Key findings

1
Across all security specialties, listings are unconcentrated (HHI 60 across 696 employers); Palo Alto Networks holds 3.4% of open roles.
Figure 1
2
Of the 6 specialties with enough open roles to read on their own, Security Architecture & Consulting is the most concentrated (HHI 200: its largest employer, Palo Alto Networks, holds 8.3% of its open roles) and Application & Product Security the least (HHI 72, across 216 employers).
Figure 1
3
None of the 6 specialties with enough open roles to read on their own is highly concentrated by listings (HHI above 2,500).
Figure 1
4
Palo Alto Networks and CrowdStrike list the widest range of security work: roles in all 10 specialties with open roles.
Figure 4

Figure 1

How concentrated each security specialty is

In which security specialties does one employer hold most of the open roles?

Specialty	HHI	Reading	Largest employer	Its share	Employers
All security specialties	60	Unconcentrated	Palo Alto Networks	3.4%	696
Threat Intelligence & Security ResearchSmall sample	338	Unconcentrated	Wiz	9.3%	50
Security Architecture & Consulting	200	Unconcentrated	Palo Alto Networks	8.3%	153
Penetration Testing & Red TeamSmall sample	188	Unconcentrated	Thales	5.8%	103
Identity & Access ManagementSmall sample	176	Unconcentrated	Inetum	8.2%	100
Cloud SecuritySmall sample	115	Unconcentrated	CrowdStrike	2.5%	101
Security Engineering	105	Unconcentrated	SpaceX	4.8%	309
Security Operations & Incident Response	100	Unconcentrated	Sophos	3.8%	203
Governance, Risk & Compliance (GRC)	99	Unconcentrated	Thales	3.2%	191
Security Leadership	88	Unconcentrated	Palo Alto Networks	3.2%	192
Application & Product Security	72	Unconcentrated	SpaceX	3.9%	216

Sample. 3,041 security roles open at the end of 14 Nov 2026 on the job boards this site reads, by the employer that lists them.

HHI: the sum of every employer's squared percentage share of the open roles, 0 (many small employers) to 10,000 (one employer). Read with the US merger-guideline thresholds: under 1,500 unconcentrated, 1,500 to 2,500 moderately, above 2,500 highly concentrated.

Shares are of listings, not of people hired: an employer that posts the same role once per office or country weighs more here than its hiring may.

Rows with fewer than 240.9 open roles are marked as a small sample and not ranked: below that the average of the rows weighs more than a row's own open roles (the weight fitted on the rows' own counts).

Source. CyberJobs.cc Research, How Concentrated Cybersecurity Hiring Is, live data.

Figure 2

The three largest employers in each security specialty

Which employers lead each security specialty, and by how much?

Specialty	First	Second	Third	Top three's share
Threat Intelligence & Security Research	Wiz (9.3%)	Palo Alto Networks (8.1%)	Dragos (4.7%)	22.1%
Security Architecture & Consulting	Palo Alto Networks (8.3%)	GuidePoint Security (4.4%)	AHEAD (4.1%)	16.8%
Penetration Testing & Red Team	Thales (5.8%)	Two Six Technologies (5.3%)	Palo Alto Networks (4.7%)	15.8%
Identity & Access Management	Inetum (8.2%)	Coupang (4.1%)	Brex (2.0%)	14.3%
Security Engineering	SpaceX (4.8%)	Palo Alto Networks (4.1%)	Thales (3.6%)	12.5%
Security Operations & Incident Response	Sophos (3.8%)	Inetum (3.0%)	CrowdStrike (2.5%)	9.4%
Governance, Risk & Compliance (GRC)	Thales (3.2%)	Anthropic (2.9%)	Capco (2.7%)	8.8%
Security Leadership	Palo Alto Networks (3.2%)	Coupang (2.5%)	JustMarkets (2.2%)	7.9%
Cloud Security	CrowdStrike (2.5%)	GuidePoint Security (2.5%)	MongoDB (2.5%)	7.6%
Application & Product Security	SpaceX (3.9%)	Anduril Industries (1.6%)	Capco (1.6%)	7.1%

Sample. Security specialties with roles open on 14 Nov 2026 whose top three's share reads on its own.

A specialty with fewer than 85.5 open roles is left out: below that the average of the specialties weighs more than its own roles (the weight fitted on the specialties' own counts).

Source. CyberJobs.cc Research, How Concentrated Cybersecurity Hiring Is, live data.

Figure 3

Is each security specialty consolidating?

Did concentration rise or fall over the window, on the same employers?

Specialty	HHI on 11 Nov 2026	HHI on 14 Nov 2026	Change
All security specialties	n/a	n/a	n/a
Application & Product SecuritySmall sample	n/a	n/a	n/a
Cloud SecuritySmall sample	n/a	n/a	n/a
Governance, Risk & Compliance (GRC)Small sample	n/a	n/a	n/a
Identity & Access ManagementSmall sample	n/a	n/a	n/a
Penetration Testing & Red TeamSmall sample	n/a	n/a	n/a
Security Architecture & ConsultingSmall sample	n/a	n/a	n/a
Security EngineeringSmall sample	n/a	n/a	n/a
Security LeadershipSmall sample	n/a	n/a	n/a
Security Operations & Incident ResponseSmall sample	n/a	n/a	n/a
Threat Intelligence & Security ResearchSmall sample	n/a	n/a	n/a

Sample. Security roles open at the start and the end of the window on the employers tracked throughout.

Employers first read during the window are left out of both ends, so their arrival does not read as a change in competition.

No employer was tracked through the window: this site began reading the employers' job boards on 11 Nov 2026, after the window opened, so no HHI is read at its start and no change can be measured yet.

Source. CyberJobs.cc Research, How Concentrated Cybersecurity Hiring Is, live data.

Figure 4

Specialists and generalists

Which employers hire across many security specialties, and which keep to one?

Employer	Specialties listed	Share in its main specialty	Specialisation (HHI across specialties)	Open roles
CrowdStrike	10	26.0%	1,576	50
Palo Alto Networks	10	31.4%	2,101	102
Thales	9	32.9%	1,976	79
Anduril IndustriesSmall sample	8	40.0%	2,333	30
Coupang	8	26.1%	1,692	46
GuidePoint Security	8	40.5%	2,381	42
Inetum	8	19.7%	1,518	61
MongoDBSmall sample	8	23.1%	1,479	13
NscaleSmall sample	8	16.7%	1,389	12
OktaSmall sample	8	31.8%	1,942	22
QualysSmall sample	8	31.6%	2,022	19
SentinelOneSmall sample	8	28.6%	1,964	28
ZscalerSmall sample	8	38.7%	2,549	31
AdvensSmall sample	7	35.3%	1,972	17
AnthropicSmall sample	7	35.1%	2,476	37
CloudflareSmall sample	7	47.6%	2,789	21
NebiusSmall sample	7	30.0%	2,150	20
OpenAISmall sample	7	37.8%	2,491	37
RobloxSmall sample	7	26.3%	1,745	19
ScalianSmall sample	7	30.8%	1,834	13
SnowflakeSmall sample	7	33.3%	2,000	15
SpaceX	7	54.8%	3,590	62
Trend MicroSmall sample	7	23.5%	1,696	17
BackblazeSmall sample	6	28.6%	1,837	7
Brain Co.Small sample	6	28.6%	1,837	7
CapcoSmall sample	6	30.3%	2,305	33
Cato NetworksSmall sample	6	40.0%	2,400	10
Check PointSmall sample	6	35.0%	2,150	20
CoinbaseSmall sample	6	45.5%	2,727	11
CoreWeaveSmall sample	6	42.1%	2,632	19
DatabricksSmall sample	6	30.4%	2,098	23
ElasticSmall sample	6	57.1%	3,923	21
ESETSmall sample	6	50.0%	3,056	12
Integrity360Small sample	6	31.6%	2,410	19
knowmad moodSmall sample	6	25.0%	1,875	8
MethodsSmall sample	6	30.0%	2,000	10
NetcompanySmall sample	6	40.0%	2,400	10
Pure StorageSmall sample	6	22.2%	1,852	9
RubrikSmall sample	6	25.0%	1,875	8
Starling BankSmall sample	6	25.0%	1,875	8
StripeSmall sample	6	40.0%	2,622	15
Trace3Small sample	6	36.4%	2,397	11
VeeamSmall sample	6	30.8%	2,071	13
WorkstreetSmall sample	6	50.0%	3,056	12
xAISmall sample	6	31.3%	2,109	16
1PasswordSmall sample	5	33.3%	2,222	6
AffirmSmall sample	5	25.0%	2,188	8
ApexSmall sample	5	42.9%	2,653	7
Applied IntuitionSmall sample	5	46.2%	3,018	13
Arctic WolfSmall sample	5	32.1%	2,474	28

The other 646 rows, in the same order (every value of every row is in the report's data, sent by email):

Artemis, AvePoint, Bitdefender, BJAK, Canonical, Crusoe, CyberOne, DigitalOcean, Fastly, Gainsight, GitLab, Huntress, Illumio, Kapres Technology, Legora, Ramp, Sword Group, Tanium, Tenable, Trellix, UltraViolet Cyber, Vercel, 7AI, Abacus, Abnormal Security, AHEAD, Aidoc, Aikido Security, Airwallex, Alpaca, Altruist, Anaplan, Axonius, Block, Bybit, Cape, CENSUS, Checkout.com, ClickHouse, Coalition, DoorDash, Dragos, European Dynamics, Firmus, Fullscript, Gruve, Harvey, Higgsfield AI, InterSystems, Intuition Machines, IOActive, IONOS, IonQ, JFrog, Keeper Security, Klaviyo, Logicalis Spain, Mistral AI, NinjaOne, Obsidian Security, OKX, OPSWAT, Optiveum, Palantir, Perplexity, Plata, PlayStation (Sony Interactive Entertainment), Qualtrics, Reddit, Reflection AI, Ridgeline, Ripple, Rocket Lab, Scopely, Second Front, SOFTSWISS, Sophos, Superhuman, Talan, Tevora, Thinking Machines Lab, Verkada, WHOOP, Wiz, 10a Labs, 3Cloud, Agoda, Alloy, AlphaSense, Appian, AppsFlyer, Arancia, Arctiq, Asana, Beast Industries, BeyondTrust, Black Duck, Bloomreach, Box, Braze, Brex, Carvana, CertiK, Chainguard, CLEAR, Cohere, Cohesity, Coupa, Cribl, Cyberhaven, Darktrace, DataDome, Delinea, Deliveroo, depthfirst, Discord, Docker, Dropbox, Emergent, Endor Labs, Eye Security, fal, Figma, Figure AI, Flexport, Gen Digital, Glean, Gong, Hadrian, Harness, Headway, HelloFresh, Horizon3.ai, Humanoid, iCapital, iFood, Infosys Consulting, Instructure, JumpCloud, JustMarkets, Kraken, Liftoff, Lila Sciences, Mercor, micro1, MOXFIVE, Mozilla, Muon Space, Myriad360, Mysten Labs, N-iX, NETGEAR, Neura Robotics, Notion, Nubank, Ontinue, OpenZeppelin, Pinterest, Plaid, Proofpoint, Rain, Recorded Future, RELEX Solutions, Reltio, Robinhood, Rogo, SafePaaS, SailPoint, Salesloft, Samsara, Saviynt, Sectigo, SimSpace, Sonar, SonicWall, team.blue, TENEX.AI, Trail of Bits, TRM Labs, Turing, Two Six Technologies, VulnCheck, Xsolla, Zeta Global, 6sense, Accelerant, Acronis, Addepar, AEG, AegisAI, AfterQuery, AIFT, Airbnb, Aledade, Angi, Anovia, Apollo.io, Appspace, Arista Networks, Armadin, Assured, Avertium, Axios, BitGo, Brillio, BTSE, Bugcrowd, Canva, Chainalysis, Charlie Health, ClickUp, Coalfire, Cogent Security, Colliers, Dashlane, Datadog, Dataflow Security, Decagon, DeepHealth, Deploy, Distribusion, Ditto, DuckDuckGo, Ebury, ElevenLabs, emerchantpay, Engine, Ensono, Esri, Ethos, FAR.AI, Finite State, Fivetran, Flodesk, Forus, Forward Financing, Galaxy, Garner Health, Gemini, Geotab, Glia, GoDaddy, Halcyon, Hightouch, ID.me, incident.io, inovex, Instacart, Intercom, Intertek, Ivalua, Jane, Kalles Group, Keenfinity, KnowBe4, Kodex, KOHO, Kong, LaunchDarkly, LemFi, LiteLLM, Long View Systems, Lovable, Magnet Forensics, Marqeta, Menlo Security, Metropolis, Mimecast, Mirantis, Monks, Motive, NEC Software Solutions, Neo4j, nesto, Nord Security, Nozomi Networks, Offchain Labs, Olo, Oneleet, OneTrust, OpenLoop Health, Orbia, payabl., Payoneer, Peregrine, Phantom, Ping Identity, Plain Concepts, Pomelo Care, Positron AI, Praetorian, Protiviti, Quanata, QuintoAndar, Redcare Pharmacy, Redgate, Render, Riskified, Riveron, Safe Software, Scale AI, Secfix, SentiLink, Sentry, Sezzle, Shield AI, Shopware, Sierra, Skydio, Smartsheet, Snyk, Socket, Software Secured, Solidgate, Squads, Starburst, Stedi, Super.com, Synack, Tailscale, Talkdesk, Tekion, The New York Times, Thoropass, Thunes, Tide, Toast, Trigger.dev, Turnkey, Twilio, UpGuard, Upstart, Valence, Valkai, Valon, Vanta, vivenu, Vultr, Wavenet, WorkOS, Wrike, Writer, Zafran, Zeely, zerohash, Zipline, 1GLOBAL, 360Learning, A-Gas, Abusix, Action1, Ada, Adyen, AIOS, Air Apps, Airlock Digital, Airship, airSlate, Airtm, Alan, Allium, Ambit Iberia, Anaconda, Anchorage Digital, Anyone AI, Apiiro, Appier, Aptible, Aptos Labs, Ardent, Arionkoder, Asymmetric Research, Atmosera, ATOSS, Auros, Aveniq, Axis Communications, Axon, Aztec Foundation, Banner Bank, Banyan Software, Base.com, Beam, BibliU, Billigence, BioCatch, Bishop Fox, Bitsight, Bitwarden, BlackCloak, Blackpanda, Blockstream, Bondora, Bounteous, Brave, Buffer, bunny.net, CampusWorks, Camunda, Canary Technologies, Carrot, Casa, Case IQ, Celonis, Censys, Chartis, Clariness, CloudLinux, CloudSEK, Cobalt, commercetools, Commvault, ConnectWise, Consensys, ControlPlane, Cracken, CREALOGIX, Crowell & Moring, CrucialLogics, Cyderes, DDN, Deciphex, Deepgram, Digital Asset, DiliTrust, DISCO, Docplanner, DotWorld, Doxy.me, Druva, Duna, EDB, Empirical, Eneba, ENJOY Gaming, ENSEK, Ent, ePlus, Erbis, ESO, Euna Solutions, EverAI, Exclusive Networks, Exeon Analytics, Expel, ExtraHop, Federato, Filevine, Filigran, FINN, FireMon, First Due, Five9, Flare, Fleetio, Float, Flox, Fly.io, Foley, Form3, FormativGroup, Foundant, FP Digital Business Solutions, Frontline Wildfire Defense, Fuse Energy, FYUL, G-P, gaiia, Gcore, Google Fiber, Grafana Labs, Griffin, Gurobi, GWI, Habitat Learn, HackerOne, HealthVerity, Helius, Hex, Hinge Health, Immersive, Included Health, Inductive Automation, Injective, Inspectiv, Insurity, Interrupt Labs, Irth Solutions, Island, Istari Digital, JetBrains, Job&Talent, Jusbrasil, K Health, Kin Insurance, Kobalt.io, Latent Health, Leadtech, Lightning Labs, Linear, LITIT, Lumos, Luxor, Lyft, Malwarebytes, Mama Money, Mapbox, MARGO, Material Security, Maze, MeridianLink, Mesh, Metabase, mindsquare, Miovision, Monzo, Morpho, n8n, Netcraft, Netrix Global, Netskope, Newxel, Nexxa.AI, NuHarbor Security, Octus, Oddball, OFX, Opal Security, OpenSesame, Orca Security, Orcrist Technologies, Oshi Health, Overflow, Owner, Packetlabs, Pacvue, Partly, PathAI, Paxos, Payter, Pennylane, People Data Labs, Phoenix Software, Physitrack, Pico, Pindrop, Pipe, Playlab, Pliancy, Pliant, Prefect, Primer, Project Eleven, Prompt Health, Prowler, PubMatic, qlub, Qoria, Quisitive, Quora, Readdle, Recare, Redflags, Redpanda, Reflow, Rescale, Resend, Resilience, RFA, Rhymetec, Roboflow, Robots & Pencils, RootstockLabs, Runway, SafeBreach, Salt Security, Sardine, Saronic Technologies, Semgrep, Semperis, SEON, Septeo, Serval, Shakepay, Sigma Software, Signode, SkySlope, Smile Digital Health, Socure, Spark Power, SpecterOps, Sporty Group, Spotify, SpotMe, Sprocket Security, SpyCloud, Staffbase, Stand Together, Statewise, Stellar Cyber, Strata Information Group, Supabase, Swapcard, Sword Health, Synthesia, Sysdig, Tala, Technosylva, Temporal, Terac, The Browser Company, The Mill Adventure, The Quality Group, Threatscape, Thumbtack, Tines, Tonic.ai, toogeza, Transmit Security, TrellisWare Technologies, Trolley, Truelogic, Turquoise Health, Unit4, Upgrade, Uvation, vCluster Labs, Vectra AI, VGS, Virta Health, Warp, Wealthsimple, Webflow, Workleap, Xometry, Xplor, YGO, YipitData, Yopeso, Youtrust, Zania, Zapier, Zencoder, Zimperium, Zippy, Zocdoc

Sample. 3,041 security roles open on 14 Nov 2026.

Specialisation uses the same index across an employer's own specialties: 10,000 means it lists roles in one specialty only.

Rows with fewer than 38.6 open roles are marked as a small sample and not ranked: below that the average of the rows weighs more than a row's own open roles (the weight fitted on the rows' own counts).

Source. CyberJobs.cc Research, How Concentrated Cybersecurity Hiring Is, live data.

For employers, recruiters and researchers

Buy the data behind this report

The figures above are a summary. Behind them are records we collect ourselves, every day:

3,462 roles tracked, each with its history
Every role on 696 job boards, read since 11 Nov 2026 (every hour since 11 Nov 2026): its pay and place, and the first and last day it was open.
3,347 apply clicks in 4 days
Which security roles people actually apply to, by specialty, pay and where the role is open. It happens on this site, so nobody else can count it.
fit checks of members against open roles
How the people looking for security jobs here measure up against real postings, and what they lack when they fall short: years, a tool, a certification, a clearance.

What you can buy

The records
The rows behind any figure, with their history, not only the totals.
A regular feed
The same figures every week or month, as files.
A custom cut or benchmark
Your countries, specialties or certifications, or your own company against the market.

Hiring for security and want to reach the people behind this data? (you make the hire).

Method and definitions

The public job boards of the employers this site tracks (Greenhouse, Ashby, Lever, Workday, SmartRecruiters and the other systems they post on), read every hour, keeping the postings whose title and description read as security work. Every figure is computed by one database query over the window shown, the same query for the live report and for every edition. Each figure states its sample beneath it.

Coverage: The employers whose public job boards CyberJobs.cc reads in full every hour, from 11 Nov 2026. Each figure states how many were read.
Open role: A role listed by a given day and still on its employer's board that day.
HHI: Herfindahl-Hirschman Index: the sum of every employer's squared percentage share of open roles, 0 to 10,000. Under 1,500 unconcentrated, 1,500 to 2,500 moderately, above 2,500 highly concentrated.
Specialty: Each role is classified from its title and description into one of the 10 security specialties this site tracks (Security Operations & Incident Response, Security Engineering, Cloud Security, Application & Product Security, Identity & Access Management, Penetration Testing & Red Team, Threat Intelligence & Security Research, Governance, Risk & Compliance (GRC), Security Architecture & Consulting, Security Leadership). Every specialty links to its own page.
Window: Live: the last 28 complete days, in UTC. Edition: one calendar month, in UTC.

What this data cannot tell you

Employers that hire without a public job board, or post only on LinkedIn or through recruiters, are not counted; government agencies and most staffing firms are not read.
A listing is not a hire. Some employers keep a role open for months, and some post one listing per city or country.

How the job feeds are read and roles are classified: site methodology. How fresh, complete and consistent the data is, checked every day: data quality and coverage.

Editions

The live report covers the last 28 complete days and changes every day. Each complete month is also published as an edition, frozen two days after the month ends, so a figure you cite from an edition never moves.

Live data (this page)Last 28 complete days, recomputed daily

Cite and reuse

Free to quote, chart and republish under CC BY 4.0 (creativecommons.org/licenses/by/4.0) with a link to this page. Live figures change daily: cite a monthly edition for numbers that will read the same later, or keep the access date.

Citation

CyberJobs.cc (2026). How Concentrated Cybersecurity Hiring Is (live data, 11 Nov 2026 to 14 Nov 2026). https://cyberjobs.cc/research/cybersecurity-hiring-concentration (accessed 15 Nov 2026)

BibTeX

@misc{cyberjobscc_cybersecurity_hiring_concentration_live,
  author = {{CyberJobs.cc}},
  title = {How Concentrated Cybersecurity Hiring Is (live data, 11 Nov 2026 to 14 Nov 2026)},
  year = {2026},
  howpublished = {\url{https://cyberjobs.cc/research/cybersecurity-hiring-concentration}},
  note = {Accessed 15 Nov 2026},
}

Data: every figure as CSV (one line per value) and JSON, sent to your work email.Pay and open-roles data

More research

All 50 research reports