The United States cybersecurity job market is currently navigating a period of significant contraction, according to the latest data from CyberSN’s comprehensive Cybersecurity Jobs Report. For professionals, recruiters, and industry observers, the current landscape represents a "mixed bag"—a phrase that captures the tension between an overall decline in hiring volume and a sharp, focused surge in demand for specialized artificial intelligence and data-centric skill sets.
The report, which aggregates data from JobSpikr, offers a unique lens through which to view these trends. Rather than relying on the often-inconsistent terminology used by corporate human resources departments, CyberSN cleanses the data by removing duplicates and mapping various job titles against a proprietary taxonomy of 45 functional cybersecurity roles distributed across ten distinct categories. By prioritizing the specific skills required for a role over the title assigned to it by a hiring company, the analysis provides a more accurate reflection of what employers are actually seeking in the current market. By comparing the first nine months of 2026 with historical data from previous years, the report highlights not only where the market is cooling but also where it is aggressively pivoting.
A Significant Contraction in Hiring Volume
The headline figure for the current year is sobering. Between January and September 2026, the industry recorded 235,786 job postings. This represents a substantial 26.4% decrease compared to the 320,210 postings documented during the same period in 2025. This decline marks a four-year low for the sector, suggesting a cooling-off period following the hyper-growth phases seen in the immediate post-pandemic years.
Industry analysts often note that "job titles are noisy," and this report serves as a corrective to that noise. Because the taxonomy categorizes work based on the actual tasks required—such as offense, defense, research, or governance—it reveals that the decline is not uniform across all sectors of the cybersecurity ecosystem. While the aggregate number of listings has dropped, specific pockets of the market are experiencing explosive growth, signaling that while organizations may be hiring fewer people overall, they are becoming increasingly selective about the technical competencies those individuals possess.
The Rise of the AI-Security Specialist
The most striking trend in the report is the meteoric rise in demand for AI-related security expertise. As generative AI and machine learning tools become more deeply embedded in enterprise infrastructure, the security industry is scrambling to find talent capable of securing these systems.
Two roles in particular stand out for their dramatic growth: demand for AI Security Engineers has surged by 268.3% over the last year, while the need for Cyber Data Scientists has increased by 203.5%. These figures underscore a broader industry reality: AI is no longer a peripheral interest but a central pillar of modern cybersecurity strategy.
Overall, nearly 15% of all job postings in the current dataset reference artificial intelligence. This is broadly consistent with the 15.1% share recorded during the same period in 2025. However, a closer look at the trajectory within 2026 reveals a significant increase in momentum. The share of AI-related job postings grew steadily throughout the year, peaking at 20.0% in September 2026. This indicates that as the year progressed, organizations increasingly prioritized AI-literate talent in their recruitment strategies.
The functional areas most frequently demanding AI proficiency are those tasked with future-proofing the enterprise. Research leads the way, with 32.7% of postings in this category referencing a need for AI understanding—an 11.7 percentage point increase from the previous year. This is followed by the Offense category (23.3%, up 4.8 points), Governance, Risk, and Compliance (GRC) (19.8%, up 2.1 points), and Planning (18.9%, up 0.6 points).
Shifts in Remote Work and Functional Demand
Remote work remains a persistent point of interest for both candidates and employers. According to the report, the functional areas with the highest percentage of remote job offerings are Sales (32.8%), GRC (31.2%), Offense (24.7%), Product Security (22.9%), Education (22.8%), Research (21.9%), and Defense (21.3%). These figures provide a snapshot of which cybersecurity roles are deemed most compatible with distributed work models, a factor that continues to weigh heavily on recruitment success and candidate retention.
However, for many traditional cybersecurity roles, the 2026 market has been challenging. The report identifies several functions that have seen steep declines in postings. Leading this list of "losers" in terms of volume is the Cyber Insider Threat Analyst role, which fell by 55.6% to 1,088 postings. Other significant declines were observed in the Cyber Risk Analyst category (down 51.5% to 4,031 postings), Penetration Testers (down 45.9% to 3,063 postings), Cybersecurity Leads (down 41.0% to 4,688 postings), and Threat Hunters (down 40.0% to 1,013 postings).
Additionally, Cybersecurity Project Managers saw a 39.4% drop, with only 783 postings, and Chief Information Security Officer (CISO) roles—including associated titles like CSO, BSO, and ISO—declined by 38.9% to 2,832 postings.
Contextualizing the CISO and Leadership Downturn
While the 38.9% decline in CISO-level postings might seem alarming, the report urges caution against reading too much into this single statistic. The 2026 figures are, in fact, remarkably similar to the levels seen in 2024, when 2,808 CISO-related roles were posted. The apparent "decline" is largely a reflection of an unusually strong and active market in 2025, which created a difficult year-over-year comparison. Furthermore, the report notes a 19.5% increase in CISO postings between the second and third quarters of 2026, suggesting that the leadership market may be stabilizing or beginning a recovery phase.
The report emphasizes that the fluctuation in leadership roles is closely tied to the shifting priorities of corporate boards. As board members grapple with new regulatory requirements and heightened awareness of cyber accountability, the appetite for leadership talent tends to move in tandem with their evolving perception of cybersecurity as a business risk.
A Focus on "What" Rather Than "Why"
CyberSN maintains that this report is designed to track market movement rather than interpret the underlying motivations of hiring managers. By focusing on the "what" rather than the "why," the report provides a raw, unfiltered look at the work being asked for in the marketplace. The methodology—reading every posting through the CyberSN Taxonomy—ensures that the findings are based on the functional reality of the role rather than the inconsistent and often misleading titles used by recruiters.
The takeaway for the industry is clear: the era of indiscriminate hiring across all cybersecurity domains has transitioned into an era of specialized, high-impact recruitment. Professionals with skills that intersect with AI and data science are in a position of strength, while those in more traditional or support-oriented functions may face a more competitive environment as the industry consolidates. For those aspiring to leadership positions or specialized technical roles, the current data suggests that patience, combined with a willingness to adapt to the new AI-centric reality, will be the defining characteristics of a successful career path in the coming months.
