Cybersecurity skills shortage prompts new hiring approach