Five years ago, the cybersecurity skills gap was a hot topic of conversation. The need for more professionals in the field was clear, with demand outpacing supply. Fast forward to today, and the numbers are still telling the same story – there are only 83 cybersecurity workers for every 100 jobs, according to CyberSeek.
But the situation is more complex than we initially thought. To truly tackle this issue, we need to delve deeper into the nature of the gap and understand where the challenges lie.
The cybersecurity job market has evolved significantly in recent years, with a growing demand for professionals who not only have cybersecurity knowledge but also possess additional skills like cloud or AI expertise. This shift has made the job more complex and challenging for many in the industry.
According to a recent ESG report, 63% of cybersecurity professionals have found their work more challenging in the past two years, citing reasons such as increased complexity and workload, as well as a rise in cyber threats due to expanding attack surfaces.
Contrary to popular belief, the shortage of 4.8 million cybersecurity workers does not just refer to entry-level positions. Many open roles are more advanced, and in some cases, individuals with entry-level skills have been filling these positions. The reality is that those with the necessary experience and skills are likely already employed and not actively seeking new opportunities.
To address this ongoing issue, we need to rethink our approach to hiring and training cybersecurity talent. This includes looking beyond traditional pathways to find new talent, reassessing the actual skills needed for open roles, and ensuring that current training programs equip professionals with the verified skills organizations require.
The industry is also seeing a rise in alternative education programs, as people opt for accelerated technical programs and boot camps to develop workforce skills. Some universities are even partnering with boot camp-style programs to provide students with a mix of traditional degree programs and real-world skill development.
Employers play a crucial role in closing the cybersecurity skills gap by evaluating job requirements accurately, embracing new learning methods, and being intentional about reporting skills needs. By working together and fostering an open dialogue, we can address the talent gap in this ever-evolving landscape.