Detects, qualifies and responds to security events in a security operations centre.
Entry
Junior
Coding
Low
Key skills
Common progression
Career overview
The SOC Analyst watches what should not happen: suspicious logins, lateral movement, malware, exfiltration. The job mixes rigorous investigation, threat knowledge and calm under pressure. It is the most common entry point into cybersecurity and leads naturally toward security engineering, threat hunting, forensics or architecture.
Main responsibilities
- Analyse security alerts from the SIEM
- Qualify threats and contain confirmed incidents
- Recommend hardening and remediation actions
- Lead incident resolution and post-mortem analysis
- Escalate complex cases to the relevant technical team
- Keep technical documentation up to date
- Write and improve operational runbooks
- Analyse application logs to identify root causes
- Monitor platform health, alerts and dashboards
- Document every action in the ticketing tool
Technical skills
Technologies
Education level
Education requirements vary depending on the company, country and experience. Professional experience, certifications and technical skills can sometimes compensate for formal education.
High School / Bac
Less common
Bac+2 (2-year degree)
Common entry point
Bac+3 (Bachelor)
Common entry point
Bac+5 (Master / Engineering)
Common entry point
Experience & coding level
Experience level
Coding level
Useful certifications
Certifications are never mandatory. They are one way among others to prove a skill.
- CompTIA Security+
- Microsoft SC-200
- Blue Team Level 1
Where can this career take you?
Multiple paths are possible. Click a role to open its profile.
Direct progression
Possible branches
Common trajectories
Where can you go next?
Realistic next career moves, with compatibility and a transition roadmap for each.
Overlap: 29% · Difficulty: Medium
Skills to learn: Firewalls (Fortinet/Palo Alto), Network segmentation, VPN / ZTNA
View roadmapOverlap: 11% · Difficulty: Hard
Skills to learn: Cloud security, IAM, CSPM (Defender/Security Hub)
View roadmapOverlap: 17% · Difficulty: Hard
Skills to learn: Observability & tracing, Kubernetes, Programming (Go/Python)
View roadmapOverlap: 24% · Difficulty: Medium
Skills to learn: Routing (BGP/OSPF), Switching & data centre fabric, Network security
View roadmapOverlap: 29% · Difficulty: Hard
Skills to learn: AWS / Azure / GCP, Terraform, Identity & access management
View roadmapWhere can you go from here?
A typical progression built from real career relationships. Click any role to open its profile.
Soft skills
- Rigour and attention to detail
- Staying calm under pressure
- Technical curiosity
- Documentation writing
- Teamwork
- Problem solving
Common previous careers
Roles that frequently lead into this career.
Related resources
Continue your career exploration
Keep moving: compare roles, follow a roadmap, read a guide or prepare for an interview.
Ready to explore your next step?
A documented transition from this role to the next.
SOC AnalystNetwork Security Engineer
Keep exploring
Compare this role with others, or check which career fits you best.