Challenges in Cybersecurity Hiring Practices in Fortune 100 Companies

A new report from Expel’s 2025 Enterprise Cybersecurity Talent Index reveals that Fortune 100 companies may be inadvertently alienating qualified cybersecurity professionals. Despite a widely held belief in a ‘talent shortage’, the study suggests the real issue lies in how companies structure and advertise their cybersecurity jobs. Key findings highlight the mismatch between job expectations and actual offerings. For instance, only 8% of job listings offer remote work, even though remote roles attract more applicants and fill faster. Mental health support is scarcely mentioned, even though burnout is a major concern in the field. Additionally, while cybersecurity salaries are decent, they still fall short compared to related roles like IT security and DevSecOps. Moreover, AI skills are frequently mentioned in lower-level roles but not required for senior leadership positions, which may reflect a broader gap in understanding AI’s role in cybersecurity strategy. The report emphasizes the need for companies to rethink their hiring strategies, offering more flexibility, competitive pay, and better employee support to retain top talent.