Hiring A Cybersecurity Pro? Consider These Six Do's And Don'ts

The need for cybersecurity professionals is high with very limited supply. These roles are vital to your business, and you may want to fill them quickly -- but with a candidate who meets your requirements. Here are a few thoughts based on experience that might help you uncover a great fit despite the slim odds.
Don’t Be Arrogant
Listen to your interviewee. Many who work in cybersecurity say unemployment in the industry is at ground zero. The person you're interviewing likely has a job. That means they don’t need yours. It can be tempting to talk about your company’s success, and while that’s important, you’ll win with your candidate if you put their thoughts and needs first. Ask their opinion on the security challenges your company faces.
You are an extension of how the candidate perceives your company culture. Create an interview environment where the candidate feels wanted and valued. Appreciate their opinions and ideas. Show them that you care not only about company goals, but also about the people that work for the company.
Do Give Them A Compelling Reason To Leave Their Current Position
Most cybersecurity professionals are happy in their current jobs. It could take a serious carrot to overcome inertia and give them a reason to make a move. A 2018 (ISC)2 report found that only 14% of respondents in the cybersecurity industry were actively looking for a new job.
With a bounty of options available to the average cybersecurity professional, you’ll need to listen carefully to individual goals. Are they money motivated? Is working with the latest tech their biggest priority? Is it the possibility of relocating? Put yourself in their shoes, then be flexible and creative to find what it is that would equate to an opportunity they can’t refuse.
Don’t Reject Someone Because They Don't Look Like The Perfect Fit At First
Be open to less experienced, smart candidates. My biggest pet peeve in the industry is when hiring managers don't see the full potential of strong candidates.
Is it routinely taking you more than a few months to fill positions? Raise your hand. Maybe you're suffering from hiring perfectionism. What if you hired someone who was a little below the desired experience level? Look for candidates that ask great questions and are smart and curious. Invest in them, and over time they will likely get up to speed and become a loyal employee.
If you are at the low- to mid-range level of compensation, consider extending an offer to someone who will view your position as a step up in their career. Their gratitude could pay off in the long run.
Do Research What Other Companies Are Doing
Those 498,000 are tipping the scales of supply and demand. You’ll need to analyze what other companies in your geography and industry are doing to attract cyber professionals. Make sure you're competitive. Do you allow remote work? Do you allow for a flexible schedule? Do you offer extra paid time off? These are just a few of the less-costly perks that can make a huge difference in your hiring power. Find the benefits within your own culture. Ask what makes working at your company more interesting and rewarding than working with other companies. Think about how you show people that you care about their quality of life.
Don’t Search For Clones
Sometimes people look to fill a position with a person just like the one who recently departed. They might say: “We need another person like Joe.” Instead, look to implement good onboarding and training approaches for your new employee.
It can be hard to remember that Joe was not always experienced. If you are holding out for a clone of the person who just left, there is a high probability that you're spending valuable time looking for someone who doesn't exist.
When an experienced person leaves, so does the “glue” of the institutional knowledge they carried with them. That means someone will have to invest time into the new hire. Be realistic and pragmatic. Find ways to help the new candidate get up to speed. In my experience, the best thing you can do is fill the position as quickly as possible with someone who is capable of learning -- and surround them with mentoring opportunities.
Do Speed Up Your Hiring Process
Hiring can be a slow process for many reasons. People take time to decide in part because they're afraid of making a mistake.
Wasted time can be the biggest mistake. Today’s competitive market demands agility, especially with regards to cybersecurity.
You can increase your odds of landing that highly sought-after and hard-to-find candidate by making them an offer before anyone else does. Being the first one to ask is like being first to market. It can be a big advantage. Make it so that you are your candidate’s only offer.
source forbes
Industry: Cyber Security News
Latest Jobs
-
- CyberArk Architect
- London
- Upto £110,000 plus bonus and benefits
-
Are you ready to lead from the front and drive innovation in the Identity & Access Management (IAM) space? We’re looking for a seasoned CyberArk Architect who has CDE-CPC ideally or experience with privilege Cloud, someone who can lead with vision, execute with precision, and inspire teams to deliver excellence. As a key leader in our organisation, you’ll bring your strong business acumen and a technology-focused, innovative mindset to the table. You’ll be driving strategic initiatives, shaping transformation programs, and empowering teams to think big and deliver even bigger. Acting as a subject matter expert in CyberArk Leading strategic transformations in: Identity Governance Privileged Access Management (PAM) Access Management Customer Identity and Access Management (CIAM) Building and maintaining strong, collaborative relationships within the team Communicating clearly and confidently — both written and verbal — to deliver updates, raise potential issues, and share insights If you are interested in the above position we are looking for people with: deep expertise and a successful track record in IAM strategy, delivery, or assurance with CyberArk Hold relevant certifications such as CDE in Privileged Cloud or Guardian Have experience in a client-facing role (preferred, but not essential) Thrive in a hybrid working environment and are available to work from our or client London office three days a week Lead with clarity, communicate with impact, and adapt quickly to changing priorities
-
- OUTSIDE IR35 Splunk Engineer- SC Cleared.
- United Kingdom
- N/A
-
OUTSIDE IR35 Splunk Engineer- SC Cleared. You will be responsible for consolidating Splunk ES data from multiple feeds into a single pane of glass to enhance visibility and streamline security operations.
-
- Identity & Access Management Architect
- Edinburgh
- Upto £95000 plus bonus and benefits
-
Location: Edinburgh | Hybrid Working | Permanent Are you an experienced Identity & Access Management professional with a passion for designing and implementing cutting-edge security solutions? We are looking for a Lead Architect, where you’ll play a key role in helping clients enhance their IAM capabilities, protect critical data, and navigate complex security challenges. About the Role As a Lead Architect, you will be responsible for shaping and delivering IAM strategies, designing robust security solutions, and driving long-term digital transformation. You’ll leverage your expertise to provide strategic guidance on areas such as: Identity Governance & Administration (IGA) Privileged Access Management (PAM) Access Management (AM) Entitlement Management Directories & Authentication Solutions You will have the opportunity to work with innovative technologies and frameworks, ensuring that businesses can securely manage access to critical assets while enabling growth. What You’ll Be Doing Providing subject matter expertise in IAM and leading transformation projects for clients Developing IAM roadmaps, operating models, and governance frameworks Driving innovation by integrating IAM capabilities into wider digital transformation strategies Building and maintaining strong relationships with clients and stakeholders Designing and implementing scalable IAM solutions to meet business needs What We’re Looking For Proven experience in IAM strategy, solution architecture, or assurance Strong leadership skills with experience guiding technical teams Ability to work in a client-facing role, delivering clear communication and insights A technology-focused, innovative mindset with strong business acumen Willingness to work from our Edinburgh office 2-3 days per week
-
- Security Architect - Cloud - Consultancy London
- London
- N/A
-
Security Architect with a focus into Cloud (AWS, Azure or Google Cloud Platform) needed. You must have client facing consultancy experience. This mean you must have experience working with clients helping them to meet their security design needs. That could include working with existing internal teams to understand, review and mitigate / uplift existing Cloud Security designs, or perhaps helping clients set out / understand their current needs and deliver their cloud security strategy. (Or anything in between) Technical knowledge is of course essential but working with clients to understand and solve their Cloud Security design challenges is vital. You must obviously have a current history working as a cloud security architect. You will need to be commutable to London. Whilst a hybrid role the expectation is 3 days a week in the office / meeting clients. International relocation or Visa sponsorship isn’t available for this role. Apply on this page and arrange a call here https://calendly.com/d/crpz-m7j-wyx