Cybersecurity is becoming more important but there is a shortage of trained hands

Cybersecurity job postings have jumped 14% over the past year and there are openings in locations such as Bangalore, Delhi and Hyderabad as well as for remote jobs, shows an Indeed survey. This opens up a broader range of opportunities for those looking to enter the field of cybersecurity.

Indeed India says it is a fast-growing field with lots of opportunities for freshers, experienced professionals as well as those looking for a career switch. But what kind of skills should a person have to become a cybersecurity specialist? In an interaction with ET Digital, Bhavesh Goswami, Founder and CEO of CloudThat, answers this and other questions related to cybersecurity. Edited excerpts:

What are the top skills enterprises are prioritising for their cybersecurity teams in 2025?

With rapid migration to the cloud, enterprises are increasingly focusing on cloud-native security solutions. For instance, companies adopting Azure are leveraging Azure Sentinel, a cloud-native SIEM (security information and event management) system that integrates SOAR (security orchestration, automation, and response) capabilities. Similarly, AWS offers robust security services like Amazon Guard Amazon Inspector and AWS Shield, among others.

Beyond cloud security, top-priority skills include AI and machine learning for predictive threat analysis, incident response, regulatory compliance and threat intelligence. These competencies are critical to manage evolving cyberthreats while ensuring businesses remain secure and compliant with industry regulations.

Which emerging cybersecurity threats are influencing the demand for specific expertise? How should professionals adapt?

AI-driven attacks are becoming a significant Beyond cloud security, top-priority skills include AI and machine learning for predictive threat analysis, incident response, regulatory compliance and threat intelligence. These competencies are critical to manage evolving cyberthreats while ensuring businesses remain secure and compliant with industry regulations.

Which emerging cybersecurity threats are influencing the demand for specific expertise? How should professionals adapt?

AI-driven attacks are becoming a significant coconcern as cybercriminals use AI to create more sophisticated phishing schemes and automate malicious activities. Additionally, ransomware and supply chain attacks are on the rise, exploiting vulnerabilities in interconnected systems.

To adapt, cybersecurity professionals must continuously upskill to develop strong defence mechanisms. Cloud-native security expertise is crucial, as many attacks now target cloud infrastructure. Certifications like Microsoft SC-200 (Security Operations Analyst) and SC-100 (Cybersecurity Architect) provide valuable knowledge in this area AWS also offers key certifications, such as AWS Certified Security-Specialty, which helps professionals stay ahead of emerging threats.

What are some key trends driving the cybersecurity workforce in India, and how do they differ from global trends?

In India, a notable trend is the skill shortage in the cybersecurity domain. While demand for cybersecurity professionals is high, there’s a significant gap in the availability of skilled talent. To address this, companies are investing in training and development programmes to build in-house expertise. Another major focus for Indian firms is the integration of AI within cybersecurity roles, with a growing demand for professionals who can leverage AI to enhance threat detection and mitigation.

Globally, AI integration is advancing rapidly, but there’s an additional focus on regulatory compliance as businesses navigate evolving regulations. Furthermore, companies are investing in advanced threat intelligence capabilities to stay ahead of more sophisticated and evolving cyber threats.

What are the emerging trends in tech integration in cybersecurity, and how have they influenced the evolution of job roles?

As more organisations move to the cloud, they are shifting away from managing multiple third-party security vendors — such as separate providers for WAF (web application firewall), DDoS protection and endpoint security. Instead, they are opting for comprehensive, cloud-native security solutions. For example, Microsoft offers a range of integrated tools, like Microsoft Intune for endpoint protection, Azure Web Application Firewall (WAF), Azure DDoS Protection, and Azure Sentinel for security information and event management. This shift is influencing job roles by reducing the demand for expertise in third-party security software, as cloud providers are now offering more built-in security options. However, professionals must still stay ahead by mastering these cloud-native services.