CISA Seeks 600 Cybersecurity Hires Amid 50% Staffing Shortfall

For cybersecurity leaders and practitioners, CISA’s staffing crisis has direct implications for threat intelligence sharing, incident response, and critical infrastructure protection. The agency’s reduced capacity means fewer resources for joint cyber defense operations, delayed guidance on emerging threats, and gaps in election security oversight. The planned hiring of 600 specialists signals a renewed federal commitment, but attracting top talent in a competitive market remains a challenge.

The Department of Homeland Security (DHS) has publicly acknowledged that the Cybersecurity and Infrastructure Security Agency (CISA) is facing a severe personnel crisis, with Secretary Markwayne Mullin telling Congress on June 25, 2026, that the agency is operating at roughly half its intended staffing levels. During his testimony, Mullin announced plans to hire approximately 600 cybersecurity professionals and install a new permanent director—a move he described as essential to rebuilding the agency’s reputation as the nation’s go-to source for cyber defense. This declaration comes after a year of leadership turnover, political headwinds, and a voluntary exodus of about 1,000 employees, or one-third of the workforce, during the second Trump administration.

“

For cybersecurity leaders and practitioners, CISA’s staffing crisis has direct implications for threat intelligence sharing, incident response, and critical infrastructure protection.

The immediate trigger for the hearing was the persistent vacancy at the top of CISA. After former acting director Madhu Gottumukkala ended his nine-month tenure in February 2026, the agency cycled through another acting leader, Nick Andersen, while the White House’s intended nominee, Sean Plankey, withdrew from consideration in April following clear signals that the Senate would not confirm him. Plankey later assumed a CEO role at a defense technology firm in May, leaving CISA without a Senate-confirmed leader for over a year. Mullin revealed that President Trump has already met with a new candidate, but no name has been released, and the confirmation process will likely take months, delaying the full rebuild.

The operational consequences of this hollowing out are profound. CISA is the linchpin of U.S. civilian cyber defense, responsible for protecting critical infrastructure, coordinating incident response, sharing threat intelligence, and assisting state and local governments. With a skeleton crew, its capacity to detect and counteract nation-state threats, ransomware attacks, and systemic vulnerabilities is compromised. Private-sector partners, who rely on CISA for timely alerts and collaborative defense measures, may face longer response times and reduced support during emergencies. The dismantling of the election security program earlier in the administration further eroded the agency’s mandate, even as cyber threats to electoral processes intensify globally.

Mullin’s statement that the agency “actually has the resources we need” suggests that funding is not the bottleneck—talent acquisition is. The 600 targeted hires are not just to fill seats but to bring in specialized expertise and preexisting relationships with state and local partners. This framing highlights a broader labor market reality: the U.S. cybersecurity talent gap remains acute, with over 500,000 unfilled positions nationwide according to industry estimates. CISA must compete with the private sector for a limited pool of skilled professionals, an uphill battle when the agency’s stability and mission are in question.