Cybersecurity courses: Despite great promise, first job remains elusive

Chaitanya, a third-year BCA student from Pune, found the job search for cybersecurity roles exceptionally challenging despite his cybersecurity expertise. He had cleared the OSCP certification, focusing on finding and exploiting vulnerabilities in computer systems. However, he sent a large number of applications for various roles, including VAPT, SOC Analyst, and Cybersecurity Analyst internships, but received no interviews or opportunities.

This story highlights the persistent issue of entry-level opportunities in cybersecurity despite the growing demand for skilled professionals. The DSCI's Cyber Security Outlook 2026 report notes a shortage of skilled individuals and the increasing adoption of AI in security operations. The report also points out that attackers are increasingly targeting cloud systems, digital identities, and APIs, with cloud-targeted attacks rising by 37% year-on-year in 2025 and AI-enabled cyberattacks increasing by 89%.

Professor Prakriti Singh, who teaches cybersecurity at Dayananda Sagar University, attributes the field's appeal to Gen Z's love for challenges and dynamic problem-solving. However, students entering the field often have misconceptions about cybersecurity being solely technical and coding-focused. The reality extends to areas such as cyber law, policy, and understanding the psychology behind cyberattacks.

A common challenge for students is determining which skills to focus on after completing their course. A. Vetri Selvam, a second-year cybersecurity student in Tamil Nadu, is unsure whether he should concentrate on coding and problem-solving like a computer science student or delve deeper into full-stack development or cybersecurity skills.

Veera K, a Bengaluru student aiming for an SOC role, has spent months learning networking and tools like Wireshark, Splunk, and Sysmon, but he feels employers require IT experience to get an entry-level job. He is now considering a helpdesk role as a possible stepping stone into IT before moving into cybersecurity.

The main hurdle lies not only in the lack of demand for cybersecurity professionals but also in the gap between the skills employers seek and the abilities candidates can demonstrate. The DSCI-SANS Indian Cyber Security Skilling Landscape 2025-26 survey found that 73% of enterprises and 68% of cybersecurity service providers reported a shortage of skilled candidates, while 63% of enterprises and 59% of providers stated that candidates lacked sufficient hands-on practical skills. Furthermore, 84% of organizations take between one and six months to fill cybersecurity positions.

Industry experts emphasize that practical capability is crucial for successful entry into the cybersecurity field. Aabhishhek Mitra, CEO of Indian Cyber Security Solutions, stresses the importance of practical experience, problem-solving, real-world exposure, research, projects, communication skills, certifications, and degrees.

A degree offers an academic foundation, while certifications demonstrate knowledge in specific areas. However, neither alone proves a candidate's ability to investigate incidents, analyze problems, or document security findings.