Help Wanted: Cybersecurity Professionals

by on ‎08-18-2011 12:47 PM

I recently had the chance to sit down with administrators at a large U.S. university and talk about the need for more cybersecurity professionals.  Companies are increasingly frustrated when looking for security professionals to hire.  There is a limited supply of qualified persons able to work on complex cybersecurity issues.  As I learned this week, in some cases, there are also limited civilian programs to help train qualified security experts.  Overcoming this challenge is critical to building a secure cyber future.

 

During my discussions with college administrators  and law enforcement I have learned that many cybersecurity experts gained their fist experience and training in the government.  I am an example of this also.  I gained my first experience working on cybercrime issues while I served in the U.S. Navy.  Most of the security experts I meet have followed a similar pattern of gaining training in law enforcement or military jobs and then later pursuing a civilian career in cybersecurity.   While this is providing solid experts, there continues to be a need for improved partnership with private technical schools and universities to provide additional qualified cybersecurity experts.  Unfortunately, this is not just a matter of having the desire to create a training program. 

 

In speaking with university managers recently,  I have repeatedly heard about the difficulty in finding qualified professors to teach cybersecurity courses.  Even if there is a desire to create a cybersecurity program, there is a serious lack of experienced academics able to instruct students.  A cybersecurity curriculum should include not only policy but technical subjects.  These subjects require specialized expertise that is especially hard to find at the PhD levels required by many schools.  Even if a course is created, there is also a challenge of attracting students.  One large university’s manager recently told me that they only have a single student pursuing a PhD in information security management.  This is far less than the current need for this expertise.

 

There is frequently discussion about encouraging more students to pursue math and science to benefit American innovation.  We need a similar emphasis on encouraging students to pursue technical programs like cybersecurity.  Children are now surrounded in their everyday life with technology.  Cybersecurity is an application of computer skills to safeguard the technology that benefits all our lives.  This should be an exciting and interesting field for students to pursue. 

 

I recently blogged about a program in Texas that includes an emphasis  on teaching technical skills starting in grade school and encouraging students to pursue technical degrees in college.  This is the type of comprehensive and coordinated program that is necessary for success.  We cannot wait for a student to get to a college and then expect them to be excited about cybersecurity for the first time.  They need to become familiar with this interesting and important field earlier in their academic lives so it becomes a realistic option when they start choosing advanced academic programs.

 

To ensure a secure cyber future we need to continue to encourage younger students to learn about technology, pursue math and science courses, and to understand the exciting and interesting professional opportunities that are available in cybersecurity.  This is a career with a solid future.   It should also be a great opportunity for many students to find rewarding careers that will assure a secure future for cyberspace.

Comments
by Super Bot Obliterator on ‎10-03-2011 09:15 AM

Adam,

 

This is a great piece that raises a number of key points. The academic community here is at the difficult stage of rather literally having to pull itself up by its bootstraps. To not jeopardize regional accreditation (and any specialized disciplinary accreditation the particular college or department may hold), a certain percentage of the faculty musy hold a Ph.D. This isn't just ivory-tower arrogance; it ensures that faculty have learned and demonstrated proficiency at the competencies needed to validly create and test new knowledge in their field. But, as you mention, in cybersecurity there are precious few doctorates out there to be pursued; Catch-22. What's a program--to say nothing of an individual--seeking entrance to such a field to do?

 

One answer I would encourage is to pursue the interdisciplinary path. Many of the most fruitful fields in an information- or knowledge-based society are emerging from the seams between two or more established academic disciplines...and this offers an opportunity for the future faculty of such fields to blossom from these seams as well. For example, someone with a masters degree in Computer Science and an interest in cybersecurity might pick up a doctorate in a Law Enforcement field; someone coming out of the military with a masters in Strategic Intelligence with such an interest (and background!) might pursue a doctorate in Computer Science or Network Engineering.

 

In this way, we can help build the professoriate necessary to research, develop, and teach in--and create the programs our public and private sectors need to defend our countries and our enterprises from threats in the cyber domain. And those of us already in the academic community can help by "pulling" from the other side of the chasm: encouraging the departments we teach for to be looking for such mavericks, to give the best of them an academic home, and to start developing programs that can meet these needs.

 

You can bet our adversaries are.

 

I also applaud your recognition that the interest in these fields must start being recognized and developed young. We are at a time of great potential for this, as our education systems are getting energized about "STEM" (Science, Technology, Engineering, and Mathematics) education at the K-12 level. This offers a wonderful opportunity to encourage kids who show talent and interest in computers to get involved in building their defenses. There are already some programs--such as the Army's "eCybermission"--that teachers can leverage to do so. There are also opportunities like the Civil Air Patrol cadet program (open to kids 13 and older) that carry no military obligation, but which can explicitly start acquainting kids with the culture and profession of defending our society, whether in aerospace or cyberspace.

 

Thanks--and Kudos!--to Norton for raising public awareness of these important issues!

by asoka on ‎11-22-2011 07:52 PM

I'm a retired computer professional looking for work. I served my time in corporate America and can't say I like the environment much. I spent my formative years doing FORTRAN and UNIX/C, and working in an engineering environment - some of it as the departmental systems administrator. I know this stuff pretty well and just as I've strung my own coax, I've solved my own security issues in both directions. I don't like deception and I know it when I see it. I tend to swear a lot and am not very diplomatic when it comes to telling people what I think. I work in Linux these days, Windows if I have to. I program in C. I tend to work on Intel mostly and use Intel compilers and tools. Intel makes two compilers for their processors, C/C++ and FORTRAN. Linus Torvalds says "C++ is a horrible language". I do shell, perl, Python here and there. I can sit here and watch the country get robbed blind by France, Israel, China and the usual suspects in eastern europe - identity theft is a drop in the bucket. I'd like to defend this country and work in this field, but getting a job at my age is a **bleep**. Any ideas?

by CyberWarrior on ‎11-27-2011 01:04 AM

This is a good post, it's important that we develop educational programs to get younger students interested in Cyber Security and Computer Science because we are going to have significant disadvantages in the event of a cyber conflict.  Ever since started using the Apple LC II, I have always been surrounded by technology.  Similarly,  I myself have the passion and energy for Cyber Security as I have begun specializing in Ethical Hacking and Computer Forensics as a Computer Science major but also building my own virtualized research labratory.  Yet even though I am learning all these speciallized skills, I still have my fears about not being able to find work in this field.  

by Super Bot Obliterator on ‎12-01-2011 07:58 PM

Hi, CyberWarrior,

 

I'm not going to make light of the tough market...but at the same time, there are opportunities out there so don't sell yourself short. If your record is clean, check out usajobs.gov and think about FBI or Treasury for example. There may also be opportunities in state & local law enforcement, particularly large metropolitan police departments in economic hubs.

 

There is also going to be a boom in this area as corporations start to realize how much money breaches and lax security practices are costing them, and even more so when they see foreign or even domestic competitors beating them to market with their own revolutionary ideas because somebody hacked their R&D.

 

If you find yourself in a flat market for a while, think about adding a masters degree after you graduate--maybe in Administration of Justice (law enforcement), or maybe in one of the security-related fields that American Military University or a bricks-and-mortar university in your area might offer.

 

And of course if you're still young and bold, you could always take your username literally and pay a visit to your local recruiter....

by DorisTarazona on ‎07-17-2012 01:05 PM

hay un haker en mi computadora , deseo que se haga un escaner de seguridad en mi computadora y se elimine este criminal robo de informacion de mi computadora.

by on ‎11-24-2012 06:14 PM

I am in college at Ivy Tech Community College for CIT (sometimes called CINT, or just Computer Information Technology), and I am starting to learn about network security in my classes.  It seems the more I learn in my classes the more I want to keep learning.  I have really taken a strong interest in learning more about network security, and even more about cybersecurity in general.  I have two questions about cybersecurity.

 

1.    What kind of studies should I focus on to learn more about cybersecurity in order to be able to help others?

 

2.    What careers in cybersecurity am I limited to with felony convictions on my record?

 

I know that I will have to work harder to prove that a person can change, and I want to be an example to others that made mistakes costing them everything because of attaining a felony record.  I am willing to accept this challenge.  Thank you all for taking the time to read this, and also for your feedback.

by MarianneKandelin on ‎01-16-2013 03:30 PM

YES, YES, YES...

 

Moore helpers needed against cybercrime and only the very best.

 

Like you (y)