Cybersecurity didn't go remote. It split in two. One side got hybrid. A specific city, a specific office…
Lara B. — Building Cyberr
Cybersecurity didn't go remote.
It split in two.
One side got hybrid. A specific city, a specific office, 2-3 days a week. The job post says "remote-friendly." The real answer is: you need to commute. 60-65% of security roles are like this now.
The other side got rare.
Cloud Security Architects. Reverse Engineers. Threat Intel Researchers. For these three, companies skip the office rule completely, because there aren't enough of these people.
Under both sides, regulation is changing the map. DORA started in the EU last year. It makes banks and financial firms responsible for where their security vendors are, and who can touch their data. "Based in the EU" became the safe answer. That's why Spain, France, and Poland are seeing more hiring now.
So if you're hiring in security, don't ask remote or office.
Ask this: is this role tied to a location, or is it rare enough to go anywhere.
7 reactions · 1 comments
Comments
Muhammad H.: So it's the local regulations that make it mandatory to have local vendors, not the companies.