Sophie’s career started in cyber forensics in the aerospace industry, and came to Cyberis after a stint as a Senior Associate at a ‘Big 4’ consultancy.
Sophie is a Certified Information Systems Security Professional (CISSP), Cyber Scheme Team Member (CSTM) and Cyber Scheme Team Leader – Web App. As a senior consultant in Cyberis’ technical team, Sophie specialises in challenging web application assessments, though she also enjoys delving into thick client analysis and complex infrastructures. Sophie has a keen interest in open source intelligence, revealing the unexpected from public information sources. She was shortlisted in the “Rising Star” category at the Security Serious Unsung Heroes Awards 2024.
Sophie is keen to share her knowledge with the community and enjoys promoting the cyber security industry to students from secondary school age, right the way through to higher education and beyond.
In her spare time Sophie enjoys cooking, hill walking and keeping up with the Welsh Rugby.
Cybersecurity events are buzzing with technical jargon, industry experts and cutting-edge advancements, which can feel daunting.
These gatherings may be considered essential for networking, learning and growing in the field, yet they can also feel overwhelming, particularly for women, in what is still a male-dominated industry. With the right approach, however, they are incredibly rewarding.
Be selective
The first and one of the most important things to remember is that you don’t have to do it all.
It’s tempting to cram your visit with back-to-back talks, in an attempt to soak up as much knowledge as possible. However, cybersecurity conferences are about far more than just presentations. Remember that meeting people, exploring new technologies and making connections that could shape your career are just as important, if not more so.
Choose a few sessions that genuinely interest you and leave time to visit exhibition stands and chat with industry professionals. In my experience, some of the most valuable insights often come from casual conversations rather than from the formal presentations.
If a talk seems too complex or filled with technical details beyond your current knowledge level, don’t be discouraged. These events usually try to cater to all levels of expertise so there will always be sessions more suited to you. Instead of feeling out of place, you can see it as an opportunity to note down new concepts and research them later. Everyone in cybersecurity started somewhere and no one expects you to be an expert on everything.
Making connections
Networking is at the heart of any industry event and cybersecurity is no different. Exhibitor stands are a great place to start. The people working on them are there to talk and engaging with them is an easy way to start conversations without feeling awkward.
Don’t be afraid to introduce yourself and ask about what they do; you never know where it might lead.
Making a habit of noting down names and key takeaways from conversations will make it far easier to follow up afterward. Connecting with people on LinkedIn, for example, shortly after meeting them will help initial introductions turn into lasting professional connections. Waiting until much later often means forgetting names and missing out on potential opportunities.
Bring a friend
For those hesitant to attend alone, take someone with you. Even someone you know well who doesn’t work in tech – will make the experience feel less daunting. Conferences can be intense and having someone to share the experience with makes a significant difference. They offer encouragement, help break the ice in conversations and provide a familiar face in a sea of attendees.
But if you do go solo, rest assured that there will be plenty of newcomers feeling the same way.
Start small
If the idea of a large-scale event such as Infosecurity Europe feels intimidating, smaller gatherings like SteelCon and BSides can be a better starting point. These events tend to be more community-driven and have a supportive environment that’s easier to navigate. They also offer excellent opportunities to engage with industry professionals in a less formal setting. If you’re still feeling unsure about attending, starting with a women-focused event – such as a local Women in Cyber chapter – can provide an additional layer of comfort. Meeting like-minded individuals in a supportive space often helps build confidence before diving into larger, mixed-gender conferences.
Remember you belong
Despite progress, it’s no secret that most cybersecurity events have a noticeable gender imbalance. Walking into a room dominated by men can feel intimidating but it’s important to remember that you belong there just as much as anyone else.
The industry is evolving and the presence of more women at these events is a positive step towards broader inclusivity. Recognising that many attendees, regardless of gender, feel out of their depth at times can be reassuring. Imposter syndrome is common but it shouldn’t hold you back from seizing opportunities to learn and connect.
The practicalities
On a more practical note, being prepared can make a big difference. A rucksack is a great choice for carrying essentials – water, snacks, a notebook, and any freebies you pick up along the way. Events often have promotional items, and it’s always handy to have space to stash them. Comfortable footwear is another must; these conferences often involve a lot of walking, and sore feet can quickly dampen the experience.
Above all, attending cybersecurity events is about finding your place in the industry and growing your confidence. Whether you’re new to the field or a seasoned professional, these gatherings offer a chance to learn, share experiences and build valuable relationships. By approaching them with curiosity and a willingness to engage, you’ll walk away with far more than just knowledge – you’ll leave with a network of people who might just help shape your career in ways you never expected.
