6 Reasons Your Security Recruiting Sucks

This opinion article argues that the cybersecurity skills shortage is largely self-inflicted by organizations that demand overly specific skills, over-rely on certifications, offer unrealistic salaries, foster blame cultures, and fail to use automation and alternative talent sources (e.g., data scientists, hackathon participants, bug-bounty platforms); it recommends broader hiring criteria, on-the-job development, operational optimization, and use of crowdsourced security testing.