What you’ll learn in this article…
- US cybersecurity postings fell 26.4% to a four-year low in 2026
- AI Security Engineer postings grew 268.3%; Cyber Data Scientist rose 203.5%
- Nearly 15% of cybersecurity postings reference AI; September peaked at 20%
Generalist security roles versus AI-literate specialist roles: that is the real split in the 2026 cybersecurity job market. Total U.S. cybersecurity postings fell to a four-year low of 235,786 from January through September, down 26.4% from 320,210 a year earlier, according to CyberSN's report via SecurityWeek.
Yet AI Security Engineer postings rose 268.3% year over year. The overall market shrank; the AI-adjacent corner expanded sharply. For students choosing degrees and credentials, the practical tension is deciding how much of a core security program to build before leaning into AI and data skills.
What the 26% Decline in Cybersecurity Job Postings Does and Doesn't Tell You
The 26.4% drop comes from CyberSN's Cybersecurity Jobs Report, which counts advertised cybersecurity postings in the US from JobSpikr between January and September. Duplicates are removed, and every posting is mapped to one of 45 cybersecurity roles across 10 categories. The total fell from 320,210 in 2025 to 235,786 in 2026.
What the Number Can't Prove
The report calls itself a "what" not "why" report and notes that "job titles are noisy." It measures postings, not hires. So it cannot tell you whether demand actually fell, whether the market is normalizing after a strong 2025, or whether hiring shifted to different titles. Quarterly 2026 postings stayed between 78,019 and 79,197, which points to stabilization at a lower level rather than a continuing slide. A separate CyberSeek or Lightcast comparison would help, but one is not available in this dataset.
The Honest Verdict
For someone deciding whether cybersecurity is worth it in 2026, this is a tighter entry market, not a dead one. The aggregate is down, but AI Security Engineer postings rose 268.3% and Cyber Data Scientist postings rose 203.5%. The practical signal is specialization, especially AI-adjacent security work, rather than abandoning the field.
Falling Postings vs. the 'Talent Shortage': Is There Still Demand for Cybersecurity?
A 26.4% drop in U.S. cybersecurity job postings does not automatically mean the workforce gap has closed; it often signals that employers are pausing, reorganizing, or hiring through quieter channels.
The gap is now a skills gap
ISC2's 2025 Cybersecurity Workforce Study, a global survey of 16,029 professionals, found that 95% of organizations reported at least one cybersecurity skills need, and 59% called those needs critical or significant.1 Yet 36% reported 2025 budget cuts, 39% reported hiring freezes, and 24% reported layoffs.2 Among large organizations, 49% had hiring freezes and 32% had layoffs.3 The latest published global workforce gap remains 4.8 million people from ISC2's 2024 study, up 19%.
Why postings can fall while demand persists
CyberSeek's U.S. data for May 2024 through April 2025 counted 514,359 openings and about 1,337,400 people employed, a 74% supply-to-demand ratio.4 That measures openings and supply, not completed hires, so it can coexist with posting declines and hiring freezes. Demand has not vanished, but employers are more selective, slower to advertise, and more likely to hire internally. Demand for cybersecurity will persist, especially for candidates with AI, data science, and cloud security skills.
Where Cybersecurity Jobs Are Growing: AI Security and Cyber Data Science
AI security and cyber data science are the clear growth lanes in an otherwise contracting cybersecurity job market. Postings for AI Security Engineer rose 268.3% year over year, while Cyber Data Scientist demand climbed 203.5%, though both gains start from much smaller bases than generalist roles.
AI is becoming a baseline skill
Just under 15% of all cybersecurity postings now reference AI, and that share hit 20.0% in September 2026. By function, AI appears most in Research (32.7% of postings), Offense (23.3%), GRC (19.8%), and Plan (18.9%).
Pay rewards specialization, but ranges skew senior
Published AI Security Engineer averages cluster around $153,000 to $190,000, while posted ranges swing from about $61,500 to more than $293,000. Employer postings for AI security engineer often start above $100,000, and senior AI/ML security infrastructure roles can reach $200,000 to $280,000 or more. The strongest postings typically want a bachelor's in computer science, cybersecurity, information systems, or a related technical field, plus 2 to 8+ years depending on seniority.2 Python, Go, cloud security, Kubernetes, APIs, CI/CD, and AI/ML lifecycle skills recur, with CISSP, CCSP, CISM, CISA, SSCP, or CompTIA Security+ preferred.3
For students and career changers, the takeaway is to treat AI literacy as a required core skill, not an elective. Pair a foundational degree with AI/ML security and data-science coursework, then aim certifications at Research, GRC, or Offense functions where AI demand and remote availability concentrate.
Cybersecurity Roles Under Pressure: The Biggest Posting Declines in 2026
The steepest year-over-year posting declines are concentrated in a mix of specialized technical roles and leadership or coordination titles. These jobs have not disappeared, but fewer openings mean each posting draws a larger applicant pool. The stronger growth signals are in Research, GRC, and AI-adjacent security roles, while job titles themselves are noisy, so match skills to function rather than title alone.
| Role | 2026 Postings (Jan-Sep) | Change vs. 2025 | What It Means for Job Seekers |
|---|---|---|---|
| Cyber Insider Threat Analyst | 1,088 | -55.6% | Still exists, but fewer openings mean more competition; pair this with data analysis or AI security skills. |
| Cyber Risk Analyst | 4,031 | -51.5% | Risk analysis postings fell sharply; pivot toward GRC roles that emphasize AI and cloud risk, which have higher AI reference rates. |
| Penetration Tester | 3,063 | -45.9% | Traditional pen testing openings contracted; offense skills remain valuable when combined with AI-assisted testing or cloud security. |
| Cybersecurity Lead | 4,688 | -41.0% | Leadership-track postings dipped; consider building hands-on AI security and data science depth before aiming for lead roles. |
| Threat Hunter | 1,013 | -40.0% | Threat hunting demand is down; blend hunting skills with data science or AI tooling to stay relevant. |
| Cybersecurity Project Manager | 783 | -39.4% | Coordination roles shrank; project management skills are more viable when paired with security engineering or AI program knowledge. |
| CISO/CSO/BSO/ISO | 2,832 | -38.9% | CISO openings are nearly flat versus 2024, though they rose 19.5% from Q2 to Q3 2026; board accountability still drives occasional demand. |
Cybersecurity Salary by Role in 2026 and the Long-Term BLS Outlook
Recent BLS wage estimates (2025) put information security analysts at a national median of $129,180, with the middle 50 percent earning between $97,810 and $163,500. Computer Occupations, All Other, a related category that captures many adjacent security and computing roles, shows a median of $116,580 and a middle range of $79,370 to $157,500. The longer term picture is also positive: BLS projects 28.5 percent growth for information security analysts from 2024 to 2034, with employment rising from 182,800 to 234,900, an increase of 52,100 jobs, and about 14,100 average annual openings across 2025 to 2035; these occupations are related to, but not identical with, any individual degree program.
| Occupation | Median annual wage | 25th percentile | 75th percentile | Employment |
|---|---|---|---|---|
| Information Security Analysts | $129,180 | $97,810 | $163,500 | 190,650 |
| Computer Occupations, All Other | $116,580 | $79,370 | $157,500 | 435,370 |
Related Articles
AI literacy is becoming the baseline, and the specialty on top of it is what sets a candidate apart.
