Is the Cybersecurity Job Market Really That Bad?

Two conflicting narratives exist simultaneously in cybersecurity hiring. The first: there is a global shortage of 3.5 million cybersecurity professionals, and companies cannot hire fast enough. The second: entry-level job seekers are sending hundreds of applications and hearing nothing back.

Both narratives are accurate. The apparent contradiction is explained by a structural mismatch, not a lack of opportunity.

The Mismatch Problem

The 3.5 million figure is not primarily composed of unfilled entry-level roles. It is dominated by mid-to-senior positions requiring several years of specialist experience — the roles organisations genuinely cannot fill because the pipeline of experienced professionals is insufficient to meet demand.

Entry-level roles exist, but they are few relative to the volume of applicants competing for them. A SOC analyst position at a well-known organisation will routinely attract several hundred applications.

The Ghost Job Problem

A significant proportion of cybersecurity job postings are not active searches. Organisations post roles to build pipelines, comply with internal policies, or simply because listings were never taken down after positions were filled internally.

Where Real Hiring Actually Happens

• Company career pages, where listings are more likely to represent active searches
• Community referrals from conferences, Discord servers, and local security meetups
• Direct outreach to hiring managers and team leads, bypassing the ATS entirely
• Managed security service providers (MSSPs) and consultancies with ongoing entry-level pipeline needs
• Government and defence sector programmes that actively recruit career changers

The Realistic Assessment

The market is not good for underprepared candidates with a single certification and no practical portfolio. It is genuinely strong for candidates with demonstrable skills, relevant experience — even if built independently — and a focused job search strategy.

The job market is not the problem for most people who are struggling. The preparation strategy is.