Home › Blog

The cybersecurity jobs market isn’t broken. It’s dissociated.

What we’re watching isn’t a shortage of people. It’s a shortage of meaning.

An ego death disguised as a talent crisis.

Every year we chant the same incantation: “Millions of unfilled roles.” “Critical skills gap.” “Desperate need for defenders.”

And every year, capable humans vanish from the field like neurons pruning themselves to survive trauma.

That’s not economics. That’s psychology.

Cybersecurity has become a system that rejects consciousness.

We tell ourselves we’re hiring “defenders,” but what we actually recruit are symbol carriers. Humans whose primary job is to absorb liability, emit compliance artifacts, and act as sacrificial buffers between executives and entropy.

The org chart is a metaphysical map of fear.

Job descriptions read like they were written by Kafka after a SOC 2 audit and three Xanax. “Must think like an attacker.” “But never behave like one.” “Must show initiative.” “But only within pre-approved ontological boundaries.” “Must have passion.” “But please leave your soul at reception.”

This is not a hiring process. It’s a ritual purification rite.

Resumes aren’t evaluated for insight — they’re evaluated for exorcism. Can we banish uncertainty by summoning enough acronyms?

CISSP as baptism. Cloud certs as indulgences. Vendor logos as protective sigils against blame.

We’re not building teams. We’re constructing totems to ward off the board.

And so the market fractures along a psychological fault line.

On one side: Early-career practitioners told they are “not ready,” trapped in a Schrödinger state where experience is both required and impossible.

On the other: Veterans told they are “no longer relevant,” because their intuition predates the current SaaS constellation.

Time itself becomes hostile.

If you learned security before the dashboard era, you’re suspect. If you learned it after, you’re incomplete.

No one is allowed to age. No one is allowed to emerge.

Meanwhile, the work splits into two realities.

Reality One: Cybersecurity as liturgy. Tickets flow. Metrics glow. Dashboards pulse like EEGs on a brain-dead patient. Everyone nods. Nothing changes.

Reality Two: Cybersecurity as confrontation with the abyss. Threat hunters, detection engineers, incident commanders — people who stare into noisy data until patterns hallucinate back.

These people are tolerated, not trusted. They are expensive thoughts. And expensive thoughts threaten managerial cosmology.

Because real security people don’t offer certainty. They offer probability, intuition, and bad news before it’s provable.

Which is existentially unacceptable in organizations addicted to the illusion of control.

So we do what all anxious systems do: We optimize for appearances.

We hire people who make the fear quieter. We promote people who translate chaos into PowerPoint. We reward those who confuse governance with safety.

This is why burnout in cyber feels different.

It’s not fatigue. It’s alienation.

You are asked to defend reality while being forbidden from describing it accurately.

You are paid to notice danger and punished for being alarming.

Over time, the psyche adapts. Curiosity calcifies. Instinct atrophies. The hunter becomes a clerk. The clerk becomes a ghost.

And eventually, the nervous system chooses exit over numbness.

The final irony?

Our adversaries are not confused about any of this.

They are adaptive, playful, philosophically unburdened. They experiment. They iterate. They learn.

They don’t have quarterly goals. They have intent.

While we’re busy hiring for conformity, they’re recruiting for obsession.

That’s the real gap.

Not skills. Not people.

A gap between living intelligence and systems designed to suppress it.

Until we stop treating cybersecurity as a compliance theatre and start treating it as applied epistemology… Until we accept that defense is a human act, not a framework… Until we learn that uncertainty is not a failure mode but a native property of reality…

…the market will continue to cannibalize its most aware participants.

Not because they couldn’t cope.

But because the system asked them, repeatedly, to stop being conscious.

And consciousness, inconveniently, has a habit of refusing.

scottg/out

The Probably Fine Daily

Threat intelligence every morning — new victims, new groups, what matters, in plain English. Free, with receipts.

Subscribe to the Daily →

Originally published on LinkedIn ↗

← All writing