There has never been a better time to become an information security professional. According to the U.S. Bureau of Labor Statistics, the demand for security experts is expected to grow exponentially  through 2028.

So, what are the hottest attributes employers are seeking out in 2020? Here are 5 of the most sought-after skills companies want for their security and IT teams today.

Cloud Security

Businesses are increasingly moving workloads to the cloud, and it has become an integral part of IT strategy that is only expected to grow. IDC predicts public cloud adoption will reach nearly $500 billion in just 3 years.

Of course, the cloud also poses more risk to data and operations, and that’s why professionals who understand cloud security are in top demand. IT teams cannot depend on their vendor partners to shoulder the risks of security in the cloud. A knowledgable, experienced team of security professionals is also integral to securing cloud workloads and understanding the security tools offered by providers like Amazon Web Services (AWS)  and Microsoft Azure.

Application Security

With so many business applications in today’s enterprise environment, the attack surface for malicious actors has exploded. In fact, according to Veracode’s State of Software Security Vol. 10  report, 83% of the 85,000 applications it tested had at least one security flaw. And 20% of all apps had at least one high severity flaw.

Application security skills and understanding are also in demand as IT leaders seek professionals who understand the secure development of applications, and how to find and fix security issues quickly.

Data Analysis

Data is everywhere and everything now in business. Protecting and harnessing it for business decisions is an important skill – particularly in security. As companies put a premium on data-driven strategy, security professionals are being called up to perform data analysis in a cybersecurity context in order to produce information that can be used for security and privacy.

Leadership

A recent Upwork Skills Index found the Certified Information Systems Security Professional (CISSP) is one of the 20 hottest job “skills” in the entire U.S. labor market. And (ISC)² research  finds it was also the most sought-after cybersecurity certification in the world in 2018.

The popularity of the CISSP speaks to the value of experience and leadership in security. Companies want leaders who can think outside the box and take their security strategy from reactive to proactive. And as security is increasingly given priority and attention from executive management, possessing leadership skills is critical for interacting with managers at all levels of the organization.

Don’t have enough experience to earn a credential like the CISSP? The Associate of (ISC)² designation offers an alternative certification path for aspiring cybersecurity and IT pros determined to make a real difference as they gain required time in the field.

Soft Skills

As much as security can be a technical career with many tools to master, security professionals also need to possess soft skills. A survey by Tripwire finds soft skills were important to hiring managers when they staff their security teams, and 72% said the need for them has grown.

Problem-solving, communication and the ability to collaborate as a member of a team are all valuable in a security role. Explore additional tips for showcasing and building these skills in the (ISC)² Breaking into Cybersecurity eBook .