6 ms·

Completely absent is quantity of jobs. If e.g. ml engineer job postings go +40% from 200 to 280 and writer job postings go -50% (over two years) from 20000 to 1

• the_arun 1y ago
  Also decline in Security engineer by 0.35% doesn't make sense by conventional wisdom. Shouldn't it be increasing due to increased demand for security in all ai integrations?
  • raesene9 1y ago
    I wouldn't be surprised by a drop in security postings. Quite a few companies view security as an "overhead" so the siren call of reducing that overhead by introducing AI is a thing. Also for a lot of jobs in security it's pretty hard to measure how well it's being done, so if the AI based solutions are worse, that might not show up for a while
    • zingababba 1y ago
      People are sleeping on AI in sec, lots of lazy sec engs and architects going to be SoL sooner rather than later.
      • Ekaros 1y ago
        I could easily see those just running tool and then printing report being replaced by script running the tool and passing results to LLM and then sending report. And probably more useless architects.
    • monero-xmr 1y ago
      Security products and practitioners are the classic snake oil salesmen. They are actually sales and marketing roles for help closing deals by emphasizing some security aspect. True security comes from general IT practices followed by engineers themselves.
      • Yoric 1y ago
        How does this affect hiring of security engineers?
      • ACCount37 1y ago
        I would be wary of making categorical claims like this, but it's unfortunately true that "security" field hasn't been doing well in a long, long time now. Half the field is B2B "magic bullet" solutions like CrowdStrike and all the associated sales tactics - with pitches that boil down to "you give us money, we make your security issues go away". Half of what remains is mandatory certifications and other flavors of checklist-obsessed cargo cultists - often CYA-driven, often demanding the adoption of the fancy acronym of the day, regardless of the real threat profiles. Then you get the "security snake oil" - "magic bullet" systems that don't work, never did and never will, but are supported by the right influence groups and get the right pockets lined, and so are used anyway. DRM systems like WideVine and PlayReady being the prime examples. Then there are the corporate "security of our business model" shills - who pay lip service to "security", but have the true aims of "prevent anyone we don't like from doing anything that can harm our revenue streams" - with Apple being a common example. And about a fifth of the field is people who do actual security work, and keep the sky from falling.
        • Spooky23 1y ago
          I agree with you totally, although I'd venture to guess 20% is way too high. I'd say you have about 10% people doing security work, 15% doing compliance, and the rest are consuming oxygen. It's a growth field, so you have lots of idiots getting certifications and stupid jobs. Reminds me of the 90s when I started, and companies were paying MCSE's (ie read a book, hit next-next-finish in Windows NT) more than software engineers in some markets.
      • pixl97 1y ago
        > True security comes from general IT practices followed by engineers themselves. Thank goodness engineers pop up out of the ground fully trained on good general IT practices....
      • _jsmh 1y ago
    • mattlutze 1y ago
      We also need to consider the confounding effect of corporate performance and recession expectations. Cost centers in businesses are early canaries of expected pain, and a reduction in security roles may reflect belt-tightening irrespective of AI impact.
    • rekabis 11mo ago
      > for a lot of jobs in security it's pretty hard to measure how well it's being done Nothing going wrong: “What are we paying you for?” Everything going wrong: “What are we paying you for?” It’s a no-win situation unless you manage to score a division manager who understands security and understands the reports a good security division produces. And most importantly, understands that no news is good news.
  • Sharlin 1y ago
    The "S" in "AI" famously stands for "security", so no humans needed anymore.
  • Tarsul 1y ago
    if everything goes down 8%, the one that loses only 0,35% is a relative winner.
  • stackskipton 1y ago
    Most companies don’t care about security beyond window dressing and getting whatever certification required to close deals. Time for budget cuts? Cut the Security team!
    • ok123456 1y ago
      Since most of what these teams do is box-checking for these certifications, it's true. Security is a process. It's not a constellation of products or certifications.
  • SkyPuncher 1y ago
    From what I can see, being closer than the average engineer to the space (but not an expert on my own), a few things are happening: * Engineers are being pushed for ownership of security more directly. You still need someone on the team to guide and support them, but they're not going to be directly involved all of the time. * Significant amounts of automation and centralized security. Supply chain management is a double edge sword. It does open up vulnerabilities, but you can simply pay one of the SaaS companies in the space to help with a lot of the heavy lifting. * Commoditization/Platform-ification drastically reduces attack vectors. OWASP has a nice comparison from over the years: https://github.com/OWASP/Top10/blob/master/2021-2003_Comparison/OWASP_Top_Ten_-_Comparison_of_2003%2C2004%2C2007%2C2010%2C2013%2C2017_and_2021_Releases.pdf https://github.com/OWASP/Top10/blob/master/2021-2003_Compari...
  • moffkalast 1y ago
    Bold of you to assume there is any demand for security in AI integrations. It's like 90s web browsers, everyone's running random MCP servers that do god knows what.
    • danillonunes 1y ago
      Seems like when the security market is low on the white hat side, it's high on the black hat one. Security people just need to learn to adapt.
      • papascrubs 1y ago
        I'm sure some of these ransomware groups probably offer health insurance and 401k matching.
  • tempfile 1y ago
    Why do you think there is increased demand for security in AI integrations?
  • billy99k 1y ago
    I think it's because companies are moving away from in-house security and hiring 3rd party companies for security work. It also depends on the time of year this was taken. Q4 is the busiest time for security. Q1 is the slowest. I'm a security consultant and work with multiple companies that provide security services. Work has increased massively in the last year.
• xtracto 1y ago
  Also absent is any data in SDRs, Sales Account Executives and Sales Managers (all the Revenue vertical.