Bridging the Cybersecurity Skill Gap: Re-Thinking Job Profiles
summary
Randomly selected 12 security job ads go to 10 junior candidates (120 pairings) and prompt a controlled experiment: real candidates who say they would not apply see their actual CVs mixed with crafted ideal CVs and sent to hiring managers. Findings: 82% would not apply because of experience and certification demands; ChatGPT drafts also add unrealistic experience. Managers pick the scared-away applicants anyway — 11 of 12 times managers pick at least one real CV — and job ads routinely list inappropriate required certs (CISSP for entry). Fixes: mark optional skills, use “X of Y” requirements, and state a clear development path.
AI-written summary · about
chapters (8)
- 0:00RSAConference 2023
- 7:00Problem statement: The cybersecurity skill gap
- 11:25How applicants evaluate job descriptions
- 18:23How hiring managers select
- 24:05Findings: Whom did the hiring managers select?
- 30:21Findings: Are job descriptions crap?
- 31:48Improvement of job descriptions
- 33:59Bridge the Gap: Apply Research Results!
related talks
51mBridging the Talent Gap: How Certifications, Upskilling, and AI Can Help
48mSearching for a Cyber Unicorn: Is it Possible to Find a Perfect Candidate?
40mA Sustainable Security Workforce Starts at the Local Coffee Shop
45mFuture-proofing Your Career in Cybersecurity
36mLeveling Up your Cybersecurity Career by Hacking Your Mental Programming
40mUpskilling, Credentials and Soft Skills: Closing the Cyber Workforce Gap
27mChallenging Barriers to Entry and Rejection
40mRSAC College Day Panel - Exploring Cybersecurity Job Opportunities