At a glance
- Transition Success: Former military personnel are building careers in cybersecurity at IBM X-Force.
- Key Player: Jake, a U.S. Air Force veteran, is now Global Deputy Head of IBM X-Force.
- Training and fit: Military training in security, investigations and crisis management carries over well to cyber roles.
- Emerging Trends: Rising attacks keep demand for skilled defenders high in both the private and public sectors.
From Battlefields to the Cyber Frontlines
Military veterans bring discipline and real-world experience to cybersecurity. Many make the switch. IBM’s careers blog profiled one of them: Jake, who started his career in the U.S. Air Force and now serves as Global Deputy Head of IBM X-Force, the company’s team of hackers, incident responders, intelligence analysts and researchers.
The Role of IBM X-Force
X-Force works much like a special forces unit for IBM’s clients. It has four parts: X-Force Red for offensive testing, an incident response team with a 24/7 hotline, threat intelligence researchers and a cyber range that trains client teams and boards in crisis response. Veterans fit naturally into that structure, bringing attention to detail and calm under pressure.
Start your morning with the signal that matters.
Weekday mornings. Five minutes. What changed in security, why it matters.
By subscribing you agree to our Privacy Policy.
Free. Weekday mornings. 5 minutes or less.
Jake’s path from the Air Force
Jake attended the U.S. Air Force Academy and trained as a security officer. His Air Force training covered physical security, investigations, antiterrorism, crisis management, cybersecurity and auditing, and he led more than 600 Airmen, civilians and families. He left the Air Force in 2015, became a business risk consultant and has built his IBM career through five international moves as a military spouse. As deputy head, he now sets X-Force strategy and oversees delivery of all its services.
Training for Tomorrow’s Threats
X-Force also trains clients. Its cyber range runs realistic crisis simulations, and its teams test defenses the way attackers would. For veterans moving into the field, Jake points to feeder roles such as SOC analyst, forensics examiner and system administrator, and to certifications like CISSP, CISM and GIAC.
The Urgent Call for Cyber Defenders
Demand for skilled defenders is high because attacks keep getting more sophisticated. Employers are looking at military-trained candidates. Veterans often bring a careful eye and a habit of planning for the worst, along with experience making decisions under pressure.
Advice for veterans moving into cyber
Veterans’ skills are valuable as threats evolve. Teams like IBM X-Force show that a military career can lead to senior security roles, and that the skills carry over. For veterans considering the switch, the starting point is to match their training to a feeder role, add a certification and keep learning.
Start your morning with the signal that matters.
Weekday mornings. Five minutes. What changed in security, why it matters.
By subscribing you agree to our Privacy Policy.
Free. Weekday mornings. 5 minutes or less.
Newer CyberExperts coverage on this topic
This article still works as background. If you want the current picture, start with the freshest related coverage below and today's brief.
Network Security Certifications (2026): Network+, CCNA, CCNP Security, Fortinet NSE, Palo Alto and GCIA
Network security certifications compared: Network+, CCNA, CCNP Security, Fortinet NSE 4 (formerly FCP), the Palo Alto Networks certs that replaced PCNSA and...
CompTIA Cybersecurity Certifications (2026): The Path From A+ and Network+ to Security+, CySA+, PenTest+ and SecurityX
CompTIA's cybersecurity certifications in order, from A+ and Network+ to Security+ V7 and V8, CySA+, PenTest+ and SecurityX, plus the new SecAI+...
Cybersecurity Engineer Certifications (2026): Security+, SecurityX, CISSP-ISSEP and Cloud Certs by Stage
Cybersecurity engineer certifications sorted by stage and specialty: Security+, SecurityX, CISSP with ISSEP or ISSAP, CCSP, AWS Security Specialty, SC-500, Google Cloud,...
Friday’s brief: Apache’s HTTP/2 fix, then Check Point break-ins, a ScreenConnect add-on and a GitHub secret stealer
The fastest way to catch up on what changed after this article was published.
Start your morning with the signal that matters.
Get the biggest cybersecurity developments, why they matter, and where to go deeper on CyberExperts.
By subscribing you agree to our Privacy Policy.
Free. Weekdays. Built for operators.