Few Junior Cybersecurity Roles Exist, and New Hires Take Months to Get Up to Speed

Experience requirements are narrowing the path for junior cybersecurity talent. According to SkillBit's The Shift to Continuous Cybersecurity Micro-Training report, 70% of organisations have no junior roles, or very few, open to candidates with less than two years of experience. Thirty percent of leaders said they were receptive to using interactive labs in place of experience credentials, and another 49.5% were open to the idea if shown evidence that it works.

Once hired, people take time to become productive. Some 57% of executives said new hires need an average of six months to reach full proficiency, with general IT knowledge and cybersecurity processes the most cited causes of delay. Skills decay is another concern: 39% of respondents said their teams face it, rising to 60% at companies with at least 50,000 employees. Those affected said it can weaken team readiness and morale, raise training costs and leave important tasks unattended.

Leaders are leaning towards smaller, more frequent learning. Seventy-one percent preferred 20-minute weekly online or interactive sessions over 30 to 40 hours of training once or twice a year. Urgent daily tasks were a leading reason staff missed development goals. About two-thirds favoured problem-solving skills that apply across technology stacks over expertise in specific tools, and leaders also valued curiosity, proactive learning and forensic skills.