Are You Sleeping on the Cryptography Field?
By M. Crawley
We depend on cryptography constantly, but most people never stop to think about the careers that make all of that possible.
Everyone I know who's trying to break into cybersecurity is targeting the same roles: SOC analyst, GRC work, Cloud security, and maybe digital forensics if they're feeling adventurous. Those are the careers you mostly hear about when it comes to cybersecurity, and the pathways are clearly outlined.
Recently, I had an epiphany of some sort, not for myself, but in general. Nobody talks about careers in cryptography, and I found that to be interesting because cryptography is literally what secures our digital communications. Our financial transactions on our cellphones, blockchain technology used in cryptocurrency, and data protection all rely on cryptography. It's fundamental to pretty much everything we do in security. Yet no one gets excited about careers in cryptography, as we do for SOC analysts or Cloud Engineers.
What We're Actually Talking About
Before going any further, let's make sure we're on the same page about cryptography. At a high level, cryptography is the practice of securing information by transforming it into a format that can be read only by the parties intended to receive it. You probably already know about encryption, hashing, and digital signatures.
In case you haven’t realized, it’s actually at work as you’re reading this article. Every time you access a website over HTTPS, cryptographic technologies are at play. When you make a payment with your credit card or verify that downloaded software hasn't been tampered with, cryptography handles all of that in the background. And someone had to design those cryptographic systems, implement them without screwing them up, then maintain them as new threats emerge.
Where Cryptography Actually Creates Jobs
One prominent example of cryptography at work is in blockchain and cryptocurrency. These technologies rely entirely on cryptographic design, and the security requirements around these systems are some of the most demanding you’ll find. Companies building blockchain solutions need cryptographers to design the mechanisms and create secure wallet systems. Cryptocurrency firms need people who understand cryptographic protocols well enough to pinpoint vulnerabilities before they turn into exploits.
But that's just one piece. Financial institutions need cryptographers working on secure payment systems, key management infrastructure, and fraud-prevention tech. Healthcare companies need expertise in protecting patient data while keeping systems actually usable. Government agencies and defense contractors employ cryptographers to secure communications and handle classified information. Software companies like WhatsApp, which build messaging platforms, need professionals in the cryptography field to implement security measures for user data.
Think about it really: everything you do on your phone and laptop includes cryptography, which means that the field will always demand experts.
Actual Roles to Consider
Cryptography Engineers typically earn between six figures annually. These roles involve implementing cryptographic protocols in software, designing secure systems, and ensuring that cryptographic operations perform as expected.
Security Architects with strong cryptography backgrounds command high salaries because they're genuinely rare. Post-Quantum Cryptography specialists are becoming increasingly valuable as organizations start preparing for quantum computing threats. Companies are willing to pay premium rates for this expertise because not many people have it yet.
There are also research positions at universities and tech companies for people who are expanding the field rather than just applying existing techniques.
Building Relevant Skills
If you're interested in cryptography work, there are some specific capabilities you'll need beyond general security knowledge. Mathematics is very important here. Focus on learning number theory, abstract algebra, and probability. You don't need a math degree, but you should be comfortable with mathematical concepts beyond just memorizing formulas. You need to actually understand why they are applicable.
Programming skills are also critical. You'll need to be able to implement cryptographic systems or at least work with cryptographic libraries confidently. Python, C++, and Rust are common for this type of work, so be sure to hone these programming skills. Understanding common pitfalls in cryptographic implementation is as important as understanding the algorithms themselves because that's where things break in the real world.
Practice implementing cryptographic protocols from scratch in a learning environment. This helps you understand why certain design decisions matter and what can go wrong when you don't follow them. Work through cryptographic challenges on platforms like Cryptopals and other similar platforms that teach you how cryptography breaks before teaching you how to use it correctly.
Study real-world cryptographic failures too. Many breaches have been caused by someone failing to implement or deploy cryptographic algorithms correctly. Those failures can teach you what these errors actually look like in practice.
Resources Worth Exploring
The Coursera platform and other avenues offer cryptography courses from major universities for a low cost if you prefer that format. The Cryptopals challenges I mentioned earlier are excellent for learning by doing, which honestly works better for a lot of people than just reading theory. It may sound mind-numbing, but reading their papers can also help you understand where the field is actually heading right now and what would be expected of you if you choose this path.
Why This Matters Now
The cryptography field is evolving fast, and post-quantum cryptography is becoming urgent as quantum computers advance. Privacy-first technologies are moving from research papers to actual, practical applications. Companies need people who understand these technologies today, not five years from now when everyone's scrambling to hire cryptographers and finding none available.
If you have any interest in mathematics, have a curiosity about how systems work at a fundamental level, and have a desire to work in an area where expertise is genuinely scarce and gets compensated accordingly, cryptography deserves serious consideration. It's not the loudest career path in cybersecurity, so you won't see it plastered all over LinkedIn like SOC analyst positions. But it's definitely one of the most valuable parts of cybersecurity, and the shortage of people with real cryptographic expertise isn't going to get better anytime soon.


