United States Senate Employment Office’s Post

According to the ISC2, the cybersecurity sector is faced with a shortfall of roughly four million professionals, which is an alarming 12.6% increase from 2022. In the face of an ever-evolving threat landscape, it’s clear that the demand for more cyber professionals is glaringly high. But companies are not only faced with trying to fill that gap, as now they must also combat the hackers posing as job applicants, seizing on the workforce demand as a means of attack!    This deceptive strategy is particularly challenging to detect and requires heightened vigilance during the recruitment process. As security leaders, we must strike the right balance between tightened hiring protocols and diligent applicant screening as the need becomes increasingly critical. The stakes are high, but together we can create robust hiring practices that fortify our defenses and workforce. 💜   https://lnkd.in/gyVgyDD3 

Bad actors posing as job applicants for open cybersecurity roles and using deepfakes to try and pass the interviews is just another use case highlighting the growing need for stronger security across both voice and video communication channels. At DeepTrust we are addressing this very issue and are helping security teams defend their voice and video calls from social engineering, vishing, and deepfakes. Please take a moment to read Vasu Jakkal's post and the WSJ article she shared!

According to the ISC2, the cybersecurity sector is faced with a shortfall of roughly four million professionals, which is an alarming 12.6% increase from 2022. In the face of an ever-evolving threat landscape

🔒 California's cybersecurity is at a critical juncture with the top cybersecurity post vacant for nearly two years. Governor Newsom has yet to appoint a commander for the Cybersecurity Integration Center. This delay raises concerns about the state's ability to respond effectively to cyber threats, safeguard the economy, and protect critical infrastructure. 💻⚠️ Cybersecurity specialists are in high demand, and the public sector faces challenges in recruiting and retaining talent due to fierce competition with the private sector. The vacancy underscores the broader issue of a cybersecurity workforce shortage, hindering public agencies' ability to combat cyber threats effectively. 🛡️ Former commanders stress the pivotal role of this position in assisting public institutions and responding to cyber attacks on vital entities like hospitals and school districts. Filling this crucial role is imperative to ensure the continuity of cybersecurity efforts and the protection of sensitive systems. 🌐🛑 Let's stay vigilant and prioritize filling this essential cybersecurity position to fortify California's defense against evolving cyber threats. 🚨 #Cybersecurity #California #ProtectOurSystems

177 Working Days. By February 15, 2025, all DoD civilian (CIV) & Service (MIL) in Cyberspace Workforce Element work roles must be qualified under DoD Directive 8140.03. These are the 13 job roles: Cyber Defense Forensics Analyst Control Systems Security Specialist Cyber Defense Analyst Cyber Defense Infrastructure Support Specialist Cyber Defense Incident Responder Vulnerability Assessment Analyst Authorizing Official Security Control Assessor Secure Software Assessor Information Systems Security Developer Security Architect Information System Security Manager Communications Security Manager Tick, tick, tick. #8140 #cyberdefese #cybertraining #cybercompliance #cyberskills #cyberjobroles #cyberreadiness

I’ve seen two instances of fake #cybersecurity workers in the last few years. This was happening even before #GenAi took off, but as WSJ and Vasu Jakkal point out, now it’s accelerating due to convergence of extreme demand, #ai, and growing rewards for the attackers. One was actually hired, but a different person showed up and we had to figure out legal way to terminate - it’s not always straightforward. The other, we found that the person talking during the interview and the person doing the interactive work were two different people. Even before deepfakes, this was a scourge. I’ve also seen it happen further down the supply chain in MSPs and MSSPs. It’s even harder to fight when you can’t directly interrogate the offender. One of the most dangerous attacks comes when the offender is volunteering their way into an open source supply chain attack. Look up XZ utils hack earlier this year. Microsoft saved all our collective ##### on that one! Sometimes they want access to do damage, other times it’s simply financial. Reinforces my long held belief: hire people you know and people they know. Challenging to scale, but much less risk for trusted positions. Beyond that, risk management is critical. #zerotrust applies to people, too - especially when the person is supposed to be a security control!

According to the ISC2, the cybersecurity sector is faced with a shortfall of roughly four million professionals, which is an alarming 12.6% increase from 2022. In the face of an ever-evolving threat landscape

🔐🏛️ Are you passionate about protecting national security? Explore our latest video, "7 In-Demand Cybersecurity Jobs in Government," to discover key roles where you can make a significant impact. As cyber threats grow more sophisticated, the demand for skilled cybersecurity professionals within the government is rapidly increasing. This video highlights seven critical roles, including Information Security Analysts, Cybersecurity Engineers, and Chief Information Security Officers, among others. These positions offer not only the opportunity to safeguard our nation but also provide competitive salaries and substantial career growth. Whether you're looking to start your career or pivot to a role with profound societal impact, these government cybersecurity jobs offer both stability and the chance to contribute meaningfully to national defense. #PublicSector #CybersecurityJobs

I have just completed the SOC Analyst Path offered by Hack The Box! What were the key takeaways from this path? ✅ SOC Processes & Methodologies ✅ SIEM Operations (ELK/Splunk) & Tactical Analytics ✅ Log Analysis ✅ Threat Hunting ✅ Active Directory Attack Analysis ✅Network Traffic Analysis (incl. IDS/IPS) ✅ Malware Analysis ✅ DFIR Operations #learning #hackthebox #cyber #security