What is cybersecurity?
Far from the image of a lone programmer in a dark room that we see in films, cybersecurity is a multifaceted and deeply strategic discipline. Essentially, cybersecurity is the art and science of building and maintaining trust in the digital world. Its aim is not merely to put up walls, but to build resilient systems – that is, systems capable of anticipating, withstanding, recovering from and adapting to any cyberattack.
Think of it as a discipline that combines three roles:
- That of an architect: designing systems and networks from the outset with security as a fundamental pillar, not as a last-minute add-on.
- That of a doctor: constantly diagnosing the ‘health’ of systems, looking for symptoms (vulnerabilities) before they turn into an illness (a successful attack).
- That of a detective: investigating incidents to understand what has happened, how it was possible and who is responsible, so that it does not happen again.
Their scope of work ranges from protecting a country’s critical infrastructure (hospitals, electricity grids, water systems) to safeguarding a company’s trade secrets or the privacy of a citizen’s conversations.
Why study cybersecurity?
Deciding to study cybersecurity means committing to a field that not only defines the present but will also shape the future. But, beyond the growing demand, what are the underlying reasons for embarking on this discipline, and what does it really take to excel? Success in this sector lies not solely in technical mastery, but in a unique combination of knowledge, skills and, above all, a particular way of looking at the world.
If you’re looking for a career that offers you more than just a job, cybersecurity provides you with a clear sense of purpose. The motivations for studying it are deep and varied:
- Direct and Tangible Impact: few professions allow you to be on the front line of defence for the digital society. Your work will protect everything from a friend’s or family member’s personal data against a scam to the critical infrastructure of a hospital, ensuring it can continue to save lives without interruption. You’ll feel that your daily efforts serve a real purpose.
- A Constant Intellectual Challenge: cybersecurity is the battleground of ingenuity. It is an endless game of chess against creative and ever-evolving adversaries. If you’re someone who gets bored with monotony, here you’ll find a ‘gym for the mind’ that will force you to continually learn, unlearn and relearn.
- Universal Relevance: unlike other specialisations, cybersecurity is not a sector in its own right, but a fundamental layer underpinning all others. Banking, medicine, entertainment, the automotive industry, agriculture… every industry undergoing digitalisation needs protection. This makes your skills a universal passport, relevant in any context and across any geography.
What skills are required?
To succeed in this mission, you’ll need to develop a range of skills, from technical to cognitive. These are divided into two main groups:
Core Technical Skills (Hard Skills)
These are the foundations upon which you will build your career. Even if you specialise in a particular area, having a solid grounding in these areas is crucial:
- Operating Systems and Networks: it is impossible to protect a house if you do not understand how its doors, windows and corridors work. You must have a thorough understanding of how systems (Windows, Linux) operate and how they communicate with one another via networks (TCP/IP protocols, DNS, etc.), including analysing network traffic.
- Programming Logic and Scripting: you don’t need to be an elite developer, but you do need to understand the logic behind programming to know how an application can be exploited. Furthermore, languages such as Python or PowerShell are indispensable tools for automating tasks and analysing data. Understanding what a programmer does will give you an edge.
- Principles of Security Architecture: you must learn to think about security in a structured way, familiarising yourself with concepts such as defence in depth, the Zero Trust model, and identity and access management.
- Knowledge of the Cloud and Emerging Technologies: the world is hosted in the cloud (AWS, Azure, Google Cloud). Understanding their specific security characteristics is, nowadays, non-negotiable.
Personal and Cognitive Skills (Soft Skills)
These are the skills that truly distinguish a good technician from a genuine cybersecurity expert. They are harder to measure, but far harder for a machine to replace:
- Insatiable Curiosity: the question that should always guide you is ‘What if…?’. You must have an innate desire to take things apart (metaphorically speaking) to understand how they work and, therefore, how they might fail.
- Critical and Analytical Thinking: the ability to process thousands of alerts, data points and logs, and to distinguish the noise from the actual signal. It involves not panicking, not making assumptions and basing your decisions on evidence – a key skill for a data scientist.
- Creative Problem-Solving: cyber attackers don’t follow manuals. You will often face new problems that nobody has encountered before. Your ability to think creatively and propose unconventional solutions will be your greatest asset.
- Clear and Effective Communication: perhaps the most underestimated skill. There is no point in finding a critical vulnerability if you are unable to explain the risk it poses to a manager clearly, concisely and without unnecessary technical jargon, so that they can make the right decision.
- Unwavering Integrity and Ethics: this is the foundation of everything. You will be working with sensitive information and will possess knowledge that could cause significant harm. Impeccable professional ethics are not an option; they are an essential requirement for others to trust you.
How does a cybersecurity expert think?
One of the most compelling reasons to study cybersecurity is not what you learn, but how you learn to think. This discipline forges a unique mindset, often referred to as the ‘hacker mindset’ or adversarial thinking. It is not about wanting to cause harm, but about developing the ability to look at any system, process or technology and ask yourself: “How could it be broken? How could it be exploited?”.
Studying cybersecurity will teach you to:
- Think non-linearly: whilst most people learn to follow instructions to make something work, you’ll learn to explore all the unexpected ways in which it might fail.
- Solve complex puzzles under pressure: analysing an attack in real time is like solving a three-dimensional Sudoku whilst the clock is ticking. You’ll learn to stay calm and make logical decisions in high-pressure situations.
- See the bigger picture: you’ll understand that security doesn’t depend on a single tool, but on the interaction between technology, processes and people. A seemingly harmless change in one part of the system can have unforeseen consequences in another.
- Be a lifelong learner: threats and technologies change at breakneck speed. This career demands an insatiable curiosity and the humility to recognise that there is always something new to learn.
This mindset is so valuable that it transcends cybersecurity itself, turning you into a professional with analytical and problem-solving skills far above average in any field.
What challenges lie within the world of cybersecurity?
Cybersecurity is not a monolithic field. It is a cosmos of specialisations, each with its own challenges and rewards. Studying it allows you to find the niche that best suits your personality and skills. Some of the most fascinating domains include:
- Defensive Security (Blue Team): these are the fortress builders. They specialise in designing robust architectures, configuring monitoring tools, managing identities and, in general, strengthening the digital fortress from within.
- Offensive Security (Red Team): these are the ‘ethical hackers’. Their job is to think and act like the enemy, carrying out controlled attacks (with permission, of course) to uncover weaknesses before a real attacker does. This involves understanding what an exploit is and how to use it.
- Digital Forensics: these are the detectives. When an incident occurs, they are the ones who enter the digital ‘crime scene’ to reconstruct the events, collect evidence and determine the scope and origin of the attack.
- Governance, Risk and Compliance (GRC): it’s not all technical. This field lies at the intersection of cybersecurity, business and the law. GRC professionals ensure that the security strategy is aligned with the organisation’s objectives and complies with all applicable regulations (such as the GDPR).
- Cloud Security and DevSecOps: as organisations move to the cloud and adopt agile development methodologies, new challenges arise. These specialists integrate security directly into the software development lifecycle and complex cloud architectures, applying principles of DevOps.
Summary
In short, deciding to study cybersecurity means choosing a career with a clear purpose: to have a positive and tangible impact on the protection of our digital society. It is a discipline for curious minds seeking a constant intellectual challenge, and one whose relevance extends beyond any single industry. To succeed, you will need a unique combination of skills: on the one hand, a solid technical foundation in systems, networks and programming logic; and on the other, and even more importantly, a range of personal qualities such as creative problem-solving, effective communication and, above all, unshakeable ethical integrity that will establish you as a trusted guardian in the digital world.
Sources
National Cybersecurity Institute (INCIBE). (2024). Reports, guides and resources on the state of cybersecurity in Spain.
European Union Agency for Cybersecurity (ENISA). (2024). Publications and research on the European cybersecurity threat landscape.
(ISC)² Cybersecurity Workforce Study. (2024).
