EXABEAM 2018 CYBER SECURITY PROFESSIONALS SALARY AND JOB REPORT: COMPENSATION, JOB SATISFACTION, EDUCATION, AND TECHNOLOGY OUTLOOK

Transcription

1 EXABEAM 2018 CYBER SECURITY PROFESSIONALS SALARY AND JOB REPORT: COMPENSATION, JOB SATISFACTION, EDUCATION, AND TECHNOLOGY OUTLOOK

2 OVERVIEW OVERVIEW Compensation, Job Satisfaction, Education, and Technology Outlook THE EXABEAM 2018 CYBER SECURITY PROFESSIONALS SALARY REPORT AND JOB REPORT is based on a global survey of 481 security professionals that was conducted in March The purpose of the survey was to gain insights into the trends with security professionals salaries (focusing on the median range of income earners according to this sample), their education levels, job satisfaction, and attitudes towards innovative and new emerging technologies. Note: All salaries were converted to U.S. dollars after answering survey questions about salary. The resulting income numbers do not represent regional differences in income and cost of living, which can be a significant factor when evaluating salary. 2

3 Contents KEY INSIGHTS 04 SALARY TRENDS IN THE SECURITY PROFESSION 07 TRENDS IN SECURITY PROFESSION ROLES, CERTIFICATIONS, AND EDUCATION 17 JOB SECURITY & SATISFACTION 24 ARTIFICIAL INTELLIGENCE, MACHINE LEARNING, AND NEW TECHNOLOGIES 33 CAREER ADVICE TO THOSE THINKING OF HAVING A CAREER IN CYBER SECURITY 41 3

4 KEY INSIGHTS KEY INSIGHTS Key Salary And Demographic Insights SALARIES ARE HIGHEST IN NORTH AMERICA Salaries in North America are % higher than reported salaries in Europe or Asia Pacific. Salaries are twice as much in North America as they are in Latin America % Salaries in North America are higher than reported salaries in Europe or Asia Pacific SALARIES ARE HIGHEST IN THE RETAIL INDUSTRY Salaries in the retail sector are the highest, while those in the education and telecommunication sectors are the lowest. While salaries do not continue to increase reliably with increased levels of education, participants with advanced degrees consistently earned more than those with only bachelor s degrees. SALARIES AT SMALL COMPANIES ARE LOWEST $50,001-$75,000 $75,001-$100,000 SALARIES AT SMALL COMPANIES ARE LOWEST Among companies with 101 employees or more, median salary ranges were $75,001-$100,000. Companies with 100 employees or less had median salary ranges of $50,001-$75,000. Participants reporting higher salaries also reported lower job security. 100 Employees or less Median Salary Ranges 101 Employees or more 4

5 KEY INSIGHTS Key Survey Satisfaction Insights Participants who graduated from high school, but did not go to college, reported the lowest satisfaction with their current salary. Participants who reported not attending school, were some of the most satisfied with their salaries. System and security admins, chief security inspectors, and security engineers are the most satisfied with their current salaries. Security professionals with roles in risks, standards and compliance officers, security program managers, and SOC/security leads are the least satisfied with their current salaries. 40% 35% with bachelor s and master s degrees were satisfied with their current pay Participants who reported not attending school, were some of the most satisfied with their salaries. reported being satisfied with their current pay 40% reported being unsatisfied with their current pay 16.8% said the people they work with is the most satisfying part of their job A bachelor s degree is the most common degree obtained by security professionals. Nearly one fifth of respondents said that continuous learning or defending their company and catching threats was the most satisfying part of their job. A bachelor s degree is the most common degree obtained by security professionals. However, SIEM content creators, security architects, cloud application, and security analysts most often have obtained master s degrees. 5

6 KEY INSIGHTS Additional Insights 90% 72% 86% Most security professionals are male. Security professionals are well educated. Along with a variety of certifications, the majority of participants reported having at least a Bachelor s degree (72%). Almost 40% of survey participants identified as male at least have a Bachelor s degree said they would recommend a career as a security analyst to new graduates reported having completed post-bachelor s work or an advanced degree. 25% 40% More than 25% of participants said that constant interruptions were the least satisfying part of the job. Overwhelmingly, participants (86%) said they would said that constant interruptions were the least satisfying part of the job reported having completed postbachelor s or an advanced degree recommend a career as a security analyst to new graduates. 6

7 SALARY TRENDS IN THE SECURITY PROFESSION

8 SALARY TRENDS IN THE SECURITY PROFESSION SURVEY PARTICIPANT PROFILE MEDIAN SALARY BY INDUSTRY MEDIAN ANNUAL SALARIES Overall, the median salary range among all respondents participating in the survey was $75,000-$100,000 per year. Less than $50,000 per year 18.3% However, the largest percentage of participants (24.7%) reported their salary range as $50,001-$75,000 per year, with 34% earning more than $100,000 per year. per year per year 22.7% 24.7% Other security professional demographics include: $100,001 - $125,000 per year $125,001 - $150,000 per year 11.9% 13.3% GENDER EDUCATION $150,001 - $175,000 per year $175,001 - $200,000 per year 1.9% 5.8% Male 90% 71% have at least a bachelor s degree $200,001 or more per year 1.5% Median salary ranges were calculated by sorting the list of salary ranges for each of the 408 participants from least to greatest and selecting the middle salary range. Where there was no middle point, due to an even number of participants in a group, the mean of the two middle points was reported in most instances. If the mean was not representative due to higher discrepancy between the two middle ranges, the ranges of the two midpoints were reported. 8

9 SALARY TRENDS IN THE SECURITY PROFESSION MEDIAN SALARY BY REGION MEDIAN SALARY AND INDUSTRY The median salary range was greatest for professionals working in North America, while those in Latin America reported the lowest median salary ranges. Reported median salaries were highest in the retail and consumer durables industry. Education, financial services, manufacturing, and telecommunications security professionals reported the lowest salaries. North Ameria Retail & Consumer Durables $100,001 - $125,000 Europe Government Healthcare & Pharmaceuticals Asia Pacific Insurance Latin America < Other Energy & Extraction Other Education Finance & Financial Services Manufacturing Telecommunications & Tech 9

10 SALARY TRENDS IN THE SECURITY PROFESSION SALARY SATISFACTION BY INDUSTRY SALARY SATISFACTION BY INDUSTRY Based on survey responses, security professionals in the airlines and aerospace, and non-profit verticals are the least satisfied with their salaries. Industries that reported 0% satisfaction are not reported here. Airlines & Aerospace Automotive Business Support & Logistics 22.2% 44.4% 100% Construction 75% Education 47.1% Entertainment & Leisure Finance & Financial Services 33.3% 28.7% Food & Beverages 50% Government Healthcare & Pharmaceuticals Insurance Manufacturing Nonprofit Retail & Consumer Durables Telecommunications & Tech 31.8% 27% 43.8% 45% 25% 47.1% 33.9% Transportation & Delivery 50% Energy & Extraction 30.8% 10

11 SALARY TRENDS IN THE SECURITY PROFESSION COMPANY SIZE AND MEDIAN SALARY About half (48.2% ) of survey participants reported working for large Enterprise-sized companies with 2,501 or more employees, while only 13.9% reported working for small companies with less than 100 employees. Median salaries remained similar for companies with more than 101 employees. Only employees in the smallest companies saw lower salaries for the previous year. Small 13.9% 48.2% Large Enterprise Mid-Sized 21.6% 48.2% 13.9% of survey participants reported working for reported working for small companies with large Enterprise-sized less than 100 employees companies with 2,501 or more employees Enterprise 16.2% Small (0-100 employees) Mid-Sized (101-1,000 employees) Enterprise (1,001 to 2,500 employees) Large Enterprise (2,501 or more employees) 11

12 SALARY TRENDS IN THE SECURITY PROFESSION MEDIAN SALARY LEVEL OF SECURITY PROFESSIONALS FOR THEIR EXPERIENCE LEVEL YEARS WITH COMPANY AND MEDIAN SALARY Experience plays a significant role in salaries. Participants with more than 10 years of experience reported salaries of nearly twice that of entry-level analysts. 0-2 years 3-5 years 6-10 years More than 10 years $100,001 - $125,000 The number of years professionals have been with their employer did not seem to affect the median salary. 0-2 years 3-5 years 6-10 years More than 10 years 12

13 SALARY TRENDS IN THE SECURITY PROFESSION MEDIAN SALARY AND JOB TITLE SALARY SATISFACTION BY TITLE Participants with titles of chief security inspector and security program manager reported the highest median salaries ($175,000-$200,000), while system/security admin, security analysts and SOC analysts reported lower median salaries ($50,001-$75,000). Based on survey responses SOC/security leads are the least satisfied with their current salaries. System/security admins, chief security inspectors and security engineers are the most satisfied with their current salaries. Chief Security Inspector 100% Chief Security Inspector $175,001 - $200,000 Manager, Information Security 38.5% Manager, Information Security Officer, Information Security 38.7% Officer, Information Security Researcher 29.9% Researcher SOC Analyst 1 or % Risk, Standards and Compliance Analyst/Officer SOC/Security Lead 25% SOC Analyst 1 or 2 Security Analyst and Information Security Analyst 34% SOC/Security Lead Security Consultant 35.4% Security Analyst and Information Security Analyst Security Engineer 44.6% Security Consultant $175,001 - $200,000 System/Security Admin 100% Security Engineer Secuirty Program Manager $125,001 - $150,000 System/Security Admin 13

14 SALARY TRENDS IN THE SECURITY PROFESSION PRIMARY RESPONSIBILITY AND THEIR MEDIAN SALARY Security leadership positions reported the highest median salaries of all respondents. Respondents whose primary responsibility was compliance and forensic also reported salaries that were higher than the overall median salary range of $75,001-$100,000. Adversary Simulation Application Security Audit and Compliance Cloud Application Security Compliance Reporting Endpoint Security Forensic Analysis $87,500 - $112,000 Those whose primary responsibility was malware analysis or security researcher reported the lowest salaries. Incident Response Leadership Malware Analysis/Researcher < $50,001 $100,001 - $125,000 Network Security Other Packet Analysis Penetration Testing SIEM Content Creation SOC Management Security Architecture Security Education & Training Security Training Threat Hunting Threat Intelligence $62,500 - $87,500 $62,500 - $87,500 $62,500 - $87,500 14

15 SALARY TRENDS IN THE SECURITY PROFESSION SALARY AND JOB SATISFACTION Overall, most survey respondents reported being satisfied with their current job regardless of their median salary. SECURITY PROFESSIONALS SATISFACTION WITH CURRENT SALARY Only 35% of survey participants reported being satisfied with their current pay, while nearly 40% reported being unsatisfied with their pay. 6.8% Less than $50,000 per year 73.9% per year 8.4% 77.3% Very Unsatisfied 8.9% per year 10.1% 76.1% Unsatisfied 30.3% $100,001 - $125,000 per year 3.1% 62.5% Neither Satisfied nor Unsatisfied 24.9% $125,001 - $150,000 per year 10.5% 73.7% Satisfied 32% $150,001 - $175,000 per year 14.3% 75% Very Satisfied 3.7% $175,001 - $200,000 per year 0% 100% Unsatisfied Satisfied 15

16 SALARY TRENDS IN THE SECURITY PROFESSION SALARY SATISFACTION BY EDUCATION LEVEL Did not attend school 50% Forty percent of those those with bachelor s and master s degrees were satisfied with their current pay. Graduated from high school/ged 20% Participants who graduated from high school, but did not go to college, reported the lowest satisfaction with their current salary. Participants who reported not attending school, were some of the most satisfied with their salaries. Some college Bachelor s degree Post-bachelor s degree work 29.6% 39.2% 32.4% Master s degree 39.4% Ph.D 40% Post-doctoral work 50% Other 28.6% 16

17 TRENDS IN SECURITY PROFESSION ROLES, CERTIFICATIONS, AND EDUCATION

18 TRENDS IN SECURITY PROFESSION ROLES, CERTIFICATIONS, AND EDUCATION JOB TITLES Chief Security Inspector 0.2% More than 30% of participants reported having a job title of Manager, Information Security 16.2% security analyst or information security analyst, while chief Officer, Information Security 6.2% security inspector, security program manager and system/ security administrator were less common. Researcher 14.1% Risk, Standards and Compliance Analyst/Officer 0.8% SOC Analyst 1 or 2 4% 30% SOC/Security Lead Security Analyst and Information Security Analyst 1.7% 30.6% reported having a job title of security analyst or information security analyst Security Consultant Security Engineer 10.2% 15.4% Secuirty Program Manager 0.2% System/Security Admin 0.2% 18

19 TRENDS IN SECURITY PROFESSION ROLES, CERTIFICATIONS, AND EDUCATION PRIMARY JOB RESPONSIBILITIES Adversary Simulation 0.8% Security professionals job functions are as varied as their titles. More than 14% of participants reported that their Application Security Audit and Compliance 4% 8.5% primary job responsibility is as a security architect. Cloud Security 1% It is telling that 12% of participants reported their main responsibility as something other than what was listed, exemplifying the diverse responsibilities of those in the security field. Compliance Reporting Education and Training Endpoint Security Forensic Analysis 1% 1.5% 3.7% 0.8% Incident Response Leadership 6.9% 6.2% 14% 12% Malware Analysis/Researcher Network Security 1% 12.1% Other 12.3% reported that their primary job responsibility is security architect reported that their main responsibility as something other than what was listed Packet Analysis Penetration Testing Security Architecture 0.4% 4% 14.4% Security Training 1.3% SIEM Content Creation 3.3% SOC Management Threat Hunting Threat Intelligence 4.2% 7.1% 5.6% 19

20 TRENDS IN SECURITY PROFESSION ROLES, CERTIFICATIONS, AND EDUCATION ADDITIONAL JOB RESPONSIBILITIES More than 60% of participants reported that their jobs also include incidence response and network security. Code review and adversary simulation are performed by participants less frequently. Adversary Simulation Application Security Audit and Compliance Cloud Security Code Review Compliance Reporting Education and Training Endpoint Security Forensic Analysis 11.4% 39.9% 49.7% 28.5% 10.4% 40.3% 50.3% 54.3% 31.2% Incident Response 65.1% Leadership Malware Analysis 32.4% 28.5% Network Security 63.4% Other 4.4% Packet Analysis Penetration Testing 27.7% 38.3% Security Architecture Security Training 47.8% 53.4% SIEM Content Creation SOC Management Threat Hunting 27.7% 34.1% 40.5% Threat Intelligence 52% 20

21 TRENDS IN SECURITY PROFESSION ROLES, CERTIFICATIONS, AND EDUCATION CERTIFICATIONS Security professionals hold a wide variety of certifications. Respondents listed more than 150 different types of held certifications. CISSP: Certified Information Systems Security Professional certification was the most popular certification reported by survey participants (33.9%), followed by CEH:Certified Ethical Hacker (23.7%), and CompTIA (22.7%). Certifications that were held by fewer than 5% of survey participants are not shown. 33.9% 23.7% Certified Information CEH:Certified Ethical Systems Security Hacker Professional certification 22.7% Comp TIA 22.7% GSEC: Security Essentials CEH: Certifed Ethical Hacker 23.7% CISSP: Certified Information Systems Security Professional 33.9% Network Security CISM: Certified Information Security Manager None SANS GIAC Other Certifcations CompTIA 21

22 TRENDS IN SECURITY PROFESSION ROLES, CERTIFICATIONS, AND EDUCATION MEDIAN YEARS WITH CURRENT COMPANY BY INDUSTRY RAISES AND EDUCATION Most participants, regardless of industry, have worked for their current company for a median of 3-5 years. However, those in the insurance and healthcare sectors reported being with their current companies for less than 2 years. Education did have some influence on raises that respondents received last year. However, most respondents reported receiving a raise between 1-5% in Levels of education reported by less than 3% of participants are not shown. Education 3-5 years Finance & Financial Services 3-5 years Government Healthcare & Pharmaceuticals 3-5 years <6 months - 2 years Graduated from high school/ged 0% Insurance <6 months - 2 years Some college 1-5% Manufacturing Other 3-5 years <6 months - 2 years Bachelor s degree 1-5% Retail & Consumer Durables Telecommunications & Tech 3-5 years 3-5 years Post-bachelor s degree work 1-5% Utilities, Energy, and Extraction 3-5 years Master s degree 1-5% 22

23 TRENDS IN SECURITY PROFESSION ROLES, CERTIFICATIONS, AND EDUCATION OVERALL EXPERIENCE AND INDUSTRY Survey participants who work in the agriculture, real estate, and the utilities industries reported having the longest security careers. Most participants, irrespective of industry, have worked in the cyber security field for at least 6 years. Education Finance & Financial Services Government Healthcare & Pharmaceuticals Insurance Manufacturing Other Retail & Consumer Durables Telecommunications & Tech Utilities, Energy, and Extraction 6-10 years 6-10 years 6-10 years 6-10 years 6-10 years 6-10 years 6-10 years 6-10 years 6-10 years >10 years 23

24 JOB SECURITY AND SATISFACTION

25 JOB SECURITY AND SATISFACTION OVERALL JOB SATISFACTION Security professionals seem to be very happy with their career choices. Overall, they (83%) are satisfied with their jobs. Nearly 30% of respondents reported being very satisfied and more than 45% reported being satisfied. 28.3% Less than 9% of survey participants reported being very unsatisfied or unsatisfied with their jobs. 45.9% 1.9% 83% 30% 6.2% of workers are satisfied with their jobs reported being very satisfied 17.7% 45% reported being satisfied Very Satisfied Satisfied Neither Satisfied nor Unsatisfied Unsatisfied Very Unsatisfied 25

26 JOB SECURITY AND SATISFACTION OVERALL JOB SECURITY Overall, nearly 80% of participants feel secure about the future of their jobs. 13.9% 4.6% 1.7% Only 6.3% reported that they felt their jobs may be in jeopardy. 80% 6.3% 49.9% 29.9% of participants feel secure about the future of their jobs reported that they felt their jobs may be in jeopardy Very Secure Secure Neither Secure nor Insecure Insecure Very Insecure 26

27 JOB SECURITY AND SATISFACTION PROFESSIONAL EXPERIENCE YEARS WORKING AT CURRENT COMPANY Nearly 40% of survey respondents reported careers in the security industry spanning more than 10 years. 28.5% Nearly 45% of respondents reported working at their current company for less than 2 years. 43.5% 6.9% 40% 45% 21.2% reported careers in security industry spanning more than 10 years reported working at their current company for less than 2 years EXPERIENCE WORKING IN SECURITY INDUSTRY 7.9% 24.7% 37.1% 20.7% <6 months - 2 years 3-5 years 6-10 years >10 years 27

28 JOB SECURITY AND SATISFACTION JOB SECURITY AND SATISFACTION JOB SECURITY BY MEDIAN SALARY Not surprisingly, respondents who felt more secure in their job also generally reported being more satisfied with their jobs. Participants reporting higher salaries also reported lower job security. However, it may be surprising that 50% of participants who reported having very little job security also reported high job satisfaction. Very Secure $62,500 - $87,500 Secure Very Secure 84.7% Neither Secure nor Insecure Secure 77.5% Insecure Neither Secure nor Insecure 55.2% Very insecure Insecure 36.4% Very insecure 50% 28

29 JOB SECURITY AND SATISFACTION EDUCATION AND JOB SATISFACTION COMPANY SIZE AND JOB SATISFACTION Overall, survey respondents reported being satisfied with their current job regardless of level of education. Job satisfaction does not significantly vary based on company size. Overall, the majority of participants were satisfied with their jobs regardless of the size of their company. Did not attend school Graduated from high school/ged Some college 12% 14.3% 50% 50% 74.7% 80% Large Enterprise (2,501 or more employees) Enterprise (1,001-2,500 employees) 9.9% 11.5% 69.2% 76.3% Bachelor s degree 19.9% 72.3% Mid-sized ( employees) 4.8% 70.2% Post-bachelor s degree work Master s degree 11.8% 17.6% 76.8% 82.4% Small (0-100 employees) 3% 79.1% Ph.D 20% 80% Unsatisfied Satisfied Post-doctoral work 0% 100% Other 21.4% 50% Unsatisfied Satisfied 29

30 JOB SECURITY AND SATISFACTION JOB SATISFACTION AND EXPERIENCE TIME WITH COMPANY AND JOB SATISFACTION Satisfaction does not significantly vary with the amount of time that participants had been with their current company. However, participants who have been working as security professionals for less time (0-2 years) are more satisfied with their jobs than those who have been working for longer. 0-2 years 3-5 years 6-10 years 70.8% 74.6% 75.8% More than 10 years 77.5% 0-2 Years workers are more satisfied with their jobs than those who have been working for longer EXPERIENCE AND JOB SATISFACTION 0-2 years 84.9% 3-5 years 75.6% 6-10 years 76.3% More than 10 years 67% 30

31 JOB SECURITY AND SATISFACTION PRIMARY RESPONSIBILITY AND JOB SATISFACTION Adversary Simulation 100% Respondents whose primary responsibilities are adversary simulation, cloud security, compliance security, and packet Application Security Audit And Compliance 56.1% 78.9% analysis are the most satisfied with their jobs. Those who are responsible for security training and forensics reported being the least satisfied. Cloud Application Security Compliance Reporting Endpoint Security 66.7% 100% 100% Forensic Analysis 50% Incident Response 69.7% Leadership 73.3% Malware Analysis/Researcher 80% Network Security 84.5% Packet Analysis 100% Penetration Testing 78.9% SIEM Content Creation 81.3% SOC Management 79.4% Security Architecture Security Education & Training 71% 71.4% Security Training 50% Threat Hunting Threat Intelligence 70% 70% 31

32 JOB SECURITY AND SATISFACTION MOST SATISFYING ASPECT OF JOB LEAST SATISFYING ASPECT OF JOB Nearly one fifth of respondents said that continuous learning or defending their company and catching threats was the most satisfying part of their job. More than 25% of participants said that constant interruptions were least satisfying part of their job % of respondents said the people they work with is the most satisfying part of their job. Interruptions False positives/dead ends 27.9% 22.5% Tedium 11.5% ALways learning something new 19.4% Hours 9.8% Defend company & catching threats 19.4% Never-ending tickets 8.3% People & teams 16.8% Nothing 7.1% Challenge 7.3% Lack of support from management 4% Flexibility, freedom & independence 5.8% Other 3.3% Helping customers 5.2% Bureaucracy 1.9% Problem solving 5.2% User non-compliance 1.9% Cutting-edge technology 4.2% Budget cuts 1% Improving security 4.2% Competing priorities 0.8% Ever-changing field 3.7% Making a difference 3.7% Not the same everyday 3.1% 32

33 ARTIFICIAL INTELLIGENCE, MACHINE LEARNING, AND NEW TECHNOLOGIES

34 ARTIFICIAL INTELLIGENCE, MACHINE LEARNING, AND NEW TECHNOLOGIES ARTIFICIAL INTELLIGENCE (AI) AND MACHINE LEARNING UTILIZATION Nearly half, 46.4%, of respondents reported that they are not currently using AI or machine learning in their jobs, but are planning to utilize them in the future. Approximately 32% of respondents reported currently utilizing AI and machine learning, while 21% of respondents reported not having any plans to use machine learning or artificial intelligence in the future. 32.2% 46.4% 46.4% 32% reported that they are not currently using AI or machine learning in their jobs reported currently utilizing AI and machine learning 21.4% Currently Using Planning to Use No Plans to Use 34

35 ARTIFICIAL INTELLIGENCE, MACHINE LEARNING, AND NEW TECHNOLOGIES CAN MACHINE LEARNING AND ARTIFICIAL INTELLIGENCE (AI) MAKE YOUR JOB EASIER? Nearly 75% of respondents agreed that machine learning and AI can make their job better or easier. Only 7% of respondents believed that AI and machine learning could not make their jobs better. 14.1% 0.8% 6.2% 75% 7% agreed that machine believed that AI and learning and AI can machine learning could make their job better not make their or easier jobs better 58% 20.8% Strongly Agree Agree Strongly Disagree Disagree I Don t Know 35

36 ARTIFICIAL INTELLIGENCE, MACHINE LEARNING, AND NEW TECHNOLOGIES CAN MACHINE LEARNING AND ARTIFICIAL INTELLIGENCE (AI) IMPROVE SECURITY? Overall, participants believe AI and machine learning can contribute to improved security in their organization. More than 75% of survey participants agreed that AI and machine learning can help with security, while approximately 5% said that it would not be helpful within their organizations. Eighteen percent of participants were unsure. 17.9% 1.9% 3.3% 58.8% 75% 5% 18.1% agreed that AI and machine learning can help with security said that it would not be helpful within their organizations 18% were unsure Strongly Agree Agree Strongly Disagree Disagree I Don t Know 36

37 ARTIFICIAL INTELLIGENCE, MACHINE LEARNING, AND NEW TECHNOLOGIES ARE MACHINE LEARNING AND ARTIFICIAL INTELLIGENCE (AI) A THREAT TO JOB SECURITY? Most participants, nearly 75%, do not believe that AI and machine learning area threat to their job security. However, more than 10% of participants feel threatened by the increased use of AI and machine learning in their field. 8.7% 2.7% 15.4% 75% 10% 20.4% do not believe that AI and machine learning area threat to their job security feel threatened by the increased use of AI and machine learning in their field 52.8% Strongly Agree Agree Strongly Disagree Disagree I Don t Know 37

38 ARTIFICIAL INTELLIGENCE, MACHINE LEARNING, AND NEW TECHNOLOGIES MACHINE LEARNING AND ARTIFICIAL INTELLIGENCE (AI) UTILIZATION BY INDUSTRY Most industries utilize AI and machine learning to some extent. For those participants who are not currently using AI and machine learning, many have plans to implement them in the future. Utilities, Energy, and Extraction Healthcare & Pharmaceuticals Manufacturing 57.7% 37.8% 35% 26.9% 43.2% 45% 15.4% 18.9% 20% Telecommunications & Tech Retail & Consumer Durables Finance & Financial Services Government 34.6% 29.4% 28.7% 25% 48.8% 52.9% 48.3% 45.5% 16.5% 17.6% 23% 29.5% Insurance 12.5% 68.8% 18.8% Education 11.8% 58.8% 29.4% Currently Using Plan to Use in Future No Plans to Use 38

39 ARTIFICIAL INTELLIGENCE, MACHINE LEARNING, AND NEW TECHNOLOGIES THREAT TO JOB SECURITY BY INDUSTRY Insurance 25% 31.3% 43.8% Those surveyed in the insurance industry have the strongest belief that artificial intelligence and machine learning are threats to their jobs. Finance & Financial Services Telecommunications & Tech 13.8% 12.6% 20.7% 20.5% 65.5% 66.9% Manufacturing 10% 30% 60% Education 5.9% 23.5% 70.6% Retail & Consumer Durables 5.9% 94.1% Government 4.5% 20.5% 75% Utilities, Energy and Extraction Healthcare & Pharmaceuticals 3.8% 2.7% 19.2% 18.9% 76.9% 78.4% Agree Undecided Disagree 39

40 ARTIFICIAL INTELLIGENCE, MACHINE LEARNING, AND NEW TECHNOLOGIES EMERGING TECHNOLOGIES Security professionals are always on the lookout for cuttingedge technologies to make their jobs better. Endpoint detection and response (EDR) technologies and artificial intelligence are the technologies security professionals are most excited about. Artifical Intelligence Machine Learning Network Security Endpoint Detection and Response (EDR - SIEM, network forensics, DLP, threat detection and incident response, etc.) Artificial Intelligence User and Entity Behavior Analytics (UEBA), (data aggregation and advanced analytics, etc. ) Endpoint Detection and Response UEBA: User and Entity Behavior Analytics Machine Learning Cloud Security (data encryption, infra security, DDoS mitigation, identity & access management, penetration testing, etc.) Network Security (monitoring, firewalls, security gateways, SDN, VPN, web security, network segmentation, etc.) Cloud Security Blockchain IoT Blockchain technologies (encryption to address increased volume and sophistication of cyber threats, etc.) Internet of Things (IoT) 40

41 CAREER ADVICE TO THOSE THINKING OF HAVING A CAREER IN CYBER SECURITY

42 CAREER ADVICE TO THOSE THINKING OF HAVING A CAREER IN CYBER SECURITY WOULD YOU RECOMMEND A CAREER AS A SECURITY ANALYST? Overwhelmingly, participants (86%) said they would recommend a career as a security analyst to new graduates. While 9.4% said they were unsure or didn t know if they could recommend the career, less than 5% of security professionals recommended against the career. 9.4% 86.1% 4.6% 86% 9.4% say they would recommend a career as a security analyst to new graduates say they were unsure or didn t know if they could recommend the career 5% Yes Unsure No recommended against the career 42

43 CAREER ADVICE TO THOSE THINKING OF HAVING A CAREER IN CYBER SECURITY WHAT ADVICE WOULD YOU GIVE TO NEW GRADUATES? Always keep learning Get certifications 15.5% 23.2% The most common advice security professionals would give Other 13.2% to recent graduates wanting to enter the field is, ALWAYS KEEP LEARNING. Do what you love Participate in internships 11.8% 8.6% Professionals realize that the security field is constantly Start in IT 5% evolving, and to be successful they must keep current on new technologies. Work hard Get a breadth of knowledge 4.1% 3.2% Security professionals also recommended that new Be curious 2.3% graduates focus on obtaining certifications. Many security Be patient 2.3% professionals recommended getting certifications early in your career when there is more time to study. Be a self-learner Be flexible 2.3% 1.8% Improve communication skills 1.8% Be creative 1.4% Find a great organization 0.9% Don t give up 0.9% Find your niche 0.9% Don t be afraid to start at the bottom 0.9% 43

44 METHODOLOGY METHODOLOGY Survey participants included 481 security professionals worldwide. Participants were recruited through mailing lists and technical forums. Participants self-selected into the survey and were not compensated for their participation. However, all who submitted addresses were entered into a drawing for a variety of prizes. Participants were also promised they would receive a copy of the salary survey once the results were compiled. Responses were collected through an online questionnaire. All salaries were converted to U.S. dollars after answering survey questions about salary. 55% reside in the North America 50% living in the United States 40% reside in Europe 82% reside in one of just 14 countries worldwide 481 security professionals participants worldwide 44

45 Exabeam provides security intelligence and management solutions to help organizations of any size protect their most valuable information. The Exabeam Security Intelligence Platform uniquely combines a data lake for unlimited data collection at a predictable price, machine learning for advanced analytics, and automated incident response into an integrated set of products. The result is the first modern security intelligence solution that delivers where legacy SIEM vendors have failed. Built by seasoned security and enterprise IT veterans from Imperva, ArcSight, and Sumo Logic, Exabeam is headquartered in San Mateo, California. Exabeam is privately funded by Norwest Venture Partners, Aspect Ventures, Icon Ventures, Lightspeed Venture Partners, and investor Shlomo Kramer. Follow us on Twitter and LinkedIn. 2 Waters Park Dr., Suite 200 San Mateo, CA EXABEAM info@exabeam.com