Think like an attacker: Developing cyber talent through offensive security training
Synopsis
As cybersecurity threats grow in complexity, so must the ways we prepare our professionals. In this session, I’ll share my personal journey earning two leading offensive security certifications - OSCP (Offensive Security Certified Professional) from OffSec, and CPTS (Certified Penetration Testing Specialist) from Hack The Box - and how these hands-on programs helped me grow not only as a practitioner but as a security leader.
This talk is not just for red teamers or penetration testers. It’s for anyone working in cybersecurity - engineers, defenders, architects, risk managers, and even GRC professionals - who want to develop a deeper understanding of the cyber threat landscape. Learning to think like an attacker is one of the most effective ways to improve your ability to protect, detect, and respond. By breaking out of the traditional “defender vs. attacker” mindset, we unlock the potential to build more adaptable and resilient security teams.
I will provide a direct comparison of OSCP and CPTS, covering their structures, learning approaches, technical depth, and the types of skills they develop. I’ll highlight the pros of each - OSCP’s intense real-world simulation and CPTS’s guided, gamified path - and how you can choose the one that best suits your learning style and career stage.
The session will also provide actionable insights on:
I’ll also reflect on how these certifications have influenced my work as a Cloud and Application Security Lead, shaping the way I engage with developers, lead secure design conversations, and mentor others. The skills I’ve gained have helped me bridge the gap between red and blue teams, drive more meaningful security outcomes, and build greater technical confidence across the organisation.
This session is designed to inspire professionals at all levels to embrace offensive learning as a way to go deeper, think smarter, and become more effective in their roles. Whether you're new to security or leading a team, you'll leave with a clear understanding of why and how offensive training can elevate your career and your organisation’s cyber maturity.