Cybersecurity Analyst
Protect people and businesses by spotting threats before they cause damage.
What does a Cybersecurity Analyst do?
Cybersecurity analysts monitor systems, investigate suspicious activity, and help organisations stay safe from attacks. You think like an attacker to defend like a protector. It's a role that blends technical skills with investigative thinking.
Who it fits
Curious people who notice details others miss, enjoy investigation and puzzles, and care about protecting people and systems.
Good for analytical learners who enjoy thinking through problems from multiple angles.
Skills you need
Tools you will use
Starter projects
Good projects to practise and add to a portfolio.
- Home lab with virtual machines
- CTF challenges on TryHackMe
- Network traffic analysis exercises
- Build a simple security audit checklist
// ROADMAP
Cybersecurity Analyst career roadmap
Estimated time: 8–14 months
Badges show what each resource is. Only items marked certification lead to a professional credential — everything else is learning material.
Networking Fundamentals
6–8 weeksSecurity starts with understanding how networks work. Learn TCP/IP, DNS, HTTP, the OSI model, and how data moves across the internet. This knowledge is non-negotiable.
Linux Basics
4–6 weeksMost security tools run on Linux. Learn the command line — file permissions, processes, networking tools. OverTheWire Bandit is the most effective way to learn by doing.
Security Fundamentals
6–8 weeksLearn the CIA triad, common threats (phishing, malware, ransomware), and defence strategies. Study the Security+ framework — it structures everything you need to know for entry-level roles.
Hands-On Practice
OngoingTheory only takes you so far. Work through TryHackMe beginner paths. Get comfortable investigating logs, running scans, and responding to simulated attacks.
CompTIA Security+ Certification
8–12 weeksSecurity+ is the most recognised entry-level security certification. It opens doors to SOC analyst, security consultant, and GRC roles. Study consistently for 8–12 weeks.
// START LEARNING
Cybersecurity Analyst learning resources
Videos first — they're the fastest way to get moving — then reading, hands-on practice and courses. Only resources badged professional certification award a formal credential.
The Hacker's Roadmap: Getting Started in Cybersecurity
NetworkChuck · 25 minutes
A current orientation to the certifications, practical skills and experience needed to enter cybersecurity.
Learning resource. This does not award a professional certification.
Networking Basics
Cisco Skills for All
A free foundational course covering network devices, protocols, addressing and basic troubleshooting.
Certificate availability depends on the course provider.
Linux Journey
LabEx
Short progressive lessons on the command line, permissions, processes, networking and system administration.
Certificate availability depends on the course provider.
Introduction to Cyber Security
TryHackMe
Guided browser-based labs introducing offensive security, defensive security, networking and web concepts.
Learning resource. This does not award a professional certification.
Web Security Academy
PortSwigger
Free learning paths and realistic labs for web vulnerabilities, testing methodology and exploitation.
Learning resource. This does not award a professional certification.
Bandit Wargame
OverTheWire
Progressive command-line security challenges that build Linux, SSH and problem-solving fluency.
Learning resource. This does not award a professional certification.
// PRACTISE
Gain Cybersecurity Analyst work experience
Build practical evidence before your first role. Provider terms and eligibility can change.
Forage · Employer job simulations
virtual-job-simulation · REMOTE
Complete self-paced tasks designed by employers and compare your work with example solutions.
GitHub · Good first issues
open-source · REMOTE
Find newcomer-labelled issues and build evidence of collaboration in public repositories.
PortSwigger Web Security Academy · Web security practice labs
hands-on-lab · REMOTE
Solve realistic web-vulnerability labs and document methodology and results as practical security evidence.
// FIND WORK
Find Cybersecurity Analyst jobs
Start with “Cyber Security Analyst”. Platforms without stable public search URLs open with this suggested phrase.
LinkedIn Jobs
Broad professional job search with keyword, location, experience-level and remote filters.
Wellfound
Startup and technology roles with company and compensation context.
Dice
Specialist technology roles across engineering, data, security and infrastructure.
Built In
Technology and startup job discovery, including remote and city-focused listings.
UK visa and international opportunities
Sponsorship depends on the employer, vacancy and current immigration rules. Use the linked official guidance and verify every role before applying.
Going independent
Security knowledge opens a range of consulting and freelance paths. SMEs increasingly need security help but cannot afford full-time security staff — a gap that consultants fill.
Freelance Security Audits and Assessments
Medium effortHelp small and medium businesses understand their security posture through assessments, vulnerability scans, and basic penetration testing.
Examples
- Basic vulnerability assessments for local businesses
- Security awareness training programmes
- GDPR and cyber security compliance reviews
- Small business firewall and cloud security reviews
Getting started
- 1. Get CompTIA Security+ or similar certification first
- 2. Create a simple scope-of-work template for security reviews
- 3. Target regulated industries (accountants, solicitors, healthcare) who need compliance help
- 4. Join the CREST or NCSC Cyber Advisor scheme for credibility
Security Education and Content
Medium effortCreate courses, YouTube content, or newsletters teaching cybersecurity concepts. The skill shortage means learning resources are in constant demand.
Examples
- TryHackMe walkthroughs and tutorial YouTube channel
- Udemy or Teachable courses on specific security topics
- Newsletter on current cybersecurity news for non-technical audiences
- CTF writeup blog that drives consulting leads
Getting started
- 1. Start a blog or YouTube channel documenting your learning journey
- 2. Write CTF writeups — they attract search traffic and demonstrate skill
- 3. Build an audience before trying to monetise
- 4. Package your content into a structured course once you have an audience
Communities & tools
// EARNING POTENTIAL
Earning potential
2025Severe global talent shortage means salaries are rising fast. Experienced analysts are highly sought after, and certifications reliably translate into salary increases.
Freelance rates
Day rate
£350–£800
Hourly rate
£45–£100
What affects salary
- Certifications (Security+, CISSP, CISM) reliably add £5k–£15k to base salary
- SC or DV security clearance adds a significant premium in government and defence
- SOC experience is in high demand, especially Tier 2/3 analysts
- Cloud security knowledge (AWS Security Specialty, Microsoft AZ-500) commands premiums
- Threat intelligence and incident response experience valued most at senior levels
🌍 US cybersecurity analysts earn $80k–$150k+. Government and defence roles with clearance pay well in both the UK and US.
Based on: CyberSeek · ISC2 Workforce Study · Glassdoor UK · ITJobsWatch. All figures approximate.
// RESOURCES
Free resources to get started
Recommended starting points — no payment required.
- Lab
- Video
- Course
- Course
- Lab
Paid courses worth considering
These are not required — free resources above can get you far.
- Course
- Lab
Browse all resources
Resource directory.
Free and paid resources across every tech career path — searchable and filterable.
Not sure this fits?
Take the assessment.
Answer a few short questions and get your top matches — with reasons why they fit you.
Wondering if you are ready for this path? Analyse your CV →
Related careers
Compare paths that share skills, tools or ways of working.