Cybersecurity Job Market Broken? Network, Don't Apply
The Cybersecurity Job Market Is Broken… Here’s What Works
TL;DR: A Reddit thread from r/cybersecurity went viral… veterans with decades of experience aren’t getting interviews, companies are posting fake jobs, and recruiters admit they prefer employed candidates. But the people who found jobs all had one thing in common: they got hired through their network, not through applications.
The Thread Says It All
A post appeared on r/cybersecurity and quickly hit 376 upvotes and 180 comments. The original poster was a veteran with 12 years of military experience and 5 years in cybersecurity. He had the certs. He aced his mock interviews. He’d been unemployed for four months, sending out hundreds of applications.
Nothing.
The comments section turned into a confessional for the entire industry.
The Numbers Are Brutal
A security architect with 24 years of experience shared he’d received exactly one interview in 18 months. A CISO pointed out there have been 140,000 tech layoffs in 2026 so far.
One story stood out. A compliance analyst got fired because his new manager… someone with no security background… vibed some code together to automate two tasks and told the CISO he had “fixed all the inefficiencies.” This was the same company almost failed their SOC 2 audit the year before because of bad documentation. And they cut the one person who understood the evidence.
Everyone Is Arguing About the Cause
The thread devolved into a debate about what killed the market. AI is automating entry-level roles. The economy is contracting. Companies are offshoring security operations. The current administration’s policies are making things worse.
All of those are real factors. But they’re not actionable for someone who needs a job today.
What Works
I went through all 180 comments with one question: who in this thread found a job?
Every single person who reported getting hired had the same story.
They got hired through their network.
One commenter sent 40 targeted applications and got a single interview… through a connection. He got the job. Another commenter offered the original poster a direct introduction to a recruiter at his company. The OP sent a DM within minutes. One DM will likely do more than the last 200 applications combined.
The Application System Is Broken
Here’s what the data from the thread reveals:
- SOC roles in New York are getting 2,000 applicants each. You are not competing on merit. You are competing on volume, and the volume is unmanageable.
- Companies are posting dead jobs. Multiple commenters confirmed organizations post roles to satisfy HR requirements or internal headcount projections with no intention of hiring.
- Recruiters prefer employed candidates. One commenter shared recruiters reached out to him specifically because he was currently employed. When he asked why they don’t source from people actively looking, they told him they prefer candidates who already have jobs.
- AI filters aren’t finding the best candidates. If your resume doesn’t match the exact keyword pattern an ATS is looking for, you’re invisible. These systems were designed for efficiency, not accuracy.
If your entire job search lives inside LinkedIn Easy Apply, you are feeding your resume into a system never built to help you.
What You Should Do Instead
Pick up the phone. Call former colleagues, managers, and mentors. Tell them exactly what you’re looking for.
Send the DM. If you see someone at a company you’re interested in, reach out directly. A personal message to a hiring manager or team lead will always outperform a portal submission.
Buy someone coffee. In-person conversations build trust faster than any resume. One 30-minute coffee meeting opens doors 200 applications never will.
Be specific about what you want. Don’t say “I’m looking for anything in cybersecurity.” Say “I’m looking for a mid-level SOC analyst role, ideally in financial services, and I’m open to remote.” People help you when they know exactly what you need.
Help others while you search. The people who get the most referrals are the ones who give them. Share job postings. Make introductions. Your network grows when you invest in it.
The Bottom Line
The people who found jobs in this market did not out-apply everyone else. They out-connected them.
If you know someone who’s job hunting right now, send them this post. It might be the most useful thing you do for them today.
Related reading: New data shows AI is actually creating more cybersecurity jobs, not fewer — but the roles are evolving. And if you’re still early in your career, research confirms that portfolios now trump pedigree in hiring decisions. For the full strategy, see our Cybersecurity Career Guide.
Source: Reddit… r/cybersecurity: “Lost. Tempted to throw in the towel.”