Cyber Security Announcements

Key Cybersecurity Roles on the Rise - Is the Market Bouncing Back?

by CyberSN on (March 19, 2025 at 5:51 AM)

[Boston, Massachusetts] – After a significant drop in overall cybersecurity job postings from 467,266 in 2022 to 363,564 in 2023, the decline continued in 2024 with 347,419 total postings. However, despite this overall decrease, job postings for 10 of the top 25 functional cybersecurity roles saw an increase in 2024, indicating shifts in hiring priorities.
 
CyberSN’s latest U.S. Cybersecurity Job Posting Data Report highlights areas of renewed demand for cyber talent, driven by regulatory requirements, shifting workforce strategies, a growing emphasis on governance, risk, and compliance (GRC) expertise, and the need to fill cyber capability gaps.
 
"It’s exciting to see cybersecurity job postings on the rise again, though it is not surprising. Organizations can only pause forward motion for so long. As the complexity of cybersecurity threats continues to evolve, our Cyber Workforce Risk Management Practice is seeing organizations prioritize talent retention, development, and workforce planning to address critical gaps and optimize security teams. Our protectors need protection,” said Deidre Diamond, Founder & CEO of CyberSN.
 
Chief Security and Technology Officer at CyberSN, Dom Glavach emphasized the role of compliance in shaping hiring trends. “Regulatory pressures on CEOs and Boards of Directors are reflected in our cybersecurity job posting data,” he said. “Compliance-driven requirements such as the SEC breach reporting rules and expanded FTC enforcements are directly influencing workforce decisions.”
 
The latest data in the report highlights the top 10 functional cybersecurity roles that saw the most growth over the past year.
 

Top 10 Cybersecurity Functional Roles That Increased from 2023 to 2024:

  1. Cybersecurity / Privacy Attorney (+40.74%)
  2. Red Teamer (+29.18%)
  3. Cybersecurity Sales Engineer (+26.22%)
  4. Cyber Threat Intelligence Analyst (+14.24%)
  5. Cybersecurity Specialist (+12.42%)
  6. Incident Responder (+12.14%)
  7. Product Security Engineer (+12.08%)
  8. Governance, Risk & Compliance (GRC) Analyst (+11.81%)
  9. Reverse Engineer / Malware Analyst (+6.66%)
  10. Cybersecurity Director (+4.91%)

Key Insights from the Report:

GRC Roles Drive Hiring Growth

  • Cybersecurity/Privacy Attorney experienced the largest increase in job postings, surging 40.7% from 2023 to 2024 and 19% from 2022 to 2024.
“The demand for Cybersecurity/Privacy Attorneys has grown dramatically, reflecting the increasing complexity of regulatory frameworks that organizations must navigate,” said Diamond.
 
Product Security Engineering & DevSecOps Show Signs of Recovery
After experiencing declines from 2022 to 2024, both Product Security Engineer and DevSecOps roles are showing early signs of stabilization.
 
  • Product Security Engineer job postings dropped by 52% from 2022 to 2024, then rebounded with a 12.08% increase from 2023 to 2024.
  • DevSecOps job postings saw a significant decline of 47.49% from 2022 to 2024. However, the rate of decline slowed with only a 7.76% decrease from 2023 to 2024.

Security Engineer and Analyst Roles Show Signs of Stabilization

For the past three years, Security Engineer and Security Analyst functional roles have consistently had the highest number of job postings in cybersecurity. However, both roles continue to experience year-over-year declines. While these roles saw sharp drops from 2022 to 2024, the rate of decrease has slowed, suggesting a potential stabilization in hiring demand:
 
  • Security Engineer
    • (-24.97%) from 2022 to 2024
    • (-4.68%) from 2023 to 2024
  • Security Analyst
    • (- 25.88%) from 2022 to 2024
    • (-13.87%) from 2023 to 2024
“It’s no surprise that Security Engineers and Analysts remain the top two cybersecurity roles, as they are the backbone of cyber teams, with more professionals in these positions than any other. They’re also feeder roles into leadership, making their decline a long-term risk for the industry,” said Diamond.
 
“The drop in job postings and rise in outsourcing, both near and offshore over the past two years will inevitably lead to operational failures. As hiring stabilizes, organizations are recognizing that they can’t continue to outsource these critical roles. Security teams need in-house cybersecurity professionals to monitor the growing attack surface, implement the right defenses, and develop the next generation of security leaders,” she added.
 

About the Report:

The CyberSN U.S. Cybersecurity Job Posting Data Report analyzes cybersecurity job postings across the last three years in the United States, identifying trends and shifts in the cybersecurity labor market.
 
The 2025 report offers insights into both rising and declining job postings across the CyberSN Taxonomy, helping organizations strategically plan hiring efforts while enabling cybersecurity professionals to navigate the evolving job market. The report analyzes all cybersecurity functional roles, tracking an average of 140,000 monthly job postings to offer a comprehensive workforce analysis.
 

About CyberSN:

CyberSN empowers leaders to create work cultures that foster professional efficacy while significantly lowering cyber and operational risk. As a trusted partner in cybersecurity workforce management, CyberSN delivers solutions that drive talent acquisition, retention, development, and workforce efficiency. Powered by the CyberSN Taxonomy and Talent Intelligence Platform, CyberSN helps organizations build resilient, diverse cybersecurity teams and strengthen overall security operations.
 
Report Access: For full details and to view the complete report, please visit: U.S. Cybersecurity Job Posting Data Report.
 
For further information, interviews, or media inquiries, please contact the CyberSN Marketing Team at press@cybersn.com
 
 
Topics: People Research and Studies

See all