AI Cybersecurity Promise Sparks Fear of Job Displacement

An AI model claiming to find thousands of vulnerabilities reignites fears that automation will hollow out cybersecurity jobs. The debate: civil service exams or obsolescence?

English · Original discussion in Spanish · Published

AI Cybersecurity Promise Sparks Fear of Job Displacement
The AI That Promised to Patch Cybersecurity and the Antiestéticar of Being Left Behind

A message about an AI model capable of finding thousands of severe vulnerabilities in operating systems and browsers has led to a less technical but more uncomfortable debate: whether artificial intelligence will empty cybersecurity technicians' work of substance. The tool's promise clashes with the reality of a sector where, according to one participant, most professionals barely handle the basics and a "standard" AI would already cover much of their tasks. For many, the consequence is singular: pass civil service exams or die.

The Announcement That Started It All

The starting point was a message attributing to an AI model—presented as Mythos Preview—the ability to have found thousands of high-severity vulnerabilities, including some in all major operating systems and web browsers. The claim, launched without further context, served to ignite a discussion that quickly moved from technology to the labor market.

The initial reaction was skepticism. Several participants recalled that this type of announcement usually functions as an advertising campaign for the AI company itself and that similar promises have not translated into an immediate revolution. The comparison with the Log4j case—a vulnerability affecting countless open-source projects—served to remind everyone that security flaws are neither new nor exclusive to AI.

Why Is It Said That AI Will Replace Cybersecurity Technicians?

Because, according to one participant, a large part of these professionals' current work consists of repetitive and automatable tasks. He summarized it harshly: "most people in cybersecurity obviously know the four basics and move on. A standard AI already sweeps away 80% of these workers." The statement, although exaggerated, points to an uncomfortable reality: many basic audit functions, vulnerability scanning, and patching can be executed by automatic tools.

The problem, however, is not just AI. The sector suffers from a fundamental issue: a lack of qualified professionals. Those who have tried to train in cybersecurity note that courses, even paid ones, are not enough. "You can take whatever courses you want; if you don't practice, you'll forget most things," warns an experienced participant. The recommendation is to practice on platforms like HackTheBox or TryHackMe, where real scenarios are simulated. The most valued certification, OSCP, requires specific and complex preparation.

The Bootcamp Business and the Employability Promise

The discussion drifted toward the training business. Several messages criticized those who paid "a few thousand euros for a cybersecurity bootcamp that guaranteed them 95% employability." The irony was evident: if AI is going to automate those tasks, the return on that investment is called into question.

The reality of the labor market, however, is more complex. Some argue that demand for technicians remains high because companies need someone to manage teams and networks, and that corporate cybersecurity largely consists of plugging the holes left by inexperienced programmers who assemble libraries without understanding them. "Corporate cybersecurity, that branch dedicated to plugging the traseril holes left open when true clowns program by assembling 200 MB libraries downloaded from the Internet," summarizes one participant sarcastically.

Open Source and the Illusion of Perfect Security

Another line of discussion focused on the nature of software. One participant recalled that errors in code are inevitable, both in open and closed projects. The difference is that in open source, flaws are visible and can be corrected, while in closed source there is no way to know. AI, in this context, does not eliminate the problem: it makes it more visible.

The conclusion of several messages is that absolute security does not exist. AI can find vulnerabilities faster, but it can also generate them. And the human factor—haste, lack of training, negligence—remains the weakest link.

The Future: Civil Service Exams or Death

The most repeated recommendation in the conversation has nothing to do with technology: passing civil service exams (*opositar*). "PASS THE EXAMS OR DIE," summarizes one participant. The idea is that, faced with private sector uncertainty, public employment becomes the safest refuge. Others, however, note that global competition—professionals from other countries willing to work for less—means pressure is not exclusive to AI.

The discussion did not reach a consensus. Some believe AI will eliminate jobs; others think it will simply change tasks. What seems clear is that cybersecurity, like many other fields, is no longer a safe bet. The promise of stable, well-paid employment is wavering, and the shadow of automation looms over a sector that, until recently, was sold as the future.

Also available in: Deutsch

Summary of a discussion on Burbuja.info - Foro de economía, actualidad y política., translated from Spanish and reviewed before publication. Read the full discussion (142 replies).

More summaries

All summaries in English →

-
Back