Cyber ​​attacks are on the rise, but defenders are lacking. The National Cybersecurity Agency warns: technicians and humanists are needed.

Hybrid warfare, cybercriminals, ransomware, phishing…are terms that are increasingly less used by insiders. And there's a specific reason: “Italy is often the target of cyber attacks that hit public administrations, hospitals, companies, and critical infrastructure.”.

Word of Nunzia Ciardi, Deputy Director General of the National Cybersecurity Agency (ACN), the National Cybersecurity Authority, established in 2021 precisely to address these changed scenarios.

The occasionthere was an interview given to Skuola.net – a reference portal for students of all ages – during which Ciardi has invited young people to pursue a career in this sector, now become central, debunking “false myths” on the topic and paving the way for those who don't feel cut out for this field. It's all about following the right path.

“I say to companies: there is no need to worry – Ciardi underlines – but to equip ourselves. And to the kids I say: in Italy, as in the rest of Europe, Qualified personnel are needed, get ready!". Excellent news for digital natives, who are certainly more inclined to move in this "domain", which is not at all closed but, on the contrary, requires various professional skills: from graduates to diploma holders, from technicians… to humanists.

Here, then, 10 golden tips for preparing for the hiring boom expected in the coming years and the growing threats to which each of us may be exposed on a daily basis.

The more attackers there are, the more defenders are needed.

The attack surface has expanded enormously, because everything is now connected: public services, healthcare, energy, transportation. This means that Cybersecurity is no longer a niche technical topic, but a condition for the ordinary functioning of society.

Come on, there's still (plenty of) room

In Italy, as in the rest of Europe, the demand for expertise in the field of cybersecurity it grows much faster than supplyIt's a gap that ACN measures concretely in its daily work and which represents, at the same time, a risk for the country's system and an extraordinary opportunity for those entering the world of work today.

The most sought-after technical figures (a degree isn't always required!)

If you have a degree in computer science or cybersecurity (ITS degree or diploma), the opportunities are almost endless: the most requested profiles today is the security operations center analysts – those who monitor networks and identify threats – and also the cyber incident response experts, penetration tester and the specialists of “ethical hacking”, that is, those who simulate attacks to discover system vulnerabilities before they are exploited by criminals. Added to these are cloud experts, cryptography and who protects the industrial systems safety.

With one key detail: not all of these positions come from a first or second level degree. Many,

instead, they are built also through technical paths, certifications and ongoing practical training.

It's not a world for (only) engineers, there's room for humanists

Cybersecurity is, however, a intrinsically multidisciplinary sectorA cyber incident has legal, organizational, economic, communication, and even geopolitical dimensions. Anyone who thinks this is a world reserved for a single "tribe" of specialists is mistaken: it's an ecosystem that requires vastly different sensitivities and training.

Therefore, jurists are needed experts in European and national regulations – in the field of network security, operational resilience, AI regulation – as well as experts in international relations e analystgeopolitics, because “cyber” threats also have a strategic dimension between states.

The list of potential cybersecurity "experts" is also enriched by communicators capable of explaining the risks in an understandable way and of building awareness (the first defense is always cultural!), of economists, of training experts and of behavioral psychologistsAn organization that protects a country, in fact, needs both those who know how to program code and those who know how to "read" people and behaviors.

Forget the lone hacker in the hood, we work in teams

Let's also eliminate prejudices about how cybersecurity work is carried out in practice: the image of a lone, hooded hacker in front of a dark screen is a cinematic cliché.

Instead, it is about a deeply collaborative and team effortWe exchange ideas, participate in exercises, write analyses, and engage with international institutions and partners. Of course, a technical foundation is necessary, but at the core are human relationships, coordination, and information sharing, even under pressure.

Doors wide open for girls

Tech-oriented sectors have historically been perceived as male-dominated. And, in fact, this is an imbalance we still need to address. message for girls It must, however, come through loud and clear: not only are you in the right place, but This sector absolutely needs you.

In this field, in fact, the diversity of perspectives between men and women can be an operational advantage, Because a diverse team sees threats that a homogeneous team might miss. Skills are genderless: don't let an old stereotype decide your future for you.

Artificial Intelligence will not replace people, but will enhance them

The Artificial Intelligence sis undoubtedly revolutionizing – and it could not be otherwise – the cybersecurity sector, revealing itself at the same time a very powerful ally and a new source of threat.

On the defense side, it helps analyze huge amounts of data, recognize anomalous behavior, and respond more quickly. On the attack side, however, it also puts sophisticated tools in the hands of adversaries, lowering the technical threshold for conducting offensive operations. In the future, we will increasingly see a clash between automated systems. But beware: this It doesn't replace people, but rather increases their value.

AI will act as a skill multiplier and we will need people capable of managing these tools, understanding their limits, and keeping the ability to judge at the heart of decisions.

Soft skills enhance your CV: curiosity and ethics come first.

In addition to the academic (or extra-university) background, personal attitudes make the difference, first of all the curiosity: the desire to understand how things really work, to dismantle them and rebuild them. And then the lateral thinking: the ability to imagine paths that others cannot see. Also crucial stress management, clarity under pressure and the ability to work in a team.

But the real pillar is a solid ethical foundation: Those who handle these tools have a responsibility to others and integrity is non-negotiable.

Salaries and career: growth that isn't just measured in paychecks

From an economic point of view and also due to the current lack of cybersecurity professionals, salaries can be very attractive. But there's one thing that's more important than numbers: working in national security means doing something useful for the community. You're protecting people and, by extension, the country.

Training begins before graduation (and continues after)

To facilitate entry into this sector, the main roads are definitely degrees in Computer Science or Engineering. However, one should not underestimate the ITS Academy – Higher Technological Institutes – which in just two years offer sufficient practical and experiential training for rapid entry into the world of work.

For those who have a humanistic soul, law, international relations, economics, communication are real and precious gateways, better if accompanied by a certain basic digital culture, that can be developed without having to wait for the final exam. For example, there are platforms “Capture The Flag”, real challenge games where you learn the basic techniques of cybersecurity, defending and attacking systems in a safe and legal environment. On the web you can find online workshops that allow you to practice on virtual machines without any risk and many other free resources to learn the key principles of the system.

Without forgetting a categorical imperative: experiment only on your own or explicitly authorised systems, ethics comes before technique!