Employers Prioritise Practical Experience Over Academic Credentials in Cybersecurity

According to experts from the Institute of Information Technology Professionals South Africa's Cybersecurity Special Interest Group (IITPSA SIGCyber), the challenge is less about a shortage of vacancies and more about a mismatch between academic training and workplace requirements.

Skills gap remains a challenge

Industry specialists say organisations are increasingly looking for candidates with practical experience, problem-solving skills and the ability to operate in live security environments.

Bryan Baxter, Securelytics head at BC Technologies, said employers are seeking professionals who can contribute quickly in demanding operational settings.

While companies continue to invest in mentoring and internal training programmes, identifying graduates with the right mix of technical skills, adaptability and practical aptitude remains difficult, he said.

Doctor Mafuwafuwane, executive head of cybersecurity at Nexio, said many specialised cybersecurity roles require more than qualifications and entry-level certifications.

Areas such as threat hunting, digital forensics and incident response often demand practical experience, analytical skills and familiarity with real-world security tools and processes.

He said many organisations are operating under increasing cyber threats and limited resources, making it difficult to hire candidates who require extensive on-the-job training.

According to Musa Salmamza, information security manager at NTT Data and chairperson of the IITPSA Western Cape chapter, cybersecurity lacks the structured talent pipelines found in professions such as finance and healthcare.

He said the industry needs clearer entry routes, stronger graduate programmes and more opportunities for work-integrated learning.

"Many organisations approach hiring as a procurement exercise rather than a development responsibility," he said.

Michael de Jager, a lecturer in the School of Computer Science and Information Systems at North-West University, said cybersecurity faces a unique challenge.

The sector frequently reports skills shortages while simultaneously requiring experience, certifications and exposure to enterprise-level tools for many so-called entry-level positions.

He argued that practical judgement and decision-making skills are developed through experience, making collaboration between industry and educational institutions essential.

Experts say addressing the problem will require closer cooperation between employers, universities, training providers and policymakers to create clearer pathways into the profession.

Without those pathways, the industry risks leaving critical cybersecurity roles unfilled while graduates struggle to gain the experience needed to enter the sector.