AI in Cybersecurity Risks Creating Skills Gap MSPs Seek to Fill

The automation paradox in cybersecurity

Managed service providers turning to artificial intelligence to solve their cybersecurity staffing challenges may be creating a new problem: eliminating the very roles that train the next generation of security professionals.

While AI excels at handling repetitive Security Operations Center tasks and help desk functions, this efficiency gain comes with a hidden cost. Junior analysts have traditionally built expertise by reviewing hundreds of security alerts, learning to distinguish genuine threats from false positives through hands-on experience. When AI absorbs these routine tasks, that foundational training ground disappears.

Yulia Plugatyreva, a Senior SOX and IT Auditor, warns that over-reliance on automation could weaken the long-term pipeline of experienced cybersecurity professionals, according to coverage first reported by Smarter MSP.

Why it matters

The cybersecurity industry faces a structural challenge: using AI to address today's talent shortage may amplify tomorrow's skills gap. Organizations that automate away entry-level work without redesigning career development paths risk finding themselves unable to cultivate the senior expertise they'll need as threats evolve.

Redesigning roles for an AI-assisted future

Rather than eliminating junior positions entirely, experts advocate for reimagining them. Entry-level roles should focus on reviewing AI-generated decisions, investigating exceptions the system flags, and developing critical thinking capabilities that machines cannot replicate.

Jose Lejin P J, a Principal Member of Technical Staff at Salesforce, recommends hiring candidates with adjacent IT experience from help desk or system administration roles. These professionals bring technical foundations that can be developed through structured mentorship and dedicated training time.

Where humans remain essential

AI delivers the most value when enriching security alerts, gathering contextual information, and drafting initial incident responses. However, human judgment remains irreplaceable for complex decision-making, proactive threat hunting, and client communication.

The technology should augment human capabilities rather than replace them entirely. Security operations require nuanced understanding of business context, risk tolerance, and threat actor behavior—areas where experienced professionals add value that current AI systems cannot match.

Building expertise through intentional development

The path forward requires MSPs to invest deliberately in talent development alongside their AI implementations. This means creating clear career progression frameworks, establishing mentorship programs, and allocating time for junior staff to develop expertise beyond monitoring automated systems.

Organizations that view AI purely as a cost-reduction tool may achieve short-term efficiency gains while undermining their long-term capability to deliver sophisticated security services. The most successful approach balances automation's benefits with sustained investment in human skill development.

These findings were originally reported by Smarter MSP.