Header image

ISC2: Hands-On IT Experience More Valuable in Cyber Hiring

Training for entry-level and junior-level cybersecurity team members was mostly noted to last between four and nine months.

Previous IT work experience alone would make 90 percent of cybersecurity hiring managers consider a candidate.

According to a report from ISC2 and covered by DIGIT, while entry-level cybersecurity certifications would be a consideration for 89 percent of respondents, compared with 81 percent who would consider those with IT, cybersecurity, or computer science education alone, indicating a shift toward hands-on skills.

Training for entry-level and junior-level cybersecurity team members was mostly noted to last between four and nine months, while 91 percent of respondents emphasised the value of professional development opportunities for such members.

Additional findings revealed process and procedure documentation, alert and event management, and reporting to be the leading tasks for entry-level professionals, while junior-level staff members were mostly asked to do backup, recovery, and business continuity, incident detection, and alert and event management.

Such a report "reveals how cybersecurity hiring managers recognize the importance of providing opportunities to the next generation of cybersecurity professionals," said ISC2 Chief Qualifications Officer Casey Marks.


Dan Raywood
Dan Raywood

Dan Raywood is a B2B journalist with 25 years of experience, including covering cybersecurity for the past 17 years. He has extensively covered topics from Advanced Persistent Threats and nation-state hackers to major data breaches and regulatory changes.

He has spoken at events including 44CON, Infosecurity Europe, RANT Forum, BSides Scotland, Steelcon and the National Cyber Security Show, and served as editor of SC Media UK, Infosecurity Magazine and IT Security Guru. He was also an analyst with 451 Research and a product marketing lead at Tenable.

Dan Raywood
Dan Raywood

Dan Raywood is a B2B journalist with 25 years of experience, including covering cybersecurity for the past 17 years. He has extensively covered topics from Advanced Persistent Threats and nation-state hackers to major data breaches and regulatory changes.

He has spoken at events including 44CON, Infosecurity Europe, RANT Forum, BSides Scotland, Steelcon and the National Cyber Security Show, and served as editor of SC Media UK, Infosecurity Magazine and IT Security Guru. He was also an analyst with 451 Research and a product marketing lead at Tenable.

Upcoming Events

No events found.