November 2019: How Can Higher Ed Better Prepare Cybersecurity Students for a Hot Job Market?

Authors:
Tom Humbarger
Published:
Monday, December 17, 2018
Columns:
Cybersecurity and Privacy
min read

Colleges and universities are uniquely positioned to guide the next generation of cybersecurity professionals. The twelve Security Awareness blogs feature ready-made content designed to enhance security awareness.

photo of two people working together at one laptop
Credit: SFIO CRACHO / Shutterstock © 2018

Campus Security Awareness Campaign 2019

This post is part of a larger campaign designed to support security professionals and IT communicators as they develop or enhance their security awareness plans. The campaign is brought to you by the Awareness and Training Working Group of the EDUCAUSE Higher Education Information Security Council (HEISC). View the other monthly blog posts with ready-made content at the security awareness resource page.

Campus information security professionals have a unique opportunity to help prepare students who are contemplating a career in cybersecurity. This blog posts shares some ways to help spread the word about potential cybersecurity career paths, scholarships, additional courses, conferences, and internship opportunities that can provide vital hands-on experience as these students get ready to join the workforce.

Get the Word Out

Newsletter or Website Content

Behind every new report of a data breach, data leak, or computer hack is a company scrambling to put out the fire, which is great news for job seekers or soon-to-graduate students with cybersecurity skills. Unfortunately, this is bad news for most companies because there is currently an imbalance between the supply and demand of skilled professionals to address these vulnerabilities.

The 2018 (ISC)2 Cybersecurity Workforce Study estimates a global shortage of cybersecurity professionals of around three million workers. This shortage of skilled job seekers is having a real-world impact on companies and the people responsible for cybersecurity at those companies. The study also points out that Gen X and Baby Boomer workers make up about half of the current cybersecurity workforce, leaving many entry-level opportunities for new college graduates and pathways for growth as these more experienced workers approach retirement age.

The need for trained cybersecurity professionals is not going to go away. The US Bureau of Labor Statistics projects a 28% growth in US employment for cybersecurity consultants between 2016 and 2026. How can we help our students go beyond the theoretical concepts taught in computer science or cybersecurity classes and make themselves more attractive to future employers? We need to take the lead to encourage students to take the initiative to learn more about current issues in cybersecurity and take advantage of the many cybersecurity resources available.

Here are some ways you can help your students and contribute to narrowing the cybersecurity skills gap:

  • Hold informational sessions on cybersecurity. Help spread the word on your campus about the cybersecurity skills gap and job opportunities. You could ask your CISO or information security team to conduct a cybersecurity seminar or invite local experts to share their knowledge and expertise with your students. The Enterprise Security Team at The Ohio State University has already implemented this idea, and they sponsor an annual and free on-campus Cybersecurity Days event to expand knowledge of security and data protection for their entire college community.
  • Sponsor or encourage membership in student associations. There are two student cybersecurity organizations for your students to explore—National Cybersecurity Student Association and Women in CyberSecurity (WiCyS). The National Cybersecurity Student Association has a number of resources on their website, and you can sign up for their newsletter or follow their Snapchat account [https://www.cyberstudents.org/were-on-snapchat-follow-us/] to view a day in the life of a cyber student or industry professional. The WiCyS is dedicated to bringing together women in cybersecurity from academia, research, and industry to share knowledge, experience, networking, and mentoring. You can also explore setting up a local WiCyS student chapter on your campus.
  • Offer campus internships. In addition to knowledge of advanced cybersecurity concepts, the most important qualification for cybersecurity employment is relevant work experience. You can help your students by hiring them as interns in your institution's information security department. This offers students real-world experience while providing supplemental staffing for your department. For suggested qualifications and responsibilities, use the Information Security Intern Job Description Template on the EDUCAUSE website as a starting point.
  • Identify scholarship opportunities. The CyberCorps: Scholarship for Services, funded by the NSF, provides up to $22,500 per year for undergraduates and $34,000 per year for graduate students. In return, students commit to work in a for a federal, state, or local agency for a period matching the length of their scholarship. The Cyber Security Degree website provides a comprehensive list of additional cybersecurity scholarships and other career resources.
  • Encourage students to deepen their knowledge. The NICCS Education and Training Catalog is a central location where cybersecurity professionals across the nation can find more than 3,000 cybersecurity-related courses. Anyone can use the interactive map and filters to search for courses offered in their local area to add to their skill set, increase their level of expertise, or earn a certification. You could also direct your students to take advantage of the free online courses offered through edX, US Department of Homeland Security, Cybrary, or SANS Cyber Aces Online.
  • Attend cyber competitions. Institutions with an information assurance or computer security curriculum can give their students an additional way to hone their skills and have fun by participating in regional events hosted by the National Collegiate Cyber Defense Competition (NCCDC). The top regional teams can then go on to the National Championship, which was won by University of Virginia [https://www.raytheon.com/news/feature/cyber-cinderella-story] in 2018. Another cybersecurity competition for high school and college students is the National Cyber League (NCL), is a defensive and offensive puzzle-based, capture-the-flag style competition. All participants play the games simultaneously and are tested with real cybersecurity challenges they will likely face in the workforce.
  • Participate in cybersecurity conferences. Students may be interested the educational and networking opportunities from attending the annual conferences for the National Cybersecurity Student Association or Women in CyberSecurity. For additional conferences in your area, InfoSec publishes a comprehensive list with hundreds of cybersecurity events in the United States, Europe, and Asia.

Social Posts

Email Signature

Ask staff members to add a tip to their email signature block and link to your institution's information security page.

Example:

Jane or John Doe
Chief Information Security Officer
XYZ College or University

Interested in a Cybersecurity Career? Learn more at the National Cybersecurity Student Association website.

Embed or Share Videos

Introduction to Symantec's Cyber Career Connection (5:57 min)
Cyber Security Minute: Cybersecurity Jobs (1:00 min)

Resources

Share these resources with end users or use them to inform your awareness strategy.

Use These Images to Support Your Message

Cyber Career Paths infographic
Figure 1. Cyber Career Paths [https://www.raytheon.com/sites/default/files/cyber/rtnwcm/groups/cyber/documents/content/rtn_278805.pdf] from Raytheon

Cybersecurity Skills Gap infographic
Figure 2. The Cybersecurity Skills Gap: Tackling Challenges and Changing Approaches from Klogix

Cybersecurity Career Roadmap infographic
Figure 3. Cybersecurity Career Roadmap from Computer Science Master Degrees

Tom Humbarger is Marketing Manager at Vantage Technology Consulting Group.

© 2018 Tom Humbarger. The text of this work is licensed under a Creative Commons BY-NC-ND 4.0 International License.