Cybersecurity does not have a staffing problem; it has a staffing crappy jobs problem. There are ample people out there who want to pontificate about all their grand theories of security. Where there are shortages is in security operations.
...
The cybersecurity industry is top-heavy with self-important thought leaders who are unable or unwilling to get their hands dirty with the operational realities of security. Everybody has some grand theory of security which invariably boils down to “defense in depth.” Open up the conference sessions for RSA, BlackHat or any big conference. What do you see? Same tired old presentations ... You have to dig deep into the technical sessions to find real educational content, such as how to automate security, clean up after an attack, and make your SIEM do what the vendor promised it would do.