Cybersecurity talent shortage requires new approach beyond recruitment

The cybersecurity talent shortage in the United States is a worsening crisis, with the global workforce gap reaching 4.8 million unfilled roles. This gap is increasingly characterized by critical skill needs rather than just a lack of personnel. Organizations with understaffed security teams face significant financial repercussions, incurring millions more per data breach, based on information published by Smarter MSP.

The cybersecurity talent shortage is more than a recruitment issue; it's an ecosystem problem involving workforce design, retention, and operating models. Many managed service providers (MSPs) seek experienced professionals for entry-level salaries, expecting expertise across multiple domains. Andrew Curtis, founder and CEO of CiBRAI and Gadget Access, suggests that MSPs should focus on building talent from within by training existing help-desk, network, systems, and cloud engineers for security roles. Creating clear career paths and providing supervised, practical experience are crucial. Retention is as vital as hiring, with burnout from alert fatigue and lack of advancement being key drivers of employee turnover.

AI can assist by automating repetitive tasks and enriching data, allowing human analysts to focus on complex decision-making and customer context. Curtis advocates for a human-plus-AI model, emphasizing that humans remain accountable for critical actions. Partnering for specialized capabilities like digital forensics or malware analysis can also alleviate internal staffing pressures. The core recommendation is to stop searching for finished professionals and start developing them through internal training, meaningful experience, and strategic use of AI.

Source: Smarter MSP