{"id":26196,"date":"2026-09-21T15:14:59","date_gmt":"2026-09-21T23:14:59","guid":{"rendered":"https:\/\/www.palada.net\/index.php\/2026\/09\/21\/ai-use-in-cybersecurity-is-on-the-rise-and-so-is-burnout\/"},"modified":"2026-09-21T15:14:59","modified_gmt":"2026-09-21T23:14:59","slug":"ai-use-in-cybersecurity-is-on-the-rise-and-so-is-burnout","status":"publish","type":"post","link":"http:\/\/www.palada.net\/index.php\/2026\/09\/21\/ai-use-in-cybersecurity-is-on-the-rise-and-so-is-burnout\/","title":{"rendered":"AI use in cybersecurity is on the rise \u2014 and so is burnout"},"content":{"rendered":"
\n
\n

More than 80% of organizations\u2019 cybersecurity operations are currently getting an assist from AI or are planning to adopt it, but nearly seven out of 10 security pros say their jobs have gotten harder since the widespread adoption of AI began. That\u2019s a finding from the latest cybersecurity report from the Information Systems Security Association (ISSA) and research and consulting firm Omdia.<\/p>\n

The Life and Times of Cybersecurity Professionals study<\/span><\/a> noted that job satisfaction numbers have been consistent throughout its eight-year history. Nearly half of respondents have thought about leaving their role in the past 18 months, the ISSA and Omdia researchers found. And among those contemplating a change, 57% have considered leaving cybersecurity entirely.<\/p>\n

When asked why they would leave the cybersecurity profession, 53% cited job stress, 37% complained that they have no career advancement opportunities, 34% want better\u00a0 work-life balance, and 33% decried their organization\u2019s lackluster commitment to cybersecurity, said Shawn Murray, ISSA\u2019s chief information security officer (CISO) and former president.\u00a0<\/p>\n

\u201cBurnout is a significant factor in our industry right now because of lean IT and cybersecurity staffs and the demands the business is putting on cyber teams and professionals.\u201d <\/em>
\u2014<\/em>Shawn Murray<\/span><\/a><\/p>\n

The researchers also found that more than two-thirds (68%) of respondents agreed that being a cybersecurity professional has become more difficult over the past two years. Of those, more than half (55%) put the blame on the increase in cybersecurity complexity and workloads, and 52% pointed to cyberthreats and expansion of the attack surface.<\/p>\n

Here are key takeaways from the study \u2014\u00a0and insights from experts to put them into context.<\/p>\n

[ See webinar:\u00a0<\/strong>How to Build High-Fidelity Threat Intel Feeds for Agentic AI<\/strong><\/a>\u00a0]<\/strong><\/p>\n

Effects of the skills shortage<\/strong><\/h2>\n

The study found that 75% of information security pros said the global cybersecurity skills shortage has impacted their organizations to some extent. That\u2019s a higher share than in previous years, the researchers wrote, although the study didn\u2019t show that the cybersecurity skills shortage has gotten worse. Nonetheless, respondents reported significant effects on their security programs, including redirected time (44%), increased workload on existing staff (42%), increased burnout and attrition of staff (37%), increased human errors associated with cybersecurity tasks (27%), and the need for more budget for services or consultants (24%).<\/p>\n

Infosec pros offered the researchers a number of ideas for addressing the skills shortage in their industry. The top recommendation, cited by 42%, was a greater organizational commitment to training candidates in what security teams need them to do, followed by higher compensation levels (40%) and keeping HR personnel and recruiters informed about cybersecurity needs so they can better target recruitment (36%). There was less enthusiasm forincreasing adoption of AI (24%) and delegating some cybersecurity tasks and processes to IT (17%).<\/p>\n

Increasing training investment was endorsed by ISSA President Jimmy Sanders<\/span><\/a>, who\u00a0 said in a statement<\/span><\/a>:<\/p>\n

\u201cThe profession is struggling not because talent is scarce, but because organizations are not investing enough in the people they already have.\u201d<\/em><\/p>\n

Despite the lack of enthusiasm forAI, the researchers argued that it might help alleviate cybersecurity professionals\u2019 heavy workloads. For example, they noted, AI can help automate tedious, time-consuming tasks, including data gathering and analysis, and could speed up response time and simplify remediation.<\/p>\n

The researchers also noted that half of organizations are already using AI to automate scanning and testing, with 48% leveraging the technology for predictive analysis. Those use cases help, but they aren\u2019t the answer to the skills shortage, said Melinda Marks, practice director for cybersecurity at Omdia.<\/p>\n

\u201cAI will not close the cybersecurity skills gap on its own. Organizations getting the most from their security programs need to invest in their people first. Training, inclusion, and clear career paths are not soft benefits. They are what make everything else work.\u201d<\/em>
\u2014Melinda Marks<\/span><\/a><\/p>\n

And while new AI tools should help, ISSA\u2019s Murray cautioned that not all of them are equal. \u201cCISOs have to do their due diligence to ensure that they\u2019re adopting that automation through vendors with proven tools that have been vetted, that are meeting design constraints, that are approved by the industry,\u201d he said.<\/p>\n

AI seen as a disruptive force<\/strong><\/h2>\n

To this year\u2019s survey respondents, AI is foremost a disruptive technology that adversaries are wielding to their advantage. Marks characterized the resulting struggle.\u00a0<\/p>\n

\u201cIt\u2019s a war right now, and war requires strategy and tactical approaches.\u201d<\/em>
\u2014Melinda Marks<\/p>\n

Defenders will need AI to fight AI, she said \u201cbecause only machines can scale like machines. Cybersecurity professionals still need a really strong skill set, but they need to be able to use AI to stay ahead of the AI.\u201d<\/p>\n

AI\u2019s effects are far-reaching, she said, and permeate the survey\u2019s results.\u00a0<\/p>\n

\u201cIt\u2019s affecting jobs. It\u2019s affecting skill sets. It\u2019s affecting workplace evolution, and just about everything else that we\u2019re talking about.\u201d<\/em>
\u2014Melinda Marks<\/p>\n

The rise of the virtual CISO<\/strong><\/p>\n

On the leadership front, the survey found that nearly two-thirds (63%) of organizations have CISOs, a smaller percentage than what was reported in 2024 (76%). However, there was a noticeable jump in the number of virtual CISOs, from 5% in 2024 to 16% in 2025.<\/p>\n

Virtual CISOs appeal to organizations whose size doesn\u2019twarrant the expense of a full-time CISO (48%), to those exploring whether they need a full-time CISO (40%), to those who see a need only for an experienced advisor (37%), and to those that are between full-time CISOs (28%).<\/p>\n

The role itself is seeing more emphasis on soft skills. Security pros told researchers that they considered leadership skills the most important quality of a successful CISO (37%), followed by business skills (22%), technical skills (13%), and management skills (13%).\u00a0<\/p>\n

Leadership skills such as the ability to communicate to the board are in ascendance, Murray said.<\/p>\n

\u201cA lot of it is just relationship building, understanding the business, [and] being able to communicate.\u201d<\/em>
\u2014<\/em>Shawn Murray<\/p>\n<\/p>\n<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

More than 80% of organizations\u2019 cybersecurity operations are currently getting an assist from AI or are planning to adopt it, but nearly seven out of 10 security pros say their jobs have gotten harder since the widespread adoption of AI began. That\u2019s a finding from the latest cybersecurity report from the Information Systems Security Association (ISSA) and research and consulting firm Omdia.TheLife and Times of Cybersecurity Professionals studynoted that job satisfaction numbers have been consis<\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_container_layout":"default_layout","colormag_page_sidebar_layout":"default_layout","footnotes":""},"categories":[32775],"tags":[],"class_list":["post-26196","post","type-post","status-publish","format-standard","hentry","category-reversinglabs"],"_links":{"self":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/26196","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/comments?post=26196"}],"version-history":[{"count":0,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/26196\/revisions"}],"wp:attachment":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/media?parent=26196"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/categories?post=26196"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/tags?post=26196"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}