Many start in the military and eventually move to private sector. However, an ever growing percentage just straight up go to college to learn the skills.
replyCyber companies are in the fortune 100 now, and it's not like it used to be back when you actually had to be interested in it and dedicate your life to learning the skillz from shady forums. Now it's just a job to most practitioners.
what use are 0-days to private cybersecurity companies?
replyProbably extremely useful for the companies that can sell exploits to state governments.
replyHuge marketing/PR benefit.
replyYes, but also there is also a huge value to individual contributors and their careers. I broke into the field after landing a few relatively high profile CVE acknowledgements for big companies. Responsible disclosure is good for your career.
replyOn the other hand, if the value of that drops you can expect to see some folks start taking the wrong path.
Plenty of people in this space who work on entirely legal things
reply