For a long time cybersecurity was presented as a near guaranteed opportunity. Learn the skills, earn the certifications, and the jobs would follow.
Today the reality looks very different.
Recently I went through the job search process myself. At the same time several people reached out to me asking how they could start a career in cybersecurity. After going through the hiring process and speaking with many people in the field, I found myself giving an uncomfortable answer.
Breaking into enterprise cybersecurity today is extremely difficult. In many cases the deciding factor is not simply skills or certifications. It is whether you know someone who can open a door.
This is not a new problem. When I was a child I heard a phrase that still perfectly describes the situation today.
You cannot get experience without a job and you cannot get a job without experience.
That paradox has only intensified.
The Reality of the Modern Job Market
Cybersecurity job postings still appear everywhere, but the dynamics have changed. Many organizations receive hundreds or even thousands of applicants for a single position. Recruiters increasingly rely on automated filtering systems that remove candidates before a human ever reviews their resume. [1]
Even experienced professionals are feeling the impact. Technology layoffs in recent years have flooded the market with skilled engineers, analysts, and developers competing for the same roles. [2]
In my own case, after decades in the field, I still had to rely on my personal network to create an opportunity. Without that network I suspect the process would have taken far longer.
That raises an uncomfortable truth for newcomers. Connections matter more than ever.
Cybersecurity Is Changing Faster Than Ever
Another factor complicating the situation is the pace of technological change. Automation, artificial intelligence, and machine learning are transforming how organizations operate and secure their systems.
Tasks that once required teams of specialists can now be partially automated. Security monitoring platforms use machine learning to identify threats and reduce manual analysis. [3]
Infrastructure itself is changing. In the past administrators spent time diagnosing and repairing systems. Today the philosophy is different. Instead of repairing a server, organizations often destroy and rebuild it through automated infrastructure pipelines or containerized environments. [4]
This shift has changed the nature of many traditional roles. The classic Windows administrator or Linux administrator role is evolving into infrastructure automation and cloud engineering.
The skills required are different from what they were even ten years ago.
The Future of Offensive Security
Red team operations and penetration testing are also evolving. I have written previously about the future of penetration testing and the growing role of automated and artificial intelligence driven security testing.
Security scanning tools already automate large portions of vulnerability discovery. Artificial intelligence systems are increasingly capable of identifying misconfigurations and attack paths across complex environments. [5]
Human expertise still matters, especially for creative attack chains and real world adversary simulation. However, the role is shifting toward higher level analysis rather than manual testing.
Many veteran practitioners are watching this transition closely and asking an important question.
What does the next decade actually look like?
The Question We Must Answer
As cybersecurity leaders we have a responsibility to guide the next generation. Every week students and early career professionals ask the same question.
How do I break into cybersecurity?
The traditional advice was straightforward. Learn networking. Learn operating systems. Study security fundamentals. Earn certifications.
Those things still matter. But they are no longer sufficient by themselves.
Today success often requires a combination of deep technical curiosity, adaptability, and community engagement. Building relationships through conferences, local security groups, and professional communities can be as important as technical training.
That may not be the answer people want to hear. But it is the reality many professionals are experiencing.
The Age of Uncertainty
We are entering a period where technology is advancing faster than career paths can stabilize. Artificial intelligence, machine learning, and automation are reshaping the landscape of technology work itself.
In cybersecurity we are used to dealing with uncertainty. Threats evolve constantly and defenders adapt.
Now the profession itself is evolving just as rapidly.
If we are honest, none of us fully know what this field will look like in ten years.
The best we can do is stay close to the edge of change. Learn continuously. Adapt quickly. Build relationships and communities that help us navigate the unknown.
Cybersecurity is still one of the most fascinating and important fields in technology.
But the path into it is no longer simple.
And that is the conversation we need to start having.
About the Author
Len Noe is a Solutions Architect at BeyondTrust, Transhuman, Podcaster, International Cyber Security Speaker, Author, Technical Evangelist, and Biohacker with 11 implanted microchips. A former blackhat and ex-1% motorcycle club member with more than 30 years in technology, he has presented in over 70 countries and is featured in the documentary I Am Machine, which premiered at DEF CON 2025.
References
- Resume Screening Automation in Hiring
Description: Overview of automated applicant tracking systems used to filter job applicants before human review.
https://hbr.org/2021/09/recruiting-software-and-the-future-of-hiring - Technology Industry Layoffs and Labor Market Impact
Description: Analysis of layoffs across the technology sector and their impact on the job market.
https://www.crunchbase.com/news/tech-layoffs - Machine Learning in Security Operations
Description: Discussion of how machine learning is used to detect and respond to cybersecurity threats.
https://www.ibm.com/topics/machine-learning-security - Immutable Infrastructure and Container Based Deployment
Description: Explanation of modern infrastructure practices where systems are replaced instead of repaired.
https://martinfowler.com/bliki/ImmutableServer.html - Artificial Intelligence in Penetration Testing and Vulnerability Discovery
Description: Research and industry analysis on AI assisted security testing tools.
https://www.gartner.com/en/articles/how-ai-is-transforming-cybersecurity