Allow me to introduce Dominic Jainy, a seasoned IT professional whose expertise in artificial intelligence, machine learning, and blockchain has positioned him as a thought leader in the evolving world of cybersecurity. With a passion for leveraging cutting-edge technologies to solve real-world challenges, Dominic offers a unique perspective on the pressing issues facing organizations today. In this interview, we dive into the critical shortages in cybersecurity staffing, the impact of underfunding and understaffing on security teams, the role of board-level prioritization, the preparedness of university graduates for cyber roles, and the diverse pathways into this dynamic field. Join us as we explore how organizations can navigate an increasingly complex threat landscape.
How do you see the ongoing shortage of cybersecurity professionals impacting organizations, especially with so many reporting unfilled positions?
The shortage is a massive challenge, and it’s not just about numbers—it’s about the cascading effects. With 65% of organizations having open roles, systems are left vulnerable for longer periods, and existing teams are stretched thin. This leads to slower response times to threats, burnout among staff, and sometimes even overlooked risks. The root causes often tie back to a lack of qualified candidates, intense competition for talent, and the rapid pace at which cyber threats evolve, outstripping the speed at which we can train people.
What approaches have you found effective in tackling the long hiring timelines for cybersecurity roles, both at entry and senior levels?
Hiring in this field can take months, and that delay can be costly. I’ve seen success with proactive strategies like building talent pipelines through internships and partnerships with universities or tech bootcamps. For senior roles, we’ve focused on upskilling internal staff through targeted training programs. It’s also about casting a wider net—looking at candidates from adjacent fields who can transition with some mentorship. The key is to reduce dependency on perfect-fit hires and invest in growth.
With retention being a struggle for many organizations, what strategies do you believe help keep skilled cybersecurity talent on board?
Retention comes down to creating an environment where people feel valued and supported. Competitive pay is a given, but beyond that, offering clear career paths, continuous learning opportunities, and a culture that prioritizes work-life balance can make a huge difference. I’ve also found that involving team members in strategic decisions—giving them a voice—builds loyalty. Cybersecurity pros want to know their work matters, so recognizing their impact on the organization’s safety is crucial.
Many security teams feel understaffed. How has this issue played out in your experience, and what are the day-to-day consequences?
Understaffing is a reality I’ve seen firsthand, and it’s exhausting for teams. When you’re short on people, routine tasks like monitoring and patching get delayed, and there’s less bandwidth for proactive threat hunting. It often means staff are juggling multiple roles, which can lead to mistakes or missed threats. Morale takes a hit too—people feel like they’re always playing catch-up. It’s a vicious cycle because overworked teams are more likely to leave, worsening the shortage.
Given the constraints of limited cybersecurity budgets, how do you decide where to allocate resources to maximize protection?
With tight budgets, it’s all about risk-based prioritization. I focus on identifying the most critical assets—think customer data or core systems—and ensuring they’re fortified first. Investing in tools that offer automation can help stretch limited staff resources by handling repetitive tasks. Training also becomes a priority over flashy tech; a well-equipped team can do more with less. It’s about being strategic—spending where the impact on security posture is highest.
With fewer organizations expecting budget increases for cybersecurity, how do you think this will shape their ability to address threats in the coming years?
This trend is worrying because the threat landscape isn’t slowing down. Flat or shrinking budgets mean organizations might skimp on preventive measures, leaving them more reactive than proactive. It could lead to outdated tools, insufficient training, and delayed hiring—all of which widen the gap between defenders and attackers. I think we’ll see more reliance on cost-effective solutions like open-source tools or shared services, but without investment, staying ahead of sophisticated threats will be an uphill battle.
How critical is it for boards to prioritize cybersecurity, and why do you think so many still don’t see it as a top concern?
Board prioritization is non-negotiable. Cybersecurity isn’t just an IT issue; it’s a business risk that can tank a company’s reputation, finances, and operations overnight. When boards don’t prioritize it, budgets and strategies suffer, leaving the organization exposed. I think the disconnect often comes from a lack of understanding—many board members aren’t tech-savvy and see cyber issues as abstract until a breach hits. That’s why education and clear communication about risks are so important.
What practical steps can organizations take to get their boards more engaged with cybersecurity challenges?
Start by translating cyber risks into business terms—talk about potential financial losses, legal liabilities, or customer trust issues rather than technical jargon. Regular briefings or simulations of breach scenarios can make the threat feel real. Inviting board members to participate in tabletop exercises or bringing in external experts for workshops also helps. It’s about building a bridge between the tech team and the boardroom so cybersecurity becomes a shared responsibility.
There’s a perception that university graduates aren’t well-prepared for cybersecurity roles. Do you share this view, and if so, what skills do they often lack?
I do see a gap, and it’s not entirely the students’ fault. Many programs focus heavily on theory but skimp on practical, hands-on skills like incident response or real-world threat detection. Graduates often lack experience with the tools and scenarios they’ll face on the job. Beyond tech skills, there’s a shortage of critical thinking and adaptability—skills that are harder to teach but vital when dealing with unpredictable threats.
How can universities better equip students to handle the real-world demands of cybersecurity?
Universities need to shift toward experiential learning. That means integrating labs, simulations, and internships into curriculums so students can practice responding to attacks or securing systems. Partnering with industry to understand current needs—like data security or identity management—ensures courses stay relevant. Also, embedding soft skills training, like how to communicate risks to non-technical stakeholders, would go a long way in preparing grads for the full scope of the role.
With the growing importance of soft skills like communication and critical thinking, how do you balance these with technical expertise when building a team?
It’s a delicate balance, but both are essential. Technical skills get you in the door, but soft skills determine how effectively you collaborate and solve problems under pressure. When hiring, I look for candidates with a solid technical foundation but also assess how they think through complex issues or explain concepts. Training can fill technical gaps, but fostering a team culture that values communication and critical thinking often shapes how well those skills develop over time.
Considering many cybersecurity professionals come from other fields, how valuable do you find diverse backgrounds in strengthening a team?
Incredibly valuable. People transitioning from other fields bring fresh perspectives and transferable skills—like problem-solving from engineering or risk analysis from finance—that enrich a team’s approach. They often challenge conventional thinking, which is vital in a field where attackers constantly innovate. Diversity in background also helps with creativity in tackling social engineering or other human-centric threats. It’s about blending those unique experiences with targeted cyber training.
Looking ahead, what is your forecast for the cybersecurity landscape over the next few years, especially in terms of workforce and threats?
I think we’re in for a rough ride. Threats will keep getting more sophisticated—think AI-driven attacks or deeper social engineering—and the workforce shortage won’t resolve overnight. We’ll likely see more automation to compensate, but that brings its own risks if not managed well. On the positive side, I expect broader pathways into cybersecurity, with more emphasis on upskilling and non-traditional hires. Organizations that invest in their people and adapt quickly will stand the best chance of staying resilient against whatever comes next.