You may be totally serious about your job yet give the impression that you’re not. Laughter and fun help some people tackle the high-priority, stress-inducing problems they face every day, but it can also be misinterpreted by others that they aren't taking their work seriously. How are people perceiving your behavior?

A typical tester mimics end-users, who are constructive when exploring an application’s functionality. But the role of a security tester is different. Their focus is mainly on mimicking hackers, who are intentionally destructive. A solid security strategy should balance both constructive and destructive efforts.

The tendency to look back and think you know what contributed to a success is called survivorship bias. It occurs when you make a decision or take some action based on past successes while ignoring past failures. That's why it's important to approach reports of successful projects with a healthy dose of skepticism.