Recognizing these challenges, WEI has partnered with CyberTrust Massachusetts while also creating an innovative solution: The Technical Apprenticeship For Diverse Candidates. This apprenticeship service not only addresses the critical need for skilled cybersecurity professionals but also fosters a more inclusive IT environment. Companies are increasingly valuing diversity in IT and cybersecurity teams, recognizing that diverse perspectives enhance problem-solving in the face of evolving digital threats.
Watch: Harnessing A Diverse Talent Pipeline For Cybersecurity Personnel
Graduates from the CyberTrust program who enroll in the WEI Technical Apprenticeship benefit from a smoother transition from academia to the corporate world. Our cyber apprenticeship program stands out by prioritizing attitude and aptitude over existing skill sets, ensuring that we equip individuals with the necessary skills through role-specific and tech stack-specific training. Unlike other programs that focus on generic tech stacks, our training aligns directly with the technology actually deployed by the customer.
The program follows an iterative process combining on-the-job training with classwork, allowing apprentices to absorb and apply material in real-world settings, ensuring a deeper understanding and practical application. Additionally, we provide comprehensive mentoring for both apprentices and hiring managers to facilitate early course corrections and maximize program success.
To integrate WEI's apprenticeship service into their existing talent development strategies, clients can leverage it to fill difficult early-career roles in niche or emerging technologies, establish a reliable entry-level technical talent pipeline, and enhance their team's skills by incorporating apprenticeship training into their broader upskilling initiatives. Furthermore, the program can support a targeted Diversity, Equity, and Inclusion (DEI) hiring strategy, helping clients build a more diverse and skilled workforce tailored to their specific technological needs.
WEI’s proven apprenticeship service features a four-step process designed to ensure the successful transition of apprentices into full-time cybersecurity roles. There is zero obligation from the client to hire the apprentice to a full-time position, although that is the case in 99% of our engagements. Here’s how it works:
At WEI’s recent Cyber Warfare & Beyond roundtable discussion, renowned cyber thought leader Rick Howard said the perception of a cyber staffing shortage actually has more to do with the mismanagement of existing talent within many enterprises.
“In my opinion, we don't have a shortage of new talent coming into the field,” said Howard. “There's lots of training programs for that. When you're a security manager hiring a disposition manager, you're not looking for the new talent, though. They are looking for the person with 25 years of experience and 17 certifications that they can pay them $150 an hour for. That's why when you hear everyone say there's a shortage of cybersecurity professionals, there's not. As a profession, we manage it poorly. We don't bring in new talent and train them up the scale. We try to find the unicorns, the super stars, and we don't pay attention to all that stuff. That's a complete mindset that needs to change in our industry if we are going to fix that problem."
Watch: WEI Cyber Warfare Roundtable Discussion
Identifying and sustainably developing tomorrow’s IT talent is more pertinent than ever. That’s why WEI’s partnership with CyberTrust Massachsuetts comes at a time when many organizations are struggling to retain and upskill IT personnel. WEI is working to help customers alleviate this challenge by offering the apprenticeship.
The collaboration leverages the state-of-the-art Cyber Range at Bridgewater State University (BSU), where students and interns can simulate real-world cyberattacks, test defense strategies, and hone their skills in a controlled environment. CyberTrust is also affiliated with the Center For Cybersecurity Education at MassBay Community College and will also be leveraging an additional cyber range at Springfield Technical Community College later in 2024.
Our leaders at WEI passionately champion diversity by actively fostering inclusive practices and building strategic partnerships. Our DEI initiatives aren’t just about avoiding pitfalls—it's about embedding diversity as a core value that fuels innovation across our business. CyberTrust’s comprehensive approach ensures that students receive both theoretical and practical training, making them well-equipped to handle real-world cybersecurity challenges.
The sustainability of the cybersecurity talent pipeline is crucial for the long-term success of any enterprise. With WEI and CyberTrust Massachusetts, organizations can:
The WEI Technical Apprenticeship for Diverse Candidates focuses on developing a comprehensive set of technical and soft skills that are essential for success in the cybersecurity field. Here’s a proven breakdown of some learned technical skills:
Network Security: Apprentices learn to design, implement, and manage security measures for network infrastructure. This includes configuring firewalls, intrusion detection systems, and other security protocols to protect data and prevent unauthorized access.
Cloud Security: Training covers security practices for various cloud environments, including public, private, and hybrid clouds. Apprentices learn about cloud security frameworks, identity and access management (IAM), and how to secure data in transit and at rest.
Security Operations Center: Apprentices gain hands-on experience in a SOC environment, learning to monitor networks for security breaches, analyze security incidents, and implement response strategies. This includes familiarity with security information and event management (SIEM) tools.
Incident Response: Apprentices are trained in incident detection, response, and recovery processes. They learn to develop and execute incident response plans, conduct forensic investigations, and report on security incidents.
Risk and Compliance Management: Apprentices learn about regulatory requirements and frameworks such as GDPR, HIPAA, and NIST. They are trained to conduct risk assessments, implement compliance controls, and ensure that security practices meet legal and regulatory standards.
Vulnerability Management: This includes identifying, assessing, and mitigating security vulnerabilities in software and hardware. Apprentices learn to use vulnerability scanning tools and develop remediation plans.
Endpoint Security: Training covers the deployment and management of security measures on endpoint devices such as computers, smartphones, and tablets. Apprentices learn to protect these devices from malware, unauthorized access, and other threats.
Penetration Testing: Apprentices are introduced to penetration testing techniques to identify and exploit vulnerabilities in systems and networks. They learn to use tools like Metasploit, Wireshark, and Nmap.
Data Protection: Apprentices learn about data encryption, data loss prevention (DLP) strategies, and secure data handling practices to protect sensitive information.
DevOps Security: Training includes integrating security practices into the DevOps process, ensuring that security is considered at every stage of the software development lifecycle.
The WEI Technical Apprenticeship for Diverse Candidates, in partnership with CyberTrust Massachusetts, provides a comprehensive solution to the ongoing challenges of talent shortages and lack of diversity in cybersecurity. By adopting this program, medium and large enterprises can ensure a steady flow of skilled, diverse cybersecurity professionals who are well-prepared to meet the demands of the industry. This initiative not only benefits the participating companies but also contributes to a more secure and inclusive digital ecosystem.
Next Steps: To learn more, please contact either myself or anyone from the WEI cybersecurity team to learn more on how we can help build you a sustainable IT talent pipeline for cybersecurity-based roles.
In the meantime, please download and read this original WEI white paper, Explaining The Cybersecurity Skills Shortage Downstream Effects And How Enterprises Can Utilize AI. As a SOC leader, you have the option to modernize your security approach by incorporating AI and ML technologies. AI-enabled security solutions are designed to directly address the challenges posed by gaps in knowledge, unfilled expert roles, growing digital footprints, and the rapidly evolving threat landscape, as adversaries also harness AI for nefarious purposes.