TFL Incident Response Jobs
TLF and DCL Search have incident response jobs available on our website in the cyber security section.
The cyber security industry has faced well-documented challenges in recruitment and employment, a problem that has only been exacerbated by continued discussion of the skills gap. But despite these issues, Louise Barker, head of talent at NCC Group, thinks it’s important to celebrate the successes that the industry has achieved in employment and understand what we can do to continue attracting talent to the sector.
The cyber security employment landscape
A report published by the government last year revealed that there are over 30,000 – and as many as 40,000 – staff employed in the UK’s cyber security sector, with over 800 firms providing cyber security products based in the country.
These numbers are encouraging, but even more impressive is the fact that the number of active firms has grown by more than 50% over the last five years, with over a hundred new businesses entering the sector within the last two years. This surge in new entrants to the market can help to make the industry more attractive for prospective employees, particularly as there are no signs that this growth will decelerate in the near future.
These employment figures aren’t just constrained to the capital, either, with the report also revealing that the North West is responsible for 29% of cyber security employment in the UK, with 22% in the South East. This is promising for businesses that are concerned about prospective employees and opportunities being poached by London-based organisations.
Sustaining this growth is going to necessitate careful strategies from businesses within the sector to ensure that talent is being channelled into it and that every possible step to narrowing the skills gap is taken.
What is the government doing to help?
Previously, the cyber security market’s relative infancy may have hindered recruitment of talent into the industry, with no widely accepted definition of a cyber security professional and no gold standard qualification to work towards.
However, the government is addressing this by making up to £2.5m of funds available to establish a new Cyber Security Council in the UK, which is due to start work in April this year. Combined with the ongoing work of the Cyber Security Body of Knowledge (CyBOK), these initiatives will help to establish professional standards further, deliver certifications and provide access to defined career pathways,
Such initiatives should be welcomed, but cyber businesses also have a responsibility to attract and capture talent by informing potential security professionals about the variety of roles available, and the diverse career pathways they can take to achieve success in the industry.
How can cyber security businesses play their part?
The skills gap can’t be forgotten, and Cybersecurity Ventures has predicted that there will be 3.5 million unfilled cyber security job openings by 2021, meaning that the industry needs to tap into new and existing talent pools now.
Many businesses within the industry already understand the importance of graduate schemes and internships in attracting talented young people, and a lot of work is being done to ensure that they understand the value of studying computer sciences and related disciplines.
What isn’t stressed quite so much is the value of the skilled workers from other sectors, who might not think that a career in cyber security is attainable for them and that many can utilise the transferable skillsthey already have to make an impact in the industry.
The perception outside of the sector is that many of the roles are too technical, with many unsure how their skills can be put to use. But by advertising in the correct channels, and showcasing the talent already working within the industry, we can help to change this perception. This will subsequently help to attract technical writers, sales, risk managers, recruiters and more – again helping to change this perception even further.
Additionally, developers, network engineers and Active Directory specialists can all apply their expertise into more technical roles in the industry in an assessing and testing capacity. With a supportive and scalable framework in place, there is no reason that individuals from a diverse range of backgrounds can’t achieve a solid career in cyber security.
This is also true for internal talent, and we have seen success in this area first hand: after developing a deeper interest in developing his technical skills, one of our technical recruiters recently qualified as a Security Consultant.
Working together
The recently published UK Government Cyber Security Skills Strategy also acknowledges the importance of attracting individuals from other areas, and has moved from discussing the concept of cyber security skills to the concept of cyber security capabilities to reflect that what is required is “the right blend and level of skills in a truly secure digital economy”.
In practice, this means that cyber security should both be embedded across the workforce and become a facet of a wider range of roles like basic financial or commercial literacy, but also that greater efforts are required to unlock untapped talent in less technical areas of cyber security.
Again, the Government has also pledged to support this path by demystifying cyber security careers, with plans to introduce Cyber Security Skills Ambassadors to promote cyber careers for a wide range of individuals. Other recommendations suggest increasing the provision of non-technical modules in higher and further education cyber security courses and increasing the involvement of the industry in the development of such courses.
Demand for talent – both technical and otherwise – within the cyber security industry is only set to increase in the coming years, and businesses need to lay the foundations to facilitate this growth as soon as possible to ensure that the skills gap doesn’t come to widen any further. By thinking laterally and helping to change perceptions about the industry at large, we can continue to ensure that talented individuals can make the leap to a new career, bolstering employment for a thriving industry in the process.
source informationage
Industry: Cyber Security News
Latest Jobs
-
- Head of Penetration Testing, UK based, Flexible location.
- United Kingdom
- Upto £100,000 plus excellent benefits
-
Head of Penetration Testing needed to join a security consultancy that are delivering client facing penetration testing services around Web app and Infrastructure. Looking for someone hands on that is able to manage a highly skilled technical team of testers. 50-60% of the time is expected to be hands on, other duties will include, but not be limited to; leading and managing the day to day running of the team, mentoring, team upskill, recruitment, reporting, escalation, process improvement etc. Flexible location although south east is preferred. Anyone with Check / CREST experience is highly desirable. MUST be able to achieve SC clearance. UK based role. All details kept in confidence.
-
- Technical Security Analyst. Immediate opportunity,
- Newcastle upon Tyne
- 48000
-
Technical Security Analyst. Immediate opportunity, Technical Security Analyst needed to join a specialist security team. This role will require travel into the office in a hybrid model once industry returns back to the working environment. The Security Analyst must be commutable to Newcastle upon Tyne. This is an Immediate opportunity. An essential requirement of the role is to be able to engage with internal stakeholders so a blend off technical hands on analytical and consultative communication skills. The role will include, but not be limited to; managing and handling incidents end to end, log review, incident analysis, escalation, vulnerability assessment, Automation, Malware Analysis, Threat intelligence, etc All details kept in confidence. https://calendly.com/chris-holt/call-with-chris-holt-dcl-search
-
- Security Analyst, London. Financial Services. End user.
- London
- 55000
-
CH7885. Security Analyst, London. Financial Services. End user. Immediate role. £55,000 Security Analyst needed to monitor and manage a security suite of tools within Financial Servicecs end user . The Security Analyst will be responsible monitoring, configuring, fine tuning, incident management and generally improving the security tool capability. Specific experience with CyberArk, Tripwire Log Center and Tripwire Enterprise is highly desirable). Current experience with Vulnerability management and penetration testing is highly desirable. Specifically the ability to effectively manage 3rd party pen tests. You will be working within a specialist security team reporting to the CISO. Experience working within a regulated end user environment within financial services is highly desirable. This role will run a hyrbid working schedule, partly remote, partly office based in London (once permitted) This is an exclusive role to DCL Search & Selection. https://calendly.com/chris-holt/call-with-chris-holt-dcl-search
-
- IAM Consultant- Identity Governance
- United Kingdom
- Upto £80,000 plus benefits
-
Identity and Access Management Consutlant is required for this established business who put their employees first. the role entails • Develop and maintain IAM services. • Further develop IAM tool integration with Service Now to provide automated JML processes and application access requests and fulfilment. • Provide guidance over Role Based Access in terms of Location based Roles, Application Roles and Business Roles and act as SME over any future RBAC project. • Work closely with our other Technology teams on integrating IAM services with Technology and business systems to increase efficiency through automation around areas such as JML processes, application access request fulfilment and attestation. • Work with the Governance Risk & Compliance (GRC) team to provide application access attestations and toxic combination alerting and reporting. • Involvement with Identity Management initiatives such as Single Sign On (SSO) and Privileged Access Management (PAM), to ensure security and business processes are in line with industry best practice. • Assist in ensuring that all IAM capabilities are mapped to internal processes, policies, and standards. Develop metrics to measure and improve the alignment. • Complete monthly review and report on sensitive group access, i.e., service accounts, admin accounts, etc. validating I&O processes are effective. • Provide information to both internal and external Auditors in response to findings. • Collate audit evidence for AAF audit and control reviews, taking responsibility for identifying service and process improvements to ensure compliance with our controls and standards. We are looking for someone with Hands on technical experience with the IAM tools, you need to have been involved in the integration of the IAM solution into 3rd party software like Servicenow, You will have worked with an IAM tools that are focused into Identity Goveranance, like RSA, CA Identity Suite, Fischer Identity, Hid Global, IBM IGL, Net IQ Identity Goverance, Omada, Ping or Oracle Post covid, this role will invovle a mix of home and office work, the business have a number of office spread across the UK so locaton is flexible for this position