How to become a cybersecurity analyst

What does a cybersecurity analyst do?

Cybersecurity analysts monitor, analyze, and respond to hardware, software, and network threats. They act as the primary line of defense against breaches. Day-to-day tasks vary by organization but frequently include:

• Performing risk assessments and penetration tests
• Researching potential threats
• Installing firewalls, anti-virus software, and other security programs
• Developing patches to fix vulnerabilities
• Monitoring the network for potential security incidents
• Investigating and responding to security events, including detailed response reports
• Developing data security best practices and educating company employees and stakeholders

According to the Bureau of Labor Statistics (BLS), the median annual salary for information security analysts, of which cybersecurity analysts are a subset, was $120,360 in May 2023.

Steps to become a cybersecurity analyst

To become a cybersecurity analyst, your skillset is typically more important than exactly how you obtained those skills. There are many different pathways, but most people who are successful in this role follow some or all of these steps:

Step 1: Earn a bachelor's degree

A bachelor's degree is not typically required for entry-level cybersecurity analyst positions, but it could help you advance in your career. Many people who choose this option earn a degree in computer science, which can broaden their knowledge and understanding of the field.

Step 2: Build your skills

Although it is not required, a cybersecurity boot camp can help you develop a range of skills quickly. Regardless of where you get them, though, employers look for a broad collection of skills, such as:

• Coding
• Operating systems
• Enterprise security architecture
• Network and systems security
• Risk management
• Threat intelligence
• Data management and storage
• Incident response

Step 3: Get certified

Earning one or more certifications can show employers that you have the knowledge and experience required to be a successful cybersecurity analyst. Options include:

• CompTIA Network+: Networking is a fundamental skill in cybersecurity, and this certification shows that you have mastered the fundamentals of network management. For early career professionals, students should have 9-12 months of field experience.
• CompTIA Security+: This certificate provides essential cybersecurity training and typically requires students to have two years of experience and a completed Network+ certification.
• CompTIA CySA+: This intermediate certification demonstrates a higher level of proficiency in the field. Most candidates have at least four years of field experience and have earned other the Network+ or Security+ certifications.

Step 4: Consider a master's degree in cybersecurity

As you gain experience in your career, you might discover that you have a passion for a specific aspect of cybersecurity. You may want to change to a related career, such as forensic analysis or ethical hacking, or you might be interested in a consultant or management role. An optional online master's degree in cybersecurity could be what you need to take that next step in your career.

Get started on edX

To learn more about how edX can help you grow the skills you need to become a cybersecurity analyst, explore cybersecurity courses and certificates.