In the shadow of a season marked by cyberattacks on hospitals, pipelines, and federal agencies, President Biden gathered the architects of the digital world at the White House to confront a vulnerability no single institution can close alone. Apple, Google, Microsoft, Amazon, and IBM pledged more than $30 billion combined toward security infrastructure, supply chain resilience, and workforce training — an acknowledgment that the defense of a nation's critical systems now depends as much on private capital as on public will. Yet beneath the scale of the commitments lies a quieter question: whet
Big Tech pledges $30B+ to shore up U.S. cybersecurity amid skills gap
500,000 open jobs and almost that same amount looking for work
Mark
So thirty billion dollars sounds like a lot. What does that actually buy us?
Mimi
It buys infrastructure upgrades, software improvements, and training programs. Google's ten billion is spread over five years. Microsoft's twenty billion is similar. Apple's committing to work with suppliers. It's real money, but it's also spread across multiple companies and multiple years.
Luke
Right, and we should be clear: we don't have a single unified pledge. We have five separate announcements from five companies. Google says ten billion. Microsoft says twenty. Apple doesn't put a number on it. We're adding them up, but that's not how they're being deployed.
Mark
Fair. So what's the actual gap they're trying to close?
Mimi
There are 500,000 unfilled cybersecurity jobs in the U.S. right now. That's the number from CyberSeek. The companies are pledging to train people—Google says 100,000, IBM says 150,000 over five years. But that still leaves a massive shortfall.
Luke
And here's where it gets complicated. The jobs are unfilled not because there aren't people who want to work in cybersecurity. It's because the jobs don't pay enough or offer enough benefits to attract people with the skills needed. Training more people doesn't solve that problem if the jobs themselves don't change.
Mark
So the companies are training people but not necessarily hiring them?
Mimi
Not necessarily. They're training people for the field broadly. Some will work for the companies that trained them, some won't. But the underlying issue—that cybersecurity positions are underpaid relative to the expertise required—that's not something these pledges directly address.
Luke
Exactly. Khalilah Scott from TechSecChix made this point: there are 500,000 open jobs and roughly that many people looking for work in the field. The supply and demand are roughly equal. The problem is price discovery. The market hasn't figured out what these jobs should actually pay.
Mark
So is this meeting just theater?
Mimi
No. The infrastructure is genuinely vulnerable. The attacks have been real and serious. The training programs will put skilled people into the market. That matters. But the skeptics are right that this doesn't solve the underlying compensation problem.
Luke
And we should note: Biden said the private sector has to lead because the government can't do this alone. That's true. But it also means the government is essentially asking companies to solve a problem—cybersecurity—that has national security implications. The companies are stepping up, but the incentives aren't perfectly aligned.
Il Polso
- Months of devastating cyberattacks on pipelines, hospitals, and federal networks forced a reckoning that government could no longer defer or handle alone.
- Nearly 500,000 cybersecurity positions sit unfilled across the U.S. — not for lack of interest, but because the market has not matched the weight of the work with adequate compensation.
- Biden convened the CEOs of America's most powerful tech companies, extracting more than $30 billion in pledges for security upgrades, supply chain hardening, and worker training.
- Google, Microsoft, Apple, AWS, and IBM each announced distinct commitments — from zero-trust infrastructure to free security training — framing corporate investment as a form of national duty.
- Skeptics in the security community warn that training pipelines mean little if the jobs waiting at the end still pay poorly, leaving the talent gap structurally intact despite the fanfare.
In the shadow of a season marked by cyberattacks on hospitals, pipelines, and federal agencies, President Biden gathered the architects of the digital world at the White House to confront a vulnerability no single institution can close alone. Apple, Google, Microsoft, Amazon, and IBM pledged more than $30 billion combined toward security infrastructure, supply chain resilience, and workforce training — an acknowledgment that the defense of a nation's critical systems now depends as much on private capital as on public will. Yet beneath the scale of the commitments lies a quieter question: whether money and training programs can solve what is, at its root, a problem of how society values the people asked to stand watch.
When President Biden convened executives from Apple, Google, Microsoft, Amazon Web Services, and IBM at the White House, he named the problem plainly: most of the nation's critical infrastructure — power grids, water systems, hospitals, financial networks — is privately owned, and the federal government cannot defend it alone. Months of high-profile cyberattacks had made the stakes undeniable. So had a quieter crisis: nearly 500,000 cybersecurity jobs across the United States sit unfilled, leaving the systems that underpin daily life chronically under-defended.
The pledges that followed totaled more than $30 billion. Google committed over $10 billion across five years to expand zero-trust security, harden the software supply chain, and train 100,000 Americans in data and cybersecurity skills. Microsoft pledged $20 billion to embed security into its products by design, alongside $150 million in immediate technical assistance to governments at every level. Apple committed to driving security improvements across its 9,000-plus U.S. suppliers. AWS said it would make its security awareness training freely available and distribute hardware authentication devices to customers. IBM pledged to train 150,000 people in cybersecurity skills over five years.
Some in the industry welcomed the commitments as a meaningful shift — a signal that the private sector was finally treating cybersecurity as a shared national responsibility. But a sharper critique ran beneath the applause. The workforce gap, critics argued, is not simply a training problem. Cybersecurity roles frequently offer modest pay despite demanding specialized expertise and carrying serious consequences. Khalilah Scott of TechSecChix put the contradiction bluntly: there are roughly as many people seeking work in the field as there are positions going unfilled. The question left hanging over the White House meeting was whether billions in pledges would change the underlying equation — or simply produce more trained workers for jobs that still don't pay enough to keep them.
President Joe Biden sat down with executives from Apple, Google, Microsoft, Amazon Web Services, and IBM at the White House on Wednesday to discuss a problem that has grown too large for government to solve alone. The nation's critical infrastructure—power grids, water systems, hospitals, financial networks—is mostly owned and operated by private companies. And it is under siege. Months of high-profile cyberattacks had targeted both critical infrastructure and federal agencies themselves. The meeting was convened in response to that threat, but also to address something less visible but equally urgent: nearly 500,000 cybersecurity jobs sit unfilled across the United States, according to data from CyberSeek. There are not enough skilled workers to defend what needs defending.
Biden opened the meeting by stating the obvious truth that had brought everyone to the table: "Most of our critical infrastructure is owned and operated by the private sector, and the federal government can't meet this challenge alone." He had invited these companies because they possessed the resources, the reach, and what he framed as the responsibility to act. The pledges that followed totaled more than $30 billion in combined commitments.
Google announced it would invest more than $10 billion over five years to expand zero-trust security programs, strengthen the software supply chain, and bolster open source security. The company also committed to training 100,000 Americans in IT support and data analytics, with curricula centered on in-demand skills like data privacy and cybersecurity. Kent Walker, Google's chief of global affairs, framed the training initiative plainly: "Robust cybersecurity ultimately depends on having the people to implement it." Microsoft committed $20 billion to integrate security into its products and services from the ground up, and pledged $150 million in immediate technical assistance to federal, state, and local governments. The company also said it would expand partnerships with community colleges and nonprofits to train cybersecurity workers. Apple committed to working with its more than 9,000 U.S. suppliers to drive widespread adoption of multi-factor authentication and security training, and to establish a program for continuous security improvements across the technology supply chain. Amazon Web Services said it would make its security awareness training public and provide hardware multi-factor authentication devices to all AWS customers. IBM pledged to train more than 150,000 people in cybersecurity skills over five years.
The announcements were welcomed by some in the industry. David Carroll, managing director at Nominet Cyber, told TechCrunch that the commitments set a "powerful precedent" and signaled that "the gloves are well and truly off" in the fight against cyber threats. But skepticism ran through parts of the security community as well. The concern was not about the scale of the pledges or the sincerity of the companies involved. It was about whether the training initiatives would address the actual reason so many cybersecurity positions remained vacant: the jobs themselves often paid poorly and offered few benefits, even as the work demanded specialized expertise and carried real responsibility.
Khalilah Scott, founder of TechSecChix, a foundation supporting women in technology, captured the tension in a tweet: "So 500,000 open cybersecurity jobs and almost that same amount or more looking for jobs. Make it make sense." The math was stark. There were roughly as many unfilled positions as there were people seeking work in the field. The problem was not a shortage of interest or even of training programs. It was that the market had not yet aligned the value of the work with the compensation offered for it. Whether the pledges announced at the White House would shift that equation remained to be seen.
Citazioni salienti
Most of our critical infrastructure is owned and operated by the private sector, and the federal government can't meet this challenge alone.— President Joe Biden
Robust cybersecurity ultimately depends on having the people to implement it.— Kent Walker, Google's global affairs chief
Vuoi la storia completa?
Leggi l'originale su TechCrunch ↗
Technology