experience vs skill in cybersecurity