By Newsroom Staff
July 30, 2024 – The recent Crowdstrike/Windows outage exposed a vulnerability in the tech infrastructure and has drawn attention to a glaring issue - a massive cybersecurity skills shortage. CyberSeek reports from May 2023 to April 2024, there were only 85 cybersecurity workers available for every 100 cybersecurity jobs demanded by employers. On average, these roles take 21% longer to fill than other IT job. With over 469,000 open positions in the US alone, companies are getting creative about filling these crucial roles.
Two emerging trends are upskilling existing employees and leveraging AI to offset the talent deficit. We sat down with DeVry University’s Chief Information Officer Chris Campbell to learn more.
We know that the cybersecurity field is booming. What are we currently seeing in the market?
We are still seeing a lot of job openings, but we are also seeing some layoffs as well which is troubling considering the growing need for cybersecurity protection. Now more than ever companies and organizations need cybersecurity professionals, and there is still a lack of “ready skills” in the marketplace to meet the demand. Additionally, we’re seeing cybersecurity openings asking for ample experience in the field, which is why entry-level applicants are still struggling to gain traction in that market.
Companies and organizations are having to think outside the box. How are they focusing on filling those open positions and jobs?
Many organizations are focusing on upskilling current staff to build cybersecurity capabilities. However, with attacks becoming more sophisticated, cybersecurity is no longer just an IT responsibility - it requires an organization-wide effort. Companies and organizations are upskilling existing employees with core skillsets, making everyone stronger links in the cybersecurity chain. The human element is often the weakest point in security. Not everyone needs to know how to be a cybersecurity engineer or a forensic analyst, but equipping staff at all levels with stronger cybersecurity awareness, knowledge of common threats and protective best practices benefits individuals and organizations alike. Businesses can even partner with higher education institutions like DeVry University to help upskill their workforce.
Furthermore, AI and automation are helping bridge the skills gap. Cybersecurity AI can quickly analyze massive volumes of data to detect potential threats. Machine learning algorithms also boost human analyst productivity by prioritizing and escalating the most urgent incidents. As AI capabilities advance, smart automation of repetitive, low-value tasks allows cybersecurity staff to focus their expertise on higher value, strategic efforts. AI is becoming an invaluable teammate for the understaffed cybersecurity function, however, the human in the loop is still important.
What kind of skills are they leaning on outside of cybersecurity?
Rather than seeking specialized degrees, companies are targeting existing employees with transferable skills like logical thinking, learning agility and pattern recognition. For example, years ago, people talked about how musicians would make strong cybersecurity analysts due to heightened pattern recognition abilities. Cybersecurity may seem highly technical, but many everyday professional skills translate well. Organizations are thinking outside the box, beyond just computer science majors, to build their talent bench.
What roles are the hardest roles to fill and needed most?
Senior-level roles are difficult to fill because there aren't many people who can do that job and the landscape is changing so fast – especially now with AI. Cybersecurity around AI or defending against AI, is a very difficult role to fill. There is not a lot of experience yet in the marketplace.
Additionally, the security analyst and security engineering roles are needed most. In the small and medium business space (SMB), they’re looking for people that crossover. They’re looking for someone who can be the security analyst, investigate, train, build business processes and speak to stakeholders, while also deploying the technology and keep it running.
With cyberattacks growing in frequency and impact, building cybersecurity talent is a business-critical imperative. Upskilling, AI, and creative recruiting will be key to narrowing the skills deficit and securing our digital economy.
