US Cybersecurity Job Postings Hit Four-Year Low in 2026 Data
CyberSN reports that US employers posted fewer cybersecurity roles from January to September 2026 than in any prior year tracked.

Key points
- US cybersecurity job postings totaled 235,786 from January through September 2026, marking a four-year low.
- Listings for CISO roles fell 38.9% compared to the same period in 2025, though they rose 19.5% between the second and third quarters of 2026.
- The composition of open roles has shifted toward governance, risk, and compliance positions, while technical defense roles hold a shrinking share.
US employers advertised 235,786 cybersecurity positions between January and September 2026, according to workforce intelligence firm CyberSN. This total represents the lowest count for that nine-month period in the four years the company has tracked such data, signaling a notable contraction in the advertised labor market for security professionals across the United States.
CyberSN derived these figures by pulling listings from job data provider JobSpikr, removing duplicate entries, and categorizing each posting by the specific security work described. The resulting dataset reveals that the nature of available roles has shifted significantly. Postings have drifted toward governance, risk, and compliance (GRC) functions, which involve tracking organizational risk and responding to auditors and regulators. While defense roles, which include engineers and analysts monitoring security controls, still hold the largest share of listings, that portion of the market is shrinking.
Market Context and Trends
The decline in postings appears steep when measured against the previous year, with a 26.4% drop from the 320,210 postings recorded in the same months of 2025. However, CyberSN notes that 2025 was an unusually strong year for hiring. When compared to 2024 levels, the gap narrows to approximately 4%, suggesting that 2026 has essentially reversed the gains made in 2025 and slipped slightly further. September 2026 was the only month in the nine-month period to exceed its 2025 figure, but it did so by fewer than 400 postings, a margin too thin to indicate a broader recovery.
Leadership hiring followed a similar trajectory. Listings for Chief Information Security Officers (CISOs) fell 38.9% from the record highs seen in 2025, landing close to 2024 levels. Despite this overall decline, leadership postings climbed 19.5% between the second and third quarters of 2026, indicating some volatility and fluctuation in executive-level demand throughout the year.
Executive Impact on Hiring
Deidre Diamond, CEO of CyberSN, attributed the swings in security leadership hiring to broader disruptions across the C-suite rather than a fundamental decline in the need for security leaders. She told Help Net Security that significant executive turnover, organizational restructuring, and shifting priorities at the leadership level are driving the changes. When a CEO, CIO, or CFO changes, security hiring often stalls as open positions are put on hold and budgets are reconsidered.
Diamond explained that security roles require executive champions and budget approval. When those relationships are disrupted by leadership changes, hiring decisions are delayed until new executives establish their priorities. This suggests that the current low in job postings may reflect temporary administrative pauses rather than a long-term reduction in the demand for cybersecurity talent. Job seekers in hands-on technical roles are therefore applying into a smaller market, while CISOs drawing up 2027 headcount plans are navigating a field where demand has shifted toward compliance and governance.
What should you do?
Security professionals and hiring managers should monitor these trends to adjust recruitment strategies and career planning. The shift toward GRC roles suggests that candidates may need to emphasize compliance and risk management skills. Organizations should anticipate potential delays in hiring due to executive transitions and plan their workforce strategies accordingly.
What to do and how to stay safe: CyberSN
- Review current job postings to identify the growing demand for governance, risk, and compliance skills in your region.
- Prepare for potential hiring delays by maintaining open communication with executive sponsors and ensuring budget approvals are secured early.
- Monitor leadership changes within your organization or industry, as executive turnover can significantly impact security hiring timelines and priorities.
- Update professional profiles to highlight both technical defense capabilities and compliance experience, as the market is shifting toward hybrid roles.
Step-by-step guide: Mobile Device Security: How to Protect Data Beyond Passwords
General security guidance from the Threat Times newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
How many cybersecurity jobs were posted in the US from January to September 2026?
US employers posted 235,786 cybersecurity jobs during that period, according to CyberSN data.
Why did cybersecurity job postings decline in 2026?
The decline is partly due to 2025 being an unusually strong year and partly due to executive turnover and restructuring causing hiring stalls.
Which type of cybersecurity roles are seeing the most demand?
Postings have drifted toward governance, risk, and compliance (GRC) roles, while technical defense roles hold a shrinking share of the market.


