In 2025, ransomware assaults on the worldwide energy sector rose by more than 80%. Each breach costs energy organisations an average of $4.8 million. In the last two years, 60% of utilities in Europe said they had at least one major cyber incident, while more than 45% of US energy businesses said they didn’t have enough educated workers to do fundamental cyber defence jobs. This has made it very hard to hire people for cybersecurity jobs that are important for energy infrastructure.
Cybersecurity Trends
Energy businesses face two problems: more attacks on operational technology and higher pay for cybersecurity experts in the financial and IT sectors.
In the Asia-Pacific, 70% of utilities prioritize cybersecurity, yet only 40% feel confident they can fill these jobs. This tension is changing how people hire.
The trend is moving towards more specialised jobs, such as OT (Operational Technology) security analysts, threat hunters, and engineers who can secure industrial systems. These jobs need people who know much about grid architecture and malware hardening.
Demand for Specialized and Hybrid Roles
The sector is looking for people with a mix of skills as power grids are updated and renewable energy is added. It is becoming increasingly important for people to know both IT and OT. Hiring managers want more than just people who can monitor warnings. They also want people who can produce technical documents, find security holes, and figure out how to reverse engineer malicious code.
In the past year, the number of jobs in malware analysis and vulnerability management has climbed by more than 10%.
Some of the jobs that are increasing the fastest are:
- Security on the internet, Technical Writers are up more than 20% from last year.
- Around 18% more Reverse Engineers and Malware Analysts are employed in this industry.
- Vulnerability and Threat Management Analysts are increasing by around 15%.
In North America, job postings for OT security roles have doubled since 2022. In the Middle East, where oil and gas infrastructure is still a high-value target, hiring for cybersecurity skills has grown by 25%. This change shows that cybersecurity in the energy sector is no longer just about protecting firewalls.
It is about keeping a whole ecosystem of connected digital and physical assets safe.
The Role of Early Career Recruitment
Since there aren’t enough experienced workers, many companies are now more open to hiring people just starting their careers. Utilities and energy firms are increasingly using internships, apprenticeships, and rotational graduate programs. About half of all firms worldwide are now using internships to find young workers, and almost half are also using apprenticeship programs.
UK energy companies have hired almost 30% more entry-level cyber workers in the last two years. This shows how important this strategy is becoming. The premise is simple: teach new workers about the security problems that energy systems face from the ground up. This plan might take a while, but it develops a pipeline that the sector needs.
Changing Budgets and Hiring Plans
Cybersecurity spending in the energy sector is rising, accounting for little over 13% of all technology spending worldwide. In the US, utility cyber budgets increased by 8% in 2025.
In Germany, state-backed funding is helping mid-sized energy companies hire more cyber workers. Instead of hiring more security personnel, companies are moving their security staff around. Energy companies cooperate with governments and regulators to find skilled workers and devise incentives and programs to help reduce the gap between demand and available expertise.
Conclusion
Hiring for cybersecurity in critical energy infrastructure is all about being quick and flexible. Companies are facing more and more dangers, but they don’t have a lot of talented people to hire. This implies they need to rethink how they hire. There is a lot of demand for specialised skills, early-career pipelines are becoming more popular, and budgets are being changed to put resilience first. The industry is realising that protecting the grid is not only a technological problem but also a problem with the personnel. Finding and training the proper people to protect them is just as important as making firewalls and systems stronger for the future of energy security.
As cyber threats become more targeted and sophisticated, energy companies can no longer afford delays in building the right security teams. From OT security specialists and threat analysts to malware experts and compliance professionals, securing critical infrastructure requires talent with highly specialized expertise. Sperton helps energy organizations identify, attract, and hire cybersecurity professionals who can protect critical operations, strengthen resilience, and support long-term growth.