Success in the cybersecurity field depends as much on mindset and adaptability as on mastery of tools and systems. 

From his vantage point leading incident response at one of the world’s largest insurers, Eric Baldwin, Director of Response Engineering at MetLife, has a clear view of what it takes to shape effective cyber professionals. 

Knowledge, grit, and curiosity are the foundations 

For Eric, every capable cybersecurity professional starts with a deep technical foundation and an insatiable curiosity about how things work. 

“You can’t effectively protect a system you don’t understand,” he says. “A deep curiosity about how technology works, from networking to operating systems, is the bedrock of any successful cybersecurity career.” 

But knowledge alone isn’t enough. Cyber defense is a high-stakes, high-pressure discipline where even seasoned experts face setbacks. Eric emphasizes that “grit and resilience” are critical traits for anyone entering the field.  

“It’s essential to have the determination to work through complex problems and the resilience to bounce back from setbacks,” he explains. “The ability to remain calm and focused under pressure is a non-negotiable trait, especially when you’re in the middle of a critical incident.” 

That combination of strong fundamentals and steady composure must be matched by an appetite for learning. “The cybersecurity landscape is in a constant state of flux,” Eric notes. “Professionals must be flexible and eager to learn new technologies, tools, and methodologies as they emerge. A commitment to continuous learning is vital.” 

Turning theory into action and the power of hands-on training 

Eric has seen firsthand how experience-based learning can accelerate professional development. “Hands-on training, like live-fire cyber exercises, has been a transformative tool for accelerating the development of our junior analysts,” he says. 

These cybersecurity simulations replicate real-world attacks and force teams to perform under pressure, and that’s something classroom training can’t fully replicate. “You get to see a person’s full range of capabilities come to life. We’ve seen highly technical analysts flourish when they can focus on a specific, complex problem. At the same time, we’ve identified natural leaders who have an incredible ability to direct the team and manage a crisis.” 

Beyond technical outcomes, Eric says these experiences make cybersecurity “tangible.” “It connects the concepts learned from certifications and degrees to the practical realities of defending an organization,” he adds. 

Measuring growth  

When it comes to evaluating the success of entry-level training, Eric looks for two indicators: confidence and the practical application of new skills. 

“A successful program transforms communication,” he says. “You see analysts shift from tentative language like ‘I think’ or ‘maybe’ to definitive, evidence-backed statements like, ‘I am confident that…’ or ‘The data shows…’ This demonstrates a deeper understanding and trust in their own abilities.” 

Example of a Readiness Dashboard by Cyberbit 

Equally important is seeing that knowledge transfers into daily operations. “The true test is whether they can translate what they’ve learned in a simulated environment into their daily responsibilities. For example, a junior analyst might take a lesson from a training exercise and develop a simple automation script to help the team respond more quickly. That’s a clear sign the learning has stuck and is providing real value.” 

Overcoming obstacles by building confidence and context 

Training new cyber professionals comes with its own challenges. Eric identifies three recurring obstacles:  

• Lack of confidence 

• Limited business awareness 

• Uncertainty about internal communication pathways 

Upskilling junior SOC members to tier 2 SOC 

To build confidence, he advocates for progressive responsibility: “We start junior analysts with manageable tasks and gradually increase the complexity and scope of their responsibilities. This allows them to build a foundation of successful outcomes while being continually challenged to grow.” 

Developing a broader business context, meanwhile, comes through exposure. “I often invite junior members to sit in at cross-functional meetings as observers. Their primary goal is simply to listen and understand the key players, their roles, and what matters most to the business.” 

Finally, Eric helps his team master the “who to call” mindset using tabletop exercises. “Instead of diving into the technical details, the scenario forces them to answer questions like, ‘Who is the first person you call?’ This builds the crucial muscle memory for organizational navigation.” 

Together, we are building the next generation of cyber defenders 

MetLife chose Cyberbit to build these capabilities. “The live-fire exercises have been the most impactful aspect of our collaboration,” Eric says. “They provide a consistent, safe environment to test and refine our incident response plan. This practice ensures that when a real incident occurs, our team can operate on instinct and muscle memory.” 

He credits Cyberbit with helping identify emerging leaders, strengthen cross-team relationships, and uncover skill gaps for targeted improvement. 

Perhaps most importantly, the collaboration between Cyberbit and MetLife has extended beyond the typical vendor-customer relationship and the company’s internal development.  

“Our collaboration with Cyberbit has allowed us to extend our reach to the next generation,” Eric adds. “For two years running, we’ve helped introduce a group of enthusiastic young minds to the world of cybersecurity, giving them early exposure and helping to foster a passion for the field. It’s a wonderful way to invest in the future talent pipeline.” 

Through our shared commitment to hands-on and experience-based learning, together we are shaping a future where every defender is ready, confident, and capable.