US Needs To Cultivate Its Cyber Workforce

In compliance with a 2017 presidential executive order, the Department of Commerce and the Department of Homeland Security last week jointly released the report, in which they share their assessment of recent initiatives to educate, train and grow American's cybersecurity talent pool.

The agencies cited multiple deficiencies in this regard, including a lack of relevant cybersecurity education programs in the corporate world; a shortage of cyber-savvy teachers across all levels of education; prohibitive and inefficient hiring/onboarding practices; and a lack of reliable data on cybersecurity workforce position needs.

To combat such issues, the report's authors have recommended developing an "ambitious vision and action plan-of-attack;" executing a "high-profile national Call to Action" to mobilize workers toward cyber needs; attracting more women, minorities, veterans and young students; budgeting for high-quality education and workforce development programs; and providing cyber training to employees in traditionally non-cyber roles; 

The report also recommends that both private and public-sector organizations take steps to improve their learning environments, align education and training efforts with their cybersecurity workforce needs, and establish metrics and tools that help evaluate the effectiveness of their cyber workforce investments.

As further proof of America's ongoing shortage in cyber talent, new statistical findings show that there were 301,873 cybersecurity job openings in the U.S. in the 12-month span from April 2017 and March 2018.

Of these openings, 13,610 were in the public sector, according to numbers issued today by CyberSeek, a free cybersecurity career and workforce resource, and a joint development of technology industry association COmpTIA and labor market analytics firm Burning Glass Technologies. Moreover, 194,224 openings were in the category of "Operate and Maintain" -- meaning jobs involving the support, administration and maintenance of IT systems, as opposed to strictly cyber roles.

During this same time span, the total number of employed members of the U.S. cyber workforce was 768,096. That means for every cyber job opening, there were only 2.5 filled cyber positions, compared to 6.5 filled positions per job opening when looking at all fields of work.

CyberSeek further reports that the metro areas with the largest absolute number of cyber job openings in the aforementioned time period were Washington D.C. (43,200), New York (19,993) and Chicago (11,464).

"The cybersecurity talent shortage is widespread, impacting all 50 states," said Matthew Sigelman, CEO at Burning Glass Technologies, in a press release. "In every state, the employed cybersecurity workforce would have to grow by over 50 percent to align with the market average supply and demand ratio."

CyberSeek is also a partner with the National Initiative for Cybersecurity Education (NICE), an initiative from the Commerce Department's National Institute of Standards and Technology (NIST).

SC Media:

 

« Backlash: Facebook's Data-Sharing With Chinese Firms
Goldman Sachs Offers A Cyber War Games Product »

Infosecurity Europe
CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

XYPRO Technology

XYPRO Technology

XYPRO is the market leader in HPE Non-Stop Security, Risk Management and Compliance.

ZenGRC

ZenGRC

ZenGRC (formerly Reciprocity) is a leader in the GRC SaaS landscape, offering robust and intuitive products designed to make compliance straightforward and efficient.

MIRACL

MIRACL

MIRACL provides the world’s only single step Multi-Factor Authentication (MFA) which can replace passwords on 100% of mobiles, desktops or even Smart TVs.

CYRIN

CYRIN

CYRIN® Cyber Range. Real Tools, Real Attacks, Real Scenarios. See why leading educational institutions and companies in the U.S. have begun to adopt the CYRIN® system.

Alvacomm

Alvacomm

Alvacomm offers holistic VIP cybersecurity services, providing comprehensive protection against cyber threats. Our solutions include risk assessment, threat detection, incident response.

Palo Alto Networks

Palo Alto Networks

Palo Alto Networks, the global cybersecurity leader, is shaping the cloud-centric future with technology that is transforming the way people and organizations operate.

Identity Automation

Identity Automation

Identity Automation is a leading provider of Identity and Access Management software.

Government Communications Security Bureau (GCSB)

Government Communications Security Bureau (GCSB)

GCSB contributes to New Zealand’s national security by providing information assurance and cyber security to the New Zealand Government and critical infrastructure organisations.

Ataya & Partners

Ataya & Partners

Ataya & Partners is a consulting company that delivers data protection, cybersecurity and IT & Digital governance services.

Excelsecu Data Technology

Excelsecu Data Technology

Excelsecu is a global solution provider of online identity authentication, widely applied in banks, government bodies and enterprises.

ITTAS

ITTAS

ITTAS is a multidisciplinary company specializing in information security and software and hardware protection software.

Hassans International Law Firm

Hassans International Law Firm

Hassans is the largest law firm in Gibraltar, providing a full range of legal services across corporate and commercial law including Data Protection and GDPR compliance.

Cegeka

Cegeka

Cegeka is a family-owned IT company providing end-to-end IT solutions, services & consultancy.

Valimail

Valimail

Valimail delivers the only complete, cloud-native platform for validating and authenticating sender identity to stop phishing, protect and amplify brands, and ensure compliance.

Pessimistic Security

Pessimistic Security

The team behind Pessimistic helps blockchain startups meet modern security challenges since 2017.

Association of Azerbaijani Cyber Security Organizations (AKTA)

Association of Azerbaijani Cyber Security Organizations (AKTA)

The Association of Azerbaijani Cyber Security Organizations (AKTA) is a non-commercial organization aimed at strengthening the country's cybersecurity system.

Oxylabs

Oxylabs

Oxylabs is the largest datacenter proxy pool in the market, with over 2 million proxies. Designed for high-traffic, fast web data gathering while ensuring superior performance.

ELK Analytics

ELK Analytics

ELK Analytics is a specialized Managed Security Services Provider (MSSP) that focuses on endpoint security and monitoring & alerting for any type of structured or unstructured data.

Securily

Securily

Securily offers the ultimate solution for small to medium-sized businesses, blending cutting-edge AI with expert human insight to deliver the world’s easiest and most effective pentesting experience.

Sonar

Sonar

AI generated or written by humans, Sonar’s Clean Code Solutions cover your code quality needs, improving code reliability, maintainability, and security.

Cyber Security Unity (CSU)

Cyber Security Unity (CSU)

Cyber Security Unity (formerly the UK Cyber Security Association) is a new global community which has been set up to help unite the industry and combat the growing cyber threat.