Owning the Fix Can Become the Start of a Career

Frank Kim's path into security began with code and the problems that came back with it.

In his Fireside Chat conversation, he recalled working as a developer during the dot-com era. Some of the applications he helped build contained vulnerabilities, and he became involved in fixing them. Over time, he took on more security issues, including problems beyond his own code.

What began as part of a development responsibility became a sustained interest. He described moving into application assessments, code reviews and application security, followed by experience across other parts of a security program.

Follow the work that keeps drawing you in

Kim's account gives responsibility a central place in career development. He did not describe discovering security only through a distant ambition or a new title. He encountered problems, worked on them and became increasingly interested in that work.

For a practitioner considering a change in direction, an editorial question is which responsibilities already attract their attention. What do they keep investigating? Which problems do colleagues ask them to help resolve? Those experiences may provide a more concrete starting point than a broad desire to move into a field.

The story also leaves room for mistakes. Kim acknowledged weaknesses in earlier work as part of explaining what he learned. The useful contribution was taking responsibility for understanding and correcting problems, then developing the capability to handle more of them.

A career does not always change in a single announcement. In Kim's account, it shifted through accumulating responsibilities until he recognized that the work he was increasingly doing was the work he wanted to pursue.

Listen to the original conversation with Frank Kim · Read the transcript

From the Fireside Chat archive: original episode published 2022-11-02. This is an editorial reflection on that conversation, not a new interview or an update on the guest’s current role.