CISA Navigates Job Cuts and Demoralized Workforce Under Trump

The federal government's primary cybersecurity agency is in the middle of an unprecedented workforce crisis. The Cybersecurity and Infrastructure Security Agency (CISA), which is responsible for protecting the nation's critical infrastructure from cyberattacks and securing election systems, has seen its workforce shrink by more than one-third in less than a year. According to The New York Times, staffing levels dropped from approximately 3,400 employees at the start of fiscal year 2025 to roughly 2,400 by December, driven by a combination of layoffs, voluntary buyouts, and early retirements. For federal workers and cybersecurity professionals watching from the sidelines, the implications go far beyond one agency. At Metaintro, we track workforce shifts like these because they ripple across industries, reshape hiring pipelines, and redefine what career stability looks like for government employees and private sector workers alike.

How Many Jobs Has CISA Lost?

The numbers paint a stark picture. CISA entered fiscal year 2025 with roughly 3,400 employees spread across its cybersecurity, infrastructure security, and emergency communications divisions. By December 2025, that number had fallen to approximately 2,400, a reduction of nearly 1,000 workers representing more than 29 percent of the total workforce. Budget documents reviewed by multiple news outlets confirm the agency's authorized staffing level for fiscal year 2026 stands at just 3,292 full-time positions, down from the operational high, with only 2,324 of those positions currently filled.

The reductions did not come all at once. Some employees were laid off as part of broader federal workforce restructuring efforts. Others accepted voluntary separation incentives, commonly known as buyouts, which typically offer lump-sum payments in exchange for resignation. A significant number opted for early retirement, taking advantage of federal early-out provisions that allow employees to retire with reduced benefits before reaching their normal retirement age. According to former senior officials who spoke with The New York Times, many of these departures were not planned. Employees who had intended to serve for several more years accelerated their timelines due to mounting uncertainty about the agency's direction, leadership vacuum, and shifting priorities under the current administration.

The scale of these cuts is particularly notable when compared to other federal agencies that have faced workforce reductions. While departments like the Department of Education and the Environmental Protection Agency have also seen significant staffing changes, CISA's one-third reduction stands out because of the specialized nature of its workforce. Cybersecurity analysts, incident responders, vulnerability researchers, and election security specialists are not easily replaced, and the institutional knowledge walking out the door with each departure cannot be quickly rebuilt.

Which Programs Were Cut and What Does It Mean?

The workforce reductions are not happening in a vacuum. They are directly tied to program eliminations and budget cuts that total more than $84 million in spending reductions. The two most significant cuts target programs that had become central to CISA's mission over the past several years.

The Election Security Program has been completely eliminated. This program employed 14 staff members and had an annual budget of approximately $39.6 million. Its mission was to work with state and local election officials to secure voting infrastructure against cyber threats, conduct vulnerability assessments of election systems, and provide incident response support during election cycles. The program gained prominence after the 2016 and 2020 elections, when concerns about foreign interference in American elections reached fever pitch. With midterm elections approaching in 2026, the elimination of this program leaves a significant gap in the nation's election security posture and removes 14 specialized positions from the federal cybersecurity workforce.

The Cyber Defense Education and Training program suffered a $45 million budget cut. This initiative was designed to build the next generation of cybersecurity professionals through partnerships with universities, community colleges, and training organizations. It funded scholarships, curriculum development, and hands-on training programs that served as a pipeline for future federal cybersecurity employees. The reduction in this program's funding has immediate implications for the cybersecurity talent pipeline. Fewer training opportunities mean fewer qualified candidates entering the field, which could exacerbate the existing cybersecurity skills shortage that the industry has been grappling with for years.

Beyond these two flagship cuts, reporting from Cybersecurity Dive and other outlets indicates that additional programs related to critical infrastructure protection, stakeholder engagement, and information sharing have also seen reduced funding and staffing. The cumulative effect is an agency that is being asked to do significantly more with significantly less at a time when cyber threats from nation-state actors, ransomware groups, and criminal organizations continue to escalate.

How Are Remaining Workers Coping?

The impact on the remaining 2,400 employees cannot be overstated. Former senior CISA officials told The New York Times that the changes have "dampened morale" across the agency, creating an atmosphere of uncertainty that makes daily operations more difficult. When a third of your colleagues disappear within months, the psychological toll on those who remain is profound. Survivors of workforce reductions frequently report increased workloads, heightened stress, decreased job satisfaction, and their own heightened desire to leave, a phenomenon organizational psychologists call "survivor's guilt" or "layoff survivor syndrome."

Compounding the morale problem is the leadership vacuum at the top of the agency. CISA has been operating without a Senate-confirmed director, which means the agency lacks the kind of stable, authoritative leadership that could reassure remaining staff, set a clear strategic direction, and advocate effectively for resources on Capitol Hill. Without a confirmed leader, decisions about priorities, staffing, and budget allocations can feel ad hoc and uncertain, further contributing to the sense of instability that drives additional departures.

The practical consequences extend beyond morale. Former officials noted that the workforce reductions have made it "difficult to maintain private sector partnerships" that are essential to CISA's mission. Much of what CISA does involves coordinating with technology companies, critical infrastructure operators, and state and local governments to share threat intelligence and respond to cyber incidents. These relationships depend on consistent personnel who build trust over time. When experienced relationship managers and technical liaisons leave, those partnerships do not simply transfer to new people. They often have to be rebuilt from scratch, creating gaps in the nation's collective cyber defense posture.

For the individual workers who remain, the day-to-day reality means absorbing the responsibilities of departed colleagues, often without additional compensation or formal acknowledgment of the expanded workload. Cybersecurity incident response, threat monitoring, vulnerability assessments, and stakeholder coordination do not diminish just because the workforce shrinks. If anything, the threat landscape continues to grow more complex, meaning fewer people are being asked to cover more ground at a time when the margin for error is razor thin.

What Does This Mean for Cybersecurity Careers?

The CISA workforce reduction creates a paradox in the cybersecurity job market. On one hand, nearly 1,000 experienced cybersecurity professionals are entering the job market, many of them with clearances, specialized skills, and years of experience defending critical infrastructure. On the other hand, the private sector has been hungry for cybersecurity talent for years and shows no signs of slowing down its hiring. According to CyberSeek, the United States currently has more than 500,000 unfilled cybersecurity positions, a number that has remained stubbornly high despite industry efforts to close the gap.

For departing CISA employees, the transition to the private sector could be relatively smooth, at least in terms of demand. Companies in the defense, financial services, healthcare, energy, and technology sectors all need people with exactly the kind of skills that CISA employees possess: incident response, threat intelligence, vulnerability management, risk assessment, and compliance expertise. Many of these roles offer significantly higher compensation than federal government positions, which have historically struggled to compete with private sector salaries for cybersecurity talent.

However, the transition is not without challenges. Federal cybersecurity work often involves classified or sensitive environments that do not have direct private sector equivalents. The pace, culture, and priorities of government work differ significantly from corporate cybersecurity operations. Some departing employees may find that their specialized knowledge of government systems and processes, while invaluable in the federal context, requires translation for private sector employers who operate in different regulatory environments and threat landscapes.

The longer-term concern is what happens to the cybersecurity talent pipeline. The $45 million cut to the Cyber Defense Education and Training program means fewer people entering the field at a time when demand is already outstripping supply. Universities and training programs that relied on CISA funding to develop cybersecurity curricula, offer scholarships, and run hands-on labs will need to find alternative funding sources or scale back their programs. This creates a compounding effect: fewer trainees today means fewer qualified professionals tomorrow, which means a wider skills gap and potentially higher salaries for those who do enter the field.

Should Federal Workers Be Concerned About Their Job Security?

The CISA cuts are part of a broader pattern of federal workforce reductions that should give every government employee reason to pay close attention to their agency's budget trajectory and political positioning. While federal jobs have historically been considered among the most stable in the American economy, the current environment has introduced a level of uncertainty that many career civil servants have never experienced. Agencies across the government have faced hiring freezes, reduction-in-force actions, and reorganizations that have changed the calculus around federal employment.

The lesson from CISA's experience is that even agencies with critical national security missions are not immune to political winds and budget pressures. Cybersecurity is widely recognized as one of the most important challenges facing the federal government, and yet the agency tasked with leading that mission has lost a third of its people. For federal workers in other agencies, this sends a clear signal: mission criticality alone does not guarantee workforce stability.

That said, there are practical steps federal workers can take to protect themselves. Maintaining an updated resume is essential, especially one that translates government experience into language the private sector understands. Building a professional network that extends beyond government is equally important, as many former federal employees find their next roles through industry connections rather than formal job postings. Investing in certifications and continuing education can also help, particularly in fields like cybersecurity where industry credentials such as CISSP, CISM, and CompTIA Security+ carry significant weight with private sector employers.

For workers who have already been affected by the CISA reductions, the federal government offers several transitional resources. The Office of Personnel Management provides career transition assistance, including priority placement programs for displaced federal employees. Some agencies offer retraining programs, and many former federal employees find that their security clearances are a valuable asset in the private sector job market, particularly with defense contractors and government technology firms.

What Are the Broader Implications for National Cybersecurity?

The workforce reductions at CISA have implications that extend well beyond the agency itself. CISA serves as the federal government's primary coordinator for cybersecurity across all civilian agencies, critical infrastructure sectors, and state and local governments. When the agency's capacity to fulfill that coordinating role diminishes, the effects cascade through the entire ecosystem of organizations that depend on CISA for threat intelligence, incident response support, and security guidance.

State and local governments are particularly vulnerable. Many smaller jurisdictions rely heavily on CISA for cybersecurity assessments, training, and incident response because they lack the budget and expertise to build robust cybersecurity programs on their own. With fewer CISA staff available to conduct these engagements, state and local agencies may find themselves more exposed to cyberattacks, ransomware incidents, and data breaches. This is especially concerning for election infrastructure, which is administered at the local level and has been a primary target for both domestic and foreign threat actors.

The private sector also feels the impact. Companies that operate critical infrastructure, including utilities, hospitals, financial institutions, and transportation networks, have come to rely on CISA's advisories, vulnerability alerts, and coordination during major cyber incidents. The SolarWinds breach, the Colonial Pipeline ransomware attack, and numerous other incidents demonstrated how essential CISA's role is in orchestrating cross-sector response. With a diminished workforce, the agency's ability to respond quickly and comprehensively to the next major incident is an open question that should concern every organization that depends on digital infrastructure.

For the job market, the ripple effects could be significant. As CISA scales back its training and education programs, the already-tight cybersecurity labor market could tighten further. Private sector employers who were already struggling to fill cybersecurity roles may find an even smaller pool of qualified candidates in the years ahead. At the same time, the influx of experienced former CISA employees into the job market represents a near-term opportunity for companies willing to recruit from the federal talent pool. Organizations that move quickly to hire these professionals will benefit from their deep expertise in threat intelligence, incident response, and government-level security operations.

People Also Asked

Q: What does CISA do and why does its workforce matter?

A: CISA is the federal agency responsible for protecting the nation's critical infrastructure from cyber and physical threats. Its workforce includes cybersecurity analysts, incident responders, vulnerability researchers, and election security specialists who coordinate defenses across government agencies, private companies, and state and local governments. When CISA loses a third of its staff, it directly reduces the nation's capacity to detect, prevent, and respond to cyberattacks that could affect everything from power grids and hospitals to election systems and financial networks.

Q: Are CISA employees who were laid off eligible for unemployment benefits?

A: Federal employees who are involuntarily separated, including through reduction-in-force actions, are generally eligible for unemployment compensation for federal employees, known as UCFE. The specific benefits and duration vary by state, as federal unemployment claims are processed through state unemployment offices. Employees who accepted voluntary buyouts or early retirement are typically not eligible for unemployment benefits since their separation was voluntary, but they may receive lump-sum separation payments and retain certain retirement benefits depending on their years of service.

Q: Is the private sector hiring cybersecurity professionals right now?

A: Yes, the private sector cybersecurity job market remains extremely strong. The United States has more than 500,000 unfilled cybersecurity positions according to CyberSeek, and demand continues to grow as organizations face increasing threats from ransomware, nation-state actors, and AI-powered attacks. Former CISA employees with government experience, security clearances, and specialized skills in areas like incident response, threat intelligence, and critical infrastructure protection are particularly attractive to defense contractors, financial services firms, healthcare organizations, and technology companies.

Looking for your next opportunity? Whether you are a federal worker affected by the CISA reductions or a cybersecurity professional exploring your options, Metaintro delivers the latest job market intelligence, career resources, and hiring news straight to your inbox. Stay informed about workforce shifts, emerging opportunities, and the skills employers are looking for right now. Sign up today and take the next step in your career.