What Are the Best Practices for Writing Inclusive Job Descriptions in Cybersecurity Hiring?

Write job postings using gender-neutral language, focus on essential skills, and remove biased requirements. Emphasize inclusion, transparent flexibility, growth opportunities, and standard job titles. Avoid jargon, encourage diverse applicants, and regularly review for bias.

Write job postings using gender-neutral language, focus on essential skills, and remove biased requirements. Emphasize inclusion, transparent flexibility, growth opportunities, and standard job titles. Avoid jargon, encourage diverse applicants, and regularly review for bias.

Empowered by Artificial Intelligence and the women in tech community.
Like this article?
Contribute to three or more articles across any domain to qualify for the Contributor badge. Please check back tomorrow for updates on your progress.

Use Gender-Neutral Language

Avoid gendered pronouns or adjectives (like “rockstar” or “ninja”) that may skew the job posting towards one gender. Replace terms like “he/she” with “they,” and ensure that responsibilities and requirements are written in a way that feels welcoming to all.

Add your insights

Focus on Essential Skills Only

List only the truly necessary qualifications and skills for the role. Avoid creating a long list of “nice-to-have” requirements, as this can discourage candidates from historically underrepresented groups who may be less likely to apply if they don’t meet every criterion.

Add your insights

Highlight Your Commitment to Inclusion

Include a statement detailing your organization’s commitment to diversity, equity, and inclusion. This can reassure candidates from marginalized communities that they will be valued and supported in your workplace.

Add your insights

Avoid Jargon and Unnecessary Technical Terms

Write clearly and limit the use of cybersecurity-specific acronyms and jargon where possible. Explaining required skills plainly ensures that those with nontraditional backgrounds and early-career candidates don’t self-select out.

Add your insights

Remove Biased Requirements

Eliminate unnecessary degree requirements or years of experience if practical, as these can disproportionately exclude otherwise qualified candidates from underrepresented backgrounds in cybersecurity.

Add your insights

Use Inclusive Job Titles

Stick to standard, descriptive job titles like “Cybersecurity Analyst” instead of potentially off-putting or nonstandard ones. Avoid titles or terms that are associated with certain age groups, cultures, or subcultures.

Add your insights

Emphasize Growth and Learning Opportunities

Describe support for training, mentorship, and professional development. Let candidates know you’re open to helping them grow, which appeals to those who may not meet every listed requirement but are eager to learn.

Add your insights

Be Transparent About Flexibility

Mention flexible working arrangements (remote options, flexible hours, etc.), as these are important to many candidates with varying life circumstances and can help attract a more diverse talent pool.

Add your insights

Invite Applicants from All Backgrounds

Explicitly encourage candidates from nontraditional or historically excluded backgrounds to apply. Phrases like “We especially welcome applications from…” or “We value a range of experiences…” can make a big difference.

Add your insights

Conduct Bias Reviews and Testing

Regularly review job descriptions with tools or panels to catch biased language or requirements. Gather feedback from current diverse employees and/or use software solutions to help ensure postings are as inclusive as possible.

Add your insights

What else to take into account

This section is for sharing any additional examples, stories, or insights that do not fit into previous sections. Is there anything else you'd like to add?

Add your insights

Interested in sharing your knowledge ?

Learn more about how to contribute.

Sponsor this category.