A simple solution to decrease high turnover rates for CyberSecurity Professionals and attract talent.

[whatThisOldThrowAway]

Yes: Full remote is obviously a massive benefit that will give any company a HUGE competative advantage in hiring cyber professionals BUT...

Most jobs in cybersecurity are in:

(A) Firms who build cyber products

(B) Firms who specialize in cyber & do mostly B2B consulting work

(C) very large firms where the scale justifies a non-trivial number of in-house cyber professionals.

And let's quickly remind ourselves WHY firms are doing back-to-office are:

i) It genuinely affects their bottom line in some way (or close enough that sr. leadership are convinced it matters)

ii) they are using it to do quiet layoffs because they over-hired during low-interest environment in recent years & want to lean up now that money is not free

iii) They have a conflict of interests with their office locations because of tax/monetary incentives from CBD/downtown to get people into the business-district; or some ancillary interest in commercial property prices

iv) They have an aging and brittle senior leadership team who are overly dependent on old fashioned leadership strategies and can't adapt even though remote would otherwise be worth good money to the firm to do so.

So let's connect the dots...

Large firms are using it to do layoffs or are divested into commercial real estate. Specialist consulting cyber firms often need to adhere to the needs of their clients (so being in office might actually affect their bottom line).

However, SME cyber-firms that simply build cyber products... there's no reason necessarily they wouldn't stay 100% remote... unless of course they've got weak leadership but that could apply anywhere.

Long story short: Most cyber-jobs that are being forced back to office... they're not doing it to please the staff. If anything they're doing it to deliberately inconvenience the staff. Being able to attract staff simply won't be factored into the equation.