The United States cybersecurity job market is currently navigating a period of significant contraction, according to the latest data from CyberSN’s comprehensive cybersecurity jobs report. By aggregating data from JobSpikr and removing duplicate entries, the report offers a granular look at the shifting priorities of employers across the nation. Rather than relying on the often-inconsistent and "noisy" language of corporate job titles, CyberSN has mapped the data to a standardized taxonomy of 45 functional cybersecurity roles across ten distinct categories. This methodology provides a clearer picture of the actual skills being demanded by organizations, revealing a landscape that is increasingly polarized between shrinking traditional roles and surging demand for niche expertise.
Between January and September 2026, the cybersecurity sector recorded 235,786 job postings. This figure represents a sharp decline of 26.4% compared to the 320,210 postings recorded during the same nine-month period in 2025. This contraction brings the total volume of cybersecurity job listings to a four-year low, signaling a cooling period in an industry that has historically been defined by rapid, almost insatiable, growth. While the overall numbers suggest a broader economic or strategic pull-back in hiring, a closer inspection of the data reveals that the decline is not uniform across all disciplines.
The most striking trend within the report is the explosive growth in demand for professionals who can bridge the gap between cybersecurity and artificial intelligence. While traditional roles face headwinds, the industry is clearly pivoting toward a future where AI fluency is a baseline requirement. Specifically, the demand for AI Security Engineers has skyrocketed, showing a 268.3% increase compared to the previous year. Similarly, the market for Cyber Data Scientists has grown by 203.5%. These figures underscore a fundamental shift: organizations are no longer just looking for generalists; they are actively seeking specialists capable of securing the rapidly evolving AI infrastructure that is being deployed across the enterprise.
This demand for AI expertise is further validated by the broader dataset. Just under 15% of all cybersecurity job postings now explicitly reference artificial intelligence, a figure that is largely consistent with the 15.1% recorded during the same period last year. However, the raw percentage masks a more dynamic trend: the momentum behind AI-related requirements has accelerated significantly throughout 2026, peaking at 20% in September alone. This suggests that as organizations move from the initial experimental phase of AI adoption to more robust, operationalized deployments, the urgency to secure these systems is becoming a primary driver for talent acquisition.
The integration of AI into cybersecurity functions is most pronounced in research-heavy roles. According to the report, 32.7% of all research-focused job postings now explicitly mention the need for AI understanding, an 11.7-point increase from last year. This trend extends into offensive security, where 23.3% of roles require AI knowledge, as well as Governance, Risk, and Compliance (GRC) and planning functions, which saw 19.8% and 18.9% of postings referencing AI, respectively. These departments are clearly tasked with the immediate challenge of governing, testing, and securing AI implementations against novel threats.
Beyond specialized skills, the report provides a snapshot of the current state of remote work within the cybersecurity profession. Despite broader corporate trends pushing for a return to the office, remote work remains a significant component of many cybersecurity roles. The functions with the highest incidence of remote-friendly postings include Sales at 32.8%, GRC at 31.2%, and offensive security roles at 24.7%. Product security, education, research, and defensive operations also continue to support remote arrangements at rates exceeding 20%. This data suggests that while the total volume of job postings has diminished, the flexibility afforded to cybersecurity professionals remains a notable feature of the landscape, particularly in roles that are less dependent on physical access to hardware or sensitive on-premises infrastructure.
While the rise of AI-focused roles provides a bright spot, the broader market contraction has hit many established cybersecurity professions hard. A substantial number of functional roles have seen a sharp decrease in demand. Leading the list of declining roles are Cyber Insider Threat Analysts, which dropped by 55.6% to 1,088 postings, and Cyber Risk Analysts, which fell by 51.5% to 4,031 listings. Other roles suffering from significant downward pressure include Penetration Testers, down 45.9%; Cybersecurity Leads, down 41%; Threat Hunters, down 40%; and Cybersecurity Project Managers, down 39.4%.
Perhaps most indicative of the current market volatility is the decline in leadership roles. Postings for Chief Information Security Officers—including related titles such as Chief Security Officer, Business Security Officer, and Information Security Officer—have decreased by 38.9%, falling to 2,832 postings. However, the report cautions against reading too much into this specific decline as a sign of industry distress. The drop-off is largely a reflection of an exceptionally strong 2025, which saw an influx of leadership hiring. When compared to 2024, the 2026 figures remain relatively stable, and the data shows a 19.5% increase in CISO-level postings between the second and third quarters of 2026, suggesting that the market for top-tier security leadership may be stabilizing after a period of adjustment.
The CyberSN report is strictly observational, focusing on the "what" rather than the "why" of labor market fluctuations. By focusing on the underlying work requirements defined by its internal taxonomy, the report strips away the ambiguity inherent in corporate hiring practices. As the authors note, job titles are often noisy and inconsistent, frequently failing to capture the true nature of the responsibilities associated with a role. By reading every posting through the CyberSN taxonomy, the report ensures that demand is measured by the actual tasks being requested by hiring organizations.
This analytical approach confirms that while the demand for broad, traditional cybersecurity roles may be softening, the market is undergoing a structural transformation. For those currently working in or entering the field, the data offers a clear directive: the path forward increasingly lies in the intersection of traditional security principles and the emerging requirements of AI and data-driven defense. While the demand for leadership remains subject to the shifting priorities of corporate boards—who dictate the need for accountability and, by extension, the hiring of CISOs—the demand for technical specialists in AI remains a clear, upward-trending imperative. For the time being, the cybersecurity job market remains a mixed bag, favoring those who can adapt to the rapid technological shifts while requiring patience for those waiting for the broader hiring climate to rebound.
