1960s–1980s
Access control and mainframes
Security began as controlling access to expensive shared machines. Formal models and military assurance criteria mattered more than consumer threats.
Cybersecurity became a profession only after computers became systems worth attacking at scale. Its practitioners inherited ideas from cryptography, military intelligence, systems administration and policing, then built a discipline around a simple observation: every useful connection also creates a route that can be abused.
The history is not a straight march toward safety. Each new layer—personal computers, the web, cloud services and AI—has widened access and created new failure modes. Security specialists are paid to make those trade-offs visible before an attacker makes them painful.
Where it began
1960s–1970sUnited States
Early time-sharing systems forced researchers to ask who should be allowed to access a shared computer and how that access could be controlled. The US Department of Defense's 1970s work on computer-security evaluation, later associated with the Orange Book, helped turn access control from an administrator's preference into an engineering and assurance problem.
Timeline
1970sComputer security criteria emerge
US defense research begins formal work on trusted systems and access controls for shared computing.
1983WarGames makes hacking visible
The film popularises the image of a teenager reaching military systems through a modem, shaping public discussion of computer intrusion.
1988Morris Worm spreads
Robert Tappan Morris's internet worm disrupts a substantial part of the early internet and helps spur the CERT Coordination Center.
1991PGP brings public-key encryption to users
Phil Zimmermann releases Pretty Good Privacy, making strong encryption a public political and technical issue.
1995First major public web vulnerabilities
The commercial web turns application flaws, weak authentication and insecure payment handling into mainstream business risks.
2001Code Red and Nimda hit servers
Fast-spreading worms show why patching and internet-facing asset inventories matter operationally.
2007Estonia suffers major cyber disruption
Large denial-of-service attacks on Estonian institutions make national cyber resilience a visible policy concern.
2013Target breach exposes supplier risk
Attackers use a vendor connection in the widely reported US retail breach, focusing attention on third parties.
2020SolarWinds compromise is disclosed
A supply-chain compromise of software updates demonstrates how trusted distribution paths can become attack channels.
2023–2024AI and regulation reshape security
Generative AI accelerates both phishing and analyst workflows while rules such as the EU's NIS2 raise governance expectations.
The eras
1988–1999
Viruses, worms and antivirus
The Morris Worm and mass-market personal computing created a commercial market for antivirus, incident coordination and patching.
2000–2009
Web attacks and compliance
Online commerce made web applications, payment data and regulatory controls central to the profession.
2010–2019
Cloud, identity and nation-state threats
Cloud services shifted perimeters while major breaches and espionage campaigns made identity and supplier risk unavoidable.
2020–present
Resilience in an automated contest
Ransomware, supply-chain compromise and AI-assisted fraud reward teams that can detect, contain and recover quickly.
What this job replaced
Neighbouring trades that no longer exist — absorbed, automated or regulated away.
Computer room key custodian
1960s–1980sWhen one mainframe occupied a locked room, physical keys and sign-in sheets could control most access. Distributed networks made that narrow gatekeeping role insufficient; identity administration and endpoint security replaced it.
Dial-up war-dialing operator
1980s–1990sSecurity teams once dialed blocks of telephone numbers to find modems connected to corporate systems. Internet-facing asset discovery and cloud inventories displaced the telephone-based practice.
Standalone antivirus installer
1990s–2000sTechnicians manually installed signature updates on individual PCs. Central endpoint-management and cloud-delivered protection absorbed the work into broader security operations.
The profession repeatedly grows when a technology becomes cheap enough to connect everywhere. Its central lesson is not that every new system is unsafe, but that safety has to be designed, operated and rehearsed.
Cybersecurity specialists now work at the point where technical detail meets institutional responsibility: a vulnerability only becomes manageable when someone owns the decision to fix, accept or contain it.
Similar professions
Closest neighbours on the six-score profile — not the same field only.
🧫
Clinical Data Scientist
Uses clinical, trial and health-system data to generate reliable evidence for safer care, research and operational decisions.
AI-resistant 68 📦MLOps Engineer
Builds the systems that train, deploy, monitor and govern machine-learning models in production.
AI-resistant 54 🦾Robotics Engineer
Designs the machines that sense, decide and act in the physical world, where the hard problem was never intelligence but the world itself.
AI-resistant 65 🌿Sustainability Manager
Leads the strategy, measurement and reporting that helps organizations reduce environmental and social harm while meeting business obligations.
AI-resistant 66 🌬️Renewable Energy Engineer
Designs, builds and improves wind, solar, storage and grid systems that turn renewable resources into dependable electricity.
AI-resistant 72 🔌Semiconductor Engineer
Designs and fabricates the transistors inside every computer, phone and weapon, using machines precise enough that only a few factories on Earth can run them.
AI-resistant 60Continue exploring
Keep exploring
More in Engineering & Technology
💻
Software Engineer
Writes, tests and maintains the code that runs modern life — and is one of the first professions watching AI automate its own daily work.
AI-resistant 35 🤖AI Researcher
Designs and tests the algorithms behind machine intelligence, in a field now racing to automate a growing share of its own research process.
AI-resistant 50 🛰️Aerospace Engineer
Designs, analyzes and certifies the aircraft, rockets and spacecraft that leave the ground, working to safety margins that leave no room for guessing.
AI-resistant 74 🌉Civil Engineer
The profession that turns rivers, rock and gravity into bridges, roads and clean water — civilization's quiet load-bearing trade since Imhotep.
AI-resistant 72 🔌Semiconductor Engineer
Designs and fabricates the transistors inside every computer, phone and weapon, using machines precise enough that only a few factories on Earth can run them.
AI-resistant 60 🦾Robotics Engineer
Designs the machines that sense, decide and act in the physical world, where the hard problem was never intelligence but the world itself.
AI-resistant 65 📦MLOps Engineer
Builds the systems that train, deploy, monitor and govern machine-learning models in production.
AI-resistant 54 🌬️Renewable Energy Engineer
Designs, builds and improves wind, solar, storage and grid systems that turn renewable resources into dependable electricity.
AI-resistant 72