IC Workforce & Organization — 2026-06-13

CISA Rebuilding After Losing One-Third of Workforce to DOGE Cuts as Cyber Threats Intensify

BLUFCISA is very unlikely to reach its stated 2,800-person target by end of 2026, leaving the nation's lead civilian cyber defense agency operating at degraded capacity as adversary activity accelerates.

An internal CISA report entered into the House Homeland Security Committee record at a January hearing documented at least 998 employees separated since January 2025, among them red-team specialists lost in the probationary-employee cuts 1. DHS Secretary Markwayne Mullin told Congress on June 3 that CISA "probably needs around 2,800 personnel," against the roughly 300 mission-critical hires acting director Nick Andersen had announced in March 2. Richard Forno, associate director of the University of Maryland Baltimore County Cybersecurity Institute, told Broadband Breakfast that federal workforce treatment over the past year makes government service "very unlikely" to attract experienced cybersecurity professionals 2.

Analysis
CISA is very unlikely to reach 2,800 personnel by December 31, 2026. The 300 mission-critical hires authorized in March cover less than half the net gain required, and the hiring window is narrowing. High confidence rests on the arithmetic mismatch between authorized pace and the stated threshold, with trade-press expert assessment corroborating that DOGE-era treatment has materially degraded government appeal to experienced cyber professionals, though neither outlet independently verified operational capacity. Red-team capability carries multi-year rebuild timelines that hiring tempo cannot compress. The administration's capability-over-headcount approach, if borne out by incident-response outcomes, would mean 2,800 personnel are not operationally required. Critical infrastructure operators face pressure to accelerate private-sector redundancy rather than rely on CISA surge capacity. Appropriators confront a staffing mandate decision before the 2026 midterm cycle, with CIRCIA obligations covering an estimated 300,000 entities compounding the workload of an agency still at two-thirds strength.

2 sources

Acting CISA chief defends workforce cuts, declares agency 'back on mission' - Cybersecurity Dive
One Year After DOGE Cuts, Cybersecurity Agency Struggles Over Staffing - Broadband Breakfast