Securi-Tay 2025: Finding Your Attack Path Into The Security Industry: Miłosz G & Mohit G

Speakers and scope

WithSecure consultants Moit and Miwash share offensive-security hiring lessons from running internships and reviewing applicants for graduate roles, pentesting, and related paths. They stress these are opinions from one consultancy, not universal rules for GRC or non-technical tracks.

Certification myth

Many candidates believe they must collect OSCP-style certifications before applying. The speakers argue certs can teach fundamentals but are not mandatory; employers often care more about demonstrated skill and may fund certifications after hire.

Skills shortage myth

Global cyber skills gap messaging is misleading at junior levels. Shortages are sharper for senior specialists. Their internship drew about 1,200 applicants for six seats—roughly half a percent success—so entry roles remain highly competitive despite industry narratives.

Degree myth

A computer science or ethical hacking degree title is not required. The talk promises to contrast common myths with practical do's and don'ts drawn from years of student interactions, though the truncated transcript focuses mainly on certification, market competition, and credential expectations.