In the world of cybersecurity, we often talk about "gatekeeping" or the "skills gap," but rarely do we find individuals dedicated to building the actual bridge for newcomers. In a recent episode of the Simply Offensive podcast, host Phillip Wylie sat down with Josh Mason—Air Force veteran, author, and founder of the Noob Village—to discuss his unique journey and his mission to make cyber accessible to everyone.
Josh’s journey didn’t start behind a keyboard; it started in the cockpit of an Air Force plane. After serving in Afghanistan and flying medical evacuation missions, Josh transitioned into the civilian sector with a deep-seated desire to continue helping people [02:16].
He quickly realized that while the military provides world-class training, the civilian cybersecurity industry can feel like a "foreign language" to those on the outside [03:04]. This realization sparked his passion for teaching and simplified communication.
One of the highlights of the conversation was Josh’s book, Speak Security with a Business Accent. Josh noticed a recurring frustration: technical experts struggling to get budget or buy-in from leadership.
"Unless you're tied into how [your technical work] ends up getting the business moving forward... people won't truly value what you're doing," Josh explained [07:34]. His book serves as a guide for CISOs and practitioners to translate technical jargon into "business outcomes," focusing on metrics that CEOs and CFOs care about, like churn rate and profit margins [06:42].
Perhaps Josh’s most impactful contribution to the community is the Noob Village (formerly the Noob Community). Statistically, about 80% of DEF CON attendees are first-timers, and 70% don’t even have a job in cyber yet [16:12].
Josh saw that these "noobs" were often overwhelmed by the sheer scale of the conference. The Noob Village was created to be the "tutorial level" for the world’s largest hacking conference [25:06]. It provides:
Beyond his community work, Josh co-hosts the Simply Defensive podcast [25:54]. While many are drawn to the "offensive" side of hacking, Josh emphasizes the importance of understanding defense, SOC operations, and the intersection of cybersecurity and insurance [26:33].
Josh Mason’s career is a testament to the idea that cybersecurity isn't just about code—it's about community, communication, and a willingness to help the next person in line. Whether you are a veteran looking to pivot or a student feeling lost at your first conference, Josh’s message is clear: You belong here, and there is a village ready to help you.
Want to learn more?