CISA cybersecurity workforce faces cuts amid shifting US strategy – Source: www.csoonline.com

The US government’s cybersecurity defenses are under strain after the White House-backed Department of Government Efficiency (DOGE) abruptly terminated key contracts, leading to the dismantling of two red teams within the Cybersecurity and Infrastructure Security Agency (CISA). The move has sparked concerns about the federal government’s ability to defend against cyber threats amid increasing geopolitical tensions.

The layoffs, which affected more than 100 cybersecurity specialists, were disclosed by former CISA penetration tester Christopher Chenoweth, who revealed on LinkedIn that DOGE had scrapped the contract supporting his red team and a second critical team within days.

“On Friday, February 28, 2025, at 1600 hours, the government contract I supported with CISA (Dept of Homeland Security) was terminated due to DOGE,” Chenoweth wrote in the LinkedIn post. “DOGE cut our entire red team and all support roles — over 100 people impacted. The following Wednesday, DOGE cut a second CISA red team also doing mission-critical work.”

These teams were tasked with identifying vulnerabilities in government networks and strengthening national cybersecurity defenses. Their sudden dismissal raises questions about the Biden administration’s cybersecurity strategy and whether budget cuts are compromising national security.

Chenoweth is not the only one to go vocal about what is happening at CISA.

“The treatment that we are being given right now is enough to cause me and my family soul-crushing loss,” Kelly Shaw, a former employee of CISA wrote in another LinkedIn post. “Our dreams are being shattered, our livelihood is being destroyed, and our nation will be less secure all because of some quick political points being scored.”

Shaw had joined CISA from Naval Intelligence three years ago and was part of the CyberSentry program. More than 130 people from this division were fired in the last week of February.

“On February 14th, I received an email from someone I had never heard of telling me that I was not meeting the needed knowledge, skills, and abilities,” Shaw narrated. “My 30 years of network experience, two Internet Service provider businesses, 14 years of federal service to the Nation, education, and performance appraisals say otherwise.”

Jen Easterly, the former director of CISA, too had raised concerns about what is happening at the premier cybersecurity agency.

“As I understand it (and to be fair, it is an imperfect understanding from someone who is now on the outside), some folks have been justifiably let go for performance reasons and exceptions have been made for others,” Easterly wrote in a LinkedIn post. “But as I’ve seen across this platform over the past week, the exceptions are not preventing some fantastic teammates from being fired.”

Sweeping cuts across Homeland Security

DOGE, an oversight unit established by Elon Musk and endorsed by the Trump administration, has been aggressively eliminating federal contracts, claiming to reduce government waste. While its public records list 86 canceled contracts at the Department of Homeland Security (DHS), it does not explicitly mention penetration testing, leaving uncertainty over the justification behind the cybersecurity team layoffs.

Adding to concerns, other critical cybersecurity programs have also been defunded, including the Elections Infrastructure Information Sharing and Analysis Center (EI-ISAC). The center, which provided cyber threat intelligence to election officials and state agencies, announced its closure after DHS pulled its funding.

Meanwhile, the Multi-State Information Sharing and Analysis Center (MS-ISAC), a 20-year-old cybersecurity collaboration hub between federal, state, and local governments, is also at risk of losing support.

A shift in US cybersecurity strategy?

Analysts suggest these layoffs and funding cuts indicate a broader strategic shift in the U.S. government’s cybersecurity approach. Neil Shah, VP at Counterpoint Research, sees both risks and opportunities in the restructuring.

“In the near to mid-term, this could weaken the US cybersecurity infrastructure. However, with AI proliferating, the US government likely has a Plan B — potentially shifting toward privatized cybersecurity infrastructure projects, similar to what we’re seeing with Project Stargate for AI,” Shah said.

“If these gaps aren’t filled with viable alternatives, vulnerabilities could escalate from small-scale exploits to large-scale cyber incidents at state or federal levels. Signs point to a broader cybersecurity strategy reboot, with funding likely being redirected toward more efficient and sophisticated players rather than a purely vertical, government-led approach.”

While some fear heightened risks, others argue the shift could lead to more tech-driven solutions. Faisal Kawoosa, founder and lead analyst at Techarc, views the move as part of a larger digital transformation.

“Elon Musk’s role is not just about cost-cutting but also about leveraging technology to create more efficient systems,” Kawoosa said. “DOGE operates as a digital transformation program for US governance, exploring tech-first approaches to achieving similar or better results.”

He added that such a significant decision was unlikely without an impact assessment. “I don’t foresee a major security threat arising from this shift. While initial gaps may appear, given Musk’s rapid execution style, it won’t take long for a new system to deliver comparable or improved outcomes.”

Yugal Joshi, a partner at Everest Group, expressed skepticism over dismantling key cybersecurity initiatives amid increasing global threats.

“Given the polarizing and increasingly vulnerable global environment, it is hard to believe the US government is dismantling such key organizations,” Joshi said. “Critical infrastructure across the globe, especially in the US, faces constant threats, and CISA’s red team played a crucial role in defense. Winding up CISA’s red team and MS-ISAC may cause more harm than shutting down EI-ISAC, given their broader and more critical roles.”

While he warned of long-term consequences, Joshi acknowledged a possible silver lining. “This move could be detrimental in the long run. However, an overlap of federal and state cybersecurity responsibilities might make states better prepared — if they receive adequate funding. It could also lead to a more accountable approach, reducing unchecked spending.”

He further noted that should a major cyber incident occur, it would serve as a validation of CISA’s importance. “If something significant happens, it will prove to critics that these departments were indeed creating value, something that was always under scrutiny.” As the federal government continues its restructuring under DOGE’s directive, the long-term consequences of these cybersecurity cutbacks remain uncertain. Security experts warn that the US could be significantly more vulnerable to evolving cyber threats, unless new systems swiftly bridge the gaps left behind.