Who is buying, hiring, and cutting in cybersecurity
The industry moves that reshape security careers - acquisitions, executive hires, layoffs, and funding rounds - paired with the one thing a news site cannot show you: the live hiring picture at the companies involved, straight from the employers' own ATS feeds we index hourly.
Sourcing note: every item links its primary source (company newsroom, filing, or a major outlet) and shows the date we verified it. If we could not verify a story, it is not on this page.
Rapid7 cuts about 300 jobs (12% of workforce) alongside Q2 earnings
Rapid7 announced with its Q2 earnings that it is cutting roughly 300 jobs, about 12% of its workforce, at a cost of $11-12 million (mostly severance). The company forecast 2026 revenue declining from $860 million to as little as $837 million, citing customers delaying moves to its newer offerings and pressure from AI-integrated competitors. The cut follows CEO Wael Mohamed replacing longtime chief Corey Thomas in June, and comes less than a month after the company had described a much smaller 21-person reduction.
The hiring angle: A 300-person cut at a vuln-management and SIEM stalwart puts experienced detection, VM, and MDR practitioners on the market at once. Employers hiring in those specializations should expect a short window of unusually deep candidate pools.
Horizon3 raises $250M Series E at a $2B+ valuation
Autonomous pentesting company Horizon3 (NodeZero) raised a $250 million Series E co-led by NightDragon and NEA at a valuation above $2 billion, roughly tripling its $650 million Series D valuation in about a year. The company reports over 7,000 customers and 120% year-over-year ARR growth, and says the capital goes to go-to-market expansion (including MSP and telco channels, plus entry into Singapore and Australia) and R&D on autonomous agents.
The hiring angle: A tripled valuation plus stated GTM and international expansion is the classic precursor to a hiring wave, especially in sales engineering and offensive-security-adjacent roles. Horizon3.ai is already one of the larger offensive-security employers we track.
Okta signs definitive agreement to acquire Permiso Security
Okta agreed to acquire Permiso Security, a Palo Alto based identity threat detection and response (ITDR) platform founded by former FireEye executives, to extend threat detection across human, non-human, and AI agent identities. Okta did not disclose terms; TechCrunch reported a price of about $200 million, nearly all cash. The deal is expected to close in Q3 of Okta fiscal 2027 (August through October 2026).
The hiring angle: Identity threat detection is being pulled into the big identity platforms, which usually means ITDR and detection engineering skills get valued inside IAM teams, not just SOCs. Watch Okta requisitions for detection-flavored identity roles as the integration lands.
Cyera agrees to acquire Oasis Security in a ~$1B deal
Data security company Cyera (recently valued at $12 billion) agreed to acquire Oasis Security, a non-human identity security startup founded in 2022 that had raised about $195 million, for approximately $1 billion, mostly in cash with the remainder in Cyera shares. Cyera plans to integrate Oasis into a unified identity and data security platform aimed at securing proliferating AI agents. It is Cyera’s third acquisition of 2026.
The hiring angle: Two companies we track merging: non-human identity plus DSPM is becoming one buyer category, and candidates with both identity and data-security depth just got more valuable. Consolidation like this also tends to shake loose senior talent post-close.
Human risk management vendor Fable Security named Jacob Berry its Chief Information Security Officer. Berry brings 18 years across incident response, cyber operations, governance, and compliance, with prior roles including CISO at Jit and security leadership at Clumio, Cybereason, and Secureworks. CEO Nicole Jiang said Berry shares the company’s belief that secure behavior management is one of the most critical problems in security.
The hiring angle: A first dedicated CISO at a fast-growing startup usually precedes a security team build-out beneath them. Fable Security is in our tracked registry, so new GRC and security engineering requisitions there will surface on the board as they open.
Accenture takes a majority stake in Dragos and acquires runZero and NetRise (~$4.175B)
Accenture agreed to acquire a majority stake in OT security leader Dragos and 100% of runZero and NetRise at a combined enterprise value of approximately $4.175 billion, building an end-to-end OT and critical-infrastructure security platform. The three companies generate roughly $208 million in combined ARR as of June 2026, up 53% year over year. The transactions are expected to close in August or September 2026.
The hiring angle: The biggest OT security deal of 2026 pulls two of our tracked employers into a consulting giant. OT/ICS talent is chronically scarce; Accenture funding Dragos growth is bullish for OT security hiring, while integration periods often prompt senior ICs to look around.
Cloudflare lays off 1,100+ employees in AI-driven restructuring
Cloudflare cut more than 1,100 employees worldwide in what leadership framed as restructuring for the "agentic AI era" rather than cost-cutting, citing a 600% increase in internal AI usage over three months. Cuts touched HR, marketing, finance, and engineering. Departing employees receive severance through the end of 2026, continued healthcare, and accelerated equity vesting; the stock fell over 20% despite a Q1 beat.
The hiring angle: The clearest example yet of the AI composition shift we track: fewer generalist roles, sustained demand for senior and AI-adjacent security engineering. A large cohort of Cloudflare-caliber engineers hitting the market is a real opportunity for mid-size security vendors hiring now.
Axonius CEO Dean Sysman steps down; 40 roles cut in restructuring
Axonius co-founder and CEO Dean Sysman stepped down, moving to executive chairman, with president Joe Diamond appointed interim CEO. The company simultaneously cut about 40 employees (roughly 4% of staff, mostly marketing and sales) in what it called a structural adjustment for operational discipline as it matures toward an IPO. Sysman cited a serious medical situation affecting his newborn son.
The hiring angle: Leadership churn plus repeated GTM-side cuts (100 roles in an earlier round, 40 now) signals a company optimizing for efficiency metrics ahead of an IPO or sale. For candidates that means slower net hiring in sales and marketing but continued engineering demand; our live count below shows where Axonius stands today.
Methodology: items are added only after checking a primary or top-tier source; the source link and verification date are shown on every item. Live open-role counts come from the employer's own ATS feed, refreshed hourly, and may differ from figures quoted in coverage.
📬 Industry moves change who is hiring. Get the new security roles emailed weekly instead of checking back.
Get weekly alerts for new cybersecurity jobs each week: