By: Tim Lyons
Editor @ OSINTsights | Builder of Infrastructure | Breaker of Silos | Tamer of AI Agent Armies
“The average cost of a data breach in organizations with underqualified security staff is nearly double that of fully staffed, technically competent teams.”
— IBM 2024 Data Breach Report
Cybersecurity is a team sport. But if everyone’s passing the ball and no one’s guarding the goal, you’re going to lose.
In recent years, there’s been a major shift in how organizations build tech teams. Soft skills—like communication, collaboration, and cultural fit—have become the priority. And while those traits are important, they’re not enough. Especially when the pressure’s on.
This isn’t just a cybersecurity problem. It’s everywhere across IT. From infrastructure to DevOps, we’re seeing teams formed more for harmony than for hard skills. The result? Systems that look functional on paper but break when it matters most.
This article explores how to strike the right balance—because strong teamwork matters, but deep capability still needs to lead the charge.
🧠 Why You Need Both Brains and Bonding
Security, like the rest of IT, has evolved. It’s not just about firewalls and packet captures anymore. It’s also about bridging gaps—between departments, teams, and systems. You need people who can work together and speak clearly across technical and non-technical lines.
But here’s the catch: when hiring leans too far into soft skills, you risk building teams that communicate well but can’t respond effectively to real threats.
And that risk is showing up in the data:
- The 2024 IBM Data Breach Report shows higher breach costs in organizations with underqualified staff.
- According to ISACA, 62% of organizations are understaffed, and many say it’s difficult to find candidates with deep technical expertise.
Good communication doesn’t fix a misconfigured identity provider. Team spirit doesn’t reverse a ransomware infection. You need technical depth at the table.
🤝 When Teamwork Works—and When It Doesn’t
There’s no question: teamwork is a force multiplier when done well. Cross-functional collaboration helps surface problems early, align responses, and drive innovation. But when organizations over-index on harmony, real issues get glossed over.
Why Teamwork Matters
- Diverse thinking = better solutions. Different perspectives help teams approach problems from more angles.
- Shared awareness = faster response. Communication helps spot risks early and coordinate a fix.
- Trust = less friction. Teams that work well together waste less time on internal politics.
Raiffeisen Bank International is a great example. They built a network of “Security Champions” across departments—non-technical staff trained in basic cyber hygiene. This extended the eyes and ears of the security team without replacing its leadership or technical backbone.
When Teamwork Goes Too Far
But there’s a line. And once it’s crossed, collaboration starts to compromise capability.
- Soft-skill bias: Friendly, well-liked hires get through—even if they lack the technical skill to contribute meaningfully.
- Groupthink: Everyone agrees with each other. No one challenges flawed ideas.
- Blurred leadership: No one takes responsibility in a crisis. Decisions stall.
Think of it like a pit crew that runs smoothly—but forgets to tighten the lug nuts.
🧑💻 Deep Thinkers vs. Team Players: Two Roles, One Goal
Every high-performing team needs both: deep thinkers who can dive into the technical weeds, and team players who can keep everything moving smoothly. The trick is knowing the difference—and making sure one isn’t smothered by the other.
Quick Comparison:
| Trait | Deep Technical Thinker | Team Player |
|---|---|---|
| Focus | Root cause analysis, foresight | Communication, alignment |
| Strength | Innovative solutions, leadership | Morale, clarity, cohesion |
| Risk (if imbalanced) | May miss social cues | May avoid hard decisions |
| Ideal Roles | Architect, Engineer, Incident Lead | Liaison, Facilitator, PM |
Great leaders live at the intersection. They can make complex decisions under pressure and keep the team together while doing it.
⚠️ Not Just Security—This Is Happening Across IT
This challenge isn’t limited to cybersecurity.
In infrastructure, operations, cloud, and enterprise IT, there’s a growing trend: hiring based on presentation instead of performance. We’ve all seen it—teams where no one wants to rock the boat, even when they know the boat’s leaking.
Soft skills should amplify technical strength, not cover for its absence.
The reality? Friendly teams with shallow benches don’t just underperform—they burn out the few experts carrying the load.
🧩 Building Teams That Are Both Smart and Aligned
Some organizations try to bridge the gap by mandating basic certifications—like Security+—across the board. But that only scratches the surface. Entry-level training helps raise awareness, but it doesn’t build expertise.
A better approach is layered:
- Hands-on labs and scenario-based exercises
- Clear advancement paths for technical contributors
- Strong internal communication frameworks
- Defined roles where deep thinkers lead, not just consult
This kind of structure builds alignment and strength. The two aren’t mutually exclusive.
📌 Real-World Models That Get It Right
- Raiffeisen Bank International: Security Champions extend the reach of the central security team without weakening it.
- University at Buffalo Cyber Team: Success in national competitions reflects a balance of individual excellence and team dynamics.
- Forward-leaning orgs: More are investing in certification ladders, scenario-based simulations, and communication training to develop well-rounded teams.
What makes these efforts work isn’t the training alone. It’s the structure and clarity that supports it.
⚖️ The “Rule of Thirds” Framework
Here’s one model that strikes a balance:
- 1/3 Technical Experts – Engineers, analysts, and architects who can dive deep.
- 1/3 Risk Communicators – People who translate technical risk into business action.
- 1/3 Operational Drivers – Staff who keep systems running and responses aligned.
This prevents the common trap: less experienced managers surrounding themselves with equally underqualified peers. A mix of skills and perspectives keeps the system honest—and secure.
✅ Takeaways: Harmony Is Great. Capability Is Critical.
Good vibes won’t stop a breach.
To build security (or IT) teams that can actually hold the line:
- Hire for balance—not just fit.
- Let deep thinkers lead. Don’t bury them under feel-good meetings.
- Build clear career tracks for technical staff.
- Train for both communication and capability—but don’t confuse the two.
💬 Final Thought
Team dynamics matter. But without technical depth, you’re just coordinating your way to a compromise.
The future of cybersecurity—and IT in general—depends on getting this balance right. That means valuing sharp minds, clear voices, and real leadership in equal measure.
Because in the end, camaraderie is great. But capability wins the day.
