The Unfamiliar Reality of Unemployment: The Story of Kelly Shaw and CISA’s Mass Firings

Kelly Shaw, a former senior intelligence analyst, finds herself in unfamiliar territory. For the first time in her career, she is unemployed. Shaw, who spent nearly three years at the Cybersecurity and Infrastructure Agency (CISA), was among the 130 probationary employees abruptly fired in what has been dubbed the "Valentine’s Day Massacre." This mass firing occurred during a holiday weekend, leaving many in shock. Shaw, who had previously served in the Navy and played a key role in establishing CISA’s CyberSentry program, is struggling to come to terms with her termination. "I’ve never been fired," she said, her voice filled with disbelief. The program she helped create was designed to monitor and detect cyber breaches in critical infrastructure such as power grids, pipelines, and water systems. Shaw’s work was critical to national security, focusing on identifying insider threats and foreign adversaries like China, Russia, and Iran. Despite her extensive experience and contributions, Shaw was let go, leaving her questioning the rationale behind the decision.

The Impact on CISA and National Security

The mass firings at CISA have sent shockwaves through the cybersecurity community, raising concerns about the agency’s ability to protect the nation’s critical infrastructure. Among those fired were threat hunters, incident response team members, disabled veterans, and employees who had signed onto the federal government’s deferred resignation program. Many of these individuals had left lucrative private sector jobs to join CISA, drawn by the agency’s mission to secure the nation’s cyber systems. For example, Paula Davis, a former cybersecurity specialist, spent 13 months undergoing a rigorous security clearance process before starting her job. She was tasked with analyzing code for state and local municipalities, identifying risks and abnormalities in the nation’s aging critical infrastructure. Davis described her role as her "dream job," emphasizing her commitment to protecting the country. "I didn’t take an oath to the Constitution just to start getting a paycheck," she said. The firings have not only personal consequences but also broader implications for national security.

The Recruitment Challenge: Attracting and Retaining Top Talent

CISA’s ability to recruit and retain top talent has been a major challenge, particularly in competition with the private sector. The agency’s Cyber Talent Management System (CTMS) was designed to attract world-class talent through a congressionally mandated program. This program, which took over seven years to develop, aimed to hire employees with specific skills and attributes critical to the agency’s mission. However, the recent firings have undermined these efforts. Many of those fired were part of the CTMS program, which required a three-year probationary period. A former human resources employee at CISA revealed that compiling a list of probationary employees was a task he was assigned before his termination. He noted that almost 99% of CTMS employees were probationary, making them easier to terminate. "You are extinguishing the best and brightest in one fell swoop," a current CISA employee lamented. The loss of these skilled workers has left many questioning the agency’s future effectiveness.

The Fallout: Reactions and Implications

The firings have sparked outrage and concern among lawmakers and cybersecurity experts. Democratic Rep. Bennie Thompson of Mississippi, the ranking member of the House Homeland Security Committee, expressed his worries about the impact of these cuts. "That kind of talent, you just don’t find it every day," Thompson said. "You have to convince many of those individuals to leave lucrative private sector employment and come and accept the public mission of securing our cybersecurity systems and protecting our country." Former CISA Director Jen Easterly also weighed in, highlighting the importance of the employees who were let go. She noted that CISA had hired over 2,000 new employees during her tenure, many of whom were part of the CTMS program. Easterly has since created a LinkedIn post to help connect former CISA employees with potential employers, a small step toward mitigating the fallout.

The Bigger Picture: National Security and the Cybersecurity Workforce

The implications of these firings extend far beyond CISA. The cybersecurity workforce is a critical component of national security, and the loss of experienced professionals like Kelly Shaw and Paula Davis could have devastating consequences. Rob Joyce, the former NSA cybersecurity director, expressed grave concerns about the impact of these cuts on the nation’s ability to protect itself from cyber threats. "Eliminating probationary employees will destroy a pipeline of top talent responsible for hunting and eradicating threats," Joyce warned. The timing of these firings is particularly concerning, as the country faces increasingly sophisticated cyber attacks from foreign adversaries. The recent firings have also raised questions about the Trump administration’s approach to federal employment and its commitment to national security.

The Uncertain Future: Rebuilding Trust and Talent

As the dust settles from the Valentine’s Day Massacre, many are left wondering what the future holds for CISA and the cybersecurity workforce. Shaw, who is still trying to process her termination, expressed ambivalence about returning to the agency. "I would have to go back," she said, citing the importance of CISA’s mission and the need for a steady paycheck. However, she emphasized that the agency would need to earn back her trust. This sentiment is shared by many of her former colleagues, who feel betrayed by the sudden and seemingly arbitrary nature of the firings. For now, the focus is on supporting those who have been affected and advocating for policies that prioritize the retention of critical talent. As the cybersecurity landscape continues to evolve, the ability to attract and retain skilled professionals will be more important than ever. The hope is that the lessons learned from this crisis will lead to a more stable and secure future for both CISA and the nation.