The Cybersecurity Talent Shortage Is Bullshit
- Patrick Duggan
- Jan 9
- 2 min read
My Credentials
I run a threat intelligence operation. I publish a free STIX 2.1 feed with 60,000+ IOCs. I've detected supply chain attacks before the vendors announced them. I contribute to OTX. I build the infrastructure. I do the work.
I'm not complaining about not getting hired at Google. I'm asking a simpler question: if there's a talent shortage, why are qualified people building their own path because nobody's buying?
The Narrative vs Reality
The narrative: 3.5 million unfilled cybersecurity positions globally. Companies desperate for talent. Learn security and write your own ticket.
The reality: Entry-level positions require 5 years experience. Mid-level positions got eliminated in the last reorg. Senior positions go to someone's former colleague. The "shortage" is for people who already have the job.
I talk to security professionals. They're sending hundreds of applications. They're getting ghosted after final rounds. They're watching companies post the same role for six months while claiming they can't find anyone.
The Gap
Here's what I think is happening:
Companies want: Someone who's already done the exact job, at a competitor, for less money, available immediately, willing to be on-call 24/7, and grateful for the opportunity.
Companies say: "We can't find qualified candidates."
The talent shortage isn't a hiring problem. It's a expectations problem. Companies want unicorns at donkey prices.
My Question
I'm genuinely asking: what are you experiencing?
If you're in security, are you seeing the "hot market" everyone talks about?
If you're hiring, what's actually hard about finding people?
If you've given up, what was the breaking point?
I'm not looking for reassurance. I'm looking for signal. Either my experience is an anomaly, or the narrative is wrong.
What I'm Doing About It
I stopped waiting for permission. I built DugganUSA because nobody was going to hand me a seat at the table.
Is that the answer? Everyone becomes an entrepreneur because employment is broken?
That's not a labor market. That's a hunger games.
Let Me Know
If you're experiencing something different, I want to hear it. If you're experiencing the same thing, I want to know I'm not crazy.
Hit me up: [email protected]
About DugganUSA: We publish free threat intelligence because we believe security shouldn't be paywalled. Also because apparently that's the only way we're getting into the industry.
Her name is Renee Nicole Good.




Comments