US Cybersecurity Job Postings Drop 26% to Four-Year Low

US cybersecurity job postings fell 26%, hitting a four-year low, according to reporting from Infosecurity Magazine. That's the single hardest number in the security labor market right now, and it lands on a sector long framed as chronically understaffed.

The figure matters because it breaks a decade-long narrative. Cybersecurity had been treated as close to recession-proof hiring, with demand for security talent routinely outstripping supply. A 26% decline in postings says employers have pulled back on new security requisitions at a scale the market hasn't seen in four years. Takeaway: security roles are no longer insulated from broader tech-sector hiring discipline.

What does a four-year low actually mean for jobseekers?

A posting decline doesn't equal a hiring freeze. It means fewer open vacancies competing for the same candidate pool. For practitioners, that shifts market power back toward employers in most security specializations. Practitioners should read this as a demand signal, not a skills verdict: fewer doors, more competition per door.

The mechanics are straightforward. Postings (the number of active job ads live at a given time) are a flow measure of employer intent. A 26% contraction over four years of trend means companies are filling roles more slowly, consolidating teams, or deferring headcount they would previously have approved. Takeaway: the average security jobseeker now chases fewer listings against a larger applicant field.

Which roles feel this first?

Posting contractions rarely hit all security functions equally, and sector-level detail matters more than the national headline when you're sizing up your own position. Historically, defensive and compliance-oriented roles track corporate budgets closely, while detection engineering and incident response track incident volume instead. Without function-level breakdowns in the current data, the safe read is directional: total demand is down materially, and candidates in budget-sensitive functions should expect longer searches.

If you're currently employed in security, the data argues for holding position. Switching into a market with 26% fewer active postings means negotiating from weaker leverage than at any point since the low last appeared four years ago. Takeaway: internal mobility currently beats external search for most security practitioners.

Where does the number come from?

Infosecurity Magazine reported the 26% decline and the four-year low. The publication didn't publish sample sizes or revision schedules in the summary reporting, so treat the figure as a headline indicator rather than a precise count of vacancies. Posting data is also subject to revision as job boards de-duplicate and employers close listings early. Takeaway: the direction and magnitude are the story; the decimal points aren't.

Looking ahead, the next few quarters will show whether this trough reflects a structural reset in security staffing or a cyclical dip that reverses as budgets reopen.