India has nearly 39,000 unfilled cybersecurity positions, and the situation is only getting worse. The maximum shortage is in areas like IoT (internet of things), blockchain, and crypto security â where there are nearly twice as many job openings as there are people to fill them, according to HR firm Careernet's latest report, India's Cybersecurity Talent Outlook 2026. The report looked at talent across 14 areas of cybersecurity. India has close to 3 lakh cybersecurity professionals, roughly 5% of the world's total. After IoT and blockchain, the biggest gaps are in application and data security, and protection against future threats like quantum computing attacks. One in five cybersecurity professionals switches jobs every year. But this isn't growing the talent pool, it's just the same people moving from one company to another, the report said. "Security is becoming far more specialised. And specialised talent takes time to build. That's why attrition is so high â the industry grows at around 9â10%, but people are leaving their jobs at nearly double that rate, 19%," Anshuman Das, CEO of Careernet, told ET. He added that most open roles require mid-to-senior-level experience. IT companies employ the largest chunk of cybersecurity talent, which makes other industries heavily dependent on them. Banks and financial firms pull professionals from other sectors. Telecom companies are hiring fast but can't find enough people. Manufacturing barely has any dedicated security staff at all. In fields like security operations, the report said that IT companies have around 60% of the talent, followed by telecom at 15%, product companies at 9%, manufacturing 5%, and banking and finance just 4%. This talent crunch comes at a time when cyberattacks in India are increasing rapidly. CERT-In â the government body that tracks and responds to cyber incidents â recorded over 2 million incidents in