DCSG1- Are we nurturing the next generation of hackers or losing them - SherpaSec
Source: YouTube · DEFCONConference · published Sep 30, 2026 · 40:54
BLUF: The rise of AI and unrealistic hiring practices are reshaping the entry-level cybersecurity landscape, requiring new foundational skills and more inclusive industry standards to prevent losing the next generation of talent 2:15.
Key Takeaways:
• AI does not eliminate the need for beginner hackers but redefines the "Level 1" skill set, emphasizing verification literacy, system fundamentals, and the ability to formulate precise questions rather than just scripting 3:36.
• Unlike CTFs which offer hints, real-world research requires long-term persistence; bridging this gap involves starting with small, guided projects to build confidence before tackling unknown problems 13:40.
• Many entry-level job postings are overly demanding, listing responsibilities of entire teams and requiring excessive certifications, which scares away fresh graduates due to a lack of HR understanding of cybersecurity roles 18:10.
• Transitioning from the safe, sandboxed environment of CTFs to the high-stakes real world introduces strict compliance rules that can discourage exploration, though these constraints are necessary for professional integrity 22:53.
• While AI agents can help juniors bridge knowledge gaps, relying on them without deep understanding risks creating a fragile talent pipeline where no one truly knows how the underlying systems work 16:48.
Closing Statement: To nurture the next generation, the industry must adapt its training methods to account for AI's impact and ensure hiring practices are realistic and welcoming to new talent.
Sources:
- 3:36 Discussion on how LLMs change the definition of a beginner hacker.
- 13:40 Advice on bridging the gap between CTFs and real-world research.
- 18:10 Critique of unrealistic entry-level job requirements.
- 22:53 Perspective on the shift from CTF safety to real-world compliance.
- 16:48 Warning about the long-term risks of replacing junior roles with AI.
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
Welcome uh Yen Y Shia Le Ken and Ruhen uh to the Devcon creator stage. Their talk is titled are we nurturing next generations of hacker or losing them? Take it away. So first of all thanks everyone for coming. Um so we are from Sherasakai. Shasakai is a Malaysian based cyber security uh community and um we're actually a nongo that uh we are here today that we figured out that we are going to deliver you like um it's going to be are we nurturing the next generation of hackers or are we losing them? And how we came up with this topic is essentially uh it's pretty close to our demographic. Um the faces here actually looks a bit um inexperienced. So um most of us has like two years of industries experience. So we figured that we might be the right demographic to deliver you a different perspec…