Hiring Inexperienced Cybersecurity Practitioners: What’s Not to Like?

Hiring Inexperienced Cybersecurity Practitioners: What’s Not to Like?

Managers who hire entry- and junior-level cybersecurity practitioners may do so to free up senior staff for more advanced work. But what they often find is that new hires contribute more than expected. Those new to cybersecurity bring fresh perspectives and excitement. They are open to different ideas, are generally eager to learn and want to succeed. Consider the following comments from respondents to an (ISC)² study on cybersecurity hiring practices: 


Entry- and junior-level staff “bring new ideas to the table. The fact that they have less experience means that they are also more flexible to new ideas. That is a very important factor to have in an ever-growing company and market,” survey participant. 


Said another: “They can bring new ideas and break through the limitations of existing teams.” 


And yet another: “They’re often well-versed on the newest innovations, even more so than some of our established senior contributors, while lacking skills to support their curiosity, and it creates excellent synergy.” 


The survey polled 1,250 cybersecurity hiring managers at small, mid-size and large organizations in the United States, Canada, United Kingdom and India about their practices and preferences. One of the study’s most encouraging revelations is that onboarding entry- and junior-level cybersecurity practitioners delivers more benefits than simply freeing up senior staff and alleviating their stress. 


Changing Perspectives? 


This is very good news in a field where too many employers have persisted in pursuing candidates with the highest technical qualifications and relevant certifications. The problem with this approach is that all-star candidates are few and far between.  


The cybersecurity profession currently has hiring inexperienced cybersecurity practitioners