Cyber security jobs boom in UAE, with starting salaries of Dh40,000 or more

The rapid shift to remote working in 2020 has led to a shortage of qualified cyber security professionals in the UAE.

Lucrative opportunities await those willing to take on larger roles, a new recruitment agency salary guide showed.

“The speed of digital transformation in the past 12 months is much more than the whole previous five years, and it’s still accelerating,” Tarek Kuzbari, regional director for Massachusetts-based security company Cybereason, told The National.

This boom has opened opportunities for criminals to continue using old tactics, such as ransomware, malware and email fraud, he said.

This has led to increased demand for security architects, managers and engineers to address these threats.

These roles can fetch monthly salaries of between Dh40,000 and Dh65,000 ($10,900 and $17,700) a month in the UAE, depending on the company, according to the Michael Page 2021 salary guide.

There is a shortage of local talent with the most in-demand skill sets, the company said.

It also recommended that employers focus on developing and training their own talent, and aim to be more flexible on sector and seller expertise when hiring.

Some recruiters were concerned rising demand was inflating salaries and blurring job descriptions to attract candidates.

“There are lots of overpaid cyber security professionals who are not qualified for their job titles,” said Iain Sachs, a recruiter for defence and technology companies in the UAE.

Mr Sachs likened it to the dotcom boom and bust of the late 1990s to early 2000s, “when salaries were going through the roof”.

Part of this, he said, was that universities were not producing graduates who were ready to be hired.

There was little way to prepare for the extent of the level of online threat.

“Cyber security is a booming area already, and people are hiring for this because they realise the threats are multiplying,” Mr Sachs said.

“It’s a gamekeeper-and-poacher dynamic. The gamekeeper is trying to keep the poacher out.

“Right now, we are going through a radical change of going fully digital. That comes with a whole new pile of threats.

“There are fewer qualified candidates for open jobs, so people are landing in jobs they aren’t ready for.”

He likened the cyber security jobs rush to the demand for digital marketing managers a decade ago.

People were being extremely well paid for that position “but now the universe has caught up, the market is flooded and the pay scales are course-correcting and dropping fast”, he said.

Mr Sachs predicted this would happen to some parts of the cyber security sector.

There are already signs of a maturing market. Late last year, the UAE assembled a council on cyber security.

The council is developing laws to prosecute all types of cyber crimes, securing existing and emerging technology and establishing a National Cyber Incident Response Plan.

For those looking to break into technology security, engineers who specialise in safely moving data to cloud storage are among the most in demand, the Michael Page guide said.

Many of the best candidates in this area are being lured to the big multinational tech retailers or a handful of the largest corporations because of the size and scope of the programmes those businesses are undertaking, leaving smaller or less specialised companies with fewer options.

Technology transformation experts, or those who can set up systems to help reduce operating costs and improve efficiency, are also in demand.

So are security consultants who have experience in more mature markets, as a result of international security sellers entering the Middle East, Michael Page said.

“If anyone can afford to go through what will be a challenging period of lack of talent, it’s [the UAE],” Mr Sachs said.

“It’s an attractive place to come to work. If you’re facing a dark winter in Finland or Russia, it’ll always be attractive.”

Evolving cyber security threats mean changing demands from business, and job candidates need to be up to speed