US cybersecurity job postings drop 26 percent but AI security roles surge
The cybersecurity job market is shrinking overall, but demand for AI security engineers and data scientists is growing fast.
Market · Source: SecurityWeek
What happened
Staffing firm CyberSN analyzed data from JobSpikr to measure demand based on actual skills required rather than just job titles. They found that US cybersecurity job postings hit a four-year low in 2026. Employers posted 235,786 open roles between January and September. This is a 26.4 percent drop from the 320,210 roles posted during the same period in 2025.
The decline looks steep, but 2025 was an unusually strong year for hiring. Compared to 2024, the overall gap in open roles is only about four percent. September 2026 even beat its 2025 figure slightly, though by fewer than 400 postings. However, specific technical roles took a major hit. Postings for penetration testers fell by 45.9 percent, and threat hunter roles dropped by 40 percent.
While traditional defense roles are shrinking, artificial intelligence is reshaping the field. Demand for AI security engineers jumped 268.3 percent over the last year. Cyber data scientist roles also grew by 203.5 percent. Nearly 15 percent of all cybersecurity job postings now require an understanding of AI, with that number peaking at 20 percent in September 2026.
By the numbers
- 235,786 — Total US cybersecurity job postings from January through September 2026
- 26.4% — The drop in total job postings compared to the same period in 2025
- 268.3% — The increase in demand for AI security engineers over the last year
- 45.9% — The decline in job postings for penetration testers
- 14.8% — The share of job postings dedicated to governance, risk, and compliance
Why it matters
Job seekers looking for hands-on technical roles face a smaller market today. Employers are moving away from traditional offensive security roles and focusing heavily on risk management. Governance, risk, and compliance roles have grown steadily, increasing their share of all postings from 9.4 percent in 2023 to 14.8 percent today. Privacy and cybersecurity attorneys are the only top ten category to see more listings this year than last. Companies are prioritizing auditors and compliance experts who can help them understand and manage corporate risk.
Leadership hiring is also stalling as companies restructure their executive teams. Chief Information Security Officer postings fell 38.9 percent from last year's record highs, landing closer to 2024 levels. When companies change their top executives, security budgets and headcount plans often get put on hold. This means hiring decisions for mid-level and senior security roles will likely face delays until new leaders set their priorities and approve budgets for 2027.
Who this hits
AI and data specialists
Demand for your skills is multiplying rapidly as companies figure out how to secure new technologies. If you can protect AI systems or analyze security data, you are entering the fastest-growing part of the current job market.
Penetration testers and threat hunters
The market for offensive security roles has roughly halved since last year. You will face much stiffer competition for open roles and may need to pivot your skills toward risk management or AI security.
Governance and compliance professionals
Your field is taking up a larger share of the overall cybersecurity job market. Companies are prioritizing risk management, making it easier for auditors, attorneys, and compliance experts to find stable roles.
Security leaders
Listings for Chief Information Security Officers have dropped significantly compared to 2025. You may need to be patient as companies navigate executive turnover and finalize their security budgets for the coming year.
What to do this week
- Highlight any artificial intelligence experience on your resume, especially if you understand how to secure AI models or analyze data.
- Pivot your job search toward governance, risk, and compliance roles if you are struggling to find hands-on defense or offensive security positions.
- Look for remote opportunities in sales, product security, or compliance, as the data shows these specific areas still have strong remote work demand.
- Expect longer hiring timelines for senior roles and prepare for delays while companies finalize their 2027 headcount plans.
See who's hiring right now on GiraffyReach
My take
The cybersecurity market is not shrinking as much as it is changing shape. Companies still need security, but they want professionals who can protect AI models and manage corporate risk. If you adapt your skills to match these new priorities, you will find the opportunities that others are missing.