Five years ago, the cybersecurity skills gap was a hot topic, with the need for more professionals to fill the demand. Fast forward to today, and there are still only 83 cybersecurity workers for every 100 jobs, according to CyberSeek.
It’s clear that the situation is more complex than we initially thought.
To develop real solutions, we need a deeper understanding of the gap’s true nature — and where the challenges lie.
The cybersecurity job market has shifted dramatically in recent years, with an increasing demand for professionals who possess not only cybersecurity knowledge but additional skills like cloud or AI expertise. This expansion of required skills has broadened the scope of what it means to be a cybersecurity professional and made the job more complex.
According to a recent ESG report, 63% of cybersecurity professionals said that working in the industry has become more challenging over the past two years, with increased complexity and workload and growing cyber threats being top reasons.
Additionally, many assume the oft-cited 4.8 million worker shortage refers to entry-level positions. This is far from the truth. A significant percentage of open cybersecurity jobs are more advanced, and in some cases, people with entry-level skills have been filling these roles.
Improving the hiring and training funnel is crucial to addressing the cybersecurity skills gap. This includes finding new talent from non-traditional pathways, identifying the actual skills needed for open roles, and providing training that delivers real-world skills efficiently.
The rise of alternative education programs, such as boot camps and accelerated technical programs, is helping individuals develop workforce skills quickly. Some universities are even partnering with these programs to offer flexible learning pathways for students.
Organizations are also finding that cultural fit is just as important as technical skills when hiring cybersecurity professionals. Encouraging career transitions within the organization can help unlock talent from different departments.
Generative AI is being used creatively to train individuals and keep their skills up to date. AI-driven tools are helping learners build targeted skills quicker than ever before.
Employers can play a key role in addressing the cybersecurity skills gap by better evaluating job requirements, embracing new learning methods, and being intentional about reporting skills needs. An open dialogue and collaboration are essential as we work together to address the evolving landscape of cybersecurity skills.