AI Resume Screening Barriers Push Young IT Talent Toward Cybercrime
Young specialists entering the Russian IT job market, particularly in information security and antifraud, face systemic barriers created by automated resume screening systems that prioritize candidates with existing commercial experience.
Entry-Level Challenges in IT Hiring
A recent graduate with a diploma, freelance background, and personal projects in antifraud systems applied to 50 positions on hh.ru and received only two interview calls, both ending in rejection. One explicit reason cited was insufficient experience. Despite widespread industry claims of talent shortages in cybersecurity, just 10-11% of IT vacancies in January 2026 were accessible to applicants without prior work history, according to SuperJob data reported by Expert magazine. Across the entire labor market the figure reached 37-38%.
Habr Careers statistics for the second half of 2025 further illustrate the imbalance: out of 10,820 published vacancies, only 870 targeted interns and juniors combined, while 6,463 positions were reserved exclusively for mid-level and senior specialists.
Link to Cybercrime Involvement
Russian judicial statistics from the Judicial Department at the Supreme Court of the Russian Federation show that 48.2% of individuals convicted for crimes involving computer information in 2022 were aged 18-24, with another 19.7% aged 25-29, totaling 67.9% under 30. Research on Article 272 of the Russian Criminal Code (unauthorized access to computer information) for 2018-2023 notes that young people facing unemployment and financial pressure become more susceptible to offers of quick illegal earnings, especially when they possess technical skills but hold only low-paid positions.
Foreign studies of active and former criminal hackers reveal that initial motivations often stem from technical curiosity and a desire for mastery rather than money. Several participants had originally sought legitimate cybersecurity roles but were blocked by educational or experience requirements. One individual who reported vulnerabilities received no response from affected organizations.
Effective Prevention Approaches
The National Crime Agency in the United Kingdom operates the Cyber Choices program, which redirects young people using technology illegally toward legal applications. Participants receive part-time work placements in cybersecurity companies. Evaluation of 1,041 referrals showed lower repeat offense rates compared to control groups.
Automated hiring systems, as examined in research by Harvard Business School and Accenture, frequently eliminate suitable candidates by enforcing rigid criteria such as minimum years of experience or exact keyword matches, even when applicants demonstrate relevant skills through personal projects or freelance work.
The core paradox remains: companies demand ready-made mid-level and senior professionals while offering few structured pathways for juniors to acquire the necessary commercial experience, potentially increasing the risk that technically skilled youth turn to illegal activities where formal credentials are not required.
Related articles
Peter Levashov Accused of FBI Collaboration and Running XSS Honeypot Forum After Kelihos Sentence
Russian spammer and botnet operator Petr Levashov, known online as Petr Severa, was arrested in Barcelona in 2017 and later pleaded guilty to running the Storm, Waledac and Kelihos botnets. He received a lenient sentence of under three years despite prosecutors seeking 14.5 years, which experts attribute to possible cooperation with the FBI. After release, Levashov remained in the United States while remaining wanted in Russia. Forum users bratva and stallman on XSS.mx and Exploit.in have been linked to Levashov through stylistic analysis and shared references to the Telegram channel Dark News admin nicknamed golub. Stallman, identified as the final administrator of the RAMP4u forum, openly purchased access to U.S. critical infrastructure including power grids, water systems and hospitals while moderators allegedly suppressed competing posts. Observers including researcher Olga Kuprina suggest these accounts operated under agreements with U.S. authorities, allowing forums to function as intelligence-gathering platforms rather than purely criminal marketplaces.
Russian Cybersecurity Market Set to Hit 455 Billion Rubles by 2026 as Talent Shortage Persists
MWS Cloud forecasts that the Russian information security market will grow 20.8 percent to reach 455.4 billion rubles in 2026. The largest segment will be software at 216.5 billion rubles, followed by services at 167 billion and hardware at 71.9 billion rubles. Demand is increasingly driven by sophisticated attacks, regulatory requirements and fines rather than import substitution alone. BI.ZONE offers a more conservative estimate of 10-15 percent annual growth. Managed security services such as monitoring, incident response and vulnerability management are leading the services segment because few organizations can maintain 24/7 in-house teams. Director Artem Gribkov of Angara MTDR estimates the personnel deficit at approximately 40 percent, especially at middle and senior levels.
Russian Internet Users Report Growing Access Restrictions as Certificate Revocations Affect 39 Percent of Respondents
A recent telephone survey conducted by Russian Field between September 23 and 30, 2026, among 1,600 participants representative by gender, age, federal districts, and settlement types shows that 39 percent of Russian internet users have noticed restrictions or complications when trying to access websites. When sites fail to open due to certificate problems, 26 percent of respondents said they would simply stop visiting the resource. The findings, published by Kod.ru, also indicate that 57 percent of users are aware that Russian websites may not load in certain browsers because of revoked foreign certificates. In response to certificate errors, 55 percent would switch browsers, 22 percent would install the required certificates, and 21 percent would try accessing the site from a mobile device. Younger users are more inclined to use VPNs or proxies, while older respondents more often choose to abandon the site. Overall, 77 percent of those surveyed expect further changes to the Russian internet segment, with only 9 percent believing it will remain unchanged.
CISA and NSA Urge Shift to Memory-Safe Languages Like Rust to Eliminate Memory Vulnerabilities
Official reports from CISA, NSA, FBI and partners highlight that decades of safe coding practices and code analysis tools have failed to resolve memory safety issues in languages such as C and C++. Government documents cite statistics showing that 70-75% of exploited vulnerabilities and zero-days stem from memory errors, including data from Microsoft, Google Chromium, Mozilla and Project Zero. Google reports that Rust adoption in Android reduced memory-related vulnerabilities below 20% in 2025, with a 1000-fold lower vulnerability density compared to C++. The analysis details Rust's ownership, borrowing and move semantics that provide compile-time guarantees unavailable in C++, enabling stronger compiler optimizations. Reports also acknowledge migration challenges including learning curves, interop issues and ecosystem gaps, while noting ongoing C++ safety improvements targeted for C++26 and C++29. Major organizations including Microsoft, Amazon and Google are already committing to Rust for critical new code.