The global cybersecurity workforce shortage has reached 4.8 million unfilled positions, according to (ISC)²'s annual study. Despite AI-powered security tools handling more tasks automatically, the gap continues to widen.
The shortage is driven by the expanding attack surface (more devices, more cloud services, more AI systems to protect) growing faster than the supply of qualified security professionals.
AI is helping. Security teams using AI-powered tools report handling 3.2x more alerts with the same headcount. But AI creates new security challenges (protecting AI systems, defending against AI-powered attacks) that require new expertise.
Salaries reflect the scarcity. The average cybersecurity professional salary in the US reached $142,000 in 2026, a 12% increase from 2025. Chief Information Security Officers (CISOs) at large companies now earn $400,000-$600,000.