What are the biggest career trends in cyber security?
Cybersecurity continues to be a popular career choice and understandably so. According to analyst firm Frost & Sullivan, the level of unemployment in the sector lies at just 1% and demand will continue outstripping supply.
Job site Indeed saw an increase of almost 15% in cybersecurity postings in 2018 and this growing demand is, of course, driving up wages. According to Hays 2019 Salary and Recruiting Trends Guide, last year jobs in this sector saw a 3.2% salary increase in the UK, compared to the country's average of 1.9%.
The demand for cybersecurity experts is growing for a number of reasons. As companies digitise more of their activities the role of cybersecurity increases, but it's also down to more businesses responding to the rising number of high-profile cyber attacks.
A self-imposed supply shortage?
Interestingly, several of the major analyst firms believe that the supply problem is one that's been created by the companies themselves as much as the shortage of qualified candidates.
"Companies are issuing job requisitions that have unrealistic demands of experience and technical competence, and exclusively target those with computer science," says Paul McKay, senior analyst at Forrester.
"Some hiring managers have on blinders," agrees Jarad Carleton, Frost & Sullivan's global program leader for cybersecurity. "They want 'pedigree'; people with IT degrees. But they're beginning to see that their headcount shortage isn't going to go away unless they think outside of the box. There needs to be more flexibility in how they look at potential recruits and bring in people from more varied backgrounds."
The UK's top cyber employers
Indeed recently published its list of the UK's top 20 cyber employers, which put the "big four" management consultancies – KPMG, PwC, EY and Accenture – in the top spots. Financial firms, followed closely by technology-focused businesses, dominate the top ten, but experts agree that as time goes on, recruitment for cybersecurity experts will grow across all sectors as they recruit their own staff rather than turning to consultants.
"[The consultants] are guns for hire," says Carleton. "They'll come in, evaluate what's happening and put in a solution. Once it's up and running they dust themselves off and walk out the door. Businesses need to be able to keep themselves secure."
What are employers' most sought-after cyber skills?
According to Indeed, the most sought-after cyber roles can be very lucrative, with the top five paying a combined average of £45,851 a year versus the national average salary of £27,600. According to the results of its study, IT security specialist is the most in-demand role in the UK, with nearly three times as many vacancies as the role of security engineer, which took second place. Completing the top five were security consultant, an information security analyst and IT auditor.
"In discussions, I've had, auditing systems is something that's very sought-after," notes Cathy Mulligan, a visiting researcher at Imperial College Business School. "It's a key area because so many existing systems are coming under different types of threats. Attack vectors are expanding, and morphing, on a daily basis," she points out.
But as cybersecurity encompasses so many different areas, analyst firms and recruiters agree that demand for skills in almost all of these areas will continue to grow. For example, as many companies migrate to the cloud as part of their digital transformation, hands-on cloud security experience is increasingly sought after.
At Forrester, McKay has seen a lot of demand for incident response, security operations centre (SOC) analyst, and technical security analyst roles, as well as threat intelligence and vulnerability management at present. Over at Hays Digital Technology, director James Milligan says that cybersecurity analyst tops this year's most in-demand role with security analyst, security architect, cyber threat intelligence analyst and cyber incident analyst roles also being particularly sought after.
Milligan notes there's a shortage around application security as well and increasing demand for technical candidates "with an appreciation of the software development lifecycle (SDLC) and [who] in some cases come from a development background".
Experts also believe we'll see a significant increase in the requirements for security practitioners to be able to support organisations in dealing with regulations.
"In the UK we recently introduced the General Data Protection Regulation (GDPR) into the data privacy space and the EU Network Information Systems Directive (NISD)," says McKay. "These will continue to evolve and I expect the government to continue to take a more active role in working with companies in this fashion. Having professionals on board who know how to translate regulation into practical action to satisfy regulatory demands will become popular."
The UK's cybersecurity hubs
As for where to find work in cybersecurity, opportunities are popping up in cities all over the UK. In England, there are large hubs in London and across the southeast, including Cambridge, where you'll find a lot of start-ups.
Along the M4 corridor and down to Bristol, there are many opportunities for cybersecurity specialists, then there's Cheltenham – home of GCHQ – Manchester and Birmingham. In Scotland, Glasgow and Edinburgh have active cybersecurity communities due to many large international firms having bases in these cities.Kevin Curran, a professor of cybersecurity at Ulster University, also notes that Belfast has developed one of the strongest cybersecurity hubs in the UK.
"It's become home to a large cluster of international companies delivering global security products and services. Financial services firms including Allstate, CME and Citi have each invested in cybersecurity operations in Belfast and other major players such as PwC, Deloitte, Ernst & Young and BDO have all developed a range of cybersecurity solutions that are serviced from there," he notes.
As you can see, if you have the right skills, there's work available all across the UK. And with demand continuing to grow, employers will begin to consider a wider range of applicants, not just those who've followed a very rigid cybersecurity career path to date. This is a sector overflowing with opportunity, so if cybersecurity is a career that interests you, now's the time to get ahead.
Industry: Cyber Security
- Head of CSOC (Cyber Security Operations Centre), London. Greenfield opportunity
CH7928 Identifier Project Head of CSOC (Cyber Security Operations Centre), London. Greenfield UNIQUE opportunity to establish, manage and grow a world class CSOC. Headquartered in the UK, the CSOC will grow and deliver cyber services into an international and underdeveloped market. As a greenfield site the Head of CSOC will be the first person on the ground to build a capability and team around them. The role will include, but not be limited to; Setting up and establishing a CSOC monitoring service using IBM QRadar and Palo Alto CORTEX XSOAR. Develop roadmap for future CSOC capabilities. Establish, develop processes, playbooks and use cases. Recruit, Build and train a specialist team. Build relationships with key clients- onboard and scale. The successful candidate must have experience working within / leading a technical Cyber Security monitoring capability. Technical experience working with IBM QRadar and Palo Alto CORTEX XSOAR will be highly beneficial, although other SIEM / Security Orchestration, Automation and Response tools are welcome as the skillset is transferable. This brings significant opportunity and welcomes creativity / best practice. Frequent travel to London office will be required. Chris.email@example.com 07884666351
- Aruba Data Centre Network Engineer
- Upto £500 a day
**Outside of IR35 contract** Aruba Data Centre Network engineer is required to start ASAP. You will be responsible for Data Center and Campus Network - Design and implementation of Aruba CX Switches, We are looking for an experienced data centre engineer who is happy to work remotely and autonomously Experience you will need to have, Solid Networking experience with good knowledge of -Routing & Switching - MP-BGP EVPN VXLAN, MPLS/VPLS, EIGRP, BGP, OSPF and Multicast, Experience with Aruba switches ideally the CX range Ideally SC cleared or able to become SC Cleared. This will be a 3 month rolling contract
- Network Engineer-
- 65000 plus bonus
An exciting opportunity has arisen with a global financal business that are looking for an experienced Network engineer with strong Firewall experience in particular Checkpoint You will be responsible for help to support and manage the network infrastructure both LAN/ WAN And VPNs and will have a focus on network secuirty (Checkpoint firewall and Security controls) This is a multi-Site environment with few thousand end users, As the business is growing so is the network so great opportunity to join an expanding business that will help cross-train you in both cloud and onsite solutions. They are looking for a strong network engineer with a mix of expereience o Experience with Azure networking managing VNETs, ExpressRoute, VPNs and other Azure network features such as NSG/MS loadbalancer is required. Working with Check Point firewalls in Azure is desirable. o In-Depth understanding of networking fundamentals including: Network topology, Data Centre Infrastructure systems, Layer 2/Layer 3 Switching, VLANs, Routing, VPNs, High availability protocols. o Demonstrable hands-on experience with Meraki Switches and wireless infrastructure, Arista software, Forcepoint Proxy (would be a strongly desirable), Citrix Netscaler, and Forescout CounterACT Location can be flexible, they are looking for someone who would be happy to do a hybrid working model 3 days at home 2 days in the office.
- Technical Cyber Trainer, United Kingdom
Technical Cyber Trainer, United Kingdom Cyber trainer needed to build a new cyber training capability to develop a team of international security analysts. Technical Cyber training experience is a MUST. Any experience delivering technical Blue team based training is highly desired. This is a UK based role. Able to travel to London on occasion- when required. Agile, flexible working. A technical background is highly desirable and prefered. The role Aid in the setup, fine tuning and on-going customisation of Technical Cyber Security’s training platform. CyberBit experience desirable. Design, develop and deliver the internal syllabus to train employees with low cybersecurity knowledge to become analysts. Manage, monitor, support and assess learners. Fine tuning training and bespoke development. Manage, monitor and assess SOC analysts. Support employees through their career. The ability to deliver remote training is essential. This is a UK based role. Able to travel to London on occasion- when required. Agile working. Apply today to find out more information. Chris.Holt@dclsearch.com +447884666351