CYBERSECURITY REVIEW8 JULY 2025IN MY OPINIONAs Security leaders, we hear all the time about the shortage of qualified candidates to fill our open positions. However, this isn't a new problem. In fact, it has existed for 10+ years at this point. Compounding this problem is the "Great Resignation", and the (still forming) consensus that some significant percentage of your employee base is thinking of leaving their role in the next year. Hiring entry levels roles to help address this gap is often discussed, but rarely implemented. It doesn't take long on any job-hunting forum or cybersecurity-focused social media to see frustration from jobseekers with entry-level postings. It's common to see entry-level roles that require 4+ years of technical experience, knowledge of multiple scripting/programming languages, and certifications that take thousands of dollars and years of experience to achieve. For jobseekers looking to break into the field, these are significant and very challenging obstacles to overcome. You see the result of this imbalance everywhere in the industry. Any time I speak in front of students or talk to candidates looking to break into the field, the most common question I get asked is how to "get your foot in the door." On the surface, the case against creating true Entry Level roles is strong. Employers worry it will take too long to train less experienced staff, and they won't be able adequately to secure their organization while that happens. Without a doubt, some situations require specific skills and expertise where Entry Level isn't appropriate. However, I think many organizations would be surprised how much upside there is to hiring Entry Level roles deliberately and strategically. THE RENEWED IMPORTANCE OF ENTRY LEVEL ROLESBy Brenden Smith, Chief Information Security Officer, FirstBankBrenden Smith
< Page 7 | Page 9 >