No More Cybersecurity Layoffs for the US Government?

Cybersecurity experts warn that a weakened federal cyber workforce could expose U.S. infrastructure, military operations, and classified information to increased risks from state-sponsored hacking groups, ransomware gangs, and cybercriminal organizations looking to exploit security gaps.

In an internal email, Greg Barbaccia, the U.S. federal chief information officer, advised federal agencies to avoid cutting cybersecurity staff, emphasizing that their work is directly tied to national security. The guidance was issued amid growing concerns that mass layoffs—aimed at meeting new cost-cutting directives—could undermine the government’s ability to defend against cyberattacks, particularly from foreign adversaries.

Barbaccia declares “We believe cybersecurity is national security, and we encourage Department-level Chief Information Officers to consider this when reviewing their organizations.”

The warning comes at a time when cyberattacks against government entities have surged, with agencies already struggling to recruit and retain top cybersecurity talent. In recent years, the U.S. has been targeted by various digital threats. Nation-state actors from China, Russia, Iran, and North Korea have ramped up espionage, infrastructure sabotage, and intelligence-gathering through sophisticated cyber operations. The 2020 SolarWinds attack, attributed to Russian intelligence, compromised multiple federal agencies, demonstrating the scale of vulnerability.

The Cybersecurity and Infrastructure Security Agency (CISA) has already seen over 130 cybersecurity positions eliminated, with more expected. Meanwhile, the Department of Government Efficiency (DOGE)—tasked with implementing budget cuts—has been scrutinized for handling sensitive federal data.

While defense and intelligence agencies generally recognize cybersecurity as a core national security function, some government departments—especially those outside the military and intelligence community—might categorize cybersecurity personnel under general IT staffing, making them more vulnerable to layoffs. Barbaccia’s email suggests that agencies should ensure cybersecurity roles remain classified as essential national security positions, protecting them from budget-related workforce reductions.

Ob Joyce, former cybersecurity director at the National Security Agency (NSA), warned that downsizing cybersecurity personnel could significantly weaken national security efforts, particularly in detecting and mitigating cyber threats from foreign adversaries.

Adding to concerns, cybersecurity analysts have cautioned that DOGE’s broad access to federal networks could pose security risks, especially at a time when cyberattacks targeting critical infrastructure are on the rise. One of the most alarming cases has emerged from the Social Security Administration (SSA), where DOGE reportedly gained access to sensitive data despite strong objections from senior officials. In a legal filing, a former SSA employee warned that the agency’s operational disruptions could lead to increased risks of data exposure and unauthorized access to personal records.

With more cybersecurity jobs at risk and growing fears over weakened digital defenses, the debate over budget cuts versus national security is boiling. Critics argue that short-term savings could lead to long-term vulnerabilities—leaving the U.S. government exposed to cyber threats at a time when adversaries are becoming more aggressive.