Careers and Training on BSG Blog — Cybersecurity Insights

Cyber Defense Exercises: 40 Teams, 15 Countries

Wed, 08 Apr 2026 08:00:00 +0000

Most organizations test their defenses with tabletop exercises — facilitated discussions where someone reads a scenario and teams talk through their response. Tabletops test process. They don’t test capability.

BSG has spent over a decade on the offensive side — penetration testing, red teaming, and running CTF competitions at security conferences across Europe. A few years ago, we won SANS Grid NetWars, a defensive investigation tournament, and something clicked: the same skills that make a good attacker make a good exercise designer. We know how real adversaries operate because that’s what we do every day. Building realistic exercises for blue teams was a natural next step.

From Developer to AppSec Engineer: Career Path Guide

Thu, 05 Feb 2026 23:02:15 +0000

You spend your days building software. You understand how systems are architected, how data flows between components, and how features go from a pull request to production. Now consider this: that same knowledge makes you one of the strongest candidates for a career in application security.

Cybersecurity Professional Standards

Tue, 29 Jul 2025 13:41:52 +0000

The latest NCSC Cyber Series podcast gathers three voices who know the battlefield from different angles:

Tracey Jones, Senior Analyst at the Bank of England; Gian Andrea Padovani, Senior Manager in the PRA’s Cyber-Resilience team; and Chris Ensor, Deputy Director for Cyber Growth at the NCSC. Their discussion turns a spotlight on an issue that rarely makes headlines yet shapes every breach report we read: professional standards.

Security Awareness Training: Does It Actually Work?

Mon, 25 Nov 2024 16:48:56 +0000

Phishing attacks remain the top cybersecurity threat globally, accounting for 33% of data breaches in small and medium businesses according to Verizon’s 2025 Data Breach Investigation Report. Despite investing heavily in employee training programs, organizations often find themselves repeatedly compromised. This raises a critical question: How effective are these phishing training programs in preventing real-world attacks?

How to write a CV in cybersecurity

Thu, 28 May 2020 10:11:25 +0000

Each time after hosting a Nonamecon or OWASP Kyiv event, my mailbox is flooded by messages from people asking if we have job openings. How can one join our company? Here is my CV! And after getting a response, they ask how they can improve it.