Cybersecurity

There will be excellent employment opportunities in the cybersecurity industry in the coming years. Job opportunities for information security analysts—a popular career option—are expected to increase by 33 percent from 2023 to 2033 (or much faster than the average), according to the U.S. Department of Labor (DOL). The average expected growth for all occupations is 4 percent. The career of information security analyst is expected to be the fifth, fastest-growing occupation in the U.S. through 2033. Some employment sectors will grow faster than others. Here’s a breakdown of the fastest-growing employment sectors for analysts by industry sector:

• computer systems design and related services: +51.9 percent
• warehousing and storage: +42.8 percent
• software publishers: +42.5 percent
• computing infrastructure providers, data processing, web hosting, and related services: +42.2 percent
• professional, scientific, and technical services: +41.4 percent
• securities, commodity contracts, fund, trusts and other financial investments and vehicles and related activities: +40.3 percent
• web search portals, libraries, archives, and other information services: +39.4 percent

Job opportunities at local and state government agencies should be good. Employment for information security analysts with local government agencies (excluding education and hospitals) is expected to increase by 24 percent through 2033. Job growth of 22.3 percent is expected for analysts at state government agencies (excluding education and hospitals). Although there is a strong need to protect cybersecurity infrastructure and sensitive government data, the employment outlook at federal agencies is uncertain due to ongoing staffing cuts at federal agencies.

There are many other career paths in cybersecurity. Here are employment outlooks for other IT professionals through 2033:

• computer and information research scientists: +26 percent
• software developers: +18 percent
• risk managers: +17 percent
• computer and information systems managers: +17 percent
• computer network architects: +13 percent
• database architects: +11 percent
• database administrators: +8 percent
• hardware engineers: +7 percent
• network and computer systems administrators: -3 percent

Employment opportunities in the cybersecurity industry will be strong because:

• Cyberattacks have become more frequent, sophisticated, and damaging in recent years; Statista.com reports that the global cost of cybercrime will grow to $15.6 trillion in 2030.
• The pandemic prompted more people to work-from-home (and many still do), which has created increased demand for home-focused cybersecurity and cloud computing protective measures by employers.
• The use of e-commerce (and the Internet in general) has skyrocketed, which has increased the need to protect both businesses and consumers from cybercrime.
• There has been a strong increase in the use of Internet of Things–connected devices, which creates more cybersecurity protection issues.
• Government regulation is increasing; “Governments around the world are enacting stricter cybersecurity, data protection, and privacy regulations,” according to the Cloud Security Alliance, creating the need for cybersecurity professionals with expertise in these areas.
• A rapidly aging workforce and dearth of new workers in the field (including those needed to replace people who retire or leave the field) have created significant staffing shortfalls.

Staffing shortages continue to create major challenges in the cybersecurity industry. In 2024, there were more than 5.4 million cybersecurity workers worldwide, according to the ISC2 Cybersecurity Workforce Study, 2024. The cybersecurity organization estimates that more than 4.7 million additional workers are needed to meet demand. In North America, there were nearly 1.5 million cybersecurity workers, but a workforce gap of 542,687 workers. “The current macroeconomic environment has normalized higher costs, lower revenue, and worker shortages,” according to ISC2. “As a result, many organizations are choosing to implement cost-saving cutbacks (e.g., budget cuts, layoffs, hiring freezes, promotion freezes) to support their balance sheet. However, these organizational cutbacks—especially within cybersecurity teams—have implications that extend beyond just cost. Cybersecurity professionals are critical protectors against risk and vulnerability, but cutbacks throttle their productivity, satisfaction, and skill development.”

Cybersecurity professionals are also leaving the field because they are overworked, believe they are underpaid, are experiencing poor working conditions, and facing other challenges. In 2023, the IT association ISACA and the tech company Adobe surveyed cybersecurity workers regarding work-related issues, and published the results of its survey in State of Cybersecurity 2024. Respondents cited the following factors as causing cybersecurity professionals to leave their current jobs:

• recruited by other companies: cited by 50 percent of respondents
• poor financial incentives (e.g., salaries, bonuses): 50 percent
• limited promotion and development opportunities: 46 percent
• high work stress levels: 46 percent
• lack of management support: 34 percent
• poor work culture/environment: 32 percent
• limited remote work possibilities: 32 percent
• inflexible work policies: 22 percent
• limited opportunities to work with latest technologies (e.g., artificial intelligence): 19 percent

Salaries remain high for cybersecurity professionals due to worker shortages, rising demand, and expertise shortages in some cybersecurity specialties. The DOL reports that information security analysts earned median annual salaries of $124,910 in 2024, according to the DOL. This was more than double the median annual salary ($49,500) for all workers. Workers in the following cybersecurity careers received the highest average salaries in 2025, according to CyberSeek:

• cybersecurity manager: $152,403
• security architect: $150,989
• cybersecurity engineer: $143,992
• penetration and vulnerability tester: $132,457
• security analyst: $115,795
• cybersecurity specialist: $88,149
• IT security auditor: $85,221

Since cybersecurity professionals are in such short demand, hiring managers are often willing to increase salary offers to those with specialized skills. Thirty-seven percent of managers surveyed by Robert Half for its 2025 Salary Guide said that they would increase salary offers for those with cybersecurity expertise. Forty-four percent said they would do so for those with artificial intelligence expertise.

Salaries are also higher for those who have earned in-demand, industry certifications, so pursuing these credentials is highly recommended for both job security and a higher income. Cybersecurity-certified professionals in North America earned average salaries of $113,235, according to Skillsoft’s IT Skills and Salary Report, 2024–25. “In many cases, IT certifications will differentiate you from other applicants vying for the same role by acting as an external metric of quality that hiring leaders value,” according to ISACA, which offers certification programs. “This increase in marketability produces a competitive edge over your peers and emphasizes your commitment to your professional development and continued education.” Skillsoft reports that some of the highest-paying (by average salary) certifications in North America were:

• AWS Certified Security-Specialty: $202,959
• Certified Information Systems Security Professional: $164,621
• Microsoft Certified: Cybersecurity Architect Expert: $163,246
• CCNP Security: $162,311
• Certified Cloud Security Professional: $159,483
• Certified in Risk and Information Systems Control: $158,458

In the future, more companies will hire outside contractors to help reduce technology expenditures and address staffing shortfalls. Forty-seven percent of tech managers who were surveyed by Robert Half for its Technology Salaries and Hiring Trends 2025 Salary Guide said that they planned to bring in more contract professionals to provide specialized skills and critical support for key projects. Twenty-seven percent of managers planned to use contract talent in the areas of security, privacy, and compliance.

Researchers at the World Economic Forum and the University of California Berkeley offer the following prediction for cybersecurity in 2030: “Cybersecurity will be less about ‘defending fortresses’ than moving toward acceptance of ongoing cyber-risk, with a focus on bolstering resilience and capacity for recovery. As markers of this trend, passwords could be nearly obsolete by 2030, cybersecurity will be widely taught in primary schools, and cryptocurrencies will be more effectively regulated. Still, while investments in more secure systems and basic cyber hygiene will raise many above the ‘cyber poverty line,’ progress is likely to be unevenly distributed across communities and geographies.”

Advanced artificial intelligence (AI) is starting to be used by cybersecurity professionals. But “use of AI in security operations remains in its infancy,” according to a global survey of cybersecurity professionals for the State of Cybersecurity 2024 report from ISACA and Adobe. “Threat detection/response (28 percent) and endpoint security (27 percent) are the most popular applications.”