Pentagon cyber apprenticeship surge raises fresh questions over cybersecurity hiring

The Pentagon’s new Cyber Apprenticeship Program attracted more than 70,000 enquiries within days of opening, despite offering an entry-level salary of $22,584 and requiring applicants to commit to a year-long programme in the Washington, DC area. The response suggests one thing above all: demand for cyber careers is not the problem. The challenge is creating accessible pathways into the profession.

 

For years, organisations across both the public and private sectors have warned of an ongoing cybersecurity skills shortage. Industry reports continue to highlight thousands of unfilled positions, while security leaders regularly cite recruitment as one of their biggest operational challenges.Yet the Pentagon’s pilot programme appears to expose a different reality.

 

The 12-month Cyber Apprenticeship Program (Cyber RAP), launched by the Department of War’s Office of the Chief Information Officer, removes several of the barriers that have traditionally limited entry into cybersecurity. Applicants do not need previous professional cyber experience or a university degree.

 

Instead, participants receive paid training, mentoring, practical laboratory experience and sponsorship for the security clearance required to work in government cyber roles.

 

Applications are open until 17 July, with successful candidates training for roles including Cyber Defence Analyst, Cyber Defence Infrastructure Support Specialist and Cyber Defence Incident Responder.

 

A pipeline problem rather than a talent problem?

 

The scale of interest has surprised even government officials. According to the Department of War, the programme generated more than 70,000 enquiries before applications had even closed. Reports also suggested the application portal briefly struggled with demand as prospective candidates attempted to register.

 

Security professionals argue the figures demonstrate that many capable candidates have been locked out of cybersecurity through hiring practices rather than a lack of ability.

 

Jacob Krell, senior director for Secure AI Solutions and Cybersecurity at Suzu Labs, told ClearanceJobs that the programme breaks the long-standing "catch-22" facing many aspiring cyber professionals: candidates cannot obtain a security clearance without a sponsored role, but cannot secure a sponsored role without already having experience or clearance.

 

The programme also follows wider changes in US federal hiring. Earlier this year, the Office of Personnel Management removed default degree requirements for many federal technology positions, reflecting a broader move towards skills-based recruitment.

 

Lessons for enterprise security teams

 

Although the initiative is designed for government cyber roles, its implications extend well beyond the public sector.

 

Many organisations continue to recruit for junior security positions by demanding several years of experience, multiple certifications and specialist knowledge before candidates have had an opportunity to develop those skills.

 

Security leaders have increasingly questioned whether these requirements are contributing to the very talent shortages organisations are trying to solve.

Paid apprenticeships, graduate schemes and internal reskilling programmes have gained traction across the industry as organisations look beyond traditional recruitment methods. Rather than competing for the same limited pool of experienced professionals, employers are increasingly investing in developing talent themselves.

 

For organisations already struggling with staff retention, burnout and increasing workloads, expanding the pipeline could become just as important as competing for senior hires.

 

More than a military recruitment exercise

 

The Pentagon’s programme is ultimately a workforce experiment. If successful, it could demonstrate that cybersecurity recruitment does not necessarily require larger candidate pools, but different hiring models.

 

The overwhelming response suggests there is no shortage of people who want to work in cybersecurity. Instead, there may be a shortage of employers willing to provide a genuine route into the profession.

 

For an industry that has spent years discussing the cyber skills gap, that distinction may prove increasingly difficult to ignore.