Leads security incident handling: containment, forensics, eradication and lessons learned.
Entry
Intermediate
Coding
Medium
Key skills
Common progression
- Incident Response Analyst
- Senior SOC Analyst
- SOC Lead
- SOC Manager
- Cybersecurity Manager
Career overview
The Incident Response Analyst owns the lifecycle of a security incident: triage, containment, forensic collection, eradication, recovery and post-incident review. They coordinate with SOC, engineering, legal and communications under time pressure. The role leads to senior SOC analysis, incident management or security engineering.
Main responsibilities
- Lead security incident response and forensics
- Perform digital forensics and evidence collection
- Lead incident resolution and post-mortem analysis
- Analyse security alerts from the SIEM
- Qualify threats and contain confirmed incidents
- Write and improve operational runbooks
- Keep technical documentation up to date
- Escalate complex cases to the relevant technical team
- Align stakeholders and report progress
- Prepare and execute change requests in production
- Monitor platform health, alerts and dashboards
- Write and maintain knowledge base articles
Technical skills
Technologies
Education level
Education requirements vary depending on the company, country and experience. Professional experience, certifications and technical skills can sometimes compensate for formal education.
High School / Bac
Less common
Bac+2 (2-year degree)
Less common
Bac+3 (Bachelor)
Common entry point
Bac+5 (Master / Engineering)
Common entry point
Experience & coding level
Experience level
Coding level
Useful certifications
Certifications are never mandatory. They are one way among others to prove a skill.
- GIAC GCIH
- GIAC GCFA
- CompTIA CySA+
- ECIH
Where can this career take you?
Multiple paths are possible. Click a role to open its profile.
Direct progression
Possible branches
Where can you go next?
Realistic next career moves, with compatibility and a transition roadmap for each.
Overlap: 51% · Difficulty: Hard
Skills to learn: SLA management, Escalation handling, Ticketing & ITSM tools
View roadmapWhere can you go from here?
A typical progression built from real career relationships. Click any role to open its profile.
- Incident Response Analyst
- Senior SOC Analyst
- SOC Lead
- SOC Manager
- Cybersecurity Manager
Soft skills
- Staying calm under pressure
- Rigour and attention to detail
- Clear communication
- Decisiveness
- Problem solving
- Documentation writing
- Resilience
Related resources
Continue your career exploration
Keep moving: compare roles, follow a roadmap, read a guide or prepare for an interview.
Ready to explore your next step?
A documented transition from this role to the next.
Incident Response AnalystSenior SOC Analyst
Keep exploring
Compare this role with others, or check which career fits you best.