Want A Career In Cybersecurity?

With a growing cyber threat landscape and an estimated 1 million unfilled cybersecurity jobs worldwide, the field is wide open for both recent graduates and people looking to make a career change.

Job postings in the cybersecurity field have gone up 74% over the past five years, and US News and World Report ranked a career in information security analysis fifth on its list of best technology jobs. Average salaries nationally are $88,890, and significantly higher in cities such as San Francisco and New York.

"The job prospects are excellent," says Deborah Hurley, a professor for Brown University's executive master in cybersecurity program, "the demand far outstrips the supply."

Here are 10 different job options to explore in the cybersecurity field, with job description information from CyberDegrees.org.

1. Security Consultant
"A security consultant is the IT equivalent of Obi-Wan, advisor, guide and all-round security guru," according to CyberDegrees.org. People in this role design and implement the strongest possible security solutions based on the needs and threats facing an individual company, and day-to-day tasks may vary widely. 
A security consultant might determine the most effective way to protect computers, networks, software, data, and information systems against attacks, perform vulnerability testing and risk analyses, test security solutions, respond to any incidents, and update security systems as needed, depending on the terms of their contract. 
2. Chief Information Security Officer
The chief information security officer (CISO) is the leader of all security initiatives in a company. While these tech professionals were traditionally seen as security enforcers, they are now often considered strategists helping the enterprise avoid cyber-crime. 
CISOs typically appoint and guide a team of security experts, create a strategic plan for the deployment of information security technologies and programs, develop corporate security policies, and monitor security vulnerabilities, among a number of other tasks. 
3. Security Engineer
Security engineers are intermediate-level positions that build and maintain IT security solutions for a company. These professionals develop security for the organisation's systems and projects, and also handle any technical problems that arise. 
Security engineers are often responsible for configuring and installing firewalls and intrusion detection systems, performing vulnerability testing, developing automation scripts to track incidents, and testing security solutions.
4. Security Architect
The senior-level security architect position involves designing, building, and overseeing the implementation of network and computer security for a company. 
Security architects must plan, research, and design strong security architectures for all IT projects, perform security assessments, respond to incidents, develop requirements for LANs, WANs, VPNs, routers, firewalls, and other network devices, as well as design PKIs, among other tasks. 
5. Incident Responder
An incident responder (sometimes called a computer security incident response team engineer or an intrusion analyst) is essentially a cyber firefighter, and must rapidly address security threats and incidents within a company. "In your role as a first responder, you will be using a host of forensics tools to find the root cause of a problem, limit the damage and see that it never happens again," according to CyberDegrees.org. "Like a firefighter, part of your job will also involve education and prevention." 
This involves actively monitoring systems and networks for attacks, identifying security vulnerabilities, performing malware analysis and reverse engineering, and establishing protocols for communication within an organisation and with law enforcement during a security incident.
6. Computer Forensics Expert
A computer forensics expert acts as a digital detective, accessing and analysing evidence from computers, networks, and data storage devices. 
On a day-to-day basis, this role involves conducting security incident investigations, recovering and examining data from devices, compiling evidence for legal cases, and advising law enforcement on the credibility of acquired data. 
These experts often work for large corporations, law enforcement agencies, legal firms, private consulting firms, and the government. 
7. Penetration Tester
Penetration testers, also known as ethical hackers, are responsible for legally hacking into an organisation's applications, networks, and systems to discover and later patch security vulnerabilities. 
This role involves creating and performing formal penetration tests, conducting physical security assessments of servers, systems, and network devices, using social engineering to discover security flaws, and incorporating business considerations into security strategies.
8. Security Analyst
A security analyst detects and prevents cyber-threats for a company. 
This might involve planning, implementing, and upgrading security measures and controls, performing risk analyses, conducting internal and external security audits, managing network, intrusion detection, and prevention systems, and coordinating security plans with third party vendors.
9. Security Software Developer
These tech professionals develop security software and integrate security into applications software during the design and development process. 
Depending on the specific position and company, a security software developer might oversee a team of developers in the creation of secure software tools, develop a company-wide software security strategy, participate in the lifecycle development of software systems, support software deployments to customers, and test their work for vulnerabilities. 
10. Security Auditor
A security auditor is a mid-level role responsible for examining the safety and effectiveness of company computer systems and their security components, and then issuing a detailed report outlining the success of the system and any changes or improvements that could be made. These professionals plan, execute, and lead security audits across a company, evaluate the efficiency, effectiveness, and compliance of operational processes with corporate security policies and any government regulations, and develop and administer risk-focused exams for IT systems.

TechRepublic:

You Might Also Read:

GCHQ Approved: Ten Cyber Degree Courses:

Who Needs A Computer Science Degree Anyway?:

Cybersecurity Threats Are Changing Recruitment:

 

 

« Intelligence-Led Policing Gets Automated
Cybersecurity Is A Bigger Issue Than Brexit »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

Perimeter 81 / How to Select the Right ZTNA Solution

Perimeter 81 / How to Select the Right ZTNA Solution

Gartner insights into How to Select the Right ZTNA offering. Download this FREE report for a limited time only.

Jooble

Jooble

Jooble is a job search aggregator operating in 71 countries worldwide. We simplify the job search process by displaying active job ads from major job boards and career sites across the internet.

Cyber Security Supplier Directory

Cyber Security Supplier Directory

Our Supplier Directory lists 6,000+ specialist cyber security service providers in 128 countries worldwide. IS YOUR ORGANISATION LISTED?

LockLizard

LockLizard

Locklizard provides PDF DRM software that protects PDF documents from unauthorized access and misuse. Share and sell documents securely - prevent document leakage, sharing and piracy.

Clayden Law

Clayden Law

Clayden Law advise global businesses that buy and sell technology products and services. We are experts in information technology, data privacy and cybersecurity law.

Sapphire

Sapphire

Sapphire deliver flexible and scalable cybersecurity solutions, helping organisations to detect, protect, respond and remediate against cyber threats.

Conscio Technologies

Conscio Technologies

Conscio Technologies is a specialist in IT security awareness. Our solutions allow you to easily manage innovative online IT awareness campaigns.

Puppet

Puppet

Puppet is a leader in IT automation. Our software helps DevOps securely automate configuration and management of machines and the software running on them.

LexisNexis Risk Solutions

LexisNexis Risk Solutions

LexisNexis Risk Solutions provides technology solutions for Anti-Money Laundering, Fraud Mitigation, Anti-Bribery and Corruption, Identity Management, Tracing and Investigation.

HackLabs

HackLabs

HackLabs is a penetration testing company providing services for network security, web application security and social engineering testing.

Fastpath Solutions

Fastpath Solutions

Fastpath deliver software solutions that enable you to take control of your security, compliance and risk management initiatives.

Ridgeback Network Defense

Ridgeback Network Defense

Ridgeback is an enterprise security software platform that defeats malicious network invasion in real time. Ridgeback champions the idea that to defeat an enemy you must engage them.

DataSunrise

DataSunrise

DataSunrise Data-Centric high-performance security software protects the sensitive data in real-time in cloud or on premises, and helps organizations to stay compliant.

Intelligent Waves

Intelligent Waves

Intelligent Waves holds and manages contracts to provide an array of intelligence, operational, communications and IT support to the USG in austere, forward-deployed, hazardous duty environments.

ODSC

ODSC

ODSC is a security systems integrator that provides services and expertise in identity management and access.

Council of Europe Convention on Cybercrime

Council of Europe Convention on Cybercrime

The Council of Europe helps to protect societies worldwide from the threat of cybercrime through the Convention on Cybercrime.

Right-Hand Cybersecurity

Right-Hand Cybersecurity

Right-Hand Cybersecurity empowers businesses to monitor, measure and mitigate employee induced cyber risks in real-time.

DigiSec360

DigiSec360

DigiSec360 is a technology firm focused on the human element of cybersecurity.

SkyePoint Decisions

SkyePoint Decisions

SkyePoint Decisions is a leading Cybersecurity Architecture and Engineering, Critical Infrastructure and Operations, and Applications Development and Maintenance IT service provider.

FluidOne

FluidOne

FluidOne are an award-winning Connected Cloud Solutions provider. We design tailored solutions to help customers and partners digitally transform their IT and communications.

Badge

Badge

Badge authenticates you on-demand for every application, on any device, without storing any secrets.