How important is coding to cybersecurity work?

like
Posting as :
works at
You are currently posting as works at

Early in career not very, gets more important as you move up or you will hit a ceiling imo. Coding language i would recommend would be python. Also wouldn’t hurt to know how to use power shell.

Also depends on what you’re in doing in cyber

like

Not very unless you’re doing cybersecurity work that involves coding. Then it’s vital.

likefunny

Cyber itself doesn’t really require any coding. For example, things like incident response, vulnerability management, penetration testing, grc, identity and access management don’t really require coding to do the job.

However, the part that may require coding is automating processes to help supplement the above activities.

like

Focus on analysis/statistics type of coding like excel/pbi/python helps with log analysis and dashboarding in meaningful ways

like

Spend a weekend each doing exercises with python, Excel, grep/awk and you'll have a very flexible foundation

like

Thanks for the helpful responses!

like

There is a difference between knowing how to code and being a programmer. In cyber you don’t have to be Lebron James but you should at least know how to play basketball.

like

It depends on the area of cyber you want to work in (sorry for the obvious part).

For things like risk and regulations, standards, auditing you wont need to code.

If you work in app sec it helps if you are only looking at pipeline scans but most times that should be pushed back to developers.

SOC and ops it really helps as you will need to query data sets but this is more similar to data analytics than application coding.

For all cyber roles you need data analytics skills. The ability to write the odd bit of data query really helps for all roles.

like

It depends on the role! Coding isn’t a must-have for every cybersecurity position, but it can be super valuable.

For example, if you’re in threat analysis, penetration testing, or malware analysis, coding skills (like Python, JavaScript, or C++) can help you automate tasks, write exploits, or reverse-engineer code. In GRC or compliance roles, you might not need to code, but understanding how systems work and some scripting basics can still give you an edge. For incident response or SOC work, knowing how to parse logs or write scripts to automate investigations is a huge plus.

So, while you don’t need to be a full-fledged developer, having some coding knowledge can open doors and make your job easier in more technical roles. It’s worth learning the basics if you’re aiming for those kinds of positions.

like

Related Posts

I'm about to start my first travel case. SPG or Accor?

funnylike

I was supportive of Lori when this virus first started but her actions since have dwindled my support of her. I don’t expect her to make every decision correct nor do we have to agree with all of them. I believe she should be correct around 75 percent of the time but I believe she is in the 50 percent range. I know everything doesn’t fall on her shoulder but things haven’t been great as of late. Hopefully they figure out something soon.

like

Hi Sharks!
I had interviewed with PwC India for Business Analyst role at Pune location, my both Manager round and Client round went well. However I have still not received any call/ offer from HR. I did call the HR she told me that they have not heard back from the Client.
Any idea how much time does the HR can take if they want to give offer.
My last working day is on this Friday and will have to join other company on Monday if dnt received offer from PwC. Please guide me.

like

CTO or VP technology (14yrs total exp) for machine learning AI computer vision products. Any hiring on this ..let me know

like

Any F 🐥/🐠 from San Jose here? 👋

Did EWR pull out of priority pass? Seems like there are no more lounges listed at the airport. Kinda disappointed with the sapphire reserve lounge access…

like

Is anyone familiar with the office culture at McKinsey in CLT? Interested in learning more

like

🤝 Pay it Forward:

Drop a piece of advice or wisdom that has seriously helped you in life or career!

Help another user and pay it forward. 👇

like

If I have a six year old and 150k in a 529, can I say I’m done?

like

Yo this on-cycle stuff sucks

like

Hello, I am recent Air Force veteran ready to make the jump from public to private sector. I’ve worked I. Cyber security for years and I am looking for an analyst or sales engineer roles. Could anybody help with a referral?

like

Hey guys, one question. My H1B will start on Oct 1st, and I am planning to visit my home country to get H1B visa stamp. I filed my amended state tax return a year ago and did not hear from them. Does it affect my VISA or entry to the US? Or should I call them to check the status of my status tax return? Please advice

like

Anyone knows about EY GDS hirearchy?

like

bonus letter received?

like

Anyone else at CyberArk Impact this week? Anything exciting going on?

Any BCG Platinion Cyber folks here?
What kinna work do you guys do? Planning to make the switch after 5 years with Uncle D. Wanna hear from you guys about culture, projects and areas of expertise.

like

Any tips or tricks for CSX certification?

like

I am going way over budget but 1. Even s seniors have admitted some unique circumstances have happened and 2. I’m working like insane hours 3. I’m trying - I can tell by tone management is not happy with me. I’m legit trying the best I can ....

like

I am a mechanical engineer and people think that because I am a "mechanical" engineer like I fix cars. It is part of the career, but it is not the same thing. It happens to others that people confuse your profession, or it's only to me?

like

I don’t drive. Does that limit my activities if I am traveling to Hawaii ?

like

Additional Posts in Cyber Security Bowl

Anyone working in Pharma industry?

like

Accenture or Deloitte for cyber security strategy? Who’s on top?

like

Deloitte Cyber, how long did it take you to receive an offer after final interview?

like

What are exit ops for Big 4 Cybersecurity Consultants that are non technical (Strategy/Risk)?

like

Joining a group that specializes in incident response. Any recommendations on things I can do this summer to prepare on fundamentals/certs?

like

AWS Cloud question- what the difference between an SCP and IAM? Thanks in advance

like

Any recommended study material for CIPP and/or CIPM (still debating the two)?

Anyone know what kind of experience or certifications I should be aiming to get if I'm trying to break into a pentest role? I just graduated last year and have about a year of sysadmin experience and am trying to get into it asap. So, I'm already applying/job hunting and probably won't get much replies but. Should I be looking at more security analyst/admin roles first? Going for certs? Getting a masters? Wondering what I can do to improve my chances. TIA

like

What is everyone's view on getting a Masters in Cyber security?

likefunny

I’m a woman in my mid 20s and constantly face situations where people outside of cyber (still within the company) that I’m dealing with (older men in particular) who always push back against my cyber/technical recommendations even with managers cc’d. I studied, earned certs, and worked hard to get to where I am. Is it bc of my gender and age? In all honesty, I’ve written recommendations that male counterparts voiced in the past that had ZERO pushbacks.

like

What’s a good taxonomy for defining requirements for logging & monitoring? (i.e., apps, db, infra, etc.)

likefunny

HMU for referrals

funny

New to the U.S., is the Healthcare Industry (via HIPAA), the only industry in the U.S. that legally mandates having a designated Privacy Officer? So for example, although GLBA has obvious privacy requirements, unlike with healthcare, financial institutions in the U.S. are not mandated by law to have a designated Privacy Officer?

like

Curious how MBB's cybercapabilities are viewed within the cyber world. Experiences, thoughts?

like

Exit opps at a manager level - Big4 vs industry jobs? Security Architect at FAANG vs the normal career path at PwC. If compensation being slightly better at FAANG, which one would you pick and why

like

CCSP (cloud security certification) is it worth to do ?

like

Always bragging about how awesome they are. Awesome people dont brag. They just are

like

Any EY PPMD 🐠 willing to chat/connect? Interested in learning more about the cyber practice. I’m a new campus hire in the Hoboken office. Thanks in advance!

like

What other professional services firms have people who have technical skills. Most the people I work with are security paper pushers who couldn’t tell you basic security shit.

like

Thinking about getting the AWS Cloud Practitioner certification. Does EY have any amazon resources or training materials that they provide? Any advise from people who have taken it before? Thanks!

like

New to Fishbowl?

Download the Fishbowl app to
unlock all discussions on Fishbowl.
That was just a preview…
Sign Up to see all discussions
  • Discover what it’s like to work at companies from real professionals
  • Get candid advice from people in your field in a safe space
  • Chat and network with other professionals in your field
Sign up in seconds to unlock all discussions on Fishbowl.

Already a user?
Login here

Share

Embed this post

Copy and paste embed code on your site

Preview

Download the
Fishbowl app

See what’s happening in your industry
from the palm of your hand.

A phone with Fishbowl app

Scan your QR code to download
Fishbowl app on your mobile

Download app

Sign up for free to view this conversation on Fishbowl

By continuing you agree to Terms of Use and Privacy Policy

Already have an account? Log in

Sign up for free to continue using Fishbowl

By continuing you agree to Terms of Use(New) and Privacy Policy(New)
Messaging rates may apply

Already have an account? Log in

For account settings, visit Fishbowl on Desktop Browser or

General

Legal