What cybersecurity employers are hiring for

RoleDemand tracks the cybersecurity employers you name and reads their open roles from their own career pages every day. The seeded pack covers security software vendors, managed detection and response providers, penetration testing consultancies, compliance-automation platforms, and identity and network security firms across the UK and Europe.

The pack covers 16 countries with the United Kingdom as the lead market. Geography, employer list and role groupings are all pack settings, so a client pack can be narrower or wider than this one.

All of them, then grouped by function and seniority so a desk can read the market at a glance. In cybersecurity that usually means detection engineering, offensive security, security architecture, and the sales engineers who sell all of it.

Classification runs on every posting: function, seniority and the skills named in the description. A consultant filtering for one role family sees the same market the pack sees, grouped their way.

The ratio between engineering roles and revenue roles at a vendor. A security company that is advertising six account executives and no detection engineers is selling a product it has stopped building, and that is worth knowing before you take the brief.

None of that is a prediction. It is a description of the order employers advertise in, and the reason a daily read of a whole market is worth more than a monthly read of a few employers: the roles that tell you something arrive before the announcement does, and they are only visible while they are open.

The 25 employers in the seeded cybersecurity pack publish their vacancies through 5 different applicant tracking platforms. 12 on Greenhouse, 5 on Ashby, 5 on Teamtailor, and the remaining 3 spread across 2 more. Reading that market by hand means opening 25 careers pages that behave 5 different ways, every day, before anyone has made a call.

RoleDemand reads 34 of these platforms, which is what makes a daily pass over a whole market practical rather than theoretical. The full list and the stages of a run are on the how it works page.

The seeded cybersecurity pack carries 25 employers, every one of them a real business whose public applicant tracking endpoint was checked by hand. How many a client's own pack holds is set by the plan: Core tracks up to 50, Plus up to 100.

Employers are added to a pack only after their careers endpoint has been fetched and the response read. An endpoint that could not be confirmed is left out rather than recorded optimistically, because a registry full of dead links costs more to trust than it saves to build.

It refreshes every day. A run collects each employer's open roles, works out what opened and what closed since the previous cycle, and rebuilds the dashboard, so the figures a consultant quotes are from the last 24 hours rather than the last quarter.

The public sample dashboard is a build of the renewable energy pack rather than this one, but the interface, the modules and the insight pack are the same in every market. Only the employers and the role groupings change.

RoleDemand Core costs £169 a month and tracks up to 50 cybersecurity employers. RoleDemand Plus costs £299 a month and tracks up to 100. Both are priced per agency rather than per seat. Setting the cybersecurity market up is included in that, so there is no setup fee, and an agency that finds the first insight pack unhelpful can cancel inside 30 days.

Core at £169 a month tracks up to 50 employers, and covers setting the pack up, the daily refresh, the dashboard and the insight pack. Plus at £299 doubles that to 100 employers and takes changes to the list and the role groupings on request. The cancellation window and the rate lock are on the pricing page.