The Impending Shift: AI and Its Impact on Employment in IT and Cybersecurity

In recent weeks, a wave of observations has crystallized the reality that artificial intelligence (AI) is poised to dramatically reshape the employment landscape in fields like IT, software development, systems administration, and cybersecurity. Although minor disruptions have already occurred, what lies ahead is likely to be far more profound. As unsettling as it may sound, it’s crucial to carve out time this year to pinpoint qualities and skills that AI cannot emulate. If your list is short or nonexistent, it’s time for a rethink.

The textile workers of the 1800s resorted to violence to delay their obsolescence, buying a mere 20 years before they succumbed to new technologies. Present-day professionals have perhaps 18 months to navigate this shifting terrain. Although I harbor reservations about the AI boom and hope for its moderation, it’s clear that those at the helm of our current “clicktatorship” will strive for rapid technological advancement, regardless of the consequences.

Human-Only Capabilities in Cybersecurity

Within the vast spectrum of cybersecurity, there are several irreplaceable human capabilities. Here’s a closer look at four vital areas where human judgment remains indispensable.

1. Judgment Under Uncertainty with Real Consequences

AI systems can process vast amounts of data to identify clusters and anomalies, but they lack the accountability that comes with significant decisions. For instance, determining whether to shut down a production system at 3 AM has repercussions that require human intuition and experience. This "weight of consequence" is critical in shaping expertise, risk tolerance, and decisive action amid uncertainty. Organizations will always need individuals capable of owning outcomes, not just generating analyses.

2. Adversarial Creativity and Novel Problem Framing

While contemporary AI excels in recognizing patterns and recombining existing strategies, it struggles with genuinely novel problems—say, unique attack vectors that haven’t been documented or unconventional defenses tailored to an organization’s specific operations. The best security practitioners possess a mindset that thinks like an attacker and goes beyond standard tactics, techniques, and procedures (TTPs). This creative problem-solving approach is distinctly human.

3. Institutional Knowledge and Relationship Capital

Understanding the nuances of an organization is crucial. For instance, knowing that a specific finance team member consistently ignores security warnings during critical periods can influence actionable recommendations. Similarly, awareness of the legacy systems and their constraints provides a vital lens through which security concerns can be assessed. Many technically sound analyses may be impractical if lacking organizational context, making this institutional knowledge indispensable.

4. The Ability to Build and Maintain Trust

When a cybersecurity breach occurs, executives are not searching for an AI-generated report; they want a human who can explain the situation face-to-face and guide them through the recovery process. Security leadership relies heavily on trust—both between executives and security personnel. This essential human element won’t disappear with AI’s intrusion; rather, it will become even more relevant.

Developing Essential Capabilities

To ensure longevity in the evolving landscape, here are some strategies to bolster your human-only capabilities in cybersecurity:

• Deepen Expertise in Accountability-Driven Areas: Focus on domains such as incident response, compliance attestation, or security for air-gapped environments. These areas are bound by regulatory frameworks that resist full automation.

• Cultivate Cross-Disciplinary Knowledge: Understanding how diverse systems interconnect— such as legacy mainframes with cloud technology—requires in-depth institutional knowledge and the ability to navigate complex organizational structures.

• Embrace the Human In The Loop: As AI tools become integral, the role of the human operator becomes increasingly vital. The analyst who can navigate AI outputs, validate findings, and communicate results effectively will be a necessity rather than a casualty.

• Enhance Questioning Skills: Knowing which threads to pull based on your hypotheses and domain expertise is crucial. This editorial judgment will take time to filter into AI models, making human insight invaluable.

A Shift in Employment Pipeline

A stark reality accompanying these advancements is the shrinking number of entry-level roles that revolve around basic alert monitoring and escalation. This narrowing pipeline raises concerns for junior professionals who may not gain the essential experience that builds intuition over time. This problem is increasingly pressing yet overlooked by many executives who focus on short-term gains without considering long-term sustainability.

In summary, understanding the evolving role of AI in cybersecurity and IT requires a proactive approach to identify and cultivate uniquely human capabilities. As the balance shifts, those equipped to wield their human judgment alongside AI capabilities will thrive, while others risk falling behind in a rapidly changing landscape.