A heat map of cybersecurity supply and demand
From October 2021 through September 2022, there were 190,000 openings for Information Security Analysts, but only 141,000 workers currently employed in those positions - an annual talent shortfall of 49,000 workers for cybersecurity's largest job.
There are 579,736 additional openings requesting cybersecurity-related skills, and employers are struggling to find workers who possess them. On average, cybersecurity roles take 21% longer to fill than other IT jobs.
CyberSeek can support local employers, educators, guidance and career counselors, students, current workers, policy makers, and other stakeholders as they answer the following questions:
Educators & Career Counselors
Job Seekers & Current Workers
Spread the Word
Download a Sharable CyberSeek One-PagerDownload PDF
Lightcast is the world’s leading authority on job skills, workforce talent, and labor market dynamics, providing expertise that empowers businesses, education providers, and governments to find the skills and talent they need and enables workers to unlock new career opportunities.
With engineers and data specialists continually collecting and analyzing data from thousands of job boards, company websites, online resumes, employee profiles, and traditional government sources, the company produces the most comprehensive, up-to-date picture of the labor market available.
Lightcast market research, analytical software, and data expertise is used by companies across the globe to better understand their own workforce and identify skilled and diverse talent for future growth. The company also guides colleges and universities in connecting their programs to the needs of the local labor market, and advises government entities in creating more effective programs for economic prosperity.
Headquartered in Boston, Massachusetts, and Moscow, Idaho, Lightcast is active in more than 30 countries and has offices in the United Kingdom, Italy, New Zealand, and India. The company is backed by global private equity leader KKR.
For more information, visit lightcast.io
The Computing Technology Industry Association (CompTIA) is a leading voice and advocate for the global information technology ecosystem and the tech professionals who design, implement, manage, and safeguard the technology that powers the world’s economy.
CompTIA is the world’s leading vendor-neutral IT certifying body with nearly 2.7 million certifications earned through rigorous, performance-based exams. CompTIA sets the standard for preparing entry-level candidates through expert-level professionals to succeed at all stages of their career in technology. Through CompTIA’s philanthropic arm, CompTIA develops innovative on-ramps and career pathways to expand opportunities to populations that traditionally have been under-represented in the information technology workforce.
For more information, visit comptia.org
The National Initiative for Cybersecurity Education (NICE), led by the National Institute of Standards and Technology (NIST), is a partnership between government, academia, and the private sector focused on cybersecurity education, training, and workforce development.
The mission of NICE is to energize and promote a robust network and an ecosystem of cybersecurity education, training, and workforce development. NICE fulfills this mission by coordinating with government, academic, and industry partners to build on existing successful programs, facilitate change and innovation, and bring leadership and vision to increase the number of skilled cybersecurity professionals helping to keep our Nation secure.
For more information, visit nist.gov/nice
Hardly a day goes by that we don’t hear about cybersecurity. It may be a major breach of a corporate network that potentially affects thousands of customers and costs billions of dollars, or it may be the mundane annoyance of spam email that may be riskier than meets the eye.
Before exploring the many facets of the cybersecurity landscape presented by CyberSeek, it may be helpful to start with a quick introduction to the topic of cybersecurity.
Cybersecurity commonly refers to the tools and techniques used to protect technology devices, the data they contain, and the functions they perform from people who want to steal, damage or misuse them. This includes normal features of modern life that you deal with every day, like the passwords that protect your phone, your computer and your various online accounts, as well as the practices and defenses to keep everything safe.
For background on these and many more questions surrounding the field of cybersecurity, please visit the ‘what is cybersecurity page’ of the Future of Tech website.
Cybersecurity is a career field on the upswing—and that’s putting it mildly. Employer demand for cyber professionals is consistently high as portrayed by CyberSeek, and the outlook over the next decade is extremely promising according to projections by the US Bureau of Labor of Statistics.
Entering the field of cybersecurity may seem daunting, but rest assured, there are many pathways and on-ramps to getting started. There are a wide range of positions within cybersecurity spanning every industry sector, which allow candidates to match their skills and experience to the position that best suits them.
People who work in cybersecurity tend to have good instincts and attention to detail. Communication skills and problem solving are vital as well. Obviously technology plays a key part in cybersecurity, but that is only one facet of many job roles.
For background on working in the field of cybersecurity, please visit the ‘careers in cybersecurity’ page of the Future of Tech website.
This project is supported by the National Initiative for Cybersecurity Education (NICE), a program of the National Institute of Standards and Technology in the U.S. Department of Commerce, under Grant #60NANB19D124.
The data analysis and aggregation powering Cyberseek is a collaboration between Lightcast, the National Initiative for Cybersecurity Education (NICE), and CompTIA. Lightcast’s artificial intelligence technology analyzes hundreds of millions of job postings and real-life career transitions to provide insight into labor market patterns. BGT used a combination of skill and tool proficiencies, occupations, job titles, and certifications found in job postings to define the broader Cybersecurity landscape. Thanks goes to CompTIA, GIAC, IAPP, (ISC)² and ISACA for sharing the supply of certification holders for CyberSeek.
Gathering insights into high-potential career progression for workers, BGT constructed career pathways out of the jobs core to the cybersecurity landscape. To calculate the NICE workrole category distribution, we reviewed the tasks and KSAs associated with each work role and mapped them to our closest corresponding skills, job titles, and certifications, customizing a matching NICE workrole for each job posting.
Supply estimations factor in all individuals relevant to the cybersecurity workforce. This includes those employed in the field plus those with relevant skills and/or recent experience who are considered to be actively searching on the job market. To derive such supply estimations, we leverage a combination of government employment data, historic cybersecurity job openings and social profile data.
Demand estimations account for the flow of individuals in, out and through the field of cybersecurity and is therefore quantified not only by employment and job openings, but also an estimation of the number of employee separations. To derive such demand estimations, we leverage a combination of government employment data, cybersecurity job openings and social profile data.
We calculated the location quotient by looking at the concentration of cybersecurity job postings compared to other job postings—and compared that to the national average. Looking at this quotient, as well as the cybersecurity supply/demand ratio, workers and employers can find where cybersecurity jobs are in demand and in supply (or in very low supply).
Heatmap data is for the 12-month period October 2021 to September 2022. Career pathway data is for the last 12 months from today's date.