A conman has all the time in the world to lay down a path for their marks to follow. They can hone their process over time and have the benefit of running the s

A conman has all the time in the world to lay down a path for their marks to follow. They can hone their process over time and have the benefit of running the same scan over and over to improve it. A mark has a single moment to react to these well laid plans, a moment in which they can be distracted and not thinking in a security context. There is a scale of conman skill vs mark awareness but pretty much anyone could fall for a con given the right situation. For those disparaging this person's job title of security engineer: an engineer dealing with network security of IP traffic is a different skillset from a security consultant advising on human involved phishing attempts & cons. The context also matters here. Being on your computer & working on network security, looking for threats, is a very different and incomparable situation from being in the park living your non-work life and getting a call from the bank.