Snyk: 50% of security jobs unfilled… any solution predicated on devs 'becoming security experts is doomed'

In an interview with Snyk founder and president Guy Podjarny on the challenges of secure application development, he told us: "Any solution that predicates on developers becoming security experts is doomed to fail." Snyk began in July 2015. Why the name? "The original idea that I had was around sneaking information out to a …

[Warm Braw]

Closely following an article about the funding challenges for Docker, an article about the recently free of charge Snyk Code.

We seem constantly to be promoting a software-development methodology based on an ever-increasing set of services that no-one is prepared to pay for. I'm old enough to find that a concern, though it's clearly no longer considered an issue.

[claimed]

Yea but Adam Smith.... multiplication factor.... the path to prosperity is specialisation. Look if we just all specialise enough, we'll all be millionaires, OK?

Stop asking me to think about problems, I want to think about solutions.

[Robert Grant]

> Look if we just all specialise enough, we'll all be millionaires, OK?

Compared to what life was like when Adam Smith was alive our standard of living is higher than his equivalent of millionaires.

[Dan 55]

If your aim is to get bought out by FAAMG and you get VC funding until you get bought out, why bother charging for anything?

[Whoopsie]

Podjarny repeating the tired old nonsense from The Big Boys like Google - "waah, there's a skills shortage!".

There absolutely is not a skills shortage in cyber security. At all.

What there is is a abundance of companies who don't want to pay for in-demand skills, who don't want to train their people, who have ridiculous job description demands and broken hiring processes, and enforce short sighted and medieval working practices.

A quick search on LinkedIn just now shows 3 positions advertising someone with 3 years cyber security experience who also has a CISSP.

The "lack of skills" is not the problem here, and never was.

[nautica]

"Oh, you've SEEN Windows run? No need to come in to pick up the paycheck; we'll send it..."

"...any solution predicated on devs 'becoming security experts is doomed" "

As is the industry-standard practice of taking anyone who types on a keyboard and stares at a screen, and be-knighting them as a "dev".

[Yet Another Anonymous coward]

Re: "Oh, you've SEEN Windows run? No need to come in to pick up the paycheck; we'll send it..."

But all the ballet dancers are going to become cyber security experts