MLK Day 2022: Building Diverse Cybersecurity Teams

Martin Luther King Jr. Day honors a leader who fought for equality and justice. In 2022, the cybersecurity field still struggles with diversity.

This matters for more than just fairness. Diverse teams build better security. Different perspectives catch threats that homogeneous teams miss.

The Diversity Problem in Cybersecurity

The Numbers

Cybersecurity workforce is overwhelmingly white and male. Women make up about 25% of cybersecurity professionals. Black and Hispanic professionals are even more underrepresented.

This hasn't improved much despite years of talk about diversity initiatives.

Why It Matters

Diverse teams make better decisions. Research consistently shows this across industries.

In cybersecurity specifically:

• Different backgrounds bring different perspectives on threats
• Attackers come from all backgrounds; defenders should too
• Diverse teams are more creative in problem-solving
• Homogeneous teams develop blind spots

The Pipeline Problem

Many cite "pipeline problems" for lack of diversity. Not enough women and minorities studying computer science and cybersecurity.

This is real but also self-perpetuating. Fields that aren't diverse struggle to attract diverse candidates.

Barriers to Entry

Educational Requirements

Many cybersecurity positions require four-year degrees. This creates barriers for people without access to traditional higher education.

But much cybersecurity work can be learned through certifications, bootcamps, and on-the-job training.

Experience Requirements

Entry-level positions requiring 3-5 years experience. This paradox affects all job seekers but disproportionately impacts people without existing networks in the field.

Certification Costs

Industry certifications are expensive. CISSP exam costs $749. Training courses cost thousands. This creates barriers for people without employer support or personal resources.

Lack of Mentorship

People entering fields where they don't see people like themselves often lack mentors who understand their specific challenges.

Hostile Environments

Some cybersecurity workplaces have cultures that aren't welcoming to women and minorities. This drives people out of the field.

What Works

Apprenticeship Programs

Structured programs bringing people into cybersecurity without traditional credentials. Learn while working, get paid, build experience.

These work especially well for career-switchers and people from non-traditional backgrounds.

Skills-Based Hiring

Evaluate candidates based on demonstrated skills rather than degrees and years of experience.

Can someone do the work? That's what matters.

Mentorship Programs

Formal mentorship connecting new professionals with experienced practitioners. Especially valuable when mentors share backgrounds or experiences with mentees.

Partnerships with HBCUs and Minority-Serving Institutions

Recruiting from historically black colleges and universities and other institutions serving underrepresented populations.

Scholarship Programs

Funding for certifications, training, and education reduces financial barriers.

Inclusive Culture

Workplaces where everyone feels welcome and valued. This requires intentional effort, not just absence of overt discrimination.

Programs Making Difference

CyberCorps Scholarship for Service

Federal program funding cybersecurity education in exchange for government service. Includes focus on underrepresented populations.

Women in Cybersecurity (WiCyS)

Organization supporting women in cybersecurity through conferences, networking, and resources.

National Cyber League

Cybersecurity competitions for students. Provides experience and visibility regardless of traditional credentials.

SANS Cyber Academy

Training programs specifically designed for underrepresented populations and career-switchers.

Year Up

One-year intensive training program for young adults, including cybersecurity tracks. Focuses on underserved communities.

What Employers Can Do

Remove Unnecessary Requirements

Four-year degree requirements for positions where they're not actually necessary. Experience requirements that don't reflect actual job needs.

Ask: what do people really need to succeed in this role?

Build Internal Pipelines

Hire people into adjacent roles (help desk, IT support) and provide paths to cybersecurity positions. Internal mobility programs work.

Fund Certifications

Pay for employees to get cybersecurity certifications. This helps existing staff transition into security roles.

Partner with Training Programs

Work with bootcamps, community colleges, and training programs serving diverse populations. Provide internships and hiring pipelines.

Evaluate Hiring Process

Look at where candidates drop out of hiring process. Are there unnecessary barriers? Unconscious bias in interviews?

Measure and Report

Track diversity metrics. Report them. Set goals. Hold leadership accountable.

What Individuals Can Do

Mentorship

If you're established in cybersecurity, mentor someone from underrepresented background. Share knowledge, make introductions, provide guidance.

Sponsorship

Beyond mentoring, actively advocate for talented people from underrepresented groups. Recommend them for opportunities.

Inclusive Behavior

Call out exclusionary behavior. Support colleagues from underrepresented groups. Make space for diverse voices.

Recruit Differently

If you're involved in hiring, look beyond traditional channels. Seek out diverse candidate pools.

For People Entering Cybersecurity

You Belong Here

If you're interested in cybersecurity but don't see people like you in the field, know that you belong. The field needs you.

Alternative Paths Exist

Traditional computer science degree isn't the only path. Certifications, bootcamps, self-study, career-switcher programs all work.

Find Community

Organizations exist supporting women, minorities, and other underrepresented groups in cybersecurity. Find your community.

Resources Available

Scholarships, training programs, mentorship opportunities. Look for them. Apply for them.

This MLK Day

Martin Luther King Jr. said "Injustice anywhere is a threat to justice everywhere." In cybersecurity, lack of diversity is both injustice and practical weakness.

We need more diverse perspectives to address evolving threats. We need more people from different backgrounds bringing different ways of thinking about security problems.

Building diverse cybersecurity workforce requires:

• Removing unnecessary barriers to entry
• Creating alternative pathways into the field
• Funding training and certifications
• Building inclusive workplace cultures
• Mentoring and sponsoring underrepresented professionals
• Measuring progress and holding ourselves accountable

This isn't just about fairness, though that matters. It's about building better security through diverse perspectives and experiences.

At Robell Technologies, we're committed to building diverse teams and supporting people from all backgrounds entering cybersecurity. The field is better when it includes everyone.

This MLK Day, commit to making cybersecurity more diverse. Whether you're hiring, mentoring, or entering the field yourself, you can make difference.