What are the biggest career trends in cyber security?
Cybersecurity continues to be a popular career choice and understandably so. According to analyst firm Frost & Sullivan, the level of unemployment in the sector lies at just 1% and demand will continue outstripping supply.
Job site Indeed saw an increase of almost 15% in cybersecurity postings in 2018 and this growing demand is, of course, driving up wages. According to Hays 2019 Salary and Recruiting Trends Guide, last year jobs in this sector saw a 3.2% salary increase in the UK, compared to the country's average of 1.9%.
The demand for cybersecurity experts is growing for a number of reasons. As companies digitise more of their activities the role of cybersecurity increases, but it's also down to more businesses responding to the rising number of high-profile cyber attacks.
A self-imposed supply shortage?
Interestingly, several of the major analyst firms believe that the supply problem is one that's been created by the companies themselves as much as the shortage of qualified candidates.
"Companies are issuing job requisitions that have unrealistic demands of experience and technical competence, and exclusively target those with computer science," says Paul McKay, senior analyst at Forrester.
"Some hiring managers have on blinders," agrees Jarad Carleton, Frost & Sullivan's global program leader for cybersecurity. "They want 'pedigree'; people with IT degrees. But they're beginning to see that their headcount shortage isn't going to go away unless they think outside of the box. There needs to be more flexibility in how they look at potential recruits and bring in people from more varied backgrounds."
The UK's top cyber employers
Indeed recently published its list of the UK's top 20 cyber employers, which put the "big four" management consultancies – KPMG, PwC, EY and Accenture – in the top spots. Financial firms, followed closely by technology-focused businesses, dominate the top ten, but experts agree that as time goes on, recruitment for cybersecurity experts will grow across all sectors as they recruit their own staff rather than turning to consultants.
"[The consultants] are guns for hire," says Carleton. "They'll come in, evaluate what's happening and put in a solution. Once it's up and running they dust themselves off and walk out the door. Businesses need to be able to keep themselves secure."
What are employers' most sought-after cyber skills?
According to Indeed, the most sought-after cyber roles can be very lucrative, with the top five paying a combined average of £45,851 a year versus the national average salary of £27,600. According to the results of its study, IT security specialist is the most in-demand role in the UK, with nearly three times as many vacancies as the role of security engineer, which took second place. Completing the top five were security consultant, an information security analyst and IT auditor.
"In discussions, I've had, auditing systems is something that's very sought-after," notes Cathy Mulligan, a visiting researcher at Imperial College Business School. "It's a key area because so many existing systems are coming under different types of threats. Attack vectors are expanding, and morphing, on a daily basis," she points out.
But as cybersecurity encompasses so many different areas, analyst firms and recruiters agree that demand for skills in almost all of these areas will continue to grow. For example, as many companies migrate to the cloud as part of their digital transformation, hands-on cloud security experience is increasingly sought after.
At Forrester, McKay has seen a lot of demand for incident response, security operations centre (SOC) analyst, and technical security analyst roles, as well as threat intelligence and vulnerability management at present. Over at Hays Digital Technology, director James Milligan says that cybersecurity analyst tops this year's most in-demand role with security analyst, security architect, cyber threat intelligence analyst and cyber incident analyst roles also being particularly sought after.
Milligan notes there's a shortage around application security as well and increasing demand for technical candidates "with an appreciation of the software development lifecycle (SDLC) and [who] in some cases come from a development background".
Experts also believe we'll see a significant increase in the requirements for security practitioners to be able to support organisations in dealing with regulations.
"In the UK we recently introduced the General Data Protection Regulation (GDPR) into the data privacy space and the EU Network Information Systems Directive (NISD)," says McKay. "These will continue to evolve and I expect the government to continue to take a more active role in working with companies in this fashion. Having professionals on board who know how to translate regulation into practical action to satisfy regulatory demands will become popular."
The UK's cybersecurity hubs
As for where to find work in cybersecurity, opportunities are popping up in cities all over the UK. In England, there are large hubs in London and across the southeast, including Cambridge, where you'll find a lot of start-ups.
Along the M4 corridor and down to Bristol, there are many opportunities for cybersecurity specialists, then there's Cheltenham – home of GCHQ – Manchester and Birmingham. In Scotland, Glasgow and Edinburgh have active cybersecurity communities due to many large international firms having bases in these cities.Kevin Curran, a professor of cybersecurity at Ulster University, also notes that Belfast has developed one of the strongest cybersecurity hubs in the UK.
"It's become home to a large cluster of international companies delivering global security products and services. Financial services firms including Allstate, CME and Citi have each invested in cybersecurity operations in Belfast and other major players such as PwC, Deloitte, Ernst & Young and BDO have all developed a range of cybersecurity solutions that are serviced from there," he notes.
As you can see, if you have the right skills, there's work available all across the UK. And with demand continuing to grow, employers will begin to consider a wider range of applicants, not just those who've followed a very rigid cybersecurity career path to date. This is a sector overflowing with opportunity, so if cybersecurity is a career that interests you, now's the time to get ahead.
Industry: Cyber Security
- IAM developer - Saviynt
- United Kingdom
- Upto £60,000 plus benefits
IAM developer/ Consultant is required for a global consultancy who are looking to expand their deployment team within the UK Looking for a IAM developer who has experience with at least one of the following vendors Saviynt, Clearskye, Beyond Trust or Okta You will be part of a deployment team, involved in a number of high profile projects Key duties will be: implement IAM solutions to ensure secure access to applications, systems, and data for authorized users. This may involve integrating technologies and standards such as SAML, OAuth, LDAP, and RBAC. Conduct IAM audits and assessments: to identify vulnerabilities, gaps, and areas for improvement. Provide IAM support and troubleshooting and resolve incidents related to user access, authentication, and authorization.
- Lead Cyber Security Incident Response Consultant.
- United Kingdom
Seeking skilled and passionate UK-based individual for a Lead Cyber Security Incident Response Consultant opportunity 3 core skillsets for the role Hands on technical incident response (triage and planning). Business consultancy (engaging with clients). Commercial awareness. Being able to engage in business growth conversations. Consultancy experience is an essential as it the ability to visit clients and the office. Additional experience will include, but not be limited to: Developing incident response strategies, guides and procedures for effective incident handling Proactive and reactive defense plans based on cyber threat actors' techniques Offering guidance, supervision, and fostering opportunities for team development Significant career development opportunities for the right individuals.
- OUTSIDE IR35 Contract- Functional tester- SC clearance Microsoft Windows Server
- Outside IR35 contract
Front End Functional tester with SC clearance needed for an Outside IR35 project. Current valid SC clearance is required Experience with functional testing with exchange, sharepoint, SQL and other applications relating across a windows server Migration to 2019. Must be able to get to Central London 3 days a week. Jira, Wiki documentation and automation experience highly desirable.
- ForgeRock Consultant- UK
- United Kingdom
- Upto £100,000 plus benefits
ForgeRock Consultant/ Architect is require for niche consultancy who are looking to expand their presence within the UK/European Market Looking for a lead IAM architect, ideally with ForgeRock experience but would consider other vendors, But looking for someone who is able to advice and consultant with Clients but have the implementation background so they can get involved in projects as and when needed. Key duties will be: Provider IAM consultancy to clients, with a focus on ForgeRock Product stack ·Responsible for the design and implementation of ForgeRock solutions ·Install and configure ForgeRock stack to meet customer authentication and authorization requirements, ·Design and implement OAuth2 protocol using ForgeRock OpenAM, ·Design and develop OpenAM custom authentication modules, ·Configure ForgeRock stack to protect RESTful API, ·Troubleshoot and support ForgeRock IAM stack. This is a great role to join a niche play as they look to kick of their European expansion