iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Cybersecurity hiring has split into two realities. A CyberSN analysis counted 235,786 U.S. cybersecurity job postings from January through September 2026, down 26.4% from the same period in 2025 and the lowest nine-month total in its four-year series. That is a measure of advertised postings—not vacant seats, employed workers, or the amount of cyber work organizations still need done.
At the same time, employers continue to report difficulty finding people with immediately usable, specialized skills. The result is a cooler and more selective market, not the disappearance of cybersecurity careers.
What the four-year-low figure actually measures
The 235,786 figure comes from CyberSN’s U.S. Jobs Report analysis for January–September 2026. The comparison period contained 320,210 postings, making the 2026 total 26.4% lower. CyberSN describes 2026 as the lowest nine-month posting total in its four-year series.
Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minutePC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11A posting count records employer advertising activity. It does not reveal how many positions remain open, how many listings are duplicates, how many jobs were filled, or how many cybersecurity professionals are already employed. Companies can remove requisitions, consolidate roles, pause recruiting, or hire internally while their security workload remains unchanged.
#1 Best Overall
Kayne McGladrey summarized the shift on October 13, 2026: “The market for security talent hasn’t closed. It has gotten choosier, rewarding people who can already do the work and shutting out the ones who can’t yet.”
Why this does not contradict CyberSeek’s strong 2025 demand
CyberSeek and NIST reported 514,359 U.S. cybersecurity listings during the 12 months ending April 2025—nearly 57,000 more listings, or 12% growth, than the preceding 12-month period. That series and the CyberSN number should not be combined into one trend line.
| Source and window | Geography | Measure | Reported result |
|---|---|---|---|
| CyberSN, January–September 2026 | United States | Cybersecurity postings | 235,786; 26.4% below the same months in 2025 |
| CyberSN, January–September 2025 | United States | Cybersecurity postings | 320,210 |
| CyberSeek/NIST, May 2024–April 2025 | United States | Cybersecurity listings | 514,359; up 12% from the prior 12-month period |
| UK Department for Science, Innovation and Technology, 2025 monthly average | United Kingdom | Core and wider cyber postings | 2,911 core postings and 2,669 wider postings per month |
The series use different reporting windows, taxonomies, collection methods and deduplication rules. The CyberSeek result covers a full 12 months through April 2025; CyberSN compares the first nine months of consecutive years. The UK figures describe a separate national market. A lower U.S. year-to-date total in 2026 therefore cannot erase the earlier evidence of demand.
Rank #2
The durable shortage is increasingly about skills
ISC2’s 2025 study of 16,029 cybersecurity professionals and decision-makers found that 95% had at least one skills need, while 59% described their needs as critical or significant. Nearly nine in ten respondents (88%) said a cybersecurity skills shortage had already produced at least one significant organizational consequence.
Those survey results measure practitioners’ experience, not a census of vacancies. They nevertheless explain how fewer postings can coexist with operational strain: organizations may need fewer people overall while still lacking specialists who can perform particular tasks without extensive ramp-up.
ISC2 Acting CEO and CFO Debra Taylor, CC, said on December 4, 2025: “This year’s data makes it clear that the most pressing concern for cybersecurity teams isn’t headcount but skills.”
Specialization employers continue to value
- Security architecture and the ability to design controls across complex environments.
- Cyber-risk analysis, governance and regulatory decision-making.
- DevSecOps work that embeds security into software delivery.
- Practical incident response, cloud security and defensive engineering.
- The ability to use and evaluate artificial-intelligence systems safely.
Why entry-level applicants feel the downturn first
Entry-level access is particularly constrained. The 2026 U.S. analysis puts entry-level postings at 9.5% of its total. A 2025 UK government study also found low demand for applicants with less than one year of experience.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
When organizations advertise fewer roles, they can raise the experience threshold for each opening and prioritize candidates who can contribute immediately. That creates the familiar contradiction: employers say they have a shortage, while newcomers struggle to obtain their first role. The shortage is often in demonstrated capability at a specific level, not simply in the number of people interested in cybersecurity.
What changes the odds for a new applicant
- Show working evidence, such as a documented detection rule, a cloud-hardening exercise, a secure deployment pipeline or an incident-response report.
- Target a defined role instead of presenting a generic “cybersecurity” résumé.
- Explain the decisions, limitations and trade-offs in each project; screenshots alone do not establish operational judgment.
- Use internships, IT operations, systems administration, software engineering or risk roles as credible feeder paths when direct security openings are scarce.
- Track the tools and skills named in local postings, then close the most frequent gaps with structured practice.
Artificial intelligence is becoming part of the requirement
CyberSeek reported that 10% of cybersecurity listings specifically referenced AI skills. Research Director Matthew Walsh described a “growing intersection of cybersecurity and AI skills” while noting that a workforce gap still challenges public and private organizations.
An AI reference can mean different things: securing machine-learning systems, detecting AI-assisted attacks, governing use of generative tools, automating analysis, or simply understanding the risks of deploying them. Applicants should read the duties rather than assume that every mention requires model development. Employers should state whether they need engineering, assurance, governance or safe operational use.
What the numbers imply for employers
A smaller requisition count is not a reason to abandon workforce development. Organizations can reduce dependence on a narrow external market by:
Recommended Free Tools
- Writing realistic descriptions that distinguish essential capabilities from wish-list certifications.
- Building internal training and rotations for staff who understand the business and technology environment.
- Creating feeder pathways from IT, engineering, audit, privacy and risk teams.
- Assessing practical work samples instead of filtering primarily by job-title history.
- Separating genuinely senior responsibilities from tasks that can be learned with supervision.
CyberSeek’s career-pathway and geographic tools can help employers and applicants inspect local demand, common skills and routes between related roles.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.How to read future cybersecurity hiring claims
Before comparing two headline numbers, check five details:
- Reporting window: Is it a month, nine months or a full year?
- Geography: Does it cover the United States, the United Kingdom or another market?
- Taxonomy and deduplication: Which occupations count, and how are repeated advertisements handled?
- What is being measured: Postings, employed workers, supply-demand ratios or survey perceptions are different indicators.
- Seniority and skills: Does the total include entry-level roles, and which capabilities or certifications do listings request?
CyberSeek estimated a global cybersecurity workforce midpoint of 4.97 million and a U.S. cybersecurity supply-demand ratio of 74% in 2025. It also reported that cybersecurity roles took 21% longer on average to recruit than other technology jobs. Those figures describe different parts of the labor market from CyberSN’s 2026 posting count, so none should be treated as a substitute for the others.
Bottom line for workers and organizations
Cybersecurity jobs are not drying up, but the easy interpretation of an ever-expanding market is gone. The 2026 U.S. posting decline signals tighter selection and less aggregate recruiting activity. Skills evidence, role-specific experience and the ability to keep learning now matter more than simply entering the field or collecting broad labels. Employers still face real capability gaps, especially in specialized work, and must decide whether to buy those skills on a smaller market or build them internally.
Free tools Windows power users keep installed
One-click scans. No signup required.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
