time to work on a big project you’ve always wanted to do, such as a book or research project. A well-received contribution to the industry will get your career back on track.