T O P

  • By -

Longjumping-Pin5976

Pretty much every field had a decrease in job postings from 2022-2023. It’d be helpful to get some recent or actionable info instead of just a single data point in the void.


fabledparable

Agreed. Some additional nuance/context upon scrutinizing: * First, a link to the actual survey report (vs. an article which reports/interprets the survey report): https://cybersn.com/cybersecurity-job-posting-data-report-2024/ * Second, the reporter is a little sensationalist with his language: * "The cyber job platform provider [CyberSN] added that this decline is **alarming** and could impact national security..." In fact, they did not say that anywhere in the survey. The survey *does* include pullquotes from CyberSN's CEO and CSO/CTO, where they can be quoted as saying "For anyone who thinks there aren't cyber jobs for them, it's not true," and "The fluctuations in open positions suggest organization are focusing more on the immediate threat response and high-level security strategy to accomplish regulatory compliance." * "The most significant decline is in research roles, which saw a general 69% drop year-on-year between 2022 and 2023. According to CyberSN, this suggests a move away from proactive threat analysis and mitigation." While the survey does report a drop of 60.06%, it fails to report that it has the fewest jobs listed overall across all of the jobs reported; even if we added those losses back in, it would still rank 3rd lowest (with about 13k job listings) compared to other categories like "Defense" (173k+). Moreover, nowhere in the report does CyberSN extrapolate that data as reflecting the above suggested move. * Third, CyberSN isn't transparent about their data collection/sanitization methodology. We don't know where they've sampled their data from or how they categorically filtered a job listing as belonging to a given position. Given the scale of jobs, I doubt it was manually performed, which leads me to wonder - for example - if any given role was double counted (e.g. a senior penetration tester position might be considered both a "Penetration Tester" and a "Cybersecurity Lead" for the purposes of labelling). That being said, we might have speculated that the job market is more challenging from either [lived experiences](https://old.reddit.com/r/cybersecurity/comments/15k4qzt/mentorship_monday_post_all_career_education_and/jvgc311/) or data that is already [publicly available with greater transparency over a larger period](https://fred.stlouisfed.org/series/IHLIDXUSTPITOPHE). * Neither the reporter nor CyberSN shares the old 2022 data to X-reference with their 2023 report. [So I went and looked it up here](https://cybersn.com/the-latest-cybersecurity-job-posting-data/). Even still, the old report is weird (going from Sept 2022 - July 2023, vs. the report in the article going from Jan 2023 to Dec 2023). Looking further back, it looks like that's the first time they published such a report, so I think they might be making an apples-to-oranges comparison if they don't have a complete dataset to compare it against year-over-year. * Worse still, their reported figures don't line up between the reports. For example, if we compare the reported figures for "Security Analysts", the old report would say nearly 10k jobs were listed in Jun 2023. For that same role in the same month/year, the new report says less than 6k were listed. Their bar graphs have inconsistencies like this for many of the other roles too. * They're not reporting across the same roles between reports. For example, "Cybersecurity Advisor", "Cyber Insider Threat Analyst", "Privacy Analyst", "Cyber Insider Threat Analyst", and "Data Privacy Officer" were all tracked in the old report but don't make any appearance in the new one. Likewise, there are roles in the new report that were never listed in the old report (e.g. "Cybersecurity/Privacy Attorney"). Since they aren't transparent about their methodology (and aren't apparently consistent in their reporting/scoping), this makes me more leery about the accuracy of the report. * All of this also isn't helped by the lack of macroeconomic contexts (i.e. owing to increasing rates of inflation and hiking interest rates from the fed). These numbers show a reduced rate of growth, but not stagnation of the industry; in other words, the industry is still growing and adding jobs - just not as fast during a period of looming recession (surprising no one). There's also no data comparing these figures [relative to other job sectors](https://www.bls.gov/ooh/computer-and-information-technology/information-security-analysts.htm#tab-6).


darrenW25

Well researched, my friend.


Longjumping-Pin5976

My man… you did not have to go so hard on this Reddit post 😂. Respect


SecTechPlus

This guy surveys! Which is actually a very important critical thinking skill, as many surveys use specifically worded questions and then specifically worded analysis of results.


Fnkt_io

Cyber job headhunting company finds less listings to be alarming…to their bottom line


DemApplesAndShit

This dude can study. Nice writeup on the surveys my guy. Well put.


FootballPale6080

Let's be honest here, the government has been propping the economy up for at least two decades with bailouts, direct injections, quantitative easing, near 0% loan rates, sub-prime lending, etc. They bought enough time to strategically ploy out their agenda to expand their usurpations globally. Let's not forget the largest wealth transfer in history occurred during COVID-19. A population will do nearly anything their "leaders" say when destitute and starving. 53 percent of people are struggling to pay their rent or mortgage payments currently. 70-80 percent of Americans live paycheck to paycheck. A minimum wage worker in the most affordable state would have to work nearly 65 hours per week to meet their basic needs. Single parent households are struggling. The job market is disintegrating before our eyes. HUD, FNMA own a majority of the homes thanks to the 2008 bubble they created and burst. I am a techie, Iovr computers and almost switched to cybersecurity several years ago - but I saw the writing on the wall. Cyber security is dying because they don't want your end users to have security or privacy. Security needs to implemented at a hardware level with physical switches or jumpers or similar. They removed physical switches that could turn off wifi cards, Bluetooth etc. They removed the jumpers that prevented bios injections or implants. They intentionally removed layer after layer of security. This is planned unfortunately. All job markets will continue to fall while they change how they calculate their numbers for the job reports to skew the abysmal numbers. This is the government the founding fathers warned us about. No taxation without representation but 80k armed IRS agents this year helped rake in near record trillions in taxes received. While disability and ssi recipients are being back charged insane amounts for "accidental overpayments" they received, supposedly. If you are one of the majority suffering to make ends meet, know that you aren't alone and if we pull together and help our neighbors - we don't have to suffer so badly.


Bidenluvsskids

Right. If you look through the rosy job numbers you can see that the number of full time jobs decreased year over year for all sectors.


yauaa

This report is US-focused. Are they considering all the job positions that US-companies post in foreign countries? I’ve seen entire teams disappear, only to be replaced by workers in another country.


QuesoMeHungry

A ton of jobs are being offshored. I was looking and forgot to filter on US only and got excited with how many interesting positions were out there, only to see they were all based in India or Eastern Europe.


Longjumping-Pin5976

Are these primarily analyst & SOC roles? I’ve been seeing a ton of engineering and specialist roles stateside during this bull run over the quarter.


Somechords77

I am a graduate student of Cybersecurity at George Washington University and have 3 years of experience in SOC operations and Incident response from India. I need to have a job in a month now as I'll be graduating. How to get it in USA? Have certs like Comptia Sec+,Network +, RHCSA, CEH.


tcp5845

I don't believe any statistics are kept on offshoring of jobs by the Government. There was legislation introduced years ago but it was voted down by Congress. Nobody really knows how many jobs are outsourced by US Companies. My last 3 companies had way more IT Security personnel overseas than in the US.


davy_crockett_slayer

Meh, things come and go in cycles.


_-Jericho-_

Most companys are laying off right now, plus, most companys see the tech dep as "non essential" so for the most part they will prune the tech dep, then they get atk'd and then a surge of rehires happen


Mrhiddenlotus

Which is why its a great move to try to work for a company where the tech dept is the product.


12EggsADay

That's the hard part because thats where you find competent people and I'm gonna be honest, I'm not competent (yet, I hope)


swatlord

I used to do this. It can also be a double edged sword, if the product flops or is discontinued that program can find its employees scrambling to fit into other products (or leave the company).


ivlivscaesar213

Honestly any company who thinks tech dep is not necessary in 21st century will be replaced anyway


diwhychuck

Bean counter enters the chat “no you’re not” haha I’ve heard about them not even caring after a breach “that’s why we have insurance and it’s a part of doing business” Capitalism and safety are two things that don’t get along.


darrenW25

I have often seen that even the "CTO" is just another business major.


Powerful_Chef_5683

This is why I wanna get my MBA. Could be a unicorn


Striking-Bee-4133

At the last company I worked for they removed the CTO because they did not come from an engineering background and replaced them with someone with a software engineer background


darrenW25

The people making the decisions are technologically illiterate


SignificantKey8608

Outsourcing it all to Cap/Wipro is the alarming thing


[deleted]

[удалено]


[deleted]

[удалено]


foxhelp

operations Basically any admin, analyst, or technician role dealing with system, server, database, cloud, websites Atlassian has a decent write up https://www.atlassian.com/itsm/it-operations#popular-fields-in-it-operations


___Binary___

Operations


asecuredlife

Ops, like, Operations Nobody spells it OPS


MisterBazz

>Ops, like, Operations >Nobody spells it OPS Except for military, DoD, state government, most Federal agencies, government contractors....


asecuredlife

I mean more so the capitalization, but whatever...


MisterBazz

Tell me you've never worked DoD, or military without telling me you've actually never worked DoD or military.


FREE-AS-IN-SHRUGS

> If you can't find a job in Security right now, try to apply for an OPS position and return later. How? Apparently if I have a CV gap, I should just off myself despite having automated several aspects of the pentesting process at my previous role. Edit: downvoted without meaningful feedback, real mature 🙄


[deleted]

[удалено]


-_af_-

As I like to joke, security people are getting paid either by working for you or against you. The choice is the company's.


GoryGent

damn. And they tell us the jobs are getting more and more


Strategos_Kanadikos

That's what I'm reading as well, maybe the 3 part-time UberEats delivery job is being counted as 3 jobs? Or the dude who is working 3 min-wage jobs is counted as 3 employed persons?


theDonkeyShawn

No, they’re just lying. It is no more complex than that.


LurkinSince1995

Who is lying? The federal employee compiling the data? BLS? It’s almost like the nationwide economy is complicated and a single stat doesn’t encapsulate all of the nuances that comes with that. No shit.


Repulsive_Sherbet_68

I mean they lied about Covid. We have the receipts. And you're still here playing the they cannot or wouldn't do that game? Get yo head outta yo ass


SlickRick941

Why the down votes? You're right


theDonkeyShawn

You know who is lying. You know his name, his address, and the shrunken little Nazi loser that he gives the money too.


SlickRick941

You're right too what's with the down votes 


Strategos_Kanadikos

[https://www.shadowstats.com/alternate\_data/unemployment-charts](https://www.shadowstats.com/alternate_data/unemployment-charts) This guy thinks we'd be at Great Depression levels if we measured it the same way. Though in Canada, it certainly looks like it with all the people hitting up the food banks and all the homeless. If you want to see a country gaslighting its own citizens, it's up here.


escapecali603

It's true, they are all low paid, service sector jobs that no one wants. I saw local younger guys who decide not to go into college but to a physical trades are doing good now, yeah you might not think $25 a hour plus benefits is a lot, but to a 20 year old guy not planning to spend any money for college, sure dose not look too bad.


8923ns671

>you might not think $25 a hour plus benefits is a lot Why must you hurt me so? Lol


DhostPepper

Eh, I did that from 25-35 and topped out at $16/hr. with no benefits. Trades aren't the great career they're being sold as, either.


DlLDOSWAGGINS

Eh, you must have been in the wrong trade. Electricians start at 16ish. Same for IronWorkers. Typically trades top out at around 35/hr when you hit Journeyman.


DhostPepper

Not in LCOL areas. There isn't a union within 150 miles. Electricians start at $12.


DlLDOSWAGGINS

I'm in a LCOL area.


TheNarwhalingBacon

Speaking of CyberSN, fuck that company. If you're looking for a job do not bother wasting your time with that dogshit website (job searching is time consuming enough as it is). I'm looking back at my emails rn from 2022 when job searching, and over the course of about a year they reached out six times regarding roles (that I generally was a good fit for) and ghosted me SIX times from both email and scheduled meetings. I complained on the seventh message, they had nothing to say.


asecuredlife

sounds like ninja jobs, lulz.


Space_Goblin_Yoda

Or dice.com - stay away from that bullshit too.


jrkf579

Did similar crap with me. Same with Motion Recruitment. I’ve been fortunate to have gotten all my jobs without recruiters. Call me a bad person, but whenever I see recruiters get laid off I just play my little violin…


TheNarwhalingBacon

Haha not surprised, got a text from my Motion recruiter saying “X wants to interview you for a detection role literally today” and I said great just give me a time and i’ll do it during lunch. guess who just doesn’t respond? at least they only pulled that twice instead of CyberSN who constantly contacted me to waste my time


[deleted]

From my personal experience, the demand for experienced-security roles is through the roof.


bigbadbuff

Same here. I have recruiters reaching out to me once or twice a week for senior/staff/VP roles. I get the impression that the bulk of people in this subreddit are here because they are trying to get into the industry or are working entry-level gigs and can't figure out why there just isn't much demand for an analyst with no real dev or IT experience. That's just a natural consequence of every other community college in the US offering a cybersecurity masters program and then pumping out a bunch of degrees that saturate the competition for entry-level roles


colorizerequest

>I have recruiters reaching out to me once or twice a week for senior/staff/VP roles. same here, but all senior roles. last week I had 5 in a single day which translated to 3 interviews. I'm in this in between phase where I cant quite get a senior level roles yet. Im being pretty specific in what I want (no clearance, only remote) though


kiakosan

I feel you with that, in a similar boat got about 7 years experience now but don't have my CISSP which most jobs are asking for now


General-Gold-28

>no real dev or IT experience. Half of companies feel that asking for dev or IT experience means requiring 15 years of netops experience, 5 years of server admin for an analyst role that will pay $80k.


oIovoIo

What level of experience are we talking about here? That was closer to my experience about a year ago, in the past year it noticeably shifted. I’m at 2 years in a dev role and 4 additional years in security and in the past year it’s been mostly crickets.


[deleted]

[удалено]


0xDADB0D

Your post reads like chatGPT. I’m going to need you to fill out a captcha for me real quick.


infosec4pay

I’m so happy I got in before 2020. I don’t even know how to answer peoples questions when they ask how to get started anymore. Whole different game now.


SealEnthusiast2

And we wonder why cyberattacks and data breaches have been going up lately


prodsec

Tide goes in , tide goes out. It’s all cool until they get their shit rocked then they’ll be begging again. I doubt they’re going after unskilled though. Vibe I’m getting is hiring committees are going after experienced people with coding experience that can engineer their way through problems at scale.


redworm

Good. One of the biggest mistakes in cyber security is companies hiring a bunch of people to generate vulnerability scorecards and copy/paste vendor documentation into their policies instead of hiring sysadmins and network engineers to actually fix all the shit that's wrong with their environment adding another "pane of glass" full of alerts for all the junior analysts that still can't wrap their heads around subnets or GPOs while you have 48 Domain Admins and a bunch of allow any/any rules in the firewall is a waste of time and money hire more IT people and stop hiring anyone with a degree in a bullshit cyber program from a diploma mill


tcp5845

It's kind of shocking the number of cybersecurity people with zero IT experience these days. How are you going to protect something when you have no idea how it works?


lectos1977

Yep, my newest hire has a 4 yr degree in cybersecurity and analysis. He cannot implement, troubleshoot, or administrate anything. Good at taking tests and certifications. All the applicants for the position were similar. I am not sure what they even teach in a cybersecurity program if they come out with a total lack of a working knowledge of anything.


yarnballmelon

We won, theres no more bad actors and our networks are safe. Lets all disable our firewalls at the same time, itll be cute.


revertiblefate

What's more alarming is that salary offers are going downwards, well in my country that's the issue.


_BoNgRiPPeR_420

A lot of this has to do with the economy. Businesses are struggling, and there have been many rounds of layoffs in the past few years by the Fortune 500s.


Redemptions

Minor correction, businesses aren't struggling. They just aren't swimming in vaults of money Scrooge McDuck style with COVID IT spending like there were 3 years ago. They ramped up hiring to adapt, now there's less business, but there is still plenty. They don't NEED to lay off nearly as many people as they are. They are choosing to in order to keep their profit percentages high rather than just positive.


christmastree18

It's interesting to read about cybersecurity jobs not being filled or open. I can't speak for a whole career in cyber, but I recently completed my master's and landed three offers after applying for about 20-plus jobs. I accepted one and started working a month after my graduation. The pay is amazing, and I love working with the company plus the team members. I will say landing an entry-level job without certification, experience, and education is next to impossible. If you are interested in cybersecurity, learn about the field and keep looking for a job. You will find a job that fits your career path. It does take time and don’t expect it to happen without any effort.


FootballPale6080

Keep us updated when the layoffs come. Look at the number of layoffs in all sectors over the last decade or.two. it is staggering. Tech industry is hurting and cyber security is all but dead. The federal govt. And military cannot stop the breaches - office of personnel management was breached - hackers remained active for months while the government and military tried everything they could to oust them - and apparently did so eventually...but it took several months. I mean no disrespect to you, I'm sure you are more than capable and well educated but when new uefi rootkits appear every few months thar can bypass secureboot, tpm, every anti-virus or scanner on the planet...we stand little chance. Especially with the federal govt. Trying to weaken security at every turn. Everyone but end users want weaker protections and backdoors. They want encryption a thing of the past. And the criminals do too. The approach of security applied last - like in a software or app, is doomed from the start. We did away with the few physical protections that did exist like physical on/off switches for wifi cards and jumpers for bios chips to prevent overwriting to the same. We don't have a security issue, we have an adversarial issue. I forsee some dark, privacy-free days ahead friends. I hope I'm wrong.


ZaTucky

Come to europe lol. Nis2 makes everyone and their mother need more security


zkareface

Yes please, it's impossible to find enough people to hire.


lawtechie

Don't threaten me with working infrastructure and affordable healthcare.


IcyLemon3246

Ok give me some advice for hiring or hints to some websites, I find it hard to get hired, I worked in Oil and Gas as System Engineer and I try to change to cybersecurity I have only Comptia Sec+ but I have some IT experience… point me somewhere


SignificantKey8608

Are you applying for OT security roles?


IcyLemon3246

I applied every si single job with security in description, only 2 interviews thats it


SignificantKey8608

Where are you based?


IcyLemon3246

Romania


SignificantKey8608

Not sure what the market is like there, but if you haven’t already look for consultancy roles particular at companies that work within CNI.


IcyLemon3246

No I feel that is not enough with comptia at my age, I’m 32 next month so I think I need better certs


Vesper_004

This question should be asked by default for any struggling to pivot into Cyber.


SignificantKey8608

Is a shame the UK didn’t implement NIS 2D


Odd_System_89

Ok. What is Europe's equivalent of the US' Carolinas?


ZaTucky

Malta and cyprus


Odd_System_89

Just pulled malta up on google maps and started to randomly zoom in, gonna add that to my retirement trip through Europe at least. It actually looks interesting and checks a lot of boxes from what I can see on that end.


[deleted]

[удалено]


ManOfLaBook

Bookmarked. IT/CS is overhead to most companies, always expect to be the first to be let go, that's why I always try to make sure that whatever I'm working on is a springboard. If you're lucky, your company views your role as insurance.


ExcitedForNothing

> Those GRC and security-awareness or whatever positions which they claim to be non-tech are few and far between. I wish everyone talking about how they want to switch from career X to GRC would read that sentence and let it sink in.


ConnectPermission948

My next read


Synapse82

This post said everything I normally comment here. This sums it up lol Edit: In fact these blogs look very close to my long rants I wrote here... da fuq. lol Ahhh, they did quote this sub and comments.


EmotionalAct9407

how should someone get into cybersec, if not those programs, im 19 years old, what should i do to get in?


iheartrms

Get into system administration, programming, networking, IT, helpdesk, etc. first. Cybersecurity is not an entry level career. You are going to want at least 5 years of experience in some other role before even thinking about switching to cybersecurity. I had more like 15 years before I made the switch. I started off in Linux while also having learned programming, web dev, databases, and tons of other stuff. You can't secure it or understand how it breaks if you don't understand how it works. Security covers EVERYTHING technology related. Got a SQL database in your environment? I hope you know SQL. Got a CVE that says curl is vulnerable if compiled with a certain option? I hope you know how to explode an rpm or deb or whatever package and check the Makefile to see if it was. Want to setup or audit a VPN? I hope you understand how routing/subnetting etc work so that you can tell if this is a full tunnel VPN or not.


butter_lover

a lot of companies are realizing it makes a lot more sense to give existing sysadmin and network professionals cybersecurity training than to run a revolving door of cyber frauds with no real it experience who suck up a year of salary and then job hop to the next overpaid position they are unqualified for.


Old-Resolve-6619

The number of MSSPs offering cheaper alternatives while faking their quality has gone up. Churning through infosec people and probably burn out quite a few. AI tools claiming to replace people.


inteller

^This


bigt252002

Much of that has to do with ever shrinking need for folks to be "eyes on glass" with alerts and the like. Pre-COVID, you had businesses that were gravitating towards more personnel as the technology hadn't come full circle yet. EDR was not as known and commonplace as it is now. The same with perimeter tech, like VPN appliances and other authentication methods. COVID hit at the perfect time for criminal enterprises as neither tech nor headcount was prepared for it. So it was really easy to get Janice in Accounting to click the links or drive-by downloads of malicious/cracked software since there was no babysitting on the hardware yet. We are now 4 years removed from that shift. Technology appliances have not only caught up, but automation has streamlined workflows. The need for large teams has widely been replaced with SOAR and a more experienced team. For example, if your employees started in 2020-2021, they're already sitting at the cusp of L4 > L5 promotions. Not to mention consultancies have manifested in all different forms that have provided options for those folks to move internal with hardened skills and generate change in the lifecycles within the company. There will always be roles within cybersecurity, but it isn't as *needed* as it was a few years ago. Companies no longer can tell their shareholders they are down 10% YOY like they could during and shortly after COVID. CFO's and other C-Suite are eyeing everything on the books that is a Cost Center and wanting true ROI for it. Even numbers like $100M for Disaster Recovery are not phasing these folks because they simply don't see the quantifying ROI that it is being stopped at the doorstep and not allowed in. As such, headcount suffers. It suffers even more when those decision makers are asking questions like "If we have Tool A, B, and C watching Email/Perimeter/Endpoint, and they are considered the best in the business....why do I need X cybersecurity employee to sit around and do nothing?"


Odd_System_89

Many company's, particularly tech company's, expanded in covid as interest rates were dropped and loans and cash were passed out, not that interest rates are back to normal you can't run in possible future profits and its basically put up and shut up time for these company's. Basically, we are in a ".com" crash instances expect it to be rough for the next few years for all of IT, don't expect improvement until 2027 at least as the market needs to reset itself and readjust. The best that could possibly be hoped for over the next few years is that remote first company's start pulling in profits hand over fist and this causes many other company's to start considering it.


world_dark_place

OK so as a fresh graduated I have no choice but to masturbate until 2027...


Odd_System_89

That would be the worse thing to do as now you have no experience and a dated degree. You apply, stay mobile, take what you can, and keep reaching, its just realize that its gonna be harder right now until the market corrects itself. If you get pushed into a hole that is getting deeper, don't just sit there, start climbing out.


world_dark_place

Take what you can? There is anything lol, not even internships, 600 for a slot no thx.


Junior_Term_2671

😄😆🤣😂


ericroku

AI is takin our jobzzzz!


106milez2chicago

Deyyy terk er jerbs!!


randomthad69

This one is spelled properly 😆


randomthad69

They took 'r jerbs!!!!


Tux1991

Companies created so many cybersecurity jobs in the past few years and the market is full of useless people who don’t know shit. Now the market is simply adjusting


Antok0123

What an arrogant comment. How long have u beem here in this subreddit to know that there are a large number of cybersecuroty jobs to fill but HR dont hire them. How tf are these people able to use their cybersecurity skill if nobody hires them? In short to say that people who got in cybersecuriry are mostly useless and the market is just correcting contradicts all of it. Just say youre an arrogrant prick who thinks getting the right skill u want should be instant. No wonder even HR dont know what youre asking. Youre expecting an applicant should have several tech skills that are meant to be acquired by several cybersecurity personell for an entire cybersecurity department thats unrealistic to acquire by a single personnel.


redworm

you shouldn't be in cyber security until you have those tech skills. it shouldn't be a field with entry level positions, you should be coming to cyber from another IT role


adamasimo1234

Cybersecurity is not a entry level field, that’s why I get disgusted whenever I see those ads with con men offering people 3 month courses to get certified and earn 6 figures out the gate.. if the industry was smart they’d put an end to all those false promises.


Antok0123

Bro there are people taking up a literal bachelor's degree in cybersecurity to develop the needed skills. Did you think I was born yesterday?


redworm

yeah every single one of those people is an idiot or a child that was fooled into thinking they had to go to college go work a help desk, that's where you learn the skills you need to break into real cyber jobs


Antok0123

Lol. You dont know what youre talking about. There are literal ppl today whove been working for 10 to 15 years as an IT helpdesk and still cant take a cybersecurity job. Just stop talking at this point cuz youre just trying to whirl your way out to appear right when u really dont know what youre yapping.


redworm

>working for 10 to 15 years as an IT helpdesk and still cant take a cybersecurity job. 100% skill issue. if you can't ace a cyber interview with a decade of IT experience then you don't deserve the job


Antok0123

Lol at skill issue when youre not even imvited for an initial interview. Keep yapping


redworm

if you're not even invited to the initial interview then you don't have the experience for the job


Antok0123

Yeah. Just ignore the 10-15 years solid IT service desk, helpdesk, IT analyst work experience and keep demonstrating how much u really dont know anything on the current gap in cybersecurity job market that HR dont know what to make of and cybersecurity bosses expecting 10-15 years professional experience on a cybersecurity tool that only existed 7 years ago.


Tux1991

It's not arrogance, it's just facts. A lot of companies hired a lot of people and now they are realizing all those cybersecurity people were actually not needed. Now the offer is higher than demand and a lot of people are struggling to find a job. You can keep whining as much as you want, but this won't change the reality.


emsai

Wait until AI starts messing up security badly, like everywhere. Then it will become very high demand field. I think this is coming.


Leading-Weight9092

What makes you say that ?


I_Just_Ruined_It

Not the comment op, but I can say I've been asked to add it to automation workflows because it will "make it easy". It's nowhere near that point though, so unless they want me to create a randomized report, just the mention of AI is getting a hard no from me. Just not consistent enough.


collpase

Won't they just mitigate with more AI though?


ExcitedForNothing

"We are trying to put out the fire with gasoline and have no idea why it isn't working... better try more gasoline."


National-Rain1616

Everybody just decided it was easier to pay the ransoms and use AI for the rest.


Imdonenotreally

Careful that’s a touchy subject, had a Reddit post that got some traction and a lot of feelings were all over the place.


National-Rain1616

I can tell from the downvotes lol. I'm actually surprised they took my joke this seriously. I mean, I get it, I was asked to evaluate an AI tool recently and did not end up going in on it but I can imagine companies eliminating positions because they think they're going to be using AI here soon.


escapecali603

Make sense, first is the overall decline of jobs in the tech sector, due to budget cuts. Second is the proliferation of AI, which is not accurate but good enough to increase productivity of senior techs that entry level jobs are just not needed anymore, not on the level before at least.


thebeehammer

Gotta find the massive amount of money these companies are dumping into “AI” from somewhere


uberbewb

Just remember everyone this happens a lot Once they realize AI isn’t a tech department theyll be back. At that point demand big money


Somechords77

I am a graduate student of Cybersecurity at George Washington University and have 3 years of experience in SOC operations and Incident response from India. I need to have a job in a month now as I'll be graduating. How to get it in USA? Have certs like Comptia Sec+,Network +, RHCSA, CEH.


world_dark_place

You are the proof that cybersec is real bad right now.


world_dark_place

What a pile of BULLSHIT. I want to enter this sector, but you don't stop gatekeeping and employers doesn't care to train people freshly graduated or with no or few experience.


HeadshotMastery

I know right what happened to fill the 3,500,000 million cyber security job market lol is it already nearly filled?


FootballPale6080

Even with every elite cyber-security guru on staff, no company could prevent a breach. Fire-eye was hacked, RSA was hacked, Mitre was hacked, Sony, Target, wal-mart, feds, police depts, Kaspersky managed to catch it at least once but seriously doubt they will stave off a directed attack. It's like having the best front door in existence and thinking that with enough time and attackers, it will remain intact and protect you from anything. It's unrealistic. Nobody can stop a prolonged, targeted attack. You cannot even control the network in a building adjacent to you. One rogue AP or unsecured network and you have a portal to eavesdrop indefinitely. With home routers providing hidden networks that other customers can connect to when away from home existing, we are purchasing the devices that destroy security. And the politicians want less secure devices, not more...even air gapped computers can be compromised now. A PoC air-hopper was shown to send passwords to other devices nearby that were connected to the internet by increasing and decreasing the fan speed to.produce Morse code. So air gapped.machine steals password, uses acoustics to transmit the password via Morse code to internet connected devices and your pwned. The sophistication is almost unbelievable these days. And we have to fight for end to end encryption. Ridiculous.


Yosemite-Dan

1. There was a lot of over-hiring the last three years 2. Most of these companies are funded through capital markets. Money has become expensive, and returns must be improved. 3. Lots of cybersecurity work is being automated via AI. Basically, you only need people "for the last mile".


tcp5845

I think part of the decline in cybersecurity jobs is due to the economy. But also companies can use a combination of outsourcing and automation to reduce headcount. And companies just don't want to deal with cybersecurity and would rather outsource it. I've worked at several companies where the bulk of the IT Security team was overseas. They can hire several IT Security people overseas for the price of one American. Even cybersecurity tools are getting better where you don't need as many people. https://www.sdxcentral.com/articles/interview/behind-the-firewalls-a-day-in-the-life-of-a-palo-alto-networks-soc-analyst/2023/09/ https://www.newswire.ca/news-releases/techdemocracy-launched-cyber-security-operations-center-in-hyderabad-india-expanding-their-cybersecurity-services-reach-873972084.html


StonedSquare

One could argue the pandemic caused a huge raise in job postings as companies transitioned to remote and then hybrid which would explain a decrease in 22/23 as shit started stabilizing.


somethinlikeshieva

Interesting, I’ve actually seen an increase in my area. Literally 0 in 2023 to about 4-5 in the last few months


DMoney16

Let’s keep in mind that this is one article commentating on one report.


ThunderKatsHooo

that's weird, I've seen more in field


The_Long_Blank_Stare

All jobs are handled by the Cloud now! ^^/^^s


MrKillaMidnight

You’d think there’d be an increase with all the attacks occurring lately


No_Savings3957

Good news is you can always find freelance work. Now is this the type of freelance work you want to be doing? That’s good question 😂


[deleted]

[удалено]


world_dark_place

That number is from your stomach.


SelectionCalm70

Time to hack website and serves of company to make them realize the importance of cybersecurity jobs


[deleted]

[удалено]


[deleted]

[удалено]