Assesses security posture, runs audits and recommends controls across the estate.

Entry

Intermediate

Coding

Medium

Key skills

Risk assessmentSecurity frameworks (ISO/NIST)ReportingVulnerability analysis

Career overview

The Cybersecurity Analyst looks beyond real-time alerts to the overall security posture: audits, risk assessments, control reviews, compliance checks and recommendations to engineering teams. They translate frameworks (ISO 27001, NIST) into concrete actions and are a strong base for security engineering, vulnerability management or threat intelligence.

Main responsibilities

  • Assess and treat information security risks
  • Ensure compliance with standards and regulations
  • Recommend hardening and remediation actions
  • Run vulnerability scanning and remediation
  • Keep technical documentation up to date
  • Manage governance, risk and compliance
  • Monitor platform health, alerts and dashboards
  • Escalate complex cases to the relevant technical team
  • Align stakeholders and report progress
  • Lead incident resolution and post-mortem analysis
  • Write and maintain knowledge base articles
  • Prepare and execute change requests in production

Technical skills

Risk assessment85%
Security frameworks (ISO/NIST)80%
Vulnerability analysis75%
Auditing75%
Networking65%
Scripting50%
Reporting80%
Incident response65%

Technologies

NessusQualysISO 27001NIST CSFSplunkMicrosoft SentinelWiresharkPythonLinuxWindowsActive DirectoryMITRE ATT&CKServiceNowPower BIEDRGit

Education level

Education requirements vary depending on the company, country and experience. Professional experience, certifications and technical skills can sometimes compensate for formal education.

High School / Bac

Less common

Bac+2 (2-year degree)

Less common

Bac+3 (Bachelor)

Common entry point

Bac+5 (Master / Engineering)

Common entry point

Experience & coding level

Experience level

Entry LevelJuniorIntermediateSeniorExpert

Coding level

No codingLowMediumHighVery High
Technical difficulty70%

Useful certifications

Certifications are never mandatory. They are one way among others to prove a skill.

  • CompTIA CySA+
  • CISA
  • ISO 27001 Lead Auditor
  • CompTIA Security+

Where can this career take you?

Multiple paths are possible. Click a role to open its profile.

Where can you go next?

Realistic next career moves, with compatibility and a transition roadmap for each.

Overlap: 70% · Difficulty: Medium

Skills to learn: IAM, Hardening

View roadmap

Overlap: 60% · Difficulty: Easy

Skills to learn: CVSS & exploitability, Remediation coordination, Compliance

View roadmap

Overlap: 8% · Difficulty: Medium

Skills to learn: Threat intelligence, MITRE ATT&CK & TTPs, OSINT

View roadmap

Overlap: 30% · Difficulty: Medium

Skills to learn: Digital forensics, SIEM & EDR, MITRE ATT&CK

View roadmap

Where can you go from here?

A typical progression built from real career relationships. Click any role to open its profile.

Soft skills
  • Analytical thinking
  • Rigour and attention to detail
  • Clear communication
  • Documentation writing
  • Technical curiosity
  • Big-picture thinking
  • Ethics and integrity
Common previous careers

Roles that frequently lead into this career.

Overlap: 26% · Difficulty: Medium

Skills to learn: Risk assessment, Security frameworks (ISO/NIST), Auditing

View roadmap

Overlap: 51% · Difficulty: Easy

Skills to learn: Risk assessment, Auditing, Reporting

View roadmap

Related resources

Continue your career exploration

Keep moving: compare roles, follow a roadmap, read a guide or prepare for an interview.

Ready to explore your next step?

A documented transition from this role to the next.

Cybersecurity AnalystSecurity Engineer

Explore this career path

Keep exploring

Compare this role with others, or check which career fits you best.