The UK cyber security workforce is growing, but the pace tells a story. There are approximately 143,000 individuals in the UK cyber security workforce, with growth moderately accelerating from 2% in 2022 to 5% in 2024 the GOV.UK Cyber security skills in the UK labour market 2025 report. That acceleration is welcome, yet it still leaves employers competing hard for a limited pool of experienced people.
Demand remains sharp. A comparison with the Cyber Security Skills 2024 report showed 70% of cyber firms reported at least one hard-to-fill vacancy the GOV.UK AI Labour Market Survey 2025. When most firms in a sector are struggling to fill roles, every new skill requirement adds pressure. Prompt injection awareness is one of those new requirements, and it is arriving quickly.
Prompt injection, in plain terms, is when someone hides malicious instructions inside the text an AI system reads, tricking it into doing something it should not. As defence-and-security teams adopt AI tools for triage, monitoring and analysis, understanding this attack surface moves from nice-to-have to expected.
The roles most affected are the ones closest to AI deployment: security analysts, threat intelligence specialists, and the engineers building and defending AI-assisted tooling. These are the same roles already in short supply, given that 70% of cyber firms reported at least one hard-to-fill vacancy the GOV.UK AI Labour Market Survey 2025.
The dynamic is a widening skill. A workforce of roughly 143,000 people, growing at 5% in 2024 the GOV.UK Cyber security skills in the UK labour market 2025 report, cannot retrain overnight. So employers face a choice: look for people who already grasp how AI systems can be manipulated, or hire for aptitude and build the skill in-house. Most will do both.
This is where the opportunity sits. Prompt injection awareness is still new enough that few candidates list it explicitly, so the people who understand it are often found by their adjacent experience in AI safety, secure development or red teaming, rather than by a single keyword on a CV.
Start by writing the role around capability, not labels. Rather than asking for a buzzword, describe the problem: defending AI-assisted systems, testing how models respond to untrusted inputs, and spotting manipulation before it causes harm. That framing widens your pool and reaches people whose experience is real but worded differently.
Move quickly, because competition is fierce when 70% of cyber firms reported at least one hard-to-fill vacancy the GOV.UK AI Labour Market Survey 2025. A slow process loses good people. Keep assessment practical: short exercises on recognising and mitigating injection attempts tell you more than a long list of certifications.
Finally, plan for growth rather than the perfect hire. With the workforce expanding at 5% a year the GOV.UK Cyber security skills in the UK labour market 2025 report, the strongest teams hire curious people and invest in training them on prompt injection and the wider AI threat landscape.
We search 15 million candidates to find people with the security and AI-adjacent experience these roles need, including the ones whose skills are worded differently from your job spec. Our recruitment agent manages recruitment end to end for 8% on a successful hire, with no monthly fee and no upfront cost. Ready to hire for prompt injection awareness? Talk to us today.
