DHS faces challenge in hiring 1,000 security experts
The U.S. Department of Homeland Security's effort to hire some 1,000 new cybersecurity experts could hit a wall because such skills are increasingly hard to find, according to security experts.
DHS Secretary Janet Napolitano announced last week that the U.S. Offices of Personnel Management and Management and Budget has agreed to allow the agency hire up to 1,000 security experts over the next three years to ramp up its cybersecurity efforts.
Alan Paller, research director with the SANS Institute, a Bethesda, Md.-based computer training and certification organization, said DHS has a critical need for strong technicsal skills among its security professionals who handle tasks like intrusion analysis, malware reverse engineering, security auditing, secure code analysis, penetration testing and forensics.
"That's what DHS needs and is trying to hire," he said, adding that the agency faces strong competition for such skills from other government agencies like the National Security Agency along with private sector companies. The problem for all of the organizations, Paller said, is there aren't enough security professionals to meet the need. "DHS will be forced to hire weaker people and the cost of the very strong people will skyrocket," Paller predicted.
Clint Kreitner, president and CEO at the Center for Internet Security (CIS), added that DHS must also create "leadership stability and consistency" before it can hope to attract the right kind of talent. The agency needs to address issues that have contributed to a relatively high turnover rate among mid-level to senior cybersecurity professionals at the agency, Kreitner said.
The DHS' National Cyber Security Division, which oversees day-to-day cybersecurity efforts, has seen a "tremendous amount of turnover," Kreitner said. "It has been a revolving door." Many of the security professionals have gone on tothe private sector. "My guess is they don't feel like they are contributing as much as they would like to. If people felt they were being effective they would stay longer," he said.
President Barack Obama's continuing delay in appointing a White House cybersecurity coordinator has also been "a source of discouragement to many who are wondering whether the realty will match the rhetoric," on cybersecurity matters, Kreitner said. Obama announced the creation of the position in May.
Sign up for ITworld's Daily newsletter
Follow ITworld on Twitter @IT_world
On Twitter now
Gartner
Powered by TwitterOn Twitter now
Gartner
Brian Proffitt
Microsoft/Novell: Breaking Down the Coupon Numbers
Esther Schindler
Drupal's Dries Buytaert on Building the Next Drupal
Tom Henderson
Top Ten General Operating Systems Rants
pasmith
PS3 motion controller delayed; goes up against Project Natal
sjvn
Neolithic Windows security hole alive and well in Windows 7
claird
Perl source code comparison makes for good reading
mikelgan
Cell phones don't create stress or interrupt much
Sandra Henry-Stocker
How to: The Unix Interview
Where Google Chrome security fails: the password
I heard mention that the Chrome OS will have some sort of encryption available a la bitlocker. If it's possible to encrypt personal data using another password or key, then it may have potential for very secure data.... And Ubuntu has an 'encrypt home directory' option, perhaps google should follow suit.
- Dann
Join the conversation here
Quick, practical advice for IT pros. Made fresh daily.
- Ubuntu advances: Why Ubuntu server installations will surge in 2010
- Social media marketing: How to make friends with benefits
- More...
Want to cash in on your IT savvy? Send your tip to tips@itworld.com. If we post it, we'll send you a $25 Amazon e-gift card.







"Incredibly silly" is about right...
If President Obama is truly intent on gathering meaningful input and suggestions, and determined to make the most efficient use of existing infrastructures, rather than wastefully allowing "empire building" to duplicate efforts and dilute mandates, then he had BETTER be focusing less on letting DHS encompass Government and Commercial cyberspace security issues, and focus more on snagging existing workgroups who already have some clue."Incredibly silly" in this case equates too well with "building from scratch". Don't do it. UNLESS and EXCEPT organizational memes can be "left at the door" and "the way we've ALWAYS done it" can be ignored except as a horrible object lesson, some existing inefficiencies will have to be tolerated.
We need to see a publicity campaign, similar to the recent USA networks 'buzz' -- on the order of "Paranoics wanted."