Why Cybersecurity Hiring Excludes Great Talent

Why do cybersecurity hiring processes exclude highly capable people? In this episode of the Retain Podcast, I speak with Peter Schawacker, a cybersecurity veteran with nearly 30 years of experience as a practitioner, CISO, recruiter, and founder of Nearshore Cyber. We discuss the hidden flaws in resumes, job descriptions, applicant tracking systems, defensive hiring, and AI-based talent assessment. Peter explains why many hiring processes focus on keywords instead of practical capability, why poorly written job descriptions create unrealistic “unicorn” roles, and how one company potentially saved $100,000 to $150,000 per year by separating one overloaded role into the work it genuinely required. For CEOs, founders, CISOs, and hiring leaders, this conversation offers practical insight into: • Why strong cybersecurity candidates are often filtered out • How to write job descriptions around real business requirements • The difference between trade skills and professional judgment • How the NIST NICE framework can improve role definition and assessment • Why one broad candidate score can create poor hiring decisions • How AI can support recruiting, screening, and team capability reviews • How Aramis connects skills assessment, workforce planning, and career development • Ways to reduce unnecessary interviews and shorten hiring cycles • Why trust, initiative, reliability, and professional judgment are difficult to measure on a resume • How CEOs can build teams around current capability gaps and future business goals Peter also shares the story of moving from a contract technical writing role into cybersecurity leadership at Citi, overseeing secure operations and global vulnerability management, then building Nearshore Cyber and Aramis. We also discuss his long-term vision for a more precise cybersecurity talent market, where professionals can understand their skill gaps, companies can define roles with greater accuracy, and recruiters can present candidates with useful evidence instead of relying on hope. If you lead a cybersecurity company, manage technical teams, recruit security professionals, or are building an AI-enabled workforce strategy, this episode provides a direct look at the hiring problems costing companies time, money, and qualified talent. Topics covered: Cybersecurity hiring Cybersecurity recruitment AI talent assessment NIST NICE framework Cybersecurity resumes Job description strategy CISO hiring Workforce planning Human capital assessment Cybersecurity skills gaps AI and recruiting Nearshore Cyber Aramis Subscribe to the Retain Podcast on the Growth Amp channel for conversations about technology, leadership, business building, talent, and practical growth strategies. 00:07 Introduction to Peter Schawacker 01:54 Peter's Journey into Cybersecurity 04:00 The Importance of Project Management in Cybersecurity 05:47 The Role of Sleep in Productivity 09:55 The Flaws of Resumes in Hiring 16:15 Trust Issues in Cybersecurity Hiring 18:58 The Difference Between Professionals and Tradespeople 21:05 Leadership and Initiative in Cybersecurity 22:28 The Role of Education in Leadership 24:56 Critique of Traditional University Education 26:26 The Need for Practical Skills in Cybersecurity 26:59 Introducing Aramis: A New Approach to Cyber Talent 30:35 Streamlining the Hiring Process 33:17 Navigating Political and Economic Challenges 36:01 Building a Community and Product Traction 37:24 Long-term Vision for Aramis 40:58 Metrics for Success and Growth 43:55 Final Thoughts and Advice