Job Data Highlights the Growing Importance of AI Skills in Everyday Cybersecurity Roles
In an evolving landscape, the cybersecurity sector has long grappled with the challenge of attracting new talent. The pivotal question remains: how can more individuals be encouraged to join the profession? While this concern is still valid, recent advancements in artificial intelligence (AI) have compelled employers, educators, and security professionals to reflect on a more pressing issue: Are current training programs equipping individuals with the skills they will genuinely need in their future roles?
The answer to this question is rapidly transforming. According to a report from CyberSN published in October 2026, a significant 14.6% of U.S. cybersecurity job postings from January to September of that year referenced AI or machine learning, with this percentage expected to rise steadily in subsequent quarters. This trend is particularly pronounced in certain job specialties. For instance, nearly one-third of postings in the "research" category highlighted the significance of AI, while 23.3% of "offense" roles did the same. Notably, the demand for "cyber data scientist" positions surged by more than 200% compared to the same period in 2025, albeit starting from a relatively low base.
Commenting on these findings, Shaun Waterman from ISMG underscored the increasing necessity for AI skills in cybersecurity roles, particularly following the findings of a recent report from the SANS Institute. This report revealed that numerous new job roles, including AI/ML Security Engineer, AI Red Team Engineer, AI Governance and Security Risk Lead, and AI Security Architect, now require a firm understanding of AI technologies. Additionally, ISC2 has introduced a Cyber AI Workforce initiative aimed at addressing the crucial intersection of cybersecurity and AI.
Adapting Training to Align with Industry Needs
The current labor market is delivering a resounding message: AI proficiency is transitioning from a niche, specialist skillset to a fundamental requirement intertwined with various cybersecurity roles. However, this transition is happening at a remarkably fast pace, and there is an increasing need to align educational programs with these evolving workplace demands. Unfortunately, existing educational practices are lagging behind the current realities faced by the industry.
Traditionally, cybersecurity education has centered around imparting knowledge of the technical mechanics involved in cyberattacks and defenses. Students learn how attackers infiltrate systems, how defenders detect suspicious activities, and how analysts investigate incidents. While these foundational skills remain essential, it is equally crucial to integrate AI and automation into existing curricula.
Security analysts today may leverage AI to enhance alert triaging, summarize threat intelligence, or expedite investigations. Similarly, penetration testers could utilize AI assistance during their research phases, while security engineers are increasingly tasked with constructing automated workflows focused on detection and response. It is vital for training programs to incorporate these AI-driven activities within core curriculum frameworks rather than treating them as optional modules.
The Impact of Automation on Entry-Level Roles
This shift is particularly significant for newcomers entering the cybersecurity field. Many traditional entry-level tasks, such as alert enrichment, log summarization, and basic analysis, are ideally suited for automation. AI-enabled tools can handle or expedite these processes, leading to a transformation in the expectations of employers regarding entry-level candidates.
Rob T. Lee, Chief AI Officer and Chief of Research at the SANS Institute, draws a compelling analogy between AI’s role in the industry and the use of flippers in swimming: "If you put flippers on, you’re going to be able to swim faster," he explained. "That’s what AI is going to enable you to do, but you still need to hire a skilled swimmer."
According to CyberSN’s report, there were 235,786 cybersecurity job postings in the U.S. from January through September 2026, which reflects a 26.4% decrease compared to the same timeframe in 2025. Despite this dip, the report highlights that 2025 was an exceptionally robust year in the dataset analyzed. The combination of decreased job postings and increasing AI requirements amplifies the stakes for individuals entering the profession. Aspiring candidates must now demonstrate more than a mere understanding of security concepts; they must also showcase their ability to apply these concepts in AI-augmented environments.
The Growing Importance of Human Skills in a Tech-Driven World
As automation becomes a more integral part of cybersecurity processes, the value of human expertise is also undergoing a transformation. Security providers, including managed security service providers (MSSPs) and internal teams, can no longer compete by offering only tasks that can be automated. They require professionals who can interpret complex contexts, communicate risks, make informed decisions, and effectively manage situations that may not conform to rigid automated protocols.
While deep technical skills remain vital, employers are increasingly placing value on attributes such as judgment, problem-solving capabilities, effective communication, and an understanding of the rationale behind an automated system’s conclusions. This shift is particularly relevant for MSSPs and other IT service providers, who must combine automation with human capabilities that demand insight and critical thinking.
Conclusion: The Need for Evolving Cybersecurity Education
To keep pace with these changes, cybersecurity education must evolve at every career stage. Entry-level professionals should engage in hands-on practice reflective of AI-enabled environments, while experienced practitioners necessitate opportunities to learn about new workflows as tools transition. Security leaders, too, will benefit from training exercises designed to elucidate how AI shapes operations, workforce planning, and risk management strategies.
It is crucial to develop technical labs, tabletop exercises, and scenario-based learning initiatives that correspond to the contemporary operational landscape organizations are navigating today. The objective is not to transform every cybersecurity professional into an AI engineer; rather, it is to ensure that they comprehend how AI fundamentally alters their roles.
As cybersecurity education adapts to the realities imposed by AI, the divide between theoretical learning and practical application will become increasingly difficult to overlook. Professionals who thrive in this dynamic landscape will possess not only the knowledge of AI tools but will also understand when automation is beneficial, when it falters, and where human expertise remains indispensable.