Biggest cybersecurity risk may be lack of qualified talent

ST. LOUIS (KMOX) — As our society becomes more dependent on technology, we'll still need human beings to keep those networks secure. But as KMOX News discovered, there aren't enough trained people to go around.

The cybersecurity talent gap is significant. In the greater St. Louis metropolitan area alone there are more than 4,500 cybersecurity job listings.

Tony Bryan, Executive Director of CyberUp, said companies often want and need more than entry-level skills. 

"4,500 open roles — that's a big number," Bryan said. "And it's going to be really hard to get to that, and even come close to full employment within that space so we have to be creative on that entry-level component and really take a look at how we're hiring and the type of people we're hiring and investing into entry-level roles to grow the overall workforce."

Nationwide, the federally-funded CyberSeek program reports more than 310,000 unfilled cybersecurity openings.

Bryan pointed out the St. Louis region offers multiple options for cybersecurity training, from four-year degrees to two-year certificate programs to the apprenticeship programs offered by CyberUp. 

Bryan said potential candidates have to understand the commitment required. 

"It's gonna be long hours, it's gonna be a lot of work, it's gonna be tough situations," he said.

Bryan added many employers are looking for a mindset as much as skills. 

"It's definitely a career field that has a higher purpose and that's where a lot of people are drawn to it where you are protecting networks and if you're working for the government protecting potential secrets that fall within that," he said.

Does the talent gap pose a risk?  

"The number one organization that's really struggling to fill talent would be the Department of Defense and the government aspect because they have stricter requirements around clearances and degree requirements and they're competing with corporate America and the salaries that they're paying, so I have a little concern with that," he said. 

But Bryan said employers in both the public and private sectors appear to be adapting to the realities of the talent pool, "not lessening the minimums to get in but making them more flexible in doing the degree requirements. I know Amazon and Apple have started to waive and look at skills more than just paper."

Bryan said many employers are willing to train hires or provide education reimbursement if they find the right candidate.

October is Cybersecurity Awareness Month.

© 2019 KMOX (Entercom). All rights reserved.