Skills shortages lead to a rise in demand for cyber security graduates

In today's digital age, cyber security has become more crucial than ever to protect online systems and networks from potential threats. However, with the industry facing a shortage of skilled professionals, it's up to the new generation of talent to fill these gaps

According to a report by ISC2, the leading provider of cyber security certification, the cyber security workforce gap is estimated at over three million globally. This shortage poses a serious threat to businesses and governments alike, as they struggle to protect sensitive information from increasingly sophisticated cyber threats.

Let's explore the areas of cyber security experiencing the most significant skill shortages and provide actionable steps you can take to possess the qualifications and attributes required to work in this growing industry.

Where are the skills shortages?

• Cloud security - As organisations increasingly move their operations to the cloud, securing these environments has become of paramount importance. According to tech research and consulting firm Gartner, by 2025, 85% of enterprises will have embraced a cloud-first principle.
• Application security - With the proliferation of web and mobile applications, the demand for application security experts has skyrocketed. The 2023 (ISC)² Cybersecurity Workforce Study highlights that only 24% of organisations have sufficient security staff to test all applications for vulnerabilities.
• Incident response - The ability to respond effectively to security breaches is vital to all organisations. A report by IBM indicates that the average time to identify and contain a breach in 2023 was 287 days, underscoring the need for skilled incident response teams.
• Security operations - Security operations centres (SOCs) are the frontline defence against cyber threats. However, a 2022 survey by the Ponemon Institute found that over two-thirds (69%) of SOCs are understaffed, leading to burnout and reduced effectiveness.
• Risk management - Understanding and managing risk is a crucial aspect of cyber security. Professionals need to assess potential threats and vulnerabilities, and prioritise actions based on the potential impact on the organisation.
• Compliance and regulatory knowledge - Cyber security professionals must be familiar with laws and regulations governing data protection and privacy, such as GDPR, HIPAA, and CCPA, to ensure that their organisations remain compliant and avoid costly fines.

How can you increase your employability?

 The cyber security skills shortage presents both a challenge and an opportunity for graduates. By focusing on key areas of demand and building your skills and knowledge, you can position yourself as a valuable asset in the cybersecurity field.

This can be achieved by:

• Pursuing relevant certifications - Consider entry-level certifications like CompTIA Security+ and ISC2 Certified in Cybersecurity (CC), which help build a solid foundation of knowledge for entry-level roles. Read more about relevant IT courses.
• Gaining hands-on experience - Seek internships, part-time jobs, or volunteering opportunities to build your experience. Participating in cyber security competitions, such as Capture the Flag (CTF) events, can also provide practical skills and networking opportunities.
• Hone your non-technical skills - Effective communication is essential for cyber security professionals. They need to convey complex technical information to non-technical stakeholders clearly and persuasively through writing reports, making presentations, auditing, reviewing policy and advising senior management. Recruiters also look for those with strong problem-solving skills and the ability to analyse complex situations, identify root causes, and develop effective solutions. Read more about the skills employers want.
• Keeping up to date with industry trends - Staying informed about the latest threats, technologies, and best practices is crucial. Following reputable sources like Krebs on Security and Dark Reading can help you stay current.
• Building a professional network - Join cyber security groups on LinkedIn, attend industry conferences (either virtually or in-person), and participate in local cyber security meetups.

Find out more

• Explore cyber security training.
• Get an overview of the UK's IT industry.
• Read about the work of Lateral Connect.