Succeeding at cybersecurity

## Talent Without Direction

At CRESTCon, a veteran practitioner reflects on cybersecurity's paradox: extraordinary talent enters the field yet often fails to shape its direction. The speaker collates lessons from influential colleagues—researchers who changed pen testing with Windows access-token work, teams who built widely adopted tooling—to offer a career playbook for greater impact.

## Learning from High-Performing Teams

Early career exposure to groundbreaking research, such as Luke Jennings' work that influenced Mimikatz-era techniques, shows how individual contributions can redefine industry practice. Success comes from surrounding yourself with people who push boundaries and translating their methods into repeatable professional habits.

## Right Tool, Right Problem

A Formula One car metaphor illustrates misaligned investment: organizations buy cutting-edge platforms that exceed their needs, like using a race car for grocery runs. Requirements checklists reward feature counts over fit, leaving expensive capabilities underused.

## CREST's Opportunity to Lead

CREST member companies are positioned to steer buyers toward proportionate, outcome-driven security. The market demands pragmatic guidance; if accredited firms do not provide it, vendors and consultancies with weaker incentives will fill the gap.