This talk reflects on the lessons learnt through 10 years of cyber security consulting, sharing practical lessons from industry and highlighting what is often learned only through experience. It explores how technical skills, professional judgement, and soft skills such as communication and adaptability develop over time, and offers insight into common early career challenges and what matters most when progressing in the field.