In late September Optus was hit by the largest data breach of its kind.
The attack has led millions of Australians to reflect on cybersecurity and threats like identity fraud.
October is cyber security awareness month and we chatted with some experts about what a cyber security specialist does and the pathways to becoming one.
What does a cybersecurity specialist do?
The answer isn't, wear a hoodie and sit behind multiple monitors typing out code, according to AustCyber's Group Executive Jason Murrell.
"To make cybersecurity more approachable for all Australians, we need to remove this image of dark hoodie-wearing people, on either the good or criminal side of cybercrime," Mr Murrell told ABC News.
All organisations need to protect themselves from viruses, malware, hacking, privacy breaches and other cyber threats.
This is where cybersecurity specialists come in.
Mr Murrell said cybersecurity specialists plan and implement security measures to protect computer networks and systems from cyber attacks.
The crux of their job is to monitor, detect, investigate, analyse and respond to signs of intrusions.
Does Australia have a cybersecurity skills shortage?
The Australian government's 2022 Skills Priority List provides a detailed view of occupations in shortage by state and territory.
All occupations in cybersecurity were listed as facing a shortage.
Cybersecurity firm CyberCX also confirmed shortages are biting harder than ever.
Last month, the firm reported that over the next four years the shortfall of cybersecurity professionals is forecast to hit up to 30,000 unfilled positions across Australia.
Lack of gender diversity adds another blow to the industry
Based on AustCyber's figures, Mr Murrell said the current breakdown of cyber roles is 75 per cent male and 25 per cent female.
"There is still significant work to be done on encouraging and supporting gender diversity," Mr Murrell said.
Director-General of the Australian Signals Directorate (ASD), Rachel Noble, said there is a long way to go but things are on the right track.
"In Australia and internationally, is the fact that women lead both ASD and ASD’s Australian Cyber Security Centre," Ms Noble said.
"Our graduate intakes over the last two years were 47 per cent women in 2021, and 52 per cent in 2022."
But where our real skill shortage sits is within our general population according to Mr Murrell.
"We are living in a time where preschool and primary school children are given access to the internet via parents' phones, computers and tablets, without any real training or supervision," he said.
"Understanding our cybersecurity should be like putting on a seatbelt or brushing our teeth — it should be something we do, without a second thought."
I can't code or program software. Can I still work in cybersecurity?
If there's one thing Mr Murrell emphasises, it's that a cybersecurity specialist is "just your average person".
"The profession of cybersecurity covers a very broad spectrum and therefore requires people from varying backgrounds," he said.
"Many cybersecurity roles can be found in banks, healthcare, government, retailers and more.
"Which means someone who works in finance without coding experience could change career paths and work in cybersecurity."
Ms Noble said the ASD seeks "people from all disciplines and professions".
"We seek curious, inventive and imaginative problem-solvers, driven to take on unique on challenges."
According to Ms Noble, these are some of the professions cybersecurity specialists may come from:
- Analysts
- Linguists
- Software engineers and developers
- Data scientists
- ICT professionals
- Project managers
- Corporate professionals, such as human resources and finance specialists
Do I need to go to university to work in cyber security?
Director of the CyberCX Academy Rosemary Driscoll said a general assumption about working in cybersecurity is that you need both undergraduate and postgraduate qualifications from a university.
She said Australia needs to "expand" its approach to this.
"While there is no question that our world-class universities and TAFEs are critical to addressing the cyber skills shortage, industry can take the lead on initiatives to bring job-ready entrants to the market," she said.
Mr Murrell also believes that pathways to cybersecurity must be unified in Australia.
"Yes, there are university degrees, but you can actually take people and skills from other areas and transfer them into cyber security."
What other pathways are there?
Ms Noble said over the next decade, the ASD will work to create over 1,900 new jobs located in cities across Australia.
How do they plan to do this?
By creating pathways through:
- Apprenticeships
- Internships
- Cadetships
- Work experience programs
While not every position in cybersecurity may require a university degree, both Ms Noble and Mr Murrell emphasised the importance of understanding the industry and expanding your skills in the field through the above options.
