Career guidance
Cybersecurity Career Paths
Security is not one job. Here's what the main roles involve, where people typically enter, and which courses build toward each.
| Role | What they do | Typical entry | Relevant courses |
|---|---|---|---|
| SOC Analyst | Monitors alerts, triages and escalates suspicious activity. | Common entry role | |
| Incident Responder | Leads the response to confirmed incidents — scope, contain, recover. | After SOC experience | |
| Threat Hunter / Detection Engineer | Proactively searches for undetected activity and builds detections. | Mid-level | |
| Penetration Tester | Runs scoped, authorised attacks and reports exploitable weaknesses. | Requires demonstrable skill | |
| Application Security Engineer | Secures web, API and mobile applications with development teams. | Often from development | |
| Cloud Security Engineer | Secures identity, configuration and workloads in AWS / Azure. | Often from cloud / DevOps | |
| Digital Forensics / Malware Analyst | Investigates evidence and analyses hostile code. | Specialist | |
| Red Team Operator | Emulates real adversaries to test detection and response. | Senior |
Where should a beginner start?
Most people begin with fundamentals, then move into a defensive role such as SOC analyst, because organisations hire monitoring staff in the greatest numbers. Offensive roles are popular but typically expect proven skill first. Our beginner career roadmap walks through the steps in detail.
What about salaries and placements?
We deliberately don't publish salary figures or placement statistics. Pay varies widely by role, employer, city and demonstrated skill, and generic numbers mislead more than they help. A course advisor can talk through your situation honestly.
Get personal career guidance
Tell us your background and we'll suggest a realistic path and starting course.