Twitter Was the Career, Not the Side Project
The Story
Matt Johansen’s career started in a dorm at Adelphi, on a platform he initially didn’t see the point of.
“I was a junior at Adelphi when Twitter first came out. I joined it but didn’t really see the point at first. Then I started finding people in the computer science industry I was interested in” (Source 1). The first inflection was a single afternoon: from his room in Chapman Hall he ended up in a thread between the heads of privacy and risk at Verizon and PayPal. “I was watching conversations people would pay to be a part of. I would interject a question, and they would actually answer me” (Source 1).
The conversion from online to offline came at conferences. Right after graduating in 2008 he went to a security conference in DC, then one in Las Vegas the following summer, and met the same high-profile specialists in person. “Those networking opportunities helped him land consulting jobs doing security assessments of companies, which led him to WhiteHat Security” (Source 1).
His own counterfactual: “If it weren’t for social media and those conferences, I think I’d still be on Long Island and only know of the company I’m working for” (Source 1).
The same pattern shows up in his later career framing. The Tines podcast lists “Turning his Twitter network into his IRL network” as a dedicated segment — explicitly named as a career mechanic, not a hobby (Source 2).
What that mechanic produced concretely: hired at WhiteHat in 2010, supervisor within a year, found a bug in Google Chrome inside his first six months, and presented research at Black Hat USA at age 23 (Source 1). When WhiteHat opened its first satellite office in 2012, he was the one asked to move to Houston: “I was employee zero down here. We’ve hired 51 people for this office in just over two years. That’s the size the entire company was when I started in 2010” (Source 1). By 2013 he was on Marble Security’s list of 100 must-follow security experts (Source 1).
The trajectory continued the same way. He became Head of Security at Honest Dollar (acquired by Goldman Sachs), ran cloud and container security and then vulnerability management for Bank of America, then became Principal Security Architect at Reddit (Source 3). He was also a writer and co-host on Liquidmatrix Security Digest along the way (Source 3).
Lesson for Creators
The “build in public” advice usually gets framed as marketing — content distribution to drive product attention. Matt’s version is older and more direct: showing up in the right public conversations as a junior is the career. The cost is replies, not threads; the payoff is that the senior people in your industry recognize your name before you’ve ever shipped anything for them. Two compounding behaviors did the work: replying into conversations he wasn’t invited to (online), and showing up at conferences to convert internet acquaintances into colleagues (offline). Without the online half, the conferences would have been a stranger walking into a hotel ballroom. Without the conferences, the online relationships would have stayed shallow. The leverage was in pairing them.
Related
- Ten Years of Quiet Building Before The Newsletter Existed — the same audience, fifteen years later, as the launchpad for Vulnerable U
- 4,000 Followers in 14 Hours from a Standing Start — Yossi Levi: same “replies over posts” mechanic at cold-start
- Owning CAC - Four Months of Nightly Twitter Replies — CJ Gustafson: the reply-guy mechanic later in a career