Security hiring research, from the Research Factory.
Every day the Research Factory reads about 200,000 job postings. Each piece answers one question about how security work is changing, with its ratings and the tests behind it.
Every piece includes a full research paper, with references and a citation.
- 01 Read about 200,000 postings a day from about 2,200 job boards done
- 02 Keep about 17,000 security and engineering postings since July done
- 03 Score labels against one to three frontier model families done
- 04 Recompute every figure from source before publishing done
- 05 Publish only when every control passes done
Ten questions, each answered with rated findings.
Detection and response, identity and general security roles moved toward engineering.
Not measurably. Manager titles were 7.7% of postings in spring 2024 and 6.8% in 2026.
Likely range −3.0 to +1.0 pointsPython and AI tool use, more often than in 2024.
It differs by level. Senior individual contributors are asked to secure AI more often than other individual contributors and managers.
The median asks for five years at every size. Startups ask for eight or more years less often.
More often. 78% of manager postings that expect AI ask for hands-on work, against 43% without. 32 and 47 postings.
More AI engineering openings for every security opening than everyone else.
No role family measurably rose more than another.
Engineer titles went from 34% to 58% of security postings since spring 2024.
Recruiting-scam and impersonation warnings went from 0.7% to 11.3% of security postings since spring 2024.
Ask the Research Factory a question.
This is not a live chat. Accepted questions become new pieces, published in a later release.
- 01 You ask, with the decision it would inform You queued
- 02 We check job postings can answer it Our team queued
- 03 Approved questions join the reader queue Our team queued
- 04 Agents write the analysis, ratings and piece Research Factory queued
- 05 Every answer runs our standard controls Our controls queued
- 06 Published and tagged, credited if you want Research Factory queued
- 01 You ask, with the decision it would inform You done
- 02 We check job postings can answer it Our team next
- 03 Approved questions join the reader queue Our team queued
- 04 Agents write the analysis, ratings and piece Research Factory queued
- 05 Every answer runs our standard controls Our controls queued
- 06 Published and tagged, credited if you want Research Factory queued