Lessons Learned on Finding a Cybersecurity Job After a Layoff
I wanted to take a minute and share some thoughts for those who find themselves suddenly looking for a cybersecurity job. These insights come from my own experience as well as helping friends who have recently gone through a layoff.
If you find yourself suddenly job hunting, treat it like a full-time job. Develop a plan, then spend eight hours a day actively searching, building skills and networking. I recommend building a plan around four phases: Develop a plan, build your brand, nail the interview and negotiate a great offer.
Make a Plan
Make a detailed plan and stick to it! Budget your time effectively—I found resources like “Ready Aim Hired” by Fred Coon useful for the framework on how to allocate your time broken out by different tasks. I am sure there are many other resources out there, so do the research and become an expert in finding a job—it could determine your next salary. There are many skills and techniques you may need to develop, like a process to track all your engagements and follow-ups.
Next, analyze your finances and budget. Determine the base salary you require and consider topics such as: Are you willing to relocate or take a cybersecurity job with high travel? Review your costs and determine how long you can go without a steady income. Consider immediately tightening your budget, as the cybersecurity job search process could take several months.
Seek emotional support—this is an essential part of the plan. While friends and family care, often the best support comes from those going through a similar experience. Losing a job might not be a reflection of your capabilities, but it can certainly feel like it. This creates a lot of stress. Come up with a plan to actively manage the pressure. If you have a family, remember they are going through this as well. So, approach this as a team. Also, you will get a number of folks who want to share their experiences, so thank everyone and use what you think is helpful. Seek out mentors and leverage those who have been great coaches in the past. I can’t say enough about this topic; managing stress is crucial, so research techniques that work for you and prioritize self-care.
Building Your Cybersecurity Brand
Your resume is vital if you don’t have a relationship to get you an initial interview. Focus on highlighting your accomplishments, not what tasks you completed or the role you had. Be sure to list your achievements throughout your resume, within your work experience and your resume summary statement. Tailor your resume for specific positions by using keywords from the job requisition to increase your chances of passing automated Applicant Tracking Software screening and HR review.
There are a lot of opinions on format and content, so pick one that you think best reflects you. Consider using formats like the situation-action-result (SAR) for both resume accomplishments and interview stories. Read other LinkedIn profiles and resumes to get ideas. Be open to coaching and criticism. Consider getting professional editing and review of your resume.
Most jobs are found through your network, and LinkedIn is a perfect place to manage that. Update your LinkedIn profile to mirror your resume. Adjust profile settings to signal openness to opportunities and change your current position to something like ‘consulting’ or ‘looking for a new position.’
Categorize your network into groups; each serving a distinct purpose, like those who you think can help you find a job, those who can recommend you to the hiring manager in the company you are applying to, recruiters and everyone else. Develop an individualized message for those that can provide the most help, and then a tailored message for each group. Asking your connections if there is a job opening in their company is not as effective as finding the position yourself and then asking if they can put in a word for you with the hiring manager. Remember, many companies offer their employees a bonus for bringing in talent, so don’t be shy about asking; this could be mutually beneficial.
Consider using tools like LinkedIn Premium for analytics and training. You should also build a resource pool of sites like Glassdoor, the Ladders and other such outlets to support your search and analysis. Your LinkedIn profile should look professional and there are a number of free or paid services to improve its impact.
Posting your resume to job sites is a basic step, but depending on what you want out of a career, it could have a low return on investment. If you see a job, find out who you know at that company and try to connect with them to get insight on applying. Once you start posting and applying to jobs, keep track of your search activity by creating a spreadsheet that includes the entire application life cycle.
Hiring a professional employment expert can be worth the investment. They do this for a living and have the skills to help you move through the process. However, understand that some experts may prioritize working with individuals willing to relocate. Research and align your needs accordingly before deciding.
Nail the Cybersecurity Interview
Preparation is key when it comes to interviews. Treat it like any important test by preparing, practicing and honing the necessary skills. There are numerous sites and videos with frequently asked questions and advice that are also great resources. Seek help from friends responsible for hiring and ask them to conduct mock interviews. This is a critical skill, and you need to become a master at it.
Keep in mind that you will likely engage with different stakeholders, each with their own focus area. For instance, one interview may concentrate on validating technical skills, another on cultural fit and one on problem-solving skills. All of them are trying to get a sense of your overall work ethic and style. You should practice each one.
Identify key themes you want them to remember about you. I recommend three to five; fewer is better, in this case. Your intro (elevator pitch) should include these. Attempt to work them into your answers. Develop a set of stories that you can pull from to provide examples of who you are. There are formats and formulas, so find one that works for you. Prepare thoughtful questions to ask at the end, as they reveal a lot about your mindset, so plan these with care. After the interview, consider sending a thank-you note as an additional touch point.
Prepare unique answers and pitches for engaging with different parties such as recruiters, interview teams, hiring managers and HR representatives handling the offer letter. Each conversation has a specific set of questions and agenda.
Pro tip–if you were laid off or part of a reduction-in-force (RIF), never say you were fired. People get laid off when the company fails; they get fired when they fail. Be prepared to discuss the circumstances that led to the company conducting a layoff.
Negotiate the Offer
Be primed for negotiations and have a plan of action. Anticipate the typical questions like, “What salary are you looking for?” Once you receive an offer, be prepared to counteroffer—but remember that asking for more money may not always be the best approach. Consider other aspects like additional vacation, sign-on bonus or the ability to work from home. Find out where the company has flexibility if you can. Research and become an expert in the art of negotiation.
The key here is to invest time in job search research and cybersecurity skills development. There are a number of articles and training videos available to help you get the best job offer.
Remember, most people will go through a number of interviews before landing a new job. It is often not how well you do in the interview but who else showed up. My advice is to go into this process with the expectation of it being a marathon, not a sprint.
Much of what I have shared comes from my own scar tissue, so I hope my experiences and mistakes can help you.