Kedar Mendhurwar: Breaking the myth that cybersecurity is just coding
Kedar Mendhurwar: "People new to the field often feel lost because there are so many different avenues. But with curiosity, they’ll find the one that feels right."
If you ask cybersecurity consultant Kedar Mendhurwar about the biggest misconception in the field, he’d say it’s that coding skills are the only way in. He believes curiosity will take newcomers much further.
With over 15 years of experience serving organizations such as Bombardier, Desjardins, Warner Brothers, and the Government of Québec, Mendhurwar has seen time and again why data safety starts with everyday professionals — not the IT department.
As an instructor for Concordia Continuing Education’s Certificate in Cybersecurity Proficiency, he opens the door to learners who are new to the field, guiding them toward practical awareness and simple everyday behaviors.
What do you try to help people understand when they’re considering a career in cybersecurity?
Kedar Mendhurwar: A lot of people who are interested in cybersecurity don’t pursue it because they assume there's too much to learn. Of course, there are basics you need to learn, but no one can ever truly “master” cybersecurity. Every day on the job is about learning, and the field has many dimensions.
Any course can introduce you to a topic and trigger your curiosity. People new to the field often feel lost because there are so many different avenues. But with curiosity, they’ll find the one that feels right.
I was an engineering student in 2009, and back then cybersecurity wasn’t talked about as much. My first mentor told me it would be the next big thing, and that’s what got me interested. It’s not that he taught me everything or that a course covered all the content. I wasn’t an amazing student, but I became curious, and that planted the seed. I’m not a programmer or a coder. I don’t know scripting. But I’ve survived for 16 years — and I’m doing pretty well!
What might be surprising about the types of people you teach at CCE?
KM: I’ve taught learners from many different professional backgrounds, and many of them aren’t from IT. In one recent class, there was a student who had worked as a chef, someone from finance, and a woman coming from a teaching career who was about 70 years old.
There are also many younger people exploring their career options. Cybersecurity has caught the attention of a wide range of people because they hear there’s high demand, decent pay, and strong opportunities.
What real-world cybersecurity concepts and challenges do you help your students understand?
KM: Here’s a real example. In 2020, I was using a Walmart account to order groceries online. On that account, I hadn’t enabled any security settings or multi-factor authentication. It hadn’t crossed my mind. Someone hacked into it and placed an order.
The lesson is that we often think we only need to protect financial or government accounts. But every digital account needs the same level of attention. Often, people just aren’t aware of the risks associated with everyday habits and ignore the basics because they think, “Why would anyone ever target me?” That’s exactly the gap that gets exploited.
In my courses, students work through real professional scenarios because security is everyone’s responsibility. When you learn these basics and practice them consistently, they become habits that help protect you not only at work, but in everyday life.