US Cybersecurity Job Postings Drop 26% While AI Security Engineer Demand Surges

What happened

CyberSN’s latest jobs report aggregates data from JobSpikr and applies a taxonomy of 45 cybersecurity roles. The analysis covers 235,786 postings in the United States from January through September 2026, a 26.4% drop from the 320,210 recorded in the same period of 2025.

The report shows a mixed landscape: overall volume has fallen, yet demand for certain specialties—particularly AI security engineers—has risen sharply. The methodology removes duplicate listings and assigns each posting to a functional category, providing a clearer view of skill demand than title‑based searches.

Who is affected

Security operations teams, system administrators, and incident response groups are directly impacted by the talent shortfall. Hiring managers across mid‑size and enterprise organizations must contend with fewer qualified candidates for core defensive roles.

The decline also affects recruiters and staffing agencies that rely on a steady stream of openings to match talent with need, potentially widening the gap between demand and supply for critical security functions.

Impact

With fewer postings overall, the pool of available security professionals is shrinking. This contraction can lead to higher workloads for existing staff, increased overtime, and a greater risk of missed detections or delayed incident response.

Organizations that rely on outsourced or contract staff may find it harder to secure experienced personnel, forcing them to either raise salaries or invest in up‑skilling internal teams.

Exposure

AI security engineers are becoming a key competency as adversaries adopt machine‑learning techniques for reconnaissance, exploitation, and post‑exploitation. The rising demand for these roles indicates that defenders are recognizing the need to counter AI‑driven threats.

Defenders lacking AI expertise may be exposed to sophisticated attacks that automate vulnerability discovery or evade traditional detection mechanisms, increasing the likelihood of successful breaches.

What to do

• Conduct an internal skills audit to identify gaps in AI, machine‑learning, and automation knowledge.
• Allocate budget for targeted training programs, including vendor‑specific AI security courses and certifications.
• Partner with universities or coding bootcamps to create pipeline programs focused on AI security engineering.
• Adjust recruiting criteria to prioritize candidates with experience in AI model security, adversarial ML, and automated threat hunting.
• Leverage internal mentorship to transfer AI expertise from senior analysts to junior staff.

What to watch

Monitor job boards and industry reports for continued growth in AI security engineer listings. A sustained rise may signal a shift toward AI‑centric threat landscapes, requiring proactive investment in defensive tooling.

Track changes in salary ranges for AI security roles to gauge market saturation and adjust compensation packages accordingly.