A Shrinking, Shifting Job Market
The US cybersecurity job market contracted sharply in 2026, even as demand for AI-focused security talent exploded. According to CyberSN's Cybersecurity Jobs Report, total cybersecurity job postings fell to a four-year low of 235,786 between January and September 2026 — a 26.4% drop from the 320,210 postings recorded over the same period in 2025.
The Numbers
The report draws on job-listing data from JobSpikr, deduplicated and sorted across 45 cybersecurity functional roles using CyberSN's proprietary role taxonomy.
Roles in Decline
| Role | Year-over-Year Change |
|---|---|
| Cyber Insider Threat Analyst | -55.6% |
| Cyber Risk Analyst | -51.5% |
| Penetration Tester | -45.9% |
| CISO | -38.9% |
Roles Surging
| Role | Year-over-Year Change |
|---|---|
| AI Security Engineer | +268.3% |
| Cyber Data Scientist | +203.5% |
Nearly 15% of all cybersecurity job postings now reference AI skills in some form, regardless of the formal job title attached to the listing.
Why Titles Don't Tell the Whole Story
The report's authors caution that "job titles are noisy" — organizations are re-labeling and re-scoping roles faster than standardized taxonomies can track, so CyberSN's analysis focuses on the actual work being requested in each posting rather than the title alone. Framed that way, the data points to less a market collapse than a reallocation: traditional analyst and testing roles are being absorbed, augmented, or replaced by AI-centric positions, while overall headcount growth stalls.
Why This Matters
The steepest declines are concentrated in roles historically treated as entry points into the field — penetration testing and risk/threat analysis — which raises questions about where the next generation of security talent will come from if those on-ramps keep shrinking. At the same time, the near-tripling of AI Security Engineer demand signals that employers are willing to pay for a narrow, newly critical skill set faster than the broader labor market can supply it. For security leaders, the practical takeaway is that workforce planning now has to account for this bifurcation directly: budget for AI-adjacent security hires is growing even as general headcount budgets are not.