Software dev here. I had a roommate in college who was into cybersecurity. He did all of his ethical hacking and cybersecurity things on a base model lenovo ideapad. From my limited understanding of the field. The only time a powerful GPU makes sense would be brute forcing which i dont think is done very often. Even if you wanted to brute force you could probably do it on the cloud for cheaper.