Meeting the Cyber Workforce Challenge

A Multi-Faceted Approach to Addressing the Growing Demand for Cybersecurity Workers

With over two decades of experience in application development, cloud computing, and cybersecurity, I’ve witnessed the cybersecurity field evolve firsthand. By day, I work as a cyber/cloud security consultant for Synopsys’s Software Integrity Group, contributing to secure cloud and software solutions while mentoring emerging cybersecurity professionals. Three nights a week, I also have the privilege of leading the Cybersecurity Boot Camp for the University of Connecticut’s (UCONN) School of Engineering. My unique journey gives me valuable insights into the growing demand for cybersecurity talent in the U.S. In this article, we’ll explore this urgent need and discuss the impact of various educational paths and innovative approaches.

The Demand for Cybersecurity Workers Outstrips Supply

The cybersecurity landscape in the U.S. is rapidly evolving. As we become increasingly reliant on digital technology, the demand for experts to safeguard our data also grows. According to Cyberseek, the unmet demand for cybersecurity workers in Oct. 2023 was more than 600,000 jobs, while the employer demand for cyber workers exceeds supply by 31%^[i]. This scarcity puts organizations at increased risk, as emphasized by the Center for Strategic and International Studies^[ii]. Yet, this gap also opens doors for those interested in cybersecurity careers, as well as institutions providing essential training. As reported in an overview of Accenture Statistics, cybersecurity jobs are among the best paying ones in today’s job market due to the shortage of candidates^[iii]. Information security is one of the fastest-growing fields in America and is represented with the No. 6 spot on Glassdoor’s Top 50 Jobs in America^[iv]. This not only further stresses the need for more professionals in the field, but also that the financial opportunities for new cybersecurity professionals are considerable.

Government Initiatives to Bridge the Gap

The federal government has been actively working to address the growing demand for cybersecurity professionals, the most recent effort being the White House’s National Cyber Workforce and Education Strategy^[v], announced in July 2023. This initiative emphasizes the need to develop cyber skills in the workforce and society at large, acknowledging that “cyber education and workforce development have not kept pace with demand and the rapid pace of technological change.” This follows older, but still active programs like the National Science Foundation’s CyberCorps’s Scholarship for Service, a long-standing program that provides scholarships to students studying cybersecurity in return for service in federal, state, local, or tribal governments upon graduation^[vi].

Additionally, the National Institute of Standards and Technology (NIST) has been leading the National Initiative for Cybersecurity Education (NICE), which “works to energize, promote, and coordinate a robust community working together to advance an integrated ecosystem of cybersecurity education, training, and workforce development.” NICE fulfills this mission by coordinating with government, academic, and industry partners to build on existing successful programs, facilitate change and innovation, and bring leadership and vision to increase the number of skilled cybersecurity professionals in the workforce^[vii].

These initiatives illustrate the federal government’s enduring commitment to addressing the cybersecurity workforce shortage and the importance it places on cybersecurity education – not only in the federal workforce, but throughout private industry, academia, and state, local and tribal governments as well.

An All-of-the-Above Approach to Meeting the Demand

To address the growing demand for cybersecurity professionals, a multi-pronged approach is necessary. Integrating cybersecurity education into a wide range of training and development programs is crucial to this strategy, and public-private partnerships also play an important part in implementing these strategies and ensuring their success.

Education is fundamental in preparing individuals for a career in cybersecurity. In addition to bachelor’s and master’s degrees in technology related fields, many academic institutions, like UCONN, have developed certificate programs that align with industry needs and provide practical, hands-on training to prepare students for the challenges they will face in the field.

Traditional college-based education remains the primary pathway into cybersecurity and, with an undergraduate degree in computer science and a master’s in information technology (before a master’s in cybersecurity was readily available), was my pathway to the cybersecurity field. A bachelor’s in computer science offers students comprehensive exposure to foundational principles of computing, algorithms, software engineering, and even introduces them to security concepts. For those looking to delve deeper into cybersecurity, pursuing a master’s in cybersecurity allows students to explore more specialized areas of cybersecurity, with courses in cryptography, advanced network security, ethical hacking, digital forensics, and security policy and governance.

As an instructor for UCONN’s Cybersecurity Boot Camp, I can attest to the impact of non-degreed education on students’ workforce readiness. This rigorous six-month course, and similar ones offered across the country by EdX in conjunction with major universities, begins by teaching security fundamentals, systems administration, networks and network security, and progresses to teach both offensive and defensive security with hands-on labs, projects, and industry-standard tools. By the time students have completed the course, they are able to demonstrate in-demand skills, have built an impressive portfolio of projects using real-world data sets, and are prepared to enter the cybersecurity industry. This bootcamp is hardly unique with many other cyber-specific training programs nationwide designed to give individuals a jump-start on their careers in cybersecurity – one thing they all have in common, is they are targeted at getting workers into the cybersecurity workforce within a compressed time frame.

For those already pursuing computer science or security-specific bachelor’s and master’s degrees, an internship is another important pathway into the industry. FutureX, Synopsys’s internship program, is a hands-on experience where our interns make an impact on our products, our technology, and our culture. Interns are assigned a project or tasks where they focus the majority of their time, gaining hands-on experience and honing their skills. During the internship, participants work alongside industry professionals who provide coaching and feedback to help further develop their skills, all to enhance their industry knowledge and employment prospects upon graduation. It is important to note that Synopsys’s internship program is typical for the security industry, and these types of internships are extremely valuable for both the interns and the companies themselves, quite often leading to jobs with the company directly upon graduation.

Case Study: Cybersecurity Training Program at Florida International University (FIU)

A prime example of effective non-degree cybersecurity education is the Cybersecurity Training Program at Florida International University (FIU). This program provides free training to veterans and first responders, helping to build a scalable and sustainable cybersecurity workforce for the nation. Since its launch in 2021, over 350 veterans, transitioning military personnel, and first responders have completed the CyberSkills2Work program at FIU. Students can take courses such as incident response, digital forensics, and threat intelligence, and are eligible for full One-Year Fellowships in multiple cyber tracks. Highlighted during the White House’s cybersecurity workforce strategy announcement, this program serves as a model for similar programs at other institutions^[viii].

Case Study: IBM’s New Collar Initiative

Another example is IBM’s “New Collar” initiative. In response to the need for more cybersecurity professionals, this technology leader identified jobs in tech that prioritize skills, certifications, and vocational training over traditional academic degrees. IBM formed collaborations with high schools, community colleges, and vocational training centers to devise a cybersecurity-focused curriculum, while also offering internships and apprenticeships that valued hands-on experience and practical skills over academic backgrounds. Through this initiative, IBM has hired numerous individuals into cybersecurity roles, many of whom do not have typical four-year degrees. These individuals come from a wide range of backgrounds, including self-taught tech enthusiasts and professionals from unrelated fields^[ix].

Conclusion The urgent need for cybersecurity professionals underscores the vital role that both traditional academic paths and innovative training programs play in shaping our digital defense. By implementing strategic initiatives like the White House’s National Cyber Workforce and Education Strategy, encouraging degreed and skills-based education, and fostering programs like FIU’s CyberSkills2Work and IBM’s “New Collar” initiative, we can build a robust cybersecurity workforce that is ready to meet the challenges of the digital age. By embracing these multifaceted educational pathways and programs we lay the foundation for a safer, more resilient digital future.

[i] https://www.cyberseek.org/heatmap.html

[ii] https://www.compuquip.com/blog/cybersecurity-talent-developing-a-cyber-security-talent-initiative

[iii] https://marketsplash.com/accenture-statistics

[iv] https://www.businessinsider.com/best-jobs-for-2021-new-glassdoor-ranking-2021-1

[v] https://www.whitehouse.gov/wp-content/uploads/2023/07/NCWES-2023.07.31.pdf

[vi] https://niccs.cisa.gov/education-training/cybersecurity-scholarships

[vii] https://www.nist.gov/itl/applied-cybersecurity/nice

[viii] https://communitynewspapers.com/florida-international-university/white-house-highlights-fiu-cybersecurity-workforce-training-program-for-veterans-first-responders/

[ix] https://hbr.org/2023/03/the-new-collar-workforce