3 ms·

Stock buybacks are record high: https://www.cnbc.com/2021/10/27/stock-buybacks-surge-to-likely-record-highs-but-a-tax-from-congress-poses-a-threat.html https:/

Stock buybacks are record high: https://www.cnbc.com/2021/10/27/stock-buybacks-surge-to-likely-record-highs-but-a-tax-from-congress-poses-a-threat.html https://www.cnbc.com/2021/10/27/stock-buybacks-surge-to-like... Meanwhile cybersecurity IT talent is underpaid, understaffed and hard to retain: https://leadcomm.com.br/wp-content/uploads/2020/03/State-of-Cybersecurity-2020-Part-1.pdf https://leadcomm.com.br/wp-content/uploads/2020/03/State-of-... Companies simply does not invest enough in a critical area. If the capitalism works, companies that constantly optimise short term profit vs. investing survivability should eventually go broke. If this does not happen then there is no incentive for companies to do the right thing and invest in the security in the first place. It will be never 100% secure, but now we are like 50% secure when we should be 95% secure.

darkwater 5y ago
> Meanwhile cybersecurity IT talent is underpaid, understaffed and hard to retain If it's hard to retain means that there is someone else paying better, it cannot be underpaid at the same time.
- miohtama 5y ago
  It also might be hard to retain, because people involved in cybersecurity are not giving proper authority, respect or other organisational resources to do their job.
- purple_turtle 5y ago
  1) they could be changing jobs away from being security researcher 2) they can be changing jobs to one that is just unpaid, but they are treated more seriously 3) they could be changing from severely underpaid to just underpaid
- Mountain_Skies 5y ago
  I left cybersecurity and went back to software development due to the difference in wages.
  - darkwater 5y ago
    Fair enough, I missed this possibility. I'm sorry for you, hope you can go back to do what you like the most.
  - vsareto 5y ago
    Ditto. Good pentesters have arguably more skills than myself since I just do business apps, but I made about $40k less as a pentester than what I do now. Plus the pentesting interviews are just as annoying as the development interviews.

darkwater 5y ago

> Meanwhile cybersecurity IT talent is underpaid, understaffed and hard to retain If it's hard to retain means that there is someone else paying better, it cannot be underpaid at the same time.

miohtama 5y ago
It also might be hard to retain, because people involved in cybersecurity are not giving proper authority, respect or other organisational resources to do their job.
purple_turtle 5y ago
1) they could be changing jobs away from being security researcher 2) they can be changing jobs to one that is just unpaid, but they are treated more seriously 3) they could be changing from severely underpaid to just underpaid
Mountain_Skies 5y ago
I left cybersecurity and went back to software development due to the difference in wages.
- darkwater 5y ago
  Fair enough, I missed this possibility. I'm sorry for you, hope you can go back to do what you like the most.
- vsareto 5y ago
  Ditto. Good pentesters have arguably more skills than myself since I just do business apps, but I made about $40k less as a pentester than what I do now. Plus the pentesting interviews are just as annoying as the development interviews.