Cybersecurity
Hire cybersecurity analysts and engineers
Attackers now use AI to write better phishing and find weak spots faster, and regulators expect companies to prove they're protected. BLS projects information security analyst jobs to grow 21% by 2035. Madrone places security analysts, engineers and identity specialists for MSPs, banks, health systems, manufacturers and other companies that hire directly.
How the job changed
| Role | Then | Now |
|---|---|---|
| Security analyst | Watched for viruses | Catches attacks written by AI and explains the risk in plain English |
| Identity and access engineer | Created user accounts | Decides who, and which AI tools, can see what |
| Security engineer | Installed the firewall | Builds security into cloud and AI projects from the start |
| Compliance analyst | Filled in the audit binder | Proves controls work, continuously, to examiners and clients |
Roles we place
- Security analysts (SOC, Tier 1 to 3)
- Security engineers
- Identity and access management engineers (Entra ID, Okta)
- Vulnerability management and penetration testers
- GRC and compliance analysts
- OT and industrial security specialists
Typical pay
| Role | Pay | Source |
|---|---|---|
| Information security analysts | Median $129,180 a year | BLS |
National figures. Pay varies by location and seniority; a Role Review gives you the number for your market.
Contract or hire?
Contract the remediation after an audit or exam finding. Hire if the finding points to a gap that will come back every year.
How we find them
We don't post jobs. We map who is doing this work today, reach out with a message written for each person, and draw on a database we've built since 2007. A recruiter screens every candidate and verifies identity and work history before you see them. Most roles are filled in one to three weeks.
Sources: BLS employment projections, Aug 2026.
Questions
Do your candidates clear background checks?
We run background checks to the standard your compliance team sets.
Do we need a security hire or a managed security provider?
A provider can watch alerts around the clock. Someone still needs to own the decisions inside your company. We'll tell you which gap you have.