Security Bsides Las Vegas 2024

You can be neurodivergent and succeed in InfoSec
2024-08-07 , Firenze

This talk addresses the challenges Neurodivergent (ND) individuals face in Information Security and provides insights on how to navigate career advancement, job searching, interviewing, and skill development. We will emphasize the need for inclusivity, challenge conventional career advice, discuss the impact of micromanagement on ND individuals, suggest practical strategies for self-advocacy and skill expansion without solely relying on certifications. We can foster understanding and equal opportunities for ND individuals in infosec.


This talk explores the intersection of neurodivergence and success in the Information Security (InfoSec) field. We will be addressing the influx of career advice on social media, particularly for advancing in InfoSec, and highlight the need for equal opportunities for neurodivergent individuals who often face challenges in promotions and recognition.

We will challenge the conventional notion of leadership, emphasizing that not everyone needs to be a "Front of House" type person or a team leader. It will advocate for a shift in the perception of management, suggesting a collective approach where individuals contribute to advancing their peers without assuming traditional boss roles. The independence of the tech industry is presented as a draw for neurodivergent individuals, but the impact of micromanagement on stress levels will be acknowledged.

We will be drawing attention to the employment disparity, especially for those with Autism Spectrum Disorder (ASD), this talk emphasizes the importance of advice coming from neurodivergent individuals rather than neurotypical counterparts to avoid feelings of inadequacy and burnout.

This talk addresses the prevalent mindset that individuals must "know everything" in InfoSec and challenges the sequential nature of advice given to neurotypicals, suggesting that neurodivergent individuals often avoid public attention and may feel the need to mask their true selves. Practical strategies for navigating these challenges are provided, including effective communication with managers, seeking regular feedback, employing job coaches, and embracing the learning process without immediate mastery.

We will be talking about interviewing and job searching. Offering insights into organizational tools, such as creating a personalized spreadsheet, advocating for a more conversational tone in interviews, providing accommodation requests, and setting agendas for a smoother experience.

The emotional aspect of turning down a job offer will also be addressed and acknowledging the valid emotions involved in decision-making. This talk encourages honesty with the company and emphasizes the importance of choosing a role that aligns with personal needs and expectations.

We will touch on self-advocacy in the workplace and highlight the diversity of experiences in advocating for accommodations and acknowledges the potential challenges in different companies' responses. We will discuss the practical suggestions for requesting accommodations, such as muting microphones and using noise-canceling headphones, are provided.

Finally, the talk tackles the controversial topic of certifications in InfoSec, asserting that while certifications can be beneficial, they do not guarantee knowledge retention. I will share personal experiences of skill expansion through participation in meetings, reading, following industry experts on social media, and staying informed through news sites.

Overall, the talk will deliver a nuanced perspective on neurodivergence in InfoSec, offering practical advice, challenging stereotypes, and advocating for inclusivity and understanding in the industry.

Randall Wyatt is currently an Application Security engineer on the Product Security Team at CoverMyMeds (CMM). He participates in active development on an in-house vulnerability management solution, HIPAA technical risk assessments, and various other security related tasks. Randall spent the first part of his career in Automated QA testing for a couple of companies. He then moved into Application Development with auticon (a leading neurodivergent consulting company) as a contractor at CMM. Once at CMM, he made the connections necessary to pivot into Application Security. Randall is passionate about championing neurodivergence in the workplace and developing the active defender mindset and a security first culture. In his free time, Randall enjoys video games, reading, and spending time with his partner.