May 10, 2018 By David Bisson 2 min read

Millennials and post-millennials play a key role in solving the cybersecurity skills shortage now and in the future, according to a recent survey.

While the survey participants revealed a deep understanding of technology and computing, they also showed a lack of awareness around key cybersecurity issues. The authors of the report noted that those knowledge gaps can serve as opportunities for the security industry to recruit members of this tech-savvy generation for cybersecurity careers.

A Life Molded by Technology

The survey found that millennials and post-millennials could thrive in cybersecurity because they grew up with smartphones, digital tablets and other modern technologies. Twenty-seven percent of respondents classified themselves as technology innovators while 41 percent identified as early adopters of technology.

These viewpoints shaped many of the survey participants’ future plans. For example, 23 percent of high school-age individuals said they were interested in pursuing computer science and technology in college, while 18 percent plan to study science and math and 15 percent aspire to major in engineering.

Many respondents also expressed an interest in pursuing technology-related careers. One-third reported intentions to go into video game development, 21 percent said they are interested in software development and 15 percent would like to enter the engineering field.

Millennials Lack Awareness About Cybersecurity Careers

For the study, cloud security provider ProtectWise commissioned Enterprise Strategy Group (ESG) to survey 524 millennials and post-millennials in the U.S. Their responses suggested a general lack of awareness among those age groups about IT security as a career path.

When asked whether they’d consider a career in cybersecurity, just 9 percent responded affirmatively, and 37 percent of participants said they were not interested in the security field because they did not know enough about it. Others cited a lack of technical aptitude (28 percent), requisite education (21 percent) and professional certifications (15 percent).

The report asserted that a lack of exposure was most likely to blame for this unfamiliarity with cybersecurity. Sixty-nine percent of survey participants said they’d never taken a class in cybersecurity, and 65 percent admitted that their schools never offered such a course. In addition, only 17 percent of millennials and post-millennials reported ever having met a cybersecurity professional.

Addressing the Cybersecurity Skills Shortage

James Condon, director of threat research and analysis at ProtectWise, said that millennials, particularly women, could be the key to solving the talent shortage if they knew more about security.

“The … concerns expressed by millennials and post-millennials would seemingly be addressed by providing earlier exposure to information security learning opportunities,” Condon wrote. He also pointed out that the “vast majority” of respondents did not reject the prospect of pursuing a cybersecurity career outright.

To help close the skills gap, Condon advised cybersecurity organizations to build partnerships with schools to create early learning opportunities for students, such as after-school security programs.

More from

FYSA — VMware Critical Vulnerabilities Patched

< 1 min read - SummaryBroadcom has released a security bulletin, VMSA-2025-0004, addressing and remediating three vulnerabilities that, if exploited, could lead to system compromise. Products affected include vCenter Server, vRealize Operations Manager, and vCloud Director.Threat TopographyThreat Type: Critical VulnerabilitiesIndustry: VirtualizationGeolocation: GlobalOverviewX-Force Incident Command is monitoring activity surrounding Broadcom’s Security Bulletin (VMSA-2025-0004) for three potentially critical vulnerabilities in VMware products. These vulnerabilities, identified as CVE-2025-22224, CVE-2025-22225, and CVE-2025-22226, have reportedly been exploited in attacks. X-Force has not been able to validate those claims. The vulnerabilities…

SoaPy: Stealthy enumeration of Active Directory environments through ADWS

10 min read - Introduction Over time, both targeted and large-scale enumeration of Active Directory (AD) environments have become increasingly detected due to modern defensive solutions. During our internship at X-Force Red this past summer, we noticed FalconForce’s SOAPHound was becoming popular for enumerating Active Directory environments. This tool brought a new perspective to Active Directory enumeration by performing collection via Active Directory Web Services (ADWS) instead of directly through Lightweight Directory Access Protocol (LDAP) as other AD enumeration tools had in the past.…

Smoltalk: RCE in open source agents

26 min read - Big shoutout to Hugging Face and the smolagents team for their cooperation and quick turnaround for a fix! Introduction Recently, I have been working on a side project to automate some pentest reconnaissance with AI agents. Just after I started this project, Hugging Face announced the release of smolagents, a lightweight framework for building AI agents that implements the methodology described in the ReAct paper, emphasizing reasoning through iterative decision-making. Interestingly, smolagents enables agents to reason and act by generating…

Topic updates

Get email updates and stay ahead of the latest threats to the security landscape, thought leadership and research.
Subscribe today