Cyber Wiki
Cyber Wiki
Cybersecurity is a critical field dedicated to protecting digital assets, infrastructure, and information from cyber threats. In this wiki you will find a comprehensive list of the main job roles within the cybersecurity domain, outlining their responsibilities as defined by the NICE (National Initiative for Cybersecurity Education) framework. Where relevant, a suggested career path for that cyber specialism has been provided, along with helpful resources. If you want broader guidance, instead visit our broader career paths guide below.
Choosing a cyber career path
If you aren’t sure where to start in choosing a career or career path in cyber, one of the first choices to make is to select the general path you want to follow. These paths are:
1. The Technical Career Path
The technical cybersecurity career path involves roles deeply rooted in hands-on cybersecurity expertise. Professionals in this path typically engage in penetration testing, vulnerability analysis, threat intelligence, security engineering, and incident response. They require strong analytical skills, technical curiosity, and continuous learning to adapt to evolving threats and technologies.
2. The Governance Career Path
Governance roles focus on defining, implementing, and managing cybersecurity frameworks, policies, standards, and compliance. Professionals here ensure that organizations meet regulatory and industry standards (e.g., ISO 27001, NIST), manage risk effectively, and maintain secure operational environments. Skills such as critical thinking, attention to detail, and strong communication are critical in these roles.
3. The Program/Project Management Career Path
This career path involves coordinating, planning, and delivering cybersecurity projects and programs. Professionals in these roles manage resources, schedules, budgets, and stakeholder expectations to implement cybersecurity initiatives effectively. Strong organizational skills, leadership, and interpersonal communication are essential to ensure cybersecurity strategies are effectively executed.
4. The Business Career Path
Business-focused cybersecurity roles bridge the gap between cybersecurity initiatives and organizational objectives. Professionals in this path align security strategies with business priorities, manage cybersecurity budgets, support risk-based decision-making, and facilitate communication between technical teams and business executives. Success in this path relies on business acumen, strategic thinking, effective communication, and the ability to translate cybersecurity needs into clear business terms.
Cyber Roles
1. Digital Forensics Analyst
A Digital Forensics Analyst analyzes digital evidence and investigates computer security incidents to uncover useful information that supports system and network vulnerability mitigation.
Career Path:
- Starting up: It is possible to join a digital forensics apprenticeship or graduate scheme to get into the industry. Alternatively, IT roles such as IT support technician or network engineer offer a good starting point to get into the industry.
- Entry-Level: New analysts shadow experienced professionals, learn forensic tools, and handle routine investigations. They gain experience in general forensics for 1-3 years before advancing.
- Intermediate-Level: Analysts with 3-7 years of experience earn certifications, develop advanced investigative skills, and work on complex cases involving novel threats.
- Senior-Level: With 7-15 years of experience, senior analysts lead forensic teams, contribute to industry research, and may progress into roles like Chief Information Security Officer (CISO) or cybersecurity leadership positions.
Changing careers:
Software developers and people working in IT support may be well suited to a career in digital forensics.
2. Incident Responder
An Incident Responder investigates, analyzes, and responds to network cybersecurity incidents to mitigate threats and ensure timely recovery. Incident Responders can also be called Disaster Recovery Specialists or Incident Handlers.
Career Path:
- Starting up: It is possible to join a digital forensics apprenticeship or graduate scheme to get into the industry. Alternatively, IT roles such as IT support technician or network engineer offer a good starting point to get into the industry.
- Entry-Level: New responders assist in monitoring security events, documenting incidents, and learning response protocols. They gain experience in security monitoring, logging, and reporting while supporting senior responders.
- Intermediate-Level: Incident responders with 4-7 years experience take ownership of investigating security breaches, mitigating threats, and developing response strategies. They earn certifications such as GIAC Certified Incident Handler (GCIH) or Certified Incident Handler (E|CIH) to advance their expertise.
- Senior-Level: Senior incident responders have around 10+ years experience, and lead response teams, develop organization-wide incident response policies, and collaborate with external agencies during major incidents. They may advance into roles like Incident Response Manager or Director of Security Operations (SOC Director).
Changing careers:
Software developers and people working in IT support may be well suited to a career in digital forensics.
For more information visit these resources:
3. Vulnerability Analyst
A Vulnerability Analyst assesses systems and networks to identify deviations from acceptable configurations and policies. This role measures the effectiveness of defense-in-depth architectures against known vulnerabilities. A Vulnerability Analyst may also be called a Pen Tester, Ethical Hacker, or Risk/Vulnerability Assessor.
Career Path:
- Starting up: It is possible to join a digital forensics apprenticeship or graduate scheme to get into the industry. Alternatively, IT roles such as IT support technician or network engineer offer a good starting point to get into the industry.
- Entry-Level: New analysts shadow experienced professionals, learn forensic tools, and handle routine investigations. They gain experience in general forensics for 1-3 years before advancing.
- Intermediate-Level: Analysts with 3-7 years of experience earn certifications, develop advanced investigative skills, and work on complex cases involving novel threats.
- Senior-Level: Senior analysts design and implement enterprise vulnerability management programs, assess emerging threats, and provide risk analysis for executive leadership. They may move into roles like Vulnerability Management Lead or Security Architect.
4. Software Security Assessor
A Software Security Assessor evaluates the security of new or existing computer applications, software, or specialized utility programs. This role provides actionable insights to enhance security measures and protect systems from potential threats. A Software Security Assessor may also be known as a Security Engineer, Software Assurance Analyst, or Security Requirements Analyst.
Career Path:
- Starting up:
- Entry-Level: Junior assessors review code for security flaws, assist in security testing, and document vulnerabilities. They are likely to gain experience with tools like Burp Suite, OWASP ZAP, and SAST/DAST tools.
- Intermediate-Level: Analysts with 3-7 years of experience earn certifications, develop advanced investigative skills, and work on complex cases involving novel threats.
- Senior-Level: Senior assessors design secure software development life cycles (SDLC), lead application security teams, and oversee enterprise-wide software security strategies. They may become Application Security Architects or Chief Security Engineers.
5. Cybersecurity Architect
A Cybersecurity Architect ensures that security requirements are incorporated into all aspects of enterprise architecture. This role develops reference models, segment and solution architectures, and security systems that protect and support organizational missions and business processes.
Career Path:
- Starting up: It is possible to join a digital forensics apprenticeship or graduate scheme to get into the industry. Alternatively, IT roles such as IT support technician or network engineer offer a good starting point to get into the industry.
- Entry-Level: New analysts shadow experienced professionals, learn forensic tools, and handle routine investigations. They gain experience in general forensics for 1-3 years before advancing.
- Intermediate-Level: Analysts with 3-7 years of experience earn certifications, develop advanced investigative skills, and work on complex cases involving novel threats.
- Senior-Level: With 7-15 years of experience, senior analysts lead forensic teams, contribute to industry research, and may progress into roles like Chief Information Security Officer (CISO) or cybersecurity leadership positions.
6. Systems Security Analyst
A Systems Security Analyst develops and analyzes the integration, testing, operations, and maintenance of system security. This role manages security aspects of implementing and operating secure systems. A Systems Security Analyst could also be called an Information Assurance Specialist or Systems Analyst.
Career Path:
- Starting up: It is possible to join a digital forensics apprenticeship or graduate scheme to get into the industry. Alternatively, IT roles such as IT support technician or network engineer offer a good starting point to get into the industry.
- Entry-Level: New analysts shadow experienced professionals, learn forensic tools, and handle routine investigations. They gain experience in general forensics for 1-3 years before advancing.
- Intermediate-Level: Analysts with 3-7 years of experience earn certifications, develop advanced investigative skills, and work on complex cases involving novel threats.
- Senior-Level: With 7-15 years of experience, senior analysts lead forensic teams, contribute to industry research, and may progress into roles like Chief Information Security Officer (CISO) or cybersecurity leadership positions.
7. Security Control Assessor
A Security Control Assessor conducts independent and comprehensive assessments of security controls and enhancements within a system. This role determines the overall effectiveness of security measures to ensure compliance and risk mitigation. Security Control Assessors may also be known as System Certifiers, or Information Assurance Compliance Analysts.
Career Path:
- Starting up: It is possible to join a digital forensics apprenticeship or graduate scheme to get into the industry. Alternatively, IT roles such as IT support technician or network engineer offer a good starting point to get into the industry.
- Entry-Level: New analysts shadow experienced professionals, learn forensic tools, and handle routine investigations. They gain experience in general forensics for 1-3 years before advancing.
- Intermediate-Level: Analysts with 3-7 years of experience earn certifications, develop advanced investigative skills, and work on complex cases involving novel threats.
- Senior-Level: With 7-15 years of experience, senior analysts lead forensic teams, contribute to industry research, and may progress into roles like Chief Information Security Officer (CISO) or cybersecurity leadership positions.
8. Communications Security (COMSEC) Manager
A Communications Security (COMSEC) Manager manages the Communications Security (COMSEC) resources of an organization to ensure secure communication channels and protect sensitive information.
Career Path:
- Starting up: It is possible to join a digital forensics apprenticeship or graduate scheme to get into the industry. Alternatively, IT roles such as IT support technician or network engineer offer a good starting point to get into the industry.
- Entry-Level: New analysts shadow experienced professionals, learn forensic tools, and handle routine investigations. They gain experience in general forensics for 1-3 years before advancing.
- Intermediate-Level: Analysts with 3-7 years of experience earn certifications, develop advanced investigative skills, and work on complex cases involving novel threats.
- Senior-Level: With 7-15 years of experience, senior analysts lead forensic teams, contribute to industry research, and may progress into roles like Chief Information Security Officer (CISO) or cybersecurity leadership positions.
9. Executive Cybersecurity Leader
An Executive Cybersecurity Leader establishes the vision and direction for an organization's cybersecurity operations and resources. This role makes strategic decisions that impact cybersecurity policies, stakeholder engagement, and overall security posture. Executive Cybersecurity Leaders might be called CSOs, CISOs, or CTOs.
10. Systems Authorization Officer
A Systems Authorization Officer ensures that an information system operates at an acceptable level of risk concerning organizational operations, assets, individuals, other organizations, and national security requirements. A Systems Authorization Officer might also be known as a Compliance Manager or Certifying Official.
11. Cybersecurity Policy and Planning Specialist
A Cybersecurity Policy and Planning Specialist develops and maintains cybersecurity plans, strategies, and policies to align with organizational cybersecurity initiatives and regulatory compliance requirements. A Cybersecurity Policy and Planning Specialist could also be called a Cyber Strategic Advisor, or Cyber Policy Analyst.
12. Defensive Cybersecurity Analyst
A Defensive Cybersecurity Analyst analyzes data collected from cybersecurity defense tools to detect, mitigate, and prevent security threats that could impact systems and networks. A Defensive Cybersecurity Analyst may also be known as an Incident Analyst or Network Defense Technician.
Career Path:
- Starting up:
- Entry-Level: Junior analysts use SIEM tools such as Splunk to monitor security alerts and support incident response teams.
- Intermediate-Level: Analysts with 3-7 years of experience earn certifications, develop advanced investigative skills, and work on complex cases involving novel threats.
- Senior-Level: With 7-15 years of experience, senior analysts lead forensic teams, contribute to industry research, and may progress into roles like Chief Information Security Officer (CISO) or cybersecurity leadership positions.
13. Systems Security Manager
A Systems Security Manager oversees the cybersecurity of a program, organization, system, or enclave. This role ensures comprehensive security management, compliance, and risk mitigation strategies are in place.
Infrastructure Support Specialist
An Infrastructure Support Specialist tests, implements, deploys, maintains, and administers infrastructure hardware and software to enhance cybersecurity defenses and ensure system resilience. Infrastructure Support Specialists are also known as Continuous Monitoring Specialists, or Systems Security Administrators.
Career Path:
- Starting up:
- Entry-Level: New specialists assist in configuring network and security infrastructure, performing routine system maintenance, and troubleshooting technical issues. Foundational certifications like CompTIA Network+, CompTIA Security+, or Microsoft Certified: Azure Fundamentals can help establish expertise.
- Intermediate-Level: Analysts with 3-7 years of experience earn certifications, develop advanced investigative skills, and work on complex cases involving novel threats.
- Senior-Level: With 7-15 years of experience, senior analysts lead forensic teams, contribute to industry research, and may progress into roles like Chief Information Security Officer (CISO) or other cybersecurity leadership positions.
Secure Systems Developer
A Secure Systems Developer designs, develops, and tests secure systems while evaluating security measures throughout the entire system development life cycle. Secure Systems Developers may also be known as Information Assurance Developers.
Career Path:
- Starting up:
- Entry-Level: The early years of secure systems development are focused on writing secure code and learning secure coding practices.
- Intermediate-Level: Developers integrate security into CI/CD pipelines, conduct threat modeling, and work with DevSecOps practices. Certifications like Certified Secure Software Lifecycle Professional (CSSLP) help advance careers.
- Senior-Level: Senior Developers with 7+ years of experience design and oversee secure software frameworks, lead security development teams, and consult on security architecture.
KEEP IT MOVING
