They might not like this one....

Soo, they’re not gonna like this one, but here’s something I’ve been noticing.

Why are cybersecurity degrees, both bachelor’s and master’s, advertised as technical when the way they’re taught doesn't really reflect that? Is it just because it sounds more appealing?

Before you cuss me out, hear me out.

When CS students go to college, even if they don’t learn exactly what’s done on the job, they still learn why things behave the way they do. Think operating systems, cryptography, compilers, and so on.

But cybersecurity students, on the other hand, often don’t. Not to the same extent. They’re taught how to use tools, basic hacking techniques, things like SQLMap, the OWASP Top 10, Burp Suite, Metasploit. But how is that really different from a glorified script kiddie?

What I’m pointing out is that most cybersecurity students or grads don’t know how to code. So they can’t write their own Burp Suite extensions, can’t build custom exploits, and can’t create anything original. Instead, they tend to lean more toward compliance, audit trails, and writing reports. Those things aren’t very technical, yet the whole field is often marketed like you’ll be doing Mr. Robot-type stuff.

At this point, cybersecurity, at least the way it's presented, feels more like corporate bureaucracy. Meanwhile, security engineers are the ones actually doing what people think cybersecurity is. They test and break real systems, understand code, suggest real fixes, and create new exploits.

Just saying.