Sometimes the cybersecurity career-related questions come from high school or university students. But lately, more and more midcareer professionals are finding that cybersecurity roles offer a more stable and lasting career path in our age of AI enhancements.
And interest in this topic is coming from surprising places at the moment, from laid-off federal employees to experienced IT staff (like programmers, communications specialists and help desk workers) who are seeking “safer” cyber roles to nontechnical experts in areas like contracts, legal work, management and more.
And here is a new twist: I am hearing from technical recruiters in the Washington, D.C., area asking me how to attract non-cyber professionals with technical backgrounds into cyber roles. Their reason? Experienced cybersecurity professionals are making too much for the new salary ranges government contractors can offer in new federal contracts.
As a side note, this trend is a part of the wider global impact that AI advances are having in most career positions. See this video for a greater understanding of this broader topic:
CYBER CAREER ADVICE
Switching careers can be a daunting task, especially when transitioning into a field as dynamic and critical as cybersecurity. However, with the right guidance and resources, this move can be both smooth and rewarding. This blog aims to provide comprehensive advice for those considering a switch into a cybersecurity career, leveraging insights from various authoritative sources.
Cybersecurity offers a wide range of career paths, each with its own set of responsibilities and required skills. Some of the top cybersecurity careers include security analysts, penetration testers, security architects and chief information security officers. This article from TechTarget describes these roles and the skills needed for each. For instance, security analysts focus on monitoring and protecting information systems, while penetration testers identify and exploit vulnerabilities to improve security measures.
One of the key aspects of transitioning into cybersecurity is leveraging your existing skills. Many professionals come from IT backgrounds, which provides a solid foundation for cybersecurity roles. This article from CyberDegrees.org discusses how IT professionals can transition into cybersecurity by building on their existing knowledge of systems, networks and coding. Additionally, soft skills such as problem-solving, attention to detail and communication are highly valued in cybersecurity roles.
Gaining practical experience is essential for a successful transition into cybersecurity. Engaging in hands-on training, internships and real-world projects can help you apply theoretical knowledge to practical scenarios. An article on Coursera emphasizes the importance of continuous learning and staying updated with the latest cybersecurity trends and technologies. This ongoing education can be achieved through online courses, workshops and industry conferences.
In addition, most people have questions regarding education needs and certifications, which play a crucial role in establishing credibility and expertise in cybersecurity. Obtaining relevant certifications such as CompTIA Security+, Certified Information Systems Security Professional (CISSP) and Certified Ethical Hacker (CEH) can significantly enhance your employability. These certifications demonstrate your commitment to the field and provide you with the necessary knowledge to tackle cybersecurity challenges.
Here are some additional career-change tips to consider:
Networking and Professional Development: Building a professional network is crucial for career growth in cybersecurity. Joining cybersecurity communities, attending industry events, and participating in online forums can help you connect with experienced professionals and stay informed about job opportunities. This article from Dice highlights the importance of networking and how it can open doors to new career prospects.
Resilience and Adaptability: The cybersecurity field is known for its fast-paced and ever-changing nature. Professionals must be resilient and adaptable to keep up with emerging threats and technologies. But what does this mean in a cyber career context?
Here's an excerpt from an article from the Global News Wire: “Cybersecurity professionals are facing unprecedented market volatility and shifting employer demands. INE Security, a global leader in cybersecurity training and certifications, is offering new insight into how cybersecurity professionals can build resilient careers by strategically balancing certifications and hands-on experience.
"Recent industry data underscores the critical need for this balanced approach. The human element was a component in 68 percent of breaches last year, according to Verizon's 2024 Data Breach Investigations Report, highlighting the urgent need for well-trained cybersecurity talent. Meanwhile, a McKinsey & Company study reveals that 87 percent of companies report existing or anticipated skill gaps within the next few years.”
Special Considerations for Veterans: Veterans possess unique skills and experiences that can be highly valuable in cybersecurity roles. The National Initiative for Cybersecurity Careers and Studies (NICCS) offers specialized training programs for veterans to help them transition into cybersecurity careers. The National Initiative for Cybersecurity Careers and Studies (at the Cybersecurity and Infrastructure Security Agency website) provides information on these programs and how veterans can leverage their military experience to succeed in cybersecurity.
I wrote this blog last year on this Cybersecurity and Infrastructure Security Agency program as well as other helpful resources for cyber careers.
Real-Life Success Stories: Learning from real-life success stories can provide inspiration and practical insights for your career transition. I wrote this blog last year, which describes the story of an elementary school teacher who successfully transitioned into cybersecurity by leveraging transferable skills and continuous learning.
Here’s an excerpt: “I moved back to Montana to work in state government. During the 2021 legislative session, a topic of discussion was the demand for cybersecurity professionals exceeding the supply. The conversation sparked my interest in cybersecurity, so I began talking with employees on the security team to learn more about the profession. I learned two critical things. First, cybersecurity was not someone sitting in a dark room, wearing a hoodie, looking at a computer screen with green ones and zeros. Second, I was already using cybersecurity principles in my current job without realizing it. When I combined my interest in cyber with the job growth projections and lack of diversity, I knew I wanted to work in cybersecurity.”
FINAL THOUGHTS
Switching into a cybersecurity career requires careful planning, continuous learning and leveraging existing skills. By understanding the cybersecurity landscape, identifying your career path, obtaining relevant education and certifications, gaining practical experience, and building a professional network, you can successfully transition into this rewarding field. Stay resilient, adaptable and proactive in your approach, and you will find ample opportunities to grow and succeed in cybersecurity.
To address some real-time cyber job issues, including a Q&A session on this topic, there is an CISO Insights online conversation on May 13, 2025, featuring industry experts, including me; registration is free. The webinar is called "Where Are the 3 Million Cyber Jobs? Cyber Careers & Your Next Tech Role."
