How many cybersecurity jobs are open in Germany?
In short
In August 2026 there were 4,424 open cybersecurity roles across 1,609 German companies, an average of 2.7 roles per hiring employer. Berlin leads, but Frankfurt matters more than its size suggests because banking concentrates regulated security work there. Every figure comes from job advertisements the companies published themselves.
On this page
The numbers
Collected from public job advertisements in August 2026.
| Measure | Count |
|---|---|
| Open cybersecurity roles | 4,424 |
| Companies hiring | 1,609 |
| Roles per hiring company | 2.7 |
| Snapshot | August 2026 |
The ratio is the number that matters. At 2.7 roles per employer, most German employers are replacing or adding individuals rather than standing up whole teams, so speed and shortlist quality decide who wins.
Where the roles are
Cybersecurity hiring concentrates far more tightly than most functions, because it follows financial and government clusters rather than population.
| City | Open roles |
|---|---|
| Berlin | 231 |
| München | 179 |
| Hamburg | 143 |
| Frankfurt am Main | 124 |
| Köln | 106 |
Berlin leads, but Frankfurt matters more than its size suggests because banking concentrates regulated security work there.
What drives hiring here
German demand is driven hardest by regulation. BaFin supervision of financial institutions and the KRITIS rules for critical infrastructure both create roles that must be filled rather than roles a company would like to fill.
Across Europe the same three forces apply. NIS2 and DORA turned security into a board obligation rather than a technical concern. Public incidents release budget faster than any vendor pitch. And cloud migration creates roles that did not previously exist.
Why these roles stay open
The qualified pool is small and is not growing at the rate demand is. Employers compete internationally for the same people, so a local salary competes with a foreign one.
Clearance and certification narrow the field further in defence and finance. And many job specifications ask for a combination of skills few individuals actually hold, which is a specification problem rather than a market one.
For a recruiter that last point is the opening. A role open three months usually has a describable reason, and naming it beats any pitch.
What this dataset is not
These are public postings on one date. Roles filled through agencies, internal transfer or referral never appear, and employers recruiting only through their own careers pages are under-represented.
The classification is broad, covering IT security, information security and cyber defence rather than one job title. Treat the totals as a floor.
Using it as a recruiter
Start with where you can actually supply candidates rather than with the biggest number. Then use the roles-per-company ratio to decide whether you are selling single placements or a team build, because those are different conversations with different buyers.
We build the company-level list behind these counts for clients entering a market, filtered to the regions and seniority they can serve.
Frequently asked
How many cybersecurity jobs are open in Germany?
Which German city has the most cybersecurity vacancies?
Why do cybersecurity roles stay open so long?
Is this a complete count of demand?
Want the accounts behind these numbers?
Book a short strategy call. We will show you which employers in your region and role family are hiring right now, and what we would write to them.
Book a strategy call