A new US cybersecurity jobs report highlighted a split in the market: overall postings declined, while demand for AI security engineers increased. Although the data is US-based, the shift is relevant for European companies because it reflects a broader change in how organisations are prioritising cybersecurity skills as AI adoption expands.

What happened

According to reporting on CyberSN’s cybersecurity jobs report, US cybersecurity job postings fell by 26%, while demand for AI security engineer roles rose. The source indicates a mixed cybersecurity labour market rather than uniform growth or decline.

The available information points to two parallel trends: some employers are slowing general cybersecurity hiring, and at the same time some are increasing recruitment for specialist roles linked to AI systems, model security, and AI-related risk management.

Why it matters for European businesses

For European businesses, the main takeaway is not the US hiring number by itself, but the direction of travel. As more companies deploy generative AI, AI assistants, workflow automation and AI-enabled software, security teams need different capabilities alongside traditional cybersecurity expertise.

This matters in several ways:

• AI adoption creates new security tasks. Businesses using AI tools may need to assess issues such as data exposure, prompt injection risks, model misuse, access control, supplier security and logging.
• Security hiring may become more specialised. Companies may find that broad cybersecurity roles are no longer enough for every use case, especially where AI is embedded in customer support, internal operations or software development.
• Skills pressure may increase. If demand for AI security specialists grows faster than supply, European firms could face tougher competition for experienced talent, whether hiring internally or buying external support.
• SMEs may need service partners. Smaller organisations often cannot justify a dedicated AI security engineer, which could increase reliance on managed security providers, consultants or agency partners with AI governance and security expertise.

The report does not establish that the same hiring pattern will apply directly across Europe. However, it is a useful market signal for businesses that are expanding their use of AI in regulated, customer-facing or data-sensitive environments.

Who may be affected

• SMEs adopting AI tools for marketing, customer service, content generation or internal productivity.
• IT and security teams reviewing how to protect SaaS platforms, AI integrations, internal data and employee access.
• Digital product and software teams building AI features into websites, applications or e-commerce platforms.
• Regulated businesses that must pay closer attention to data handling, model use, supplier risk and security controls.
• Founders and business owners making decisions about whether to hire, outsource or retrain staff as AI-related security needs grow.

What companies should consider

• Review where AI is already in use. Many businesses have adopted AI through SaaS platforms before formally assessing the security implications.
• Map AI-related risks. Focus on data flows, access permissions, third-party tools, shadow AI use by staff and whether sensitive information is being entered into external systems.
• Assess whether current security skills are sufficient. Existing IT or security teams may need training on AI-specific threats and governance rather than a full new hire.
• Ask suppliers clearer questions. When procuring AI-enabled software or services, request information on data processing, security controls, incident response and administrative access.
• Consider external expertise where needed. For many SMEs, buying targeted support may be more realistic than competing for scarce AI security talent.
• Align AI projects with compliance obligations. Businesses operating under GDPR, sector rules or internal governance requirements should ensure AI deployments are reviewed through both privacy and security lenses.

In practical terms, the reported hiring shift suggests that cybersecurity is becoming more closely tied to AI strategy. European companies do not need to mirror US hiring trends immediately, but they should expect AI security skills to become more important in technology planning, vendor selection and risk management.