AI's Influence on the Cybersecurity Workforce: Redefining Roles and Skill Requirements

Mario Platt, CISO at LastPass, has recently restructured the company's cybersecurity framework by dissolving the dedicated vulnerability management team and integrating those responsibilities into IT and product security. The shift reflects a broader trend in which organizations are optimizing their cybersecurity strategies around the capabilities provided by AI and business intelligence tools, which can efficiently handle tasks that once required dedicated personnel.

According to the World Economic Forum's 2026 Global Cybersecurity Outlook, a staggering 87% of companies are now identifying AI-related vulnerabilities as their fastest-growing risk area. The 2026 SANS/GIAC Cybersecurity Workforce Research Report corroborates this trend, indicating that 74% of organizations experience changes in the size and structure of their security teams directly linked to AI technologies. This places immense pressure on cybersecurity leaders to rethink their operational models and workforce composition.

1. Security Leadership is Consolidating

As evidenced by Platt's decisions at LastPass, cybersecurity leadership roles are increasingly consolidating rather than expanding. In addition to eliminating certain roles, Platt plans to automate compliance work within his governance, risk, and compliance (GRC) function, enabling team members to focus on higher-level advisory responsibilities. This transition also involves transforming staff roles into business information security officers aligned with specific business units.

Burke Autrey, president of Fortium Partners, emphasizes that their standard advice is to resist adding more C-level titles. Instead, he notes how clients are positioning existing technology leaders to take on broader responsibilities that encompass both cybersecurity and AI/ML roles, thereby minimizing role fragmentation. Similarly, Martha Heller, CEO of an executive search firm, reflects that clients desire leaders proficient in both infrastructure and cybersecurity, especially those with substantial cloud migration experience.

However, many organizations remain in the early stages of adapting, often layering AI governance onto existing roles without increasing staff. John Alford, CSO at Quant, warns that this model risks overwhelming a limited number of personnel with expansive responsibilities.

2. The Evolving Role of Security Analysts

The job of a cybersecurity analyst is shifting from merely identifying threats to critically evaluating the context of those threats. Robin Fewster, head of cybersecurity at Nexus Black, has developed an automation tool that scans for vulnerabilities daily, making detection a baseline expectation rather than a specialized skill. Thus, the roles of security analysts and engineers are starting to converge.

CISO Randy Gross from CompTIA notes that while detection tools efficiently manage most incident details, the true value of security operations center (SOC) analysts now lies in their ability to understand the implications behind an incident. This shift toward strategic evaluation doesn’t necessarily imply a reduction in jobs; instead, it allows analysts to address more systemic issues such as governance and response planning.

The current wave of transformation is also giving rise to new roles, including that of agent security engineers, which were not part of the job market just 18 months ago, according to Heller.

3. The Scarcity of Judgment Over Technical Knowledge

As Alford points out, the hard-to-find attribute now in high demand within cybersecurity hiring is judgment rather than just technical expertise. While AI can generate polished technical responses, it can also overlook critical business implications. This is creating a skills shortage as fewer experienced professionals remain to assess the outputs of automated systems.

Gross highlights this value shift towards judgment, stating that the experience needed to verify automated conclusions is more complex than simply producing those findings. Specialists in identity and access management (IAM) are particularly difficult to find, despite the overwhelming demand for them.

The emergence of AI tools also complicates matters, as Alford describes the "AI loop," where one AI system evaluates another's output. This can result in misleadingly sophisticated reports, emphasizing the critical need for experienced professionals who can ensure that outputs are relevant and accurate within the specific business context.

4. AI Fluency as a Hiring Prerequisite

The necessity for AI skills among cybersecurity professionals is clearly illustrated in job postings, with requirements for such qualifications rising dramatically within G7 nations, according to a June 2026 analysis by the Cisco-founded AI Workforce Consortium. The critical shift now emphasizes not only technical prowess but also the candidates’ ability to effectively engage with AI tools.

Platt emphasizes that organizations must be cautious in their hiring practices, seeking candidates who can thoughtfully embrace AI rather than those who are skeptical. However, the demand for AI expertise sometimes outpaces the real needs of organizations, as many still require foundational cybersecurity measures such as identity hygiene and data classification. Autrey critiques the fixation on AI talent, noting that it exposes companies with uncompleted foundational controls.

To further complicate recruitment, potential employers face challenges in assessing AI capabilities due to outdated certification methods. SANS Institute's Lee urges organizations to recognize that a certification only indicates a person’s capabilities at a specific timestamp rather than a continuous assurance of competence.

5. Risks from a Shrinking Talent Pipeline

The demand for intelligent automation is leading to a shrinkage in the pipeline for emerging cybersecurity talent. Recent data reveals that postings for senior-level cybersecurity roles increased by 65% over a recent six-month span, while junior positions only saw a modest 5.9% growth. This trend indicates a growing disconnect in the opportunities available for aspiring cybersecurity professionals.

Autrey of Fortium Partners warns that critical entry-level positions, such as Tier 1 SOC roles, are increasingly going unfilled as organizations prioritize automation. This leaves a skills gap that may reverberate in the coming years. The 2026 SANS/GIAC report confirms that the disparity between necessary skills and actual workforce capabilities has expanded significantly, particularly as AI disrupts traditional entry points into the field.

As Lee notes, the emergence of skills gaps has become the top workforce issue facing organizations, surpassing headcount challenges. Alarmingly, 27% of organizations now report that they have linked breaches directly to these skills shortages on their teams.