Cybersecurity Leaders Reveal the 3 Skills That Matter More Than Certifications

Cybersecurity leaders say that as AI transforms the threat landscape, the most valuable skills are curiosity-led critical thinking, instinctive judgment above the automation line, and the ability to turn ambiguous signals into confident, risk-based decisions. Eric Schmitt, global CISO at Sedgwick, says he would rather hire someone a year into their career who constantly asks 'why' than someone with 20 years of experience who doesn't, noting that curiosity plus critical thinking is essential because AI produces confident but potentially wrong output at volume. Ankur Anand, CIO at recruiter Harvey Nash, points to a SecRespond benchmark where 23 AI models all failed to detect intrusions that never triggered alerts, emphasizing that professionals need threat-hunting instincts and AI oversight skills, plus basic Python to interrogate tools. Errol Weiss, CSO at Health-ISAC, stresses adaptability and communication, saying professionals must explain risk in ways that drive action across clinical, operational, and executive teams, and that while AI augments cybersecurity, it won't replace the need for experienced humans who can make decisions during uncertainty.