Pursuing a Cybersecurity Career
Huge market with high rewards seeks quality employees.
Cybersecurity is a great career path to pursue. Cybersecurity careers continue to grow and expand as the industry continues to innovate.
The Bureau of Labor Statistics projects job growth of 33% from 2023 to 2033 for information security analysts. This, in combination with understaffed cyber teams, makes cybersecurity a great career to pursue and engage.
The challenge in the industry in general is a multifaceted problem. First, organizations are looking for professionals with experience and certifications to fill even entry level roles. This mindset has to change to accommodate the reality that there are just not enough experienced professionals in the field. Cross training, developing, and mentoring junior professionals are all part of how the gap gets closed. Through mentorships that progress to entry level roles and creating true progression planning for existing IT talent is how as an industry we address the widening need for cybersecurity talent.
The second challenge is organizations are still very behind in the investment of training and development of current staff. The industry is changing so quickly that cybersecurity professionals must stay current with skills, tools and experience. Without adequate investment even skilled cybersecurity talent knowledge becomes dated and obsolete. With the age of AI and machine learning the industry continues to rapidly transform and the skills necessary to secure the technology continue to expand. Companies must take a more active role in developing technical staff. The burden of self development is costly, and oftentimes, employees are unable to afford the necessary courses and boot camps that provide that exposure to the latest developments and innovation.
Educational institutions can play a bigger role in developing talent and integrating with organizations for experience in the cyber field once they finish the degree or certificate programs. Organizations in general have lost their way on how to grow talent in this area, and the path back is for industry partnerships between academic institutions, training facilities, and employers to figure out how to close the gap. The jobs are undeniably there, it is how to tap a market that is looking for experience. Those companies that have embraced internships and formal career development programs are experiencing fewer vacancies and less turnover due to more adequately staffed environments. Information Systems Audit and Control Association stated in 2023 that 59% of cybersecurity teams reported that they were understaffed. This challenge just compounds the issue as top talent becomes more difficult to retain and more expensive to recruit.
According to StationX, the global cybersecurity market size was valued at $197.4 billion in 2021. It is predicted to reach $657 billion by 2030, with a compound annual growth rate of 12.8% from 2022 to 2030. This significant growth rate reflects the need for more professionals to enter the workforce and support companies on their journey to an optimized and secure layered defense strategy.
This skill shortage has manifested in real world impact for organizations. With a short-staffed cybersecurity workforce, organizations are in a constant struggle of determining what security tasks and projects get deprioritized or all together shelved. In most cases this leaves organizations accepting the risk for a gap they are unable to address. According to Gartner, Inc., a lack of talent will be responsible for over half of all significant cyber incidents by 2025. A January 2023 survey by the World Economic Forum found that while 86% of business leaders believe a catastrophic cyber event is likely in the next two years, 34% lack the skills needed within their cybersecurity teams. These findings illustrate that the need is greater than the supply and the issue has real economic consequences.
Tips for pursuing a career path in cybersecurity:
For those that are already in IT the jump to a cybersecurity path is relatively easy. Leverage the experience in network, identity, and helpdesk to make the transition to a security analyst or compliance specialist. Being able to articulate reports, findings, and compliance continues to be a skill that executives are looking for. Take the time to attend training programs that focus on real hands-on labs and writing to close the skills gap. When you finish the program you should have certifications and experience at least at a lab level on how to use tools to perform key tasks.
If you are not already in IT, enroll in a program that provides information technology and security foundations, certificate programs, or certifications in combination with a degree. Look for accredited programs and ask questions about hands-on labs, writing assignments, and types of learning outcomes that the program provides. These programs can be a great way to gain the certifications and formal degrees that organizations need to fill vacancies.
Find a cybersecurity mentor. Navigating the job market can be tricky. Look to find a cybersecurity mentor that can assist you in how to market your skills, give you guidance on certifications and certificate programs based on your interest, and provide recommendations on different avenues of specialization and potential opportunities.
Network. Join professional organizations like ISC2, ISSA, ISACA, SIM, or WiCyS just to name a few. Joining these organizations will give you access to practicing professionals that are in the industry and information associated with the cybersecurity industry.
The key to entering the cybersecurity field with no experience is being willing to go on a development journey that is required to accelerate as fast as the industry. The rewards are high. The market has a huge need for quality employees that are looking for a challenge and willing to invest in what it takes from a skills perspective to make it happen. From securing AI to the cloud, invest in your own development journey because the industry of cybersecurity’s story is just beginning.
The skill gap will continue to be a concern for employers and job seekers
In 2025, we will continue to see a skills gap in entry-level and nonentry- level positions. Employment of information security analysts is projected to grow 33% from 2023 to 2033, much faster than the average for all occupations. In addition to technical skills, employees will need to possess strong communication, written, critical thinking, and problem-solving skills. It will be important for employees to upskill, reskill, and gain hands-on experience to stay competitive.
Demand for certifications and degrees
IT and cybersecurity professionals will need to continue pursuing industry certifications and IT degrees to compete in the job market and to differentiate themselves from other job seekers. Studies show that nearly three-quarters of employers are looking for employees with certifications and many mid-level and advanced cybersecurity positions will require a bachelor’s or master’s degree. When it comes to IT and cybersecurity, I like to think of our brains as being the hardware and our skills as being the software. To address the changes that will occur, we must continue to add software (e.g., skills, certifications, degrees) to our hardware (e.g., brain, mind, memory).
‒J.L. Graff, Associate Dean, College of Business & Information Technology at University of Phoenix
