Cybersecurity Ventures predicts 3.5M cybersecurity job openings by 2021

As an outsider of the security industry, do people feel like the importance of security is actually going up, or are people becoming progressively less concerned, given how desensitized we've become to hacks and data leaks?

E.g. the Equifax hack was a pretty big deal, but nobody's that upset, everybody moved on real quick. Same with hundreds of other major hacks.

Re: Cybersecurity Ventures predicts 3.5M cybersecurity job openings by 2021

#5

Post by [deleted] » Tue, Feb 06, 2018, 1:04 AM UTC

BadassFractal wrote: post #4

As an outsider of the security industry, do people feel like the importance of security is actually going up, or are people becoming progressively less concerned, given how desensitized we've become to hacks and data leaks? E.g. the Equifax hack was a pretty big deal, but nobody's that upset, everybody moved on real quick. Same with hundreds of other major hacks.

[deleted]

Re: Cybersecurity Ventures predicts 3.5M cybersecurity job openings by 2021

#6

Post by TheAdamAndChe » Tue, Feb 06, 2018, 1:06 AM UTC

Unfilled job postings doesn't mean there's a shortage. There might be a shortage of experienced IT security experts willing to work for $40k in the most expensive cities of the world, but if there was an actual job shortage, degrees and certifications wouldn't be a requirement, they'd just take a risk hiring people willing to learn.

Re: Cybersecurity Ventures predicts 3.5M cybersecurity job openings by 2021

#7

Post by jacobsenscott » Tue, Feb 06, 2018, 1:07 AM UTC

BadassFractal wrote: post #4

As an outsider of the security industry, do people feel like the importance of security is actually going up, or are people becoming progressively less concerned, given how desensitized we've become to hacks and data leaks? E.g. the Equifax hack was a pretty big deal, but nobody's that upset, everybody moved on real quick. Same with hundreds of other major hacks.

I would guess a lot of people think they could be better at security, but not better enough to matter. So why spend the money. The fact is all our systems are broken from a security point of view from the ground up, and there's no solution in sight. The internet was built to share data, not hide it.

Re: Cybersecurity Ventures predicts 3.5M cybersecurity job openings by 2021

#8

Post by claudiulodro » Tue, Feb 06, 2018, 1:10 AM UTC

Sounds great. But how would I (software engineer) go about moving into those sorts of jobs? Do bug bounties until I make it?

Re: Cybersecurity Ventures predicts 3.5M cybersecurity job openings by 2021

#9

Post by lev99 » Tue, Feb 06, 2018, 1:11 AM UTC

1. This is written and published by Cyber Security Ventures. Their bias should be obvious.

2. The 3.5 million is a global number. India is projected to have 1 million of them.

3. The article seems to also try to drum up demand for Managed Security Service Providers, a service Cyber Security Ventures provides.

4. Many currently open Cybersecurity jobs pay less then what a tech minded person can get selling clicks or SQL reports. There is a difference between an "open position" and a position that meets the labor market. Open positions that stay open most likely are valued below the market. I'm sure many goverment agencies have open Cybersecurity jobs.

5. It's 2018, are we really going to keep using the word cyber?

Re: Cybersecurity Ventures predicts 3.5M cybersecurity job openings by 2021

#10

Post by Spooky23 » Tue, Feb 06, 2018, 1:14 AM UTC

BadassFractal wrote: post #4

As an outsider of the security industry, do people feel like the importance of security is actually going up, or are people becoming progressively less concerned, given how desensitized we've become to hacks and data leaks? E.g. the Equifax hack was a pretty big deal, but nobody's that upset, everybody moved on real quick. Same with hundreds of other major hacks.

It has a lot of attention right now and is attracting a lot of money. That’s good and bad... the investment is great but it’s attracting a lot of marginal talent with fancy credentials and not necessarily adding much. Reminds me of circa 1998 MCSEs.

Security is a tough field to begin with in that attracts a certain mindset. It’s especially bad in big orgs where security was mostly a policy and compliance org. Listening to would be cyber-warriors quack about OODA loops, challenge coins, and kill chains gets old fast. Particularly where the “kill chain” is interdicting field guys whose iPad didn’t update on time or execs who disabled AV.