The Information Security Career Pathway 2025 and beyond
How can one get into information security?
At the start of this year, I wrote Getting into information security in 2024. As 2024 comes to a close, it’s time to update things.
From my previous article Is there really an information security jobs crisis? and The big lie of millions of information security jobs, it’s eminently clear that there are not millions of open information security jobs. There are perhaps in the range of 50,000 jobs. While no one knows the exact number, what is known is that it is not so easy to find information security jobs. If you don’t believe me, ask the people with a lot of experience who are finding it quite challenging to find a new job.
It’s not just me who noticed that the nonsensical figures of millions of open security jobs defy logic and economics. In October, Ira Winkler wrote an open letter to the ISC2 Board, calling them out about their job projections. They responded and admitted that there are not millions of open information security jobs. Instead, in a perfect world, there would be.
In Has the Cybersecurity Workforce Peaked?, Robert Lemos wrote that while training and credentialing organizations continue to talk about a “gap” in skilled cybersecurity workers, demand — especially for entry-level workers —…
