Cybersecurity teams are facing a growing talent shortage, but many organizations are responding by competing for experienced professionals rather than building the next generation of talent. According to Fortinet's 2026 Cybersecurity Skills Gap Report, 71% of organizations say the cybersecurity skills shortage is creating additional risk, yet only 13% of IT decision-makers say they need entry-level talent most.
In a recent CIO piece, Caitlyn Brazill, President of Per Scholas, argues that this approach leaves no one in line to become the senior hire, since experienced cybersecurity professionals have to start somewhere. As AI automates more entry-level tasks, employers need to rethink what entry-level cybersecurity roles look like and how they develop the judgment that experienced security professionals bring to the job.
AI Is Changing the Entry-Level Pathway
AI is increasingly becoming part of cybersecurity operations, and the need for junior talent remains. According to the ISSA/Omdia study, 83% of organizations are using or planning to adopt AI for security, while 68% of cybersecurity practitioners say the job has become harder over the past two years.
As attacks become faster and more sophisticated, cybersecurity professionals increasingly need to distinguish between legitimate activity and malicious behavior, even when traditional indicators such as malware signatures aren't present. Developing that judgment requires exposure to real-world security environments and the opportunity to learn from experienced practitioners.
At the same time, traditional pathways into cybersecurity are changing. ISC2's 2025 Workforce Study found that 56% of cybersecurity professionals entered the field through IT, with 36% taking on security responsibilities within an existing IT role. As those responsibilities become increasingly automated, employers need to create new pathways for developing the next generation of security talent.
Focusing on AI Fluency
The cybersecurity professionals entering the workforce today don't need years of experience with technologies that didn't exist years ago. They do need the ability to understand how AI is being used on both sides of the security equation.
That means employers can look for AI fluency, a growth mindset, and an understanding of emerging threats alongside foundational cybersecurity knowledge. Stackable credentials and industry certifications can help candidates demonstrate those skills while giving employers a clearer way to evaluate applied capabilities beyond a traditional degree or years of experience requirement.
For employers, the opportunity is to redefine entry-level roles around what candidates can demonstrate and how quickly they can learn.
Building the On-Ramp Together
Developing cybersecurity talent doesn't have to fall entirely on employers. Partnerships between training organizations, workforce intermediaries, and companies can create structured pathways that combine technical training with real-world experience.
One example is the cybersecurity pipeline Per Scholas built with PeopleShores and Accenture. A Per Scholas graduate completed initial cybersecurity training, then spent a year as an apprentice working on Accenture's enterprise security infrastructure while earning industry certifications. Accenture helped shape the curriculum and provided real production experience, coaching, and oversight before ultimately hiring the apprentice into a permanent cybersecurity role.
The model demonstrates how employers can build the experience they need rather than waiting for candidates to arrive with it.
Building the Next Generation of Cybersecurity Talent
The cybersecurity talent shortage won't be solved by hiring more senior professionals alone. Organizations also need a sustainable pipeline that develops the people who will become tomorrow's experienced security leaders.
That means rethinking entry-level requirements, recognizing AI fluency and demonstrated skills, expanding apprenticeships and training partnerships, and measuring talent development alongside traditional hiring metrics. The organizations investing in these pathways today can build cybersecurity teams equipped not only for the threats they face now, but for a security landscape that will continue to evolve.
Read the full CIO article for four steps technology leaders can take this quarter, or connect with us to explore building a cybersecurity pipeline of your own.