Rethinking the cyber security recruitment debate and if qualifications matter

Cyber-attacks are now among the world’s fastest-growing crimes, with private and state-sponsored cybercrime blooming into an impactful industry.

Illustrating this change, the global management consulting firm McKinsey & Company has valued the potential cost of that crime to global organisations at around $265 billion by 2031.

Who is best to take up the vital mantle of cyber security professional and what qualifications should they have?

Traditionally cyber security professionals have taken on the role as a mid-career move from a different role, taking on new prioritises to prevent cyber-attacks, lead security software adoption, provide security training and spear-head recovery processes if a breach occurs.

It’s understandable then that those already educated individuals are likely to already have industry experience and/or a Bachelor's or Master’s degree in IT or cyber security. But is this industry-veteran path the best way forward?

There were around 134,690 Australians employed in cyber security in 2021 according to the Cybersecurity Workforce Study 2021, however demand for cyber security analysts continues to outstrip supply.

The University of NSW outlines that technical skills for prospective cyber security analysts should include networking configuration knowledge, operating systems expertise, cyber security response skills, ability to manage defensive controls such as firewalls, endpoint protection, use of programming skills, data analytics, cloud computing knowledge and ethical hacking skills.

VIEW ALL

The university further outlines that in Australia at least a bachelor’s degree in programming, IT or a related field would be useful to gain employment in cyber security; while highly prized positions would likely require master’s qualification and industry experience.

Swinburne University of Technology recommends an initial qualification or Bachelor’s Degree in cyber security, computer science, information and communication technology or related field; before seeking industry experience in an information technology department. Relevant industry certification and Master’s Degree are also recommended for their favour with employers.

Palo Alto Networks Australia and New Zealand vice president Steve Manley said cybersecurity is a vast industry with an equally vast array of roles.

“While some roles require specific qualifications, the requirements for entering the industry can vary; therefore, qualifications shouldn't discourage anyone from considering a career,” he said.

“There are many avenues for those without qualifications to enter the field, including enrolling in free courses; such as our Certified Cybersecurity Entry-level Technician course.

“With the industry facing a potential skills gap of around 30,000 professionals, the Federal Government offers many reskilling/transition courses. Regardless of background, everyone has something to contribute to the cybersecurity industry.

“The importance of keeping one's skills sharp cannot be overstated in today's rapidly evolving cybersecurity landscape, where threats continue to increase and advance at an unprecedented pace.

“As cyber threats become increasingly sophisticated, cybersecurity professionals must constantly hone their skills to safeguard against these dynamic challenges effectively. This is where certifications can play a critical role in staying employed in cybersecurity.”

Recruitment in the cybersecurity industry is experiencing notable shifts as it faces increasingly sophisticated threats and an ongoing skills gap, he said.

“Organisations are not only seeking technical proficiency but also placing increased emphasis on recruits from diverse backgrounds who can bring different perspectives and ideas to the table, keeping the industry ahead of threats,” Mr Manley said.

“This change reflects our broader recognition of the need for effective collaboration, communication, and adaptability to navigate the complex threats we expect to face.

“Cybersecurity companies seek people passionate about learning and staying attuned to the latest developments. They must exhibit critical thinking and problem-solving abilities, allowing them to explore complex threats and develop innovative solutions.

“The human element remains a critical factor in an organisation’s ability to defend against cyber adversaries. Therefore, soft skills, such as effective communication and influencing and educating others, are invaluable assets for cybersecurity professionals.

“Recognising that often, the human factor becomes the weakest link in security, education, and awareness of our digital safety and well-being has never been more important. Developing the above skills is imperative to bridge the gap between technology and people. Through education initiatives such as our CyberFit Nation program, a free online program of cybersecurity masterclasses and clinics, we can close the gap in cybersecurity education and foster a security-conscious culture within organisations.”