As new technologies and cybersecurity breaches continue to evolve, the skillsets needed for security-related jobs have to change as well.
Eighty percent of 336 IT security professionals polled on behalf of Tripwire’s new ‘Cybersecurity Skill Gap Survey 2019’ believe that it’s getting increasingly harder to recruit talent in the industry.
Most of those polled (93%), say the skills required to become a top security professional have changed over the last couple of years.
“The skills gap issue continues to worsen,” said David Meltzer, chief technology officer at Tripwire, “which is troubling, since cybersecurity threats only continue to grow.
“Additionally, security teams are in search of new skillsets to deal with evolving attacks and more complex attack surfaces as they include a mix of physical, virtual, cloud, DevOps and operational technology environments. It’s becoming more difficult to maintain critical security controls, and there are fewer people available to do it.”
The survey found that 85% of respondent claimed that their IT security department is already understaffed, and just 1% said they believe that they can manage all of their organisation cybersecurity needs, despite the lack of skilled staff.
Almost all of the respondents (96%) said they’re currently facing problems when it comes to recruiting the right individual for a job due to the skills gap or can see it coming.
Of those, 86% are concerned about with losing the ability to stay on top of vulnerabilities, while 60% are worried about failing to identify and respond to issues in a timely manner and staying on top of any emerging threats.
Over half of the respondents (53%) were also concerned that they will lose their ability to manage and secure configuration properly.
Part of the challenge is to adapt to the rate of technological transformation and the change of threats within the industry.
According to the report, 93% of respondents said they’d benefit from outside help, especially in areas such as security assessments (71%), pen testing (53%) and vulnerability management (51%).
In addition, 94% of respondents also said they have invested in or are likely to invest in managed services for security.
Last year, a report by non-profit association (ISC)2, revealed that the global cybersecurity skill gap currently stands at almost three million.
Part of the problem is under-representation of women, who account for only 24% of the cybersecurity workforce.
An Infosecurity Europe poll last Friday (March.8th), to coincide with International Women’s Day, revealed that industry professionals believe men still have more opportunities to reach senior roles in the cybersecurity sector.