The real cost of a six-month onboarding runway for your cybersecurity workforce
A new security hire starts, and for months the team treats them like an apprentice: shadowing calls, sitting in on incident reviews, absorbing context one meeting at a time. Eventually, they're trusted to work independently, but how long that takes varies more across the cybersecurity workforce than most leaders would like.
Here's what the research shows about that timeline, and why it depends on more than the new hire alone.
A six-month ramp-up is common across the cybersecurity workforce
Most teams are living with a longer runway than they'd choose.
A 2026 survey, “The Shift to Continuous Cybersecurity Micro-Training,” conducted by Bellini Capital for CyberBay with guidance from SkillBit, found a real lag between what teams experience and what they consider acceptable. Regardless of a team's actual time-to-value, 60% report a lag of at least three months. That's a full quarter where a new hire is present but not yet contributing at the level the role requires.
This points to a structural distance between how onboarding typically works and how quickly a security role demands proficiency, rather than a story about lazy new hires or slow learners.
The bit you should know: Most security teams experience a real, measurable lag between actual and acceptable ramp-up time.
Shadowing is still the default onboarding method
On-the-job observation is common, but it doesn't scale.
According to ISC2's 2026 Security Training Trends report, shadowing and on-the-job training remain common onboarding methods, but they carry a real cost in time:
- 47% of organizations rely on shadowing and on-the-job training, alongside mentoring and coaching (44%)
- Both depend heavily on a senior team member's schedule
- A recent survey of 202 senior security executives puts a number on what that dependency costs: 57% report an average time-to-value of six months for new hires, longer than the three-month window most consider acceptable
That reliance on a senior team member's time and availability is exactly what stretches a ramp-up period out. Shadowing works, but it's one-to-one, hard to schedule consistently, and impossible to run in parallel across multiple new hires without pulling several experienced staff off their own work.
The bit you should know: Shadowing works, but it doesn't scale the way a security team's hiring needs do.
Hands-on practice compresses the runway
The bottleneck is usually foundational, ahead of any specific tool.
The survey's respondents pointed to general IT knowledge (55%) and cybersecurity processes (50%) as the top drivers of onboarding delay, well ahead of unfamiliarity with any specific tool. New hires aren't struggling because they've never seen a particular platform. They're struggling with the underlying context a role assumes they already have.
That distinction points toward a different kind of fix. A new hire who can practice the underlying reasoning a role requires, using structured, role-based training exercises, closes that foundational distance faster than shadowing alone, because the practice targets the actual bottleneck instead of a specific tool.
The bit you should know: The fastest ramp-ups come from practicing foundational reasoning ahead of any specific tool.
A faster ramp-up pays off well past the calendar
Every month of runway costs the broader cybersecurity workforce capacity.
A six-month ramp-up carries a cost for the new hire's own productivity, and for the senior staff providing the shadowing and mentoring that ramp-up depends on, time that isn't going toward their own work during that period.
Shortening that runway returns capacity to the whole team, alongside the new hire. It's the same logic behind measuring skill development ROI more broadly: the value shows up in what the rest of the team gets back.
The bit you should know: A shorter onboarding runway gives time back to the whole team, alongside the new hire.
Still have questions?
How long should it take a new security hire to reach full productivity?
The survey found 64% of security leaders consider three months an acceptable target, though actual time-to-value often runs longer depending on role complexity and how onboarding is structured.
Why does shadowing take longer than structured, hands-on training?
Shadowing depends on a senior team member's schedule and can only run one new hire at a time per mentor. Structured, scenario-based exercises let a new hire practice independently and in parallel with other onboarding activities.
Does a faster ramp-up require replacing shadowing entirely?
No. Shadowing still has real value for team context and culture. Pairing it with structured practice addresses the foundational knowledge distance that shadowing alone takes longer to close.
Closing the runway starts with knowing where the time goes
A six-month ramp-up has a cost, even when no one puts a number on it. Structured, hands-on practice is one of the more direct ways to shorten it.
SkillBit Labs gives new hires a way to build the foundational reasoning a role requires before they're relying on shadowing alone. Book a demo to see how it fits your onboarding process, or get in touch to talk through your team's ramp-up timeline.
Keep learning
