“28.5% of cybersecurity job postings between October 2025 to March 2026 required AI skills,” the report found — up from 14.2% in the same period a year earlier.
That sharp rise, documented by the Cisco‑founded AI Workforce Consortium, signals a rapid reweighting of the baseline qualifications employers expect of cyber practitioners across G7 countries. The shift is not only quantitative — more roles asking for AI competence — but qualitative: teams are being reorganised around new mixtures of human oversight and machine automation, and the very nature of entry‑level work is changing.
Scale and source: where the numbers come from
The finding that AI skill requirements doubled year‑over‑year comes from analysis of recruitment data supplied by Cornerstone and Indeed and was published in research produced by the AI Workforce Consortium. The Consortium was founded in 2024 by Cisco alongside Accenture, Cornerstone, Eightfold AI, Google, IBM, Indeed, Intel, Microsoft and SAP, and the study combines original research with insights from those member organisations.
Across the G7 for the six months ending March 2026, demand for cybersecurity roles rose 9.5% overall — but that headline growth masks important differences by seniority and skill expectations.
“Agentic skill stack” and the redefinition of high‑volume roles
The report identifies an emerging “agentic skill stack” as the new baseline for high‑volume cybersecurity jobs such as security engineering, cloud security, and detection and response engineering. In practical terms, common, repetitive tasks — triaging alerts, correlating threat intelligence feeds, executing standard decision‑tree workflows — are increasingly being handled by AI systems.
Rather than eliminating jobs, the shift is remaking them: security operations center (SOC) analysts and similar roles remain in demand, but their day‑to‑day work is moving away from high‑volume technical chores toward more human functions such as validating AI outputs, assessing risk and ensuring decisions are sound.
Audit-ready is a season. It shouldn't be.
Evidence in spreadsheets, controls drifting between audits, frameworks multiplying on flat headcount. Nubivance runs continuous compliance on Rapid7 Cyber GRC - SOC 2, HIPAA, ISO 27001, PCI, CMMC.
End the scrambleEntry‑level bottleneck: senior postings surge while junior growth stalls
The data show a yawning experience gap. Between October 2025 and March 2026, senior cybersecurity job postings grew 65%, while junior‑titled roles rose only 5.9% in the same period. The report links that discrepancy to prevailing expectations from hiring leaders: many competencies asked for in entry‑level job descriptions are currently unattainable for new entrants.
A May 2026 Cisco survey of security leaders captured the problem succinctly: the three competencies hardest to find in entry‑level candidates were hands‑on experience with AI agents (49%), technical cybersecurity depth (48%) and human‑centric professional skills (45%).
Skills climbing fastest: ethical reasoning, systems thinking, stakeholder engagement
As AI assumes routine functions, demand has surged for strategic and human‑centered skillsets. The report documents steep year‑over‑year increases in several of these capabilities: ethical reasoning is up 533%, systems thinking up 251% and stakeholder engagement up 125% among the skills sought in job advertisements.
These figures reflect a broader shift in which individual workers are expected to exercise oversight — auditing, validating and critically evaluating agent‑generated outputs — and to translate technical findings into decisions for nontechnical stakeholders.
What this means for technologists, employers, and educators
- Technologists and security teams: Expect continuing demand for roles such as security engineers and SOC analysts, but with an altered remit — more validation, risk assessment and oversight of AI agents, and less time spent on repetitive execution.
- Employers and procurement leaders: Hiring patterns are already biased toward experience; senior job postings rose 65% while junior roles lagged. Organisations looking to staff resilient teams will need to rethink recruitment pipelines and role definitions to attract candidates with both AI familiarity and strategic judgment.
- Educators and training providers: The report urges a fundamental rethink of how cyber talent is built. “To better prepare students for entry‑level roles, we have to rethink what gets taught, and how. That means experiential learning, lab exercises where students audit, validate, and critically evaluate AI agent‑generated outputs, not just theory. It also means more internships, apprenticeships, and industry‑sponsored projects, giving students real‑world experience before they’re on the job,” the report reads.
The report paints a clear, if unsettling, picture: AI is reshaping cybersecurity work at speed. Employers are asking for agentic skills, recruiters are posting far more senior roles, and educators are being pressed to replace lecture‑driven curricula with hands‑on, industry‑connected training. The central question the study leaves in stark relief is practical rather than philosophical — how fast can hiring and training systems adapt so the next generation of cyber practitioners can step into jobs that already expect them to partner with intelligent machines?
https://www.infosecurity-magazine.com/news/cybersecurity-job-ads-ai-skills/
