The U.S. cybersecurity industry is currently facing a major talent gap, as revealed by the latest CyberSeek report. Despite the availability of various education and training programs, there are not enough skilled professionals to fill 85% of the cybersecurity job openings, resulting in a shortfall of over 225,000 workers.
Presented at the 15th Annual NICE Conference and Expo in Dallas, the CyberSeek report emphasized the challenges in attracting and retaining cybersecurity professionals. The data showed that there were a total of 469,930 employer job postings for cybersecurity positions from May 2023 to April 2024, with roles such as network engineers, systems administrators, and cybersecurity analysts in high demand.
However, the tech hiring slowdown experienced throughout 2023 had a significant impact on cybersecurity job postings. While employer job postings for all tech occupations declined by 37% during the 12-month period, cyber job postings decreased by 29%. Despite this decline, the cybersecurity sector appeared to be less affected by hiring slowdowns compared to the overall IT industry.
To bridge the talent gap in the cybersecurity workforce, organizations need to implement changes in their talent acquisition strategies. This can involve upskilling less experienced professionals for advanced roles or seeking individuals with subject matter expertise demonstrated through professional certifications or other credentials, as suggested by Hannah Johnson, senior vice president of tech talent programs at CompTIA.
Rodney Petersen, director of NICE, emphasized the importance of creating alternative pathways to cybersecurity careers that foster diverse talent in communities nationwide. He highlighted the role of Regional Alliances and Multistakeholder Partnerships (RAMPS Communities) in strengthening coordination and collaboration to meet employer workforce needs and boost local economies.
Tim Callan, Chief Experience Officer at Sectigo, pointed out the challenges faced by IT professionals, including stagnant salaries and high stress levels. He recommended that enterprises improve their work environments by embracing modern architectures, implementing new tools like AI, and automating routine tasks to retain their employees.
Incorporating the NICE Framework Components Version 1.0.0, the CyberSeek data offers detailed insights into the cybersecurity job market, including new and updated work roles, competency areas, and task statements. This information is crucial for stakeholders in developing a skilled cybersecurity workforce capable of addressing future challenges.
Overall, the cybersecurity industry in the U.S. is in need of skilled professionals to fill the increasing number of job openings. By exploring alternative pathways, upskilling existing talent, and improving work environments, organizations can bridge the talent gap and meet the growing demand for cybersecurity expertise.