海角大神

Modern field guide to security and privacy

Can cybersecurity boot camps fill the workforce gap?

A startup in Denver and an initiative in Chicago are using cybersecurity boot camps to quickly prepare workers to fend off digital attacks.

 

|
David Becker/Reuters
Attendees at the 2016 Black Hat cybersecurity conference in Las Vegas.

Boot camps aren't just for software development anymore.听

With the US cybersecurity workforce facing severe shortages and data breaches surging,听new groups are cropping up to respond with initiatives to quench the exploding demand for digital talent.

Denver-based startup听SecureSet Academy is just the latest organization to use听a boot camp-style teaching model to quickly prep jobseekers for careers fighting off digital attacks. The academy has graduated听16听aspiring 'white hat' hackers since its launch last February, placing all of them in roles as听security engineers, penetration testers and consultants with local firms.听And now,听another 17 graduates are about to join their ranks.

鈥淲e need to recognize the rise of a 鈥渘o-collar鈥 work force in this domain, and realize that we can effectively field this force quickly,鈥 says Adam Sheffield, director of听SecureSet听Academy's new Tampa campus. 鈥淲e need to start looking outside existing silos and build accelerated pathways that address the needs of students seeking entry into the field.鈥

The startup鈥檚 early success with its accelerated training program prompted venture capital fund Colorado Impact Fund (CIS) to lead a $4 million investment round this month to fuel SecureSet鈥檚 expansion.听But SecureSet 鈥 which charges $19,500 for its intensive 20-week cybersecurity program 鈥 isn't the only firm pushing a boot camp-style approach, with听Russia鈥檚 suspected involvement in election-related hacks听dominating recent headlines.

Another group听doing that is the City Colleges of Chicago (CCC), which this week became the first community college system in the country to partner with the Department of Defense on a new free cybersecurity training program for active militaryservice members and civilians.

The effort is modeled after an intensive six-month cybersecurity boot camp tested with government personnel at Fort McNair in听Washington. Chicago's municipal government has put听$1 million behind the effort, alongside $500,000听from the听Defense Department.

Many of the same cybersecurity experts who provided the training at the Pentagon听will train the first batch of 30 students at the inaugural boot camp scheduled to begin this spring at CCC鈥檚 Wilbur Wright College. Companies such as Accenture, Allstate and Microsoft will also help with programming and job placement.

Boot camp graduates听will take the Offensive Security Certified Professional (OSCP) Certification Test to vet their readiness for jobs in penetration testing and related areas. 听鈥淭hese jobs pay $80,000-a-year 鈥 starting,鈥 Chicago Mayor Rahm Emanuel told the听. 鈥淪ix months of boot-camp training and you get a salary of $80,000, and we have 10,000 jobs coming to Chicago.鈥 Mr. Emanuel听is using unclaimed funds from a city property tax rebate to finance the boot camp.

Similar efforts are springing up across the country.听With the Trump Administration鈥檚 focus on bringing more听jobs back to the US,听efforts to galvanize domestic job growth such as those in Chicago and Denver are likely going to become even more important in the next few years.

In Georgia, Governor Nathan Deal听听earlier this month to promote cybersecurity via a new Cyber Innovation and Training Center that will be developed in collaboration with the Pentagon and NSA.

Indeed.com estimates that US firms on average are currently able to fill less than 7 in 10 of their available cybersecurity jobs.听The job search website听says that's the fourth worst security skills shortage in the world, despite salaries that often start at over $60,000 and exceed $200,000 for more experienced staff.

In recent years, the federal government has made efforts to address the problem by among other things, setting aside funds for cybersecurity education and training.

The Obama administration鈥檚 budget for the last fiscal year makes up to $62 million available in 2017 to support training programs in universities around the country and scholarships to train future听cybersecurity workers听for careers听government. But the results of those efforts may not be felt for years.

鈥淢illions, if not billions, of tax dollars have been spent on bolstering traditional education programs,鈥 says Mr.听Sheffield. Students coming out of such programs often have excellent technical skills but lack experience applying those skills to real-world problem sets.

Instead of the federal government鈥檚 top-down approach, the place to start building security talent is at the community level and via partnerships across the public and private sector, Fund says.

鈥淭here is a massive gap between the demand and supply of cybersecurity professionals [in the US],鈥 says Ryan Kirkpatrick, partner at CIS,听the venture capital firm that invested in SecureSet.听

鈥淐urrent cybersecurity training offerings are not increasing the available supply of cybersecurity professionals since they only focus on retraining the existing cybersecurity workforce,鈥 Mr. Kirkpatrick says. His firm听has expressed听interest in cybersecurity training companies like SecureSet.

Globally, the skill or position that seems to be most needed is听network security specialists says Daniel Culbertson, an economist at Indeed.com. This is the skill set with the highest employer demand in several high profile markets, such as Israel, Ireland, the UK.

In the US the biggest mismatch between supply and demand is for professionals with application and cloud security experience and for those who know how to secure the billions of devices being connected to the so-called Internet of Things, Mr. Culbertson says.

鈥淛obseekers' interest in cybersecurity positions has grown over the past two years [and] has helped narrow the gap,鈥 between supply and demand, Culbertson says. For instance, one year ago, American firms were able to fill only 6 in 10 of their available security roles compared to nearly 7 in 10 this year.

Part of this can be attributed to the attention the profession has been getting in the news after several high profile breaches in the private sector and the US election, he said. 鈥淢ore likely is that job seekers are seeking these jobs out because they are in demand and pay well.鈥

Security Culture

This journalism empowers people to understand the bigger picture of cybersecurity as it connects to some of the most personal parts of their lives: their job, their education, the evolving digital culture around them, and the technology they use on a day-to-day basis. As part of the Monitor鈥檚 overarching commitment to chronicling human progress, we see these very human issues within cybersecurity to be critical and overlooked parts of the conversation.

This initiative is generously supported by

You've read  of  free articles. Subscribe to continue.
Real news can be honest, hopeful, credible, constructive.
海角大神 was founded in 1908 to lift the standard of journalism and uplift humanity. We aim to 鈥渟peak the truth in love.鈥 Our goal is not to tell you what to think, but to give you the essential knowledge and understanding to come to your own intelligent conclusions. Join us in this mission by subscribing.
QR Code to Can cybersecurity boot camps fill the workforce gap?
Read this article in
/World/Passcode/Security-culture/2017/0120/Can-cybersecurity-boot-camps-fill-the-workforce-gap
QR Code to Subscription page
Start your subscription today
/subscribe