In 2025, researchers at Tufts University School of Engineering looked at how cybersecurity professionals identify the groups behind cyberattacks. After interviewing 15 security practitioners, they found a common problem: today’s tools haven’t kept up with the increasingly sophisticated tactics used by Advanced Persistent Threats (APTs). As such, figuring out the source of an attack and how to respond remains difficult, even for experienced analysts.
The research came from the Tufts Security and Privacy Lab, co-led by Lin Family Assistant Professor Daniel Votipka. Other studies from the same lab highlight similar challenges. One found that beginners learning how to find security flaws often struggle because the terms are confusing and sufficient learning materials are hard to find. Another reviewed security advisories from 718 critical infrastructure organisations and found that many were inconsistent or difficult to use in practice.
Together, these studies point to a bigger issue: the cybersecurity industry needs more professionals who understand both the technical side of security in addition to the experience to put it into practice. With the US Bureau of Labour Statistics projecting cybersecurity jobs to grow by 29% by 2034, demand is already outpacing supply.
The Department of Computer Science’s new MS in Cybersecurity (enrollment currently open) sets you up to meet this demand.
“As a department, we’re always looking to set our students up for success,” says Jeff Foster, Professor and Chair of Computer Science. “We’ve made a concerted effort to increase our number of security-related faculty in recent years. Now, we’re excited to offer new opportunities in this area, like the master’s in cybersecurity degree.”
The curriculum will give you strong technical skills while helping you understand the bigger picture of cybersecurity. You’ll complete courses such as Trusted and Responsible AI, Networks and Protocols, Privacy, Security and Data, Programming Languages, Database Systems, and Software Engineering. These courses cover topics such as how cyberattacks occur and how to build more secure systems. By the time you graduate, you’ll be ready for technical roles in industry or government, or to continue your studies with a PhD.
Real clients, real consequences
One of the standout features of the programme is the Tufts Cybersecurity Clinic, led by Teaching Professor Ming Chow. You’ll earn elective credits while working with nonprofits and other under-resourced organisations that need cybersecurity support . You’ll get to practise what the pros do every day: assess systems, identify security risks, develop protection plans, and explain technical issues in a way that clients can easily understand.
“Cybersecurity is an interdisciplinary field,” Professor Chow says. “We want students to have a broad range of interests and experiences.”
Austin Brower, a master’s student in cybersecurity and public policy, helped an all-volunteer nonprofit switch to Google’s free email service for nonprofits, fixing an authentication issue that had been creating extra work for its only administrator. Sarah Abowitz, a Ph.D. student in computer science, discovered an exposed WordPress site during a nonprofit security audit. She secured the site and created a complete cybersecurity plan for the organisation. These kinds of projects give students valuable real-world experience that employers look for.
The is another way to build such experience. For example, Anas Ansari, an MS in Cybersecurity and Public Policy student, worked as an Information Security Consultant at Strand Therapeutics, where he analysed system logs and ensured devices met security policies.
“Before coming to Tufts and completing this co-op, I knew many things were happening and were bad, but I didn’t fully understand why,” he says. “After working with these systems directly, it gave me a much deeper understanding of how and why they function the way they do.”
Launched in Fall 2024, the co-op programme had 89 participants in fall 2025 and spring 2026 combined. If you’re interested in a co-op, you can indicate it when you apply for admission and make industry experience part of your degree. With Tufts located near Boston and Cambridge, you’ll also have easy access to connect with leading technology companies and research organisations.
Many students have reported that co-ops have reinforced their career choices and deepened their industry connections. Source: Tufts University
Faculty who are active in the field
Small class sizes will allow you to work closely with faculty who are actively researching the same cybersecurity challenges you’ll study in class. For example, Professor Daniel Votipka’s lab has published research at leading conferences such as the USENIX Security Symposium and the ACM CHI Conference on Human Factors in Computing Systems, exploring topics like improving protocol reverse engineering tools and why security advisories for critical infrastructure often fall short.
Alma G. and Merton B. Tarlow Professor in Technology and International Affairs Josephine Wolff studies the economics of ransomware, including why hospitals often choose to pay ransoms and how that encourages more attacks. Professor Susan Landau focuses on cybersecurity policy and privacy, and in 2025, she testified before the US Congress on foreign access to Americans’ data. Their work is part of the Cybersecurity Centre for the Public Good, where students and faculty collaborate on cybersecurity issues affecting organisations and society.
If you’re more interested in cybersecurity policy than technical practice, Tufts offers a separate MS in Cybersecurity and Public Policy. The programme focuses on regulation, governance, and public policy, preparing you to work in areas like information security, technology policy, or risk management.
Finding your entry point
The MS in Cybersecurity isn’t the only way in. If you want to build credentials before committing to the full programme, the Cybersecurity Certificate draws five courses directly from the MS curriculum — providing a shorter, more focused route that can lead to graduate study and new career opportunities.
For those with little to no background in computer science, a post-baccalaureate in Computer Science programme is available in person or online. It’s designed to prepare you for the MS in Cybersecurity, the MS in Computer Science, or the MS in Data Science.
Learn more about the M.S. in Cybersecurity programme.
Follow Tufts University School of Engineering on Facebook, X, Instagram, and YouTube
