Will AI Replace Cybersecurity Jobs? I Went Through the Data

WEBVTT
00:00:11.519 --> 00:00:14.160
Hey everyone, welcome to the Cyberman Show.
00:00:14.479 --> 00:00:22.239
Now I'm sure if you've been following AI, one of the most common things that people are discussing is is AI gonna replace my job?
00:00:22.879 --> 00:00:29.679
And I'm sure people in cybersecurity are wondering: will AI replace cybersecurity jobs?
00:00:31.359 --> 00:00:32.799
I think that's the wrong question.
00:00:32.960 --> 00:00:37.359
The right question is which new jobs is AI creating?
00:00:37.519 --> 00:00:39.519
Now what I did is I went through some data.
00:00:39.600 --> 00:00:49.119
I went through hiring data, funding data, earnings, workforce, studies, uh and the answer is much more interesting than the headlines.
00:00:50.879 --> 00:00:52.559
So it's not as simple.
00:01:09.760 --> 00:01:15.359
There is a 53% drop in tier one jobs in security operations.
00:01:15.520 --> 00:01:20.880
And I can validate this because I get a lot of CVs on LinkedIn from SOC analyst.
00:01:22.800 --> 00:01:40.240
There is approximate uh 25% drop in entry-level hiring at top 15 tech funds, uh tech funds globally, and uh 50% of 11 tasks will be automated by 2028 across all industries.
00:01:43.840 --> 00:01:50.880
But if you look at the full picture, there's a 12% increase in uh overall uh cybersecurity postings here on here.
00:01:51.280 --> 00:02:07.120
There is an active list of openings uh around over 500,000 globally, and then over six billion dollars have been raised in AI security funding, which is a new domain in 2025.
00:02:07.439 --> 00:02:12.319
And some of the reports are saying that there is a 56% wage premium for AI scale.
00:02:13.840 --> 00:02:19.120
So the real story is more interesting and more actionable, and that's why we are here.
00:02:19.920 --> 00:02:20.240
Okay.
00:02:21.120 --> 00:02:32.159
Now, what we have to do is we have to find our domain, we have to understand what's happening, and this will decide what happens in the next 18 months.
00:02:32.400 --> 00:02:42.159
So, as I said, there's a shrinking job role which includes SOC Tier 1, security architecture, admin level GRC, threat intelligence.
00:02:42.319 --> 00:02:44.240
We have to start pivoting now.
00:02:45.680 --> 00:02:49.599
We have to learn AI tools or move to a growing domain.
00:02:49.840 --> 00:02:56.719
Now, where it is bit stable and slowly shifting is vulnerability management, application security, and network security.
00:02:57.599 --> 00:03:00.240
We have to add AI skills on this side.
00:03:01.039 --> 00:03:10.000
This is actually growing is cloud security, data privacy, I am, penetration testing, IR, and digital forensics.
00:03:10.400 --> 00:03:13.200
Okay, now this is the right place.
00:03:13.439 --> 00:03:16.400
These are the hottest domains from cybersecurity perspective.
00:03:16.560 --> 00:03:23.680
Okay, now what we'll do is we will double-click on what I've just said.
00:03:26.080 --> 00:03:30.879
So let's take SOC and GRC where there's maximum impact.
00:03:32.960 --> 00:03:45.360
A company called Inteaser that claims that they have 98% accuracy in handling security incidents in security operations, and they can do triage in less than two minutes.
00:03:47.280 --> 00:03:53.120
Gartner says that 50% of L1 tasks will be automated by 2028.
00:03:56.800 --> 00:04:04.960
IBM says AI organization contain breaches 100 days faster in their recent breach report.
00:04:05.520 --> 00:04:08.719
And L1L2 roles are merging into a single tier tier.
00:04:08.960 --> 00:04:12.560
Remember, the role is not going, it's transforming.
00:04:12.719 --> 00:04:23.199
There's a new role, it's called AI augmented sock analyst, and if you look at the US job data, the salaries that are being offered are 85,000 to 120k.
00:04:23.839 --> 00:04:38.879
Similarly, what's happening is on the GRC side is that one 50% of enterprises have started using AI for compliance, which is up from 10% in 2021 as per Gartner.
00:04:39.199 --> 00:04:42.800
Okay, there's 62% efficiency improvement.
00:04:43.360 --> 00:04:43.759
Why?
00:04:43.920 --> 00:04:45.280
Because of automation, right?
00:04:45.519 --> 00:04:50.959
Things like data entry, report generation, control testing, evidence creation, it's getting uh automated.
00:04:51.199 --> 00:04:54.560
So admins are getting replaced, strategists are not.
00:04:54.959 --> 00:05:03.199
So there are new roles created called AI compliance specialists, and again the salary ranges in the US market are between 80k and 210k.
00:05:03.759 --> 00:05:13.280
Now, what is also getting affected in terms of uh domains is security architecture and then threat intelligence.
00:05:13.680 --> 00:05:14.000
Why?
00:05:14.240 --> 00:05:20.800
Because a lot of uh these jobs are now automated, they run on autopilot.
00:05:25.280 --> 00:05:27.600
Now, where is the demand exploding?
00:05:27.920 --> 00:05:31.040
Cloud security, IAM, data privacy, top three.
00:05:31.199 --> 00:05:34.000
But cloud security is the single best bet.
00:05:34.240 --> 00:05:39.600
There's a 77% skill gaps as per uh some of the reports.
00:05:39.680 --> 00:05:46.800
Now, whatever report I've mentioned, the in every slide that is there on my YouTube channel, you will find a link to this report.
00:05:46.879 --> 00:05:48.560
So I'm not making this out of thin air.
00:05:48.720 --> 00:05:51.120
I'm backed by data as I said previously.
00:05:51.360 --> 00:05:57.040
There's a 77% report skill gap in cloud security, that's your best bet.
00:05:57.199 --> 00:06:04.560
Uh cloud CNAP is a market, uh, it's growing uh from 5 billion to approximately 10 billion by 2030.
00:06:04.800 --> 00:06:08.560
And then similarly, I am there are 33,000 plus postings.
00:06:08.879 --> 00:06:19.439
Now, where the difference is NHIs, as per some of the cyber arc reports, non-human IDs out will outnumber humans by 82 is to one.
00:06:19.680 --> 00:06:28.959
For every human, there will be 82 non-human identities, and 78% of the organization don't have any AI identity policy.
00:06:29.120 --> 00:06:31.759
I'm sure you're understanding the pattern here.
00:06:32.000 --> 00:06:44.160
If you look at APSEC, similarly, 40% of co-pilot code suggestions have vulnerabilities as per reports, one security expert per 100 dev, that's the ratio today.
00:06:44.399 --> 00:06:49.680
More AI code, as we all know, everybody can be a builder now, means more app sec demand.
00:06:49.840 --> 00:06:59.600
Similarly, on data privacy, there's a 30% year-on-year demand increase, 68% more staff needed for AI governance, not fewer penetration testing.
00:06:59.840 --> 00:07:02.879
AI tools will create demand.
00:07:03.280 --> 00:07:05.920
We will have everyone creating software.
00:07:07.840 --> 00:07:23.519
Anything that is AI powered, which is pen testing GPTs, will make it easy for juniors or early in uh in the career uh folks to use these tools.
00:07:24.879 --> 00:07:26.399
Now there are acts coming.
00:07:26.480 --> 00:07:29.680
So example uh EU AI Act.
00:07:30.560 --> 00:07:33.120
It will drive new sort of compliance.
00:07:34.399 --> 00:07:37.120
Okay, and all this is structural in nature.
00:07:38.800 --> 00:07:44.720
Now remember this one line models are to be used, not to be believed.
00:07:44.879 --> 00:07:55.120
I'm repeating it again, models are to be used, not believed because AI doesn't know what it's doing in the context, right?
00:07:55.199 --> 00:07:59.759
So 29% of security teams trust AI to act independently.
00:08:00.160 --> 00:08:06.079
Okay, uh 80% witness unauthorized AI actions in the reports.
00:08:06.240 --> 00:08:12.879
Also, AI can triage 10,000 alerts, get 9998 right, but miss the two that matter.
00:08:14.240 --> 00:08:18.079
We as defenders have to be right every time.
00:08:18.160 --> 00:08:19.680
We can't trust AI.
00:08:21.680 --> 00:08:23.280
Now look at the anthropic.
00:08:23.680 --> 00:08:26.959
I I did this episode almost, I think, uh two weeks back.
00:08:27.199 --> 00:08:33.840
They came up with a report where they shared uh that Chinese state-sponsored group use cloud code for espionage.
00:08:33.919 --> 00:08:37.199
They targeted 30 large companies in September 2025.
00:08:38.959 --> 00:08:44.960
Okay, so AI is a powerful tool, but it doesn't understand intent, ethics, or business context.
00:08:45.120 --> 00:08:48.879
That's our job, that's what we will have to learn.
00:08:49.120 --> 00:08:49.440
Okay.
00:08:50.560 --> 00:08:58.799
Now, what I'm gonna do is I'm gonna show you some more stats about the new domains that are coming because of this.
00:09:00.399 --> 00:09:02.000
Now, let me tell you a story.
00:09:02.159 --> 00:09:13.519
Okay, so in 2024, three alumini of unit 8200 found a company called KOI Security.
00:09:13.600 --> 00:09:16.879
Now, if you don't know about unit 8200, just look it up, it's very interesting.
00:09:17.039 --> 00:09:18.799
Look at the founders and what they did.
00:09:19.039 --> 00:09:31.440
They raised 48 million dollars for Koei Security, 10 million seed and 13 million CDZ in Feb, Polo Auto Networks, Feb this year, Polo Auto Networks acquired KOI for 400 million dollars.
00:09:31.519 --> 00:09:34.320
It's an 8x return in one year.
00:09:35.919 --> 00:09:41.039
Now, if you look at the product, it works in securing AI agents for endpoint devices.
00:09:41.120 --> 00:09:43.039
It's a category we have never heard of.
00:09:43.200 --> 00:09:47.039
It is a new category, it didn't have a name two years back.
00:09:48.720 --> 00:09:56.799
So when a one-year-old startup gets 400 million for something nobody was thinking about in 2023, that's AI creating careers.
00:09:56.960 --> 00:10:00.000
Remember, AI is creating new careers, and it's not alone.
00:10:00.159 --> 00:10:10.080
A company called 7AI, look it up, uh raised largest cyber A round ever, 130 million dollars in CDZ.
00:10:10.240 --> 00:10:12.399
NOMA security raised 100 million dollars.
00:10:12.480 --> 00:10:15.840
This is 1300 ARR from stealth, right?
00:10:15.919 --> 00:10:18.080
And they are not outliers.
00:10:18.560 --> 00:10:21.600
This is a pattern, it's a pattern, remember that.
00:10:22.159 --> 00:10:22.480
Okay.
00:10:23.279 --> 00:10:26.240
Now there are new domains getting introduced.
00:10:26.320 --> 00:10:31.440
So there are domains like AIR teaming, quantum safe crypto, AI agent security didn't exist.
00:10:31.600 --> 00:10:37.840
Now, quantum safe crypto is directly not related to AI, but it is still cybersecurity, it is still a new domain.
00:10:39.360 --> 00:10:41.279
So let's look at AI red teaming.
00:10:41.600 --> 00:10:46.480
A EU AI Act wants you to be compliant by August 2026.
00:10:46.639 --> 00:10:51.039
There are penalties in millions of dollars or 7% of the revenue.
00:10:51.360 --> 00:11:01.840
And by the way, if you are using 1.5 million uh plus models, one of them on hugges, you need to test them.
00:11:02.159 --> 00:11:03.679
That's why this domain comes, right?
00:11:03.919 --> 00:11:09.200
So there are companies uh that are providing uh this kind of products.
00:11:09.679 --> 00:11:18.000
Now, every AI model that will be deployed will need security testing, and of course, there is a demand from compliance to get that done on time.
00:11:18.240 --> 00:11:20.159
Look at uh AI agent security.
00:11:20.240 --> 00:11:26.480
So 83% plan agent take AI, only 29% are ready to use it as per Cisco.
00:11:27.120 --> 00:11:32.080
I've already mentioned agent non-human IDs will outnumber humans.
00:11:32.320 --> 00:11:35.440
82 is to one, as mentioned by CyberAc.
00:11:35.600 --> 00:11:42.320
And most of the or 92% of the uh legacy uh IM solutions don't handle AI.
00:11:43.120 --> 00:11:44.639
There is a risk.
00:11:45.440 --> 00:11:55.360
So any company that's deploying AI will need approach, strategy, people to secure these models, and nobody has that person.
00:11:56.399 --> 00:11:58.480
Looking at quantum safe crypto.
00:11:58.560 --> 00:12:02.159
So NIST finalized three PQC standards in 2024.
00:12:02.560 --> 00:12:07.120
Uh there's an attack called HarvestNow decrypt later, so that's very active.
00:12:07.919 --> 00:12:25.519
There's a migration happening, uh, so it's a crypto migration project from legacy, something that can be broken by uh the quantum computers have to be migrated, and there's a lot of uh jobs with multiple companies who are using cryptography, and everybody uses cryptography.
00:12:25.759 --> 00:12:31.759
Okay, now other domains that are created by AI AI sock platforms.
00:12:32.080 --> 00:12:41.679
Uh there are platforms like Torque that perform 95% auto uh resolution.
00:12:41.919 --> 00:12:50.480
A company called Drop Zone reported that their growth was 11x because of this technology.
00:12:50.720 --> 00:12:53.440
Another domain called agentic defense is there.
00:12:56.399 --> 00:12:59.039
There is another domain called agentic identity.
00:12:59.120 --> 00:13:01.519
This is for agents 82s to one data.
00:13:01.600 --> 00:13:03.600
Remember LLM security.
00:13:03.679 --> 00:13:09.200
This is a market that's gonna go by 1.98 billion dollar to or almost 6 billion dollar by 2029.
00:13:10.159 --> 00:13:20.240
You will need more roles three times as per reports, AI governance, AI penetration testing.
00:13:20.320 --> 00:13:33.440
Look at Pintera, it's valued at a billion dollars, and the demand is outpacing supply as per reports, AI software supply chain security or entire AI supply chain security.
00:13:33.519 --> 00:13:37.279
It's your number one risk now.
00:13:37.600 --> 00:13:45.360
In each of these new domains, you have new jobs that will come, new skills will be needed for that.
00:13:45.600 --> 00:13:49.039
If you look at where the money is going, look at three big ones.
00:13:49.679 --> 00:13:56.879
Um Google invested in a cloud security company called Webs, paid all over 32 billion dollars.
00:13:57.120 --> 00:14:06.000
Paulo Alto acquired CyberR for identity security, largest uh uh deal uh ever on identity 25 billion dollars.
00:14:06.159 --> 00:14:11.360
Cisco spent Splunk money on Splunk few years back for observability and convergence.
00:14:13.120 --> 00:14:23.440
The AI security funding that I've tracked is over six billion dollars in 2025 alone.
00:14:23.600 --> 00:14:31.039
85 billion dollars have been invested in MA by the big three companies east killer, Palo Alto, CrowdStrike.
00:14:32.720 --> 00:14:43.679
Pentagon, which is a cybersecurity, uh which is the uh US body, US federal body, they have increased their budget to 15 billion dollars.
00:14:44.080 --> 00:14:46.720
I'm sure all other countries will follow.
00:14:47.600 --> 00:15:02.720
So ASPA reports that the the AI cyber market growth will uh go from 29 billion dollars to 224 billion dollars by 2020, uh 2032.
00:15:03.440 --> 00:15:06.879
Why so many so much money going into this sector, right?
00:15:07.120 --> 00:15:10.560
I like to follow money, I'm sure you have heard that in movies.
00:15:13.360 --> 00:15:17.519
We have to take these as these patterns and understand more.
00:15:18.000 --> 00:15:21.600
Let's do a double click on what Palo Alto CrowdStrike and this killer are doing.
00:15:21.759 --> 00:15:26.879
Palo Alto had a$2.3 billion quarter good business.
00:15:27.200 --> 00:15:29.519
They spent over$30 billion in MA.
00:15:29.600 --> 00:15:41.120
Their acquisitions include identity security, Chrome Sphere for observability, uh, SOC, so QRADAR, then AI security, protect AI, co-i security for agentic endpoint.
00:15:41.200 --> 00:15:54.399
This will create new jobs like platform architects, going after the theme of platform, AI SOC operators, identity engineers, CrowdStrike,$1 billion quarter, spent around$1.8 billion in MA.
00:15:54.639 --> 00:16:06.560
Acquired companies called Signal for Identity Security, Seraphic for browser security, adaptive shield for SaaS security, ONU for telemetry, and flow security for data security.
00:16:06.799 --> 00:16:20.080
Okay, Z Scalar, Red Canry for security operations, MDR, Square X for browser security, SPLX for AI security, Avalr for Mesh.
00:16:20.639 --> 00:16:20.960
Okay.
00:16:21.519 --> 00:16:26.399
Now this all these companies, all these acquisitions will create new sort of jobs.
00:16:28.480 --> 00:16:40.399
Every time there is an acquisition, there is a new job category that gets impacted, or existing job category gets transformed in time.
00:16:40.560 --> 00:16:40.879
Okay.
00:16:41.200 --> 00:16:49.039
Also, if you look at the uh job data, what I found is that skill set is a global problem.
00:16:49.200 --> 00:16:55.440
Okay, there are 4.8 uh million unfilled cybersecurity positions globally.
00:16:55.679 --> 00:17:06.720
84% of the or 88% of the organizations had security even due to skill shortages, and now 64% of the postings require AIML skills in cyber.
00:17:07.039 --> 00:17:08.319
Okay, look at India.
00:17:08.480 --> 00:17:13.519
1.5 million uh people needed by 2027, South Korea.
00:17:14.000 --> 00:17:20.000
Uh there is a gap of 77%, so they need around 31,000 people.
00:17:20.319 --> 00:17:25.759
UK uh there is a 49% skill gap, 11k uh additional professionals needed.
00:17:25.919 --> 00:17:34.399
Okay, Middle East uh there are 150k plus uh jobs across Middle East that are posted.
00:17:34.479 --> 00:17:38.000
So software engineering jobs are down, cyber security are up by 12%.
00:17:38.879 --> 00:17:50.639
Remember, every AI deployment in any shape or form will need security engineers, people who understand AI and the cybersecurity uh convergence.
00:17:51.199 --> 00:17:53.679
So it's a structural demand mode.
00:17:54.239 --> 00:17:54.559
Okay.
00:17:55.599 --> 00:17:57.759
Now, what what do you have to do now?
00:17:58.000 --> 00:18:05.439
So, one review yourself, get into diagnostic mode.
00:18:05.519 --> 00:18:11.279
If you're in a shrinking domain, as I mentioned in the past, start moving today.
00:18:11.919 --> 00:18:15.599
Okay, pick one AI scale, learn it in 30 days.
00:18:16.000 --> 00:18:19.759
Uh most postings require it.
00:18:19.839 --> 00:18:22.079
60 per 64% of the postings require it.
00:18:22.239 --> 00:18:30.000
If you are at entry level, focus on cloud security, I am data privacy, penetration testing, I depending on what you're uh understanding it.
00:18:30.159 --> 00:18:33.839
It's skip the traditional 11 sock role uh knowledge for now.
00:18:34.000 --> 00:18:37.199
Okay, go ahead and learn it, but don't rely on it.
00:18:39.839 --> 00:18:43.919
Keep following the money, understand where the money is going, uh, new categories.
00:18:44.079 --> 00:18:53.039
And if you are a C SO by the web skill, your current team on AI tools before posting another junior analyst uh role that AI can do in two minutes.
00:18:55.279 --> 00:18:57.919
AI does not replace you.
00:18:58.079 --> 00:19:02.000
Someone who uses AI better is gonna replace you.
00:19:02.079 --> 00:19:03.519
That's the key thing.
00:19:04.479 --> 00:19:09.279
So the bottom line is stop asking will AI replace security jobs.
00:19:09.439 --> 00:19:15.279
Start asking what skills do I need for domains that AI is creating.
00:19:18.079 --> 00:19:20.639
Keep learning, keep going.
00:19:21.519 --> 00:19:23.279
I'll see you in the next one.