Cyber Threats Surge While Hiring Slows – A Shift In Strategy Or A Cost-Cutting Move?

As UK businesses face a surge in sophisticated cyberattacks, a new report suggests that while permanent hiring may be slowing, companies are increasingly turning to temporary cybersecurity staff to protect their systems. A pretty counterintuitive move, by most accounts.

According to new data from Robert Walters and Vacancysoft, fixed-term IT security contracts jumped by 22% year-on-year between January and September 2025 – a clear sign that organisations are rethinking how they manage cybersecurity under financial pressure.

 

Rising Attacks, Flexible Hiring

 

Cyber threats have escalated sharply in 2025, targeting some of the UK’s most recognisable brands. According to Ajay Hayre, Principal Consultant for Cybersecurity at Robert Walters, “Cyberattacks have surged in both frequency and sophistication, with targets ranging from high-street retailers to top automotive manufacturers.”

From April to September alone, major companies including Marks & Spencer, Co-Op and Harrods suffered attacks that disrupted operations and compromised data. In late August, Jaguar Land Rover was hit by a significant incident that continues to affect production lines.

Despite these risks, many employers have scaled back permanent recruitment as they try to recover from rising operational costs. Instead, the focus has shifted towards temporary cybersecurity professionals, who offer what Hayre describes as “a flexible solution for organisations looking to bolster their defences, without making permanent headcount additions.”

 

 

The Surge in Cybersecurity Vacancies

 

According to Robert Walters and Vacancysoft, demand for IT security specialists has risen consistently throughout 2025, with each month showing more openings than the same time last year. Notably, June and September recorded spikes of 35% and 40%, respectively, coinciding with the wave of high-profile cyber incidents.

The growing number of vacancies indicates a reactive market, where organisations tend to ramp up hiring only after suffering or witnessing an attack. Hayre warns against this short-term thinking, saying, “Foresight is everything. Having a proactive hiring plan for temporary cybersecurity talent is a key preventative measure businesses can take before threats happen.”

He notes that hiring early helps firms avoid “bidding wars for top talent when significant attacks unfold.”

 

Industry Trends and Shifting Priorities

 

The latest data reveals that Professional Services and Consumer Goods and Services sectors have seen the sharpest year-on-year increases in cybersecurity roles, at +63% and +38% respectively. The Technology, Telecoms and Media sector also saw demand climb by 35%, while Public and Not-For-Profit organisations experienced a more modest 21% rise.

Interestingly, financial services reported a slight 6% decline in IT security vacancies. But, within Fintech, demand surged by 52%, highlighting the growing need for robust defences in digital financial platforms.

According to Hayre, “Swelling vacancies within Fintech speak to the crucial role cybersecurity professionals play in making the future of financial digital innovation secure.”

 

What Are the Roles in Highest Demand?

 

Certain cybersecurity roles are seeing particularly sharp increases. Security Specialist positions rose by 66% year-on-year, reflecting the urgency to strengthen organisational defences. Security Architect roles were up 38%, while IT Security Analyst roles grew by 33%, showing that organisations are prioritising both strategic system design and real-time threat monitoring.

Hayre explains, “Employers are looking for individuals who can help fortify their organisation’s overall security posture. Professionals who can strengthen internal security infrastructures, detect and respond to threats and ensure compliance with training and procedures.”

 

Strategy Or Survival?

 

The shift towards temporary hiring raises an important question: is this a strategic evolution or a cost-saving necessity? On one hand, flexible contracts allow companies to bring in top-tier expertise without committing to long-term payroll costs – an appealing prospect in an uncertain economy. On the other, it could signal a reactive mindset, where cybersecurity is treated as a crisis response rather than an ongoing investment.

As Hayre points out, “Many companies are witnessing cyberattacks happening in real-time and acting too late. Understaffing, stagnant budgets and a high-stress atmosphere of increasing threat can mean that crucial signs of risk are missed.”

For now, businesses appear to be balancing between necessity and innovation – using temporary contracts to stay within budget while still responding to escalating threats. Whether this trend marks a permanent change in cybersecurity hiring strategies or a short-term measure remains to be seen.

What is clear, however, is that the cyber threat landscape is intensifying, and companies cannot afford to be complacent. The rise in temporary contracts may reflect a more pragmatic approach to protection. Or, simply a warning sign that many firms are doing what they can with the resources they have.