Ten years in, the things that compounded were rarely the things that felt impressive at the time. The certs, the conference talks, the framework adoption that everyone fussed over for six weeks. Most of those went flat. The boring things compounded. One operational scar a year, one written document a quarter, one person you stayed in touch with from every job. That's most of it.
Who this is for
- You're four or five years in and starting to wonder which of the things you're spending time on will still matter in five more.
- You're at the point of choosing between deep specialisation and a broader spread, and the conventional advice on both feels thin.
- You're early and looking for the things that quietly separate year-ten profiles from year-three profiles.
What compounded
Operational scars. The incidents you sat through, watched the senior engineer handle, asked questions about afterwards. Those produced a pattern library that gets faster every year and doesn't decay. The people who don't have that library can't catch up by reading. The shape of an incident is something you learn by being inside it, and the cost of the learning is the bad night you had.
Written documents. Not blog posts. Internal documents that explained a decision, a system, or a tradeoff to a future colleague. The discipline of writing them forces you to hold a view firmly enough to defend it on paper. The act of doing that is what most people skip, and the gap between people who have and haven't done it is enormous and visible.
A small number of strong professional relationships. Not a network. Not a LinkedIn count. Three or four people from each job who you actually kept up with, who'd take your call, who you'd take theirs. That's the layer most career advice underweights. It's where the next job, the warning about a bad employer, and the candid feedback about your blind spots all come from.
What didn't
Certifications above the second one. The first two opened doors early when the CV was thin. After that, the marginal value of the next cert was approximately zero. The time spent on it would have been better spent on a written piece, a difficult conversation, or a serious project.
Conference talks. Pleasant. Occasionally useful. Almost never the thing that produced the next opportunity. The opportunities came from the three or four people in the audience I already knew, who were going to send work my way regardless.
Whatever framework or technology was fashionable that year. Half of them are gone. The half that remained are now table stakes and confer no advantage. The time invested in mastering them at the moment of peak hype was mostly wasted compared to learning them six months later when the documentation had stabilised.
Job titles. The title on the door at year three correlated almost nothing with where people are at year ten. The senior-by-twenty-eight crowd and the still-an-engineer-at-thirty crowd ended up in roughly the same places, with the latter often having stronger fundamentals.
The mistake I see most often in mid-career
Optimising for the next title rather than the next capability. The two look similar from a distance and diverge sharply over time. People who optimised for title got the title and stalled. People who optimised for capability got slower-looking moves and accelerated past them at year seven.
The clean test. If you were given a six-month sabbatical with no career consequences, what would you spend it on? If the honest answer is "the next title's tickbox list", you're optimising for the wrong thing.
The single piece of advice that aged best
Get into rooms where you're the least experienced person, on purpose, for as much of your career as you can stand. Not permanently. In rotations. Six months as the least senior person on a serious team teaches you more than two years as the most senior person on a weak one. The career people built by staying comfortable looks fine on LinkedIn and is fragile in person.
Where this connects on POST
For the earlier-career version of the operational point, read the real bottleneck in cybersecurity careers. For the cert side of "what stops mattering", read why cert stacking locks you in.