How to Create a Cybersecurity Mentorship Program

Talk to managers in the security industry and they are singing the same blues: We can't find enough qualified people.

Some companies have taken matters into their own hands, starting mentorship programs that aim to take Level 1 SOC interns and turn them into threat modelers and hunters — and future red team leaders and CISOs.

It takes investing resources and maintaining tight control and follow-up on actual progress and results, whether for three-month, six-month, or yearlong programs.

"Focusing on the development of our employees – at every level – is a focus for our company," says Leslie Jones, chief human resource officer (CHRO) at Coalfire. "We could be helping an individual early in their career identify their career goals and providing some guidance, or we could deliver a broad leadership development for our leaders."

Kelly Albrink, security practice director at Bishop Fox, explains it this way: "You can't buy senior-level talent; you can only build it, and mentorships are the best way to do that."

Here's how to get a cybersecurity mentorship program launched in your organization.