U.S. employers posted about a quarter fewer cybersecurity jobs in the first nine months of 2026 than a year earlier, even as listings for engineers who secure artificial intelligence systems more than tripled, SecurityWeek reported Sunday, citing new data from staffing firm CyberSN. The shift suggests organizations are rethinking which security skills they need as AI spreads through their operations, a question that bears on workforce planning and on who will protect the AI tools companies are adopting.
What Happened
CyberSN’s “Cybersecurity Jobs Report, 2026 Through September” counted 235,786 U.S. cybersecurity job postings from January through September, down 26.4% from 320,210 in the same months of 2025. That is the lowest January-to-September total in the four years the report covers.
The fastest-growing role was AI security engineer, with 2,409 postings, up 268.3% from a year earlier. CyberSN treats it as a specialty within security engineering and leaves it out of the overall total to avoid double counting. SecurityWeek, citing the report, said postings for cyber data scientists rose 203.5%.
Traditional roles shrank sharply. According to SecurityWeek’s summary, postings for insider threat analysts fell 55.6% to 1,088, cyber risk analysts fell 51.5% to 4,031, penetration testers, who are hired to break into systems to find weaknesses, fell 45.9% to 3,063, and threat hunters fell 40% to 1,013.
Postings for chief information security officers and similar titles fell 38.9% to 2,832. SecurityWeek noted that figure is close to 2024’s 2,808, which makes the decline look more like a return from an unusually strong 2025 than a collapse. The report also found CISO postings rose 19.5% from the second quarter to the third.
Just under 15% of all postings mentioned AI, about the same as a year earlier, though the share reached 20% in September. Research roles had the highest rate, at 32.7%.
About the Data
This is vendor research. CyberSN sells workforce data and recruiting services, so it has a commercial interest in the hiring market; the report does not say it was commissioned. It draws on deduplicated U.S. listings from job-data provider JobSpikr, pulled Oct. 7, and sorts them into 45 roles based on the work described rather than the job title. The report describes what changed, not why, and SecurityWeek’s writer cautioned that it is hard to draw firm conclusions about employment from listings alone. Job postings measure demand from employers, not the number of people working or laid off.
Why It Matters
For boards and executives, the numbers point to a change in what security teams are being asked to do. Companies appear to be hiring fewer people for analysis, testing and monitoring work and more people who understand how AI systems themselves can be attacked. That raises two questions for leaders: whether in-house teams have the skills to secure the AI tools the business is deploying, and whether cuts to traditional roles are running ahead of the controls meant to replace them. The CISO data also matters for succession planning, since a thinner pipeline of senior openings shapes who will be ready to lead security later.
What to Watch
- Whether the third-quarter rise in CISO postings continues into the end of the year.
- Whether government labor data and other hiring trackers show a similar decline.
- How quickly AI security moves from a niche specialty into standard security job descriptions.
