USF Study: Work-Based Learning Is Key to Cybersecurity Skills Gap

A new University of South Florida study identifies work-based learning — structured on-the-job training such as apprenticeships, internships and employer-embedded programs — as the decisive factor in closing the cybersecurity skills gap.

The finding matters because the gap is a labor-market fixture, not a temporary shortage. Employers have struggled for years to fill security roles with candidates who have provable, hands-on skills. USF's research says the solution isn't more traditional coursework alone. It's learning that happens inside real work environments, where practitioners handle live systems and actual incidents.

What changes for job seekers?

If you're targeting a security career, the study's implication is direct: credentials without applied experience carry less weight than demonstrated workplace exposure. That shifts your positioning strategy.

• Prioritize programs with employer partnerships over lecture-only certifications
• Seek apprenticeships and internships that put you on production security work
• Treat classroom learning as foundational, not sufficient on its own

For hiring managers, the takeaway is equally concrete. Build talent pipelines through structured work-based programs rather than waiting for fully formed candidates in a thin market.

Why USF's framing matters

The University of South Florida has a standing stake in cybersecurity workforce development, which gives the study practical credibility in both academic and industry circles. Its argument aligns with what practitioners already see: security hiring rewards people who have done the work, not just studied it.

That's the insider read. The skills gap won't close through enrollment numbers alone. It closes when learners and employers meet inside the workflow itself, and USF's data now backs that approach with institutional research. Expect workforce policymakers and university program designers to cite this study as they restructure training pipelines toward employer-integrated models.