U.S. cybersecurity job postings fell to a four-year low through September, even as demand for specialized artificial-intelligence security expertise surged, according to CyberSN’s 2026 cybersecurity jobs report. Employers advertised 235,786 cybersecurity positions from January through September, down 26.4% from 320,210 during the same period in 2025. [2]
The decline was broad: eight of the nine months tracked came in below their 2025 counterparts. However, the comparison is partly magnified by an unusually strong 2025; the 2026 total was roughly 4% below the corresponding period in 2024, according to Help Net Security’s review of the data. The figures measure advertised postings rather than hires, people or distinct openings, so they indicate employer demand but do not quantify layoffs or unemployment. [13]
Within the contraction, AI-focused roles moved sharply in the opposite direction. CyberSN counted 2,409 postings for AI Security Engineers, a 268.3% increase over the same nine-month period last year. Cyber Data Scientist postings rose 203.5% to 1,493. The report’s taxonomy counts work requested in a listing rather than relying solely on job titles, and it treats AI Security Engineer as an overlapping series that is shown for context but not added to the overall total. [2]
The broader AI signal is significant but narrower than the role-growth percentages suggest. Some 14.6% of postings mentioned artificial intelligence or machine-learning terms, compared with 15.1% a year earlier; September reached 20%, the highest monthly share since January 2025. CyberSN searched descriptions for terms including artificial intelligence, machine learning, generative AI, large language model and LLM, while excluding the standalone letters “AI” to avoid false matches in application instructions. [2]
For defenders and security leaders, the data points to a reallocation of skills rather than a simple end to cybersecurity hiring. Employers appear to be placing a premium on people who can assess models, training data and AI-enabled supply chains while traditional roles face tighter competition. Candidates and teams should therefore distinguish genuine security engineering requirements from generic AI language in job descriptions, and validate whether a role involves model security, data protection, adversarial testing or governance.
CyberSN said its data was pulled October 7 from deduplicated U.S. JobSpikr listings across job-board and Fortune 500 datasets, then aggregated against a taxonomy covering 45 cybersecurity functional roles. The report cautions that job titles are noisy, postings can represent the same hiring demand across channels despite source-level deduplication, and the projected full-year total is a seasonal pace estimate rather than a forecast. Those limits make the report best read as a measure of changing employer priorities—not proof that the cybersecurity workforce itself has contracted by 26%.
References
- Cybersecurity Jobs Report, 2026 through September
- The cyber talent shortage? Job postings just hit a four-year low – Help Net Security
