Group Purchasing
Group Purchasing

Building a Personal Persona in Cybersecurity

Building a Personal Persona in Cybersecurity (PDF, 0.88MB)Published: 10 Mar, 2026
Created by:

Building a Personal Persona in Cybersecurity, published by SANS Institute in March 2026, is part of the Persona Project series exploring AI and cybersecurity through conversation. The presentation addresses how cybersecurity professionals and job seekers should build a public presence and personal brand in a hiring market that has tightened significantly, covering online persona myths, LinkedIn strategy, personal social media, community involvement, public speaking, and resume and CV construction.

Key takeaways:

  • The cybersecurity job market does not currently have enough entry-level positions for the volume of graduates entering the field
  • Layoffs and consolidation across the industry stem from economic slowdowns and from premature AI-driven staff cuts made before automation was actually ready
  • Academic and certification requirements for entry-level roles have surged, alongside higher expectations for prior work experience
  • Applicant Tracking System (ATS) screening makes resume format and keyword matching critical to getting past the first filter
  • Human networking and referrals are no longer optional — referrals cut through ATS filtering and market oversaturation
  • Hiring managers and recruiters rarely conduct deep evaluation of a candidate's online persona, but they do notice red flags
  • Having no online or community presence can signal disengagement to reviewers, even though it may feel like a neutral choice
  • Quality of professional connections matters more than the raw number of LinkedIn connections
  • Genuine, unscripted social media activity builds career value more effectively than AI-generated content or engagement tactics
  • Attending events, volunteering, and seeking mentorship build professional relationships more effectively than chasing referrals before those relationships exist
  • Public speaking builds personal brand even on well-covered topics, when approached with a fresh angle and an authentic perspective
  • Resumes and CVs should be tailored per application and emphasize quantified, recent achievements rather than a single generic format sent everywhere

Across every channel covered — LinkedIn, personal social media, in-person events, public speaking, and job applications — the throughline is consistent: genuine, sustained engagement outweighs volume or shortcuts. Predatory actors and AI/SEO gaming tactics are actively exploiting a tightened job market, and the counter to that is authenticity, persistence, and a clearly defined professional goal rather than tricks. The guidance draws on the presenter's professional experience as a SANS Instructor Candidate specializing in industrial incident response, delivered as part of SANS's Persona Project series on AI and cybersecurity careers.

FAQ

By maintaining a fully fleshed-out, current LinkedIn profile, connecting with real colleagues and classmates, sharing genuine milestones, and writing short-form technical content rather than relying on mass-application tactics or vanity metrics.

No — the presentation identifies this as a myth. Having no online or community presence can signal disengagement to hiring managers and reviewers, even though it might seem like a safe, neutral default.

Yes. Referrals cut through ATS screening and an oversaturated applicant pool, and the presentation identifies "referrals aren't that important" as one of four persistent myths in the field.

Sending one generic resume to every job rather than tailoring each application, and using resume advice that's more than five years old — ATS screening now makes format and keyword matching critical to being seen by a human at all.

Not to author the content itself — using AI to edit wording is fine, but relying on it to generate resumes or LinkedIn posts for engagement reads as inauthentic and is explicitly discouraged.

Meet the Expert

Lesley Carhart
Lesley Carhart

Lesley Carhart

Certified Instructor Candidate

Lesley is Technical Director of Industrial Incident Response for North America for Dragos and teaches SANS Industrial Control System courses. She's a recognized leader in cybersecurity and has won a number of prestigious awards in the field.

Read more about Lesley Carhart