Ava on Nostr: Yes. ...

quoting
nevent1q…y3s9

As technology becomes more deeply integrated into every aspect of our lives and work, those tasked with protecting our digital security must expand their skills. For too long, some in the cybersecurity field have relied solely on a narrow technical education without making an effort to truly understand the systems they aim to secure.

Those on the front lines battling hackers and vulnerabilities would be better equipped if they took the time to gain development experience. Code is at the heart of every program, app, site and network - does it not make sense for “experts” to familiarize themselves with the language behind the tools, platforms and infrastructure they work tirelessly to shield?

Rather than dismiss programming as something beyond their purview or ability, security professionals would be wise to embark on their own learning journey. A basic understanding of coding principles and logic can offer invaluable perspective into how applications are built, how users interact with interfaces, and where weaknesses may lie.

Closing Knowledge Gaps

Some argue their roles require a focus only on monitoring, detection and response - not software engineering. But is there not value in comprehending at a fundamental level what one is working so fervently to protect? Knowledge gaps leave room for overlooks and errors. True experts seek constant improvement by addressing blind spots.

Bridging Divides

Learning to code could also help bridge perceived divides between security and development teams. With a shared foundation of coding literacy, collaborators gain ability to speak each other’s languages - literally and figuratively. Barriers break down as roles blend and partners recognize shared goal of building secure products.

In a field where change is constant, remaining stagnant is to fall behind. Those tasked with our digital wellbeing would serve us well by continuing self-education into new realms. The journey to code literacy may be challenging, but challenges build character and skills. Our security depends on experts who expand expertise - not rest on past achievements or limit vision with excuses. Our networks and data are too valuable not to ensure guards have tools to see potential issues invisible to the untrained eye.

The question is not whether one’s role demands coding - but whether we entrust our security to those resolving to know systems as intimately as those aiming to breach them. Our defenders would do well to learn the tongue of that which they defend.