An "in-out-in" model could help train and retain a cyber and defense workforce, panelists at the Aspen Security Forum said.