US Not Training Enough Cybersecurity Experts

graychase writes "Homeland Security's cybersecurity director, Richard Marshall, warns that universities aren't turning out enough cybersecurity experts and urges greater scholarship funding. 'Look at all the great football and basketball programs. They're all on scholarships. They're not playing for fun — they're playing for money.'"

Comments

Training?

[WrongSizeGlass]

Shouldn't they be recruiting them from the trenches or simply luring script kiddies into the evil clutches of our federal government with promises of "no bedtimes", "free games, pizza & soda" and "no one here will make fun of you because everyone here will be like you"?

They're not seeing a primary source.

[rindeee]

Working in the industry and hiring new Cyber talent on a weekly basis, I'd say that the author's aren't looking in the right place. We find the best, most talented folks are coming out of the military. These ladies and gentlemen are very disciplined, highly trained and have real (very real) experience not only within the ranks of military cyber operations, but most also have a good deal of experience in the intelligence community. They all have a great deal of experience (and preference) with open source tools, but understand the proper application and integration of COTS products as well. Anyway, my two cents.

Re:They're not seeing a primary source.

[Anonymous Coward]

That might be the case, but it's equally as hard to find a cyber security job. I graduated from a Center of Excellence with a Master's in Computer Security and Information Assurance. Due to the scholarship I've been working with DoD and I've gained my clearance through them. I've sent job applications to NSA, DHS, ARL, NRL, DARPA, etc. and have not heard one response aside from DHS saying I wasn't the most qualified candidate. I even have my 8570 certifications now for IAT 2. Everything is so C&A focused it's a bear to find any real cyber security work - I've certainly been trying to move toward it. Maybe I'm doing it wrong, but from my experience the job positions just aren't there, regardless of need.

Re:They're not seeing a primary source.

[girlintraining]

The best, most talented aren't coming out of the military. The military has some stringent guidelines on physical health and background that a lot of people don't make the grade for, but nonetheless are well-suited for the work. Anyone with asthma, short-sighted, or is gay, or bad credit, etc., are all ineligible for military work. I should know -- I am one of those "cyber security" experts, and I did look into joining the military, but was ruled ineligible. The talent pool that the military can recruit from is significantly smaller than total pool size.

And as anyone in IT will tell you, overspecialization can kill your career; You need to remain flexible, continually expanding your skillset, and often find yourself in peripheral fields because a job isn't available in your field of choice. Many of us wind up taking help desk positions when five years ago we would have been network administrators, simply because of consolidation, outsourcing, and the fact that IT in general does poorly in a recessionary economy. A lot of that talent we had moved into other fields that have better job security, and they are no longer trained to current requirements. This is a side-effect of capitalism and is neither good nor bad, but it does shrink the pool size.

If the Department of Homeland Security wants more people to choose from, they need to either lower their requirements to what the job actually requires, or they need to consider liasoning with the Department of Commerce, trade, etc., and funding IT projects that will bring people back into the field and increase the pool of currently-trained and available workers, or they raise the amount they're willing to pay, offer training, etc.; Like the medical field does. The Department of Homeland Security needs to offer a career path, not just a job, in that scenario. Otherwise, what's the point?