My thought is that if an applicant has a criminal record that involves cyber crimes that no company with a comprehensive infosec policy will hire that person to protect the company. Most larger companies will have agreements with at least one partner/customer/ that will prohibit that hire. Same will likely go for financial crimes. I flushed a job applicant for having committed holdup with a gun and another for an obvious alcohol dependency issue. I'm just not sure I want the person working for me or the latter not showing up all the time. Now for certain government-related entities or their vendors looking for offensive capabilities these may not be disabling issues, but there will be distance between that person and the home office and its data.