How to Break Into Security, Grossman Edition
Summary: In a July 2012 Krebs on Security interview, WhiteHat Security CTO Jeremiah Grossman said most people in infosec did not choose it as a career but followed opportunity, and that coding is mandatory for application security though not for firewall and patching work. Grossman said he never held a security certification and that his firm prefers to train programmers in its own methods rather than hire security people, who he said have bad habits.
What's compelling: Grossman's claim that defenders are permanently out-manned and outgunned, and that everyone is one zero-day away from compromise, puts the hiring question in front of security leaders: whether to keep screening for certifications or build the coding capability that scales.
Read the original at Krebs on Security ↗
- Topics
- Endpoint & Network Security
- Related
- Adapting to AI penetration testing orchestrators: The Modern Security Model Cyber Risks · Nov 13, 2026Introducing Spend Management: Spending limits and alerts for Cloudflare Cyber Risks · Nov 13, 2026Choosing Que Paxa, an unusual consensus algorithm Cyber Risks · Nov 11, 2026