Cyber Security Career Guide

Sectors / 25 July 2024

Cyber security is a fast-moving field that constantly changes, and experts are in an ongoing race to stay one step ahead of cyber crime. Careers in cyber security can be lucrative and exciting, and good cyber security experts will find themselves in demand.

As cyber criminals become more advanced, the threat of malicious online activity towards businesses, governments, and individuals grows. Society relies on cyber security experts to keep us safe, now more than ever. Many countries have laws that companies and organisations must comply with to protect members of the public from online hacking and other crimes.

In this guide, we’ll look at three specific roles in cyber security: cyber security analyst, forensic computer analyst and cyber incident responder. These job roles are closely interlinked, and candidates will have many of the same qualifications, skills and attributes as one another.

Potential Roles in Cyber Security

Cyber security analysts monitor, detect and combat cyber threats for companies and organisations. As a cyber security analyst, your job is to work with the technology and software of your company or client, identifying threats, assessing the risks of those threats, and either dealing with them immediately or escalating the issue to senior experts.

Forensic computer analysts investigate criminal online activities, such as hacking, scams, and creating or viewing illegal materials. A job as a forensic computer analyst can be demanding, requiring high-level technical skills and the ability to cope with potential exposure to disturbing online crime.

Cyber incident responders are the paramedics of cyber security, reacting when a company or organisation has a serious security breach that needs immediate attention. Working as a cyber incident responder can be technically challenging and high-pressured, but it can also be rewarding as you use your knowledge and expertise to resolve a crisis. Employers can be as diverse as small-medium companies and local governments to global organisations and national security departments.

Salary and Career Progression

Careers in cyber security typically attract good salaries and opportunities for progression. Some advanced and specialist roles are exceptionally highly paid. No company or organisation can afford to be offline in this digital age, so cyber security is big business.

Cyber security analysts start at around £25,000 to £30,000, depending on the employer. From here, salaries can rise to around £60,000 for mid-senior level roles and to £75,000 and more for advanced technical or managerial positions. Cyber security analysts in employment, rather than self-employed, can also expect additional benefits, like private healthcare and a pension scheme.

In the US, cyber security analysts can expect to earn an average of $125,000 annually.

Forensic computer analysts earn a similar salary to general cyber security analysts, at around £25,000 at entry level, rising to upwards of £60,000 with experience. Wages can reach £85,000 or more in some specialist and senior roles. Forensic computer analysts employed in the public sector, for example, police forces and governments, may receive more modest salaries than their colleagues in the private sector.
In the US, forensic computer analysts can earn an average of $75,000 per year, with some very senior roles reaching $150,000 and more.

Cyber incident responders can earn an average salary of around £80,000 in the UK and $115,000 in the United States. However, these incomes can vary quite significantly between employers. The bigger the company or, the more vital the organisation, the more likely it is to offer higher salaries to attract the best cyber incident responders. For example, businesses in the finance and banking industry simply cannot afford to risk their reputation with a serious online incident that jeopardises customer trust.

Qualifications, Education and Experience

Cyber security analysts must have the following:

4-5 GCSEs at grades 4-9
2-3 A levels to access university
A Bachelor’s degree in cyber security or another related subject, like mathematics or computer science
A post-graduate degree in cyber security
An apprenticeship as an alternative to a university degree

High school diploma
Bachelor’s degree in cyber security or a related subject, like computer science
It may be possible to undertake a fast-track training called a Bootcamp instead of a degree

Forensic computer analysts need the same background and training as cyber security analysts and tend to specialise as they advance into forensic roles. The following may be helpful:

4-5 GCSEs at grades 4-9
2-3 A levels to access university
A Bachelor’s degree in cyber security or similar subject, like computer science or mathematics
A post-graduate degree in cyber security
An apprenticeship as an alternative to a university degree
A master’s degree in a related subject, like computer forensics

High school diploma
Bachelor’s degree in cyber security or related field, like computer science
Professional experience working in cyber security
It may be possible to undertake a fast-track training called a Bootcamp instead of a degree to become a cyber security professional before specialising

Cyber incident responders also need a solid education and qualifications in computer-related fields, including the following:

4-5 GCSEs at grades 4-9
2-3 A levels to access university
A Bachelor’s degree in cyber security (a related subject, such as mathematics or computer science, may be acceptable)
A post-graduate degree in cyber security
Experience working in cyber security
Experience working in computer forensics may be beneficial

High school diploma
Bachelor’s degree in cyber security or another related subject, like computer science
It may be possible to undertake a fast-track training called a Bootcamp instead of a degree
Professional experience working in cyber security at a high level
Experience working in computer forensics
A relevant professional certification, for example, as a GIAC Certified Incident Handler or Certified Ethical Hacker

Skills

Cyber security analysts benefit from the following skills:

Attention to detail
Excellent IT skills
Diligence
Patience
Analytical thinking
Good problem-solving skills
Sound knowledge of mathematics
Communication skills
Ability to work as a team
Motivated
Stays up-to-date with software and cyber security tools

Forensic computer analysts need technical skills, as well as the following:

Problem-solving skills
Patience and diligence
Good communication skills
Excellent IT skill
Able to cope with frequent exposure to online criminal activity
Stays up-to-date with software and forensics tools

Cyber incident responders can work in high-pressure crisis situations and benefit from the following skills:

Ability to stay calm under pressure
Attention to detail
Excellent IT skills
Communication skills
Patience
Diligence
Determination
Stays up-to-date with software and cyber security tools

Working Hours

Cyber security professionals typically work standard office hours of 9 am to 5 pm, from Monday to Friday. However, most cyber security analysts and incident responders must be available whenever needed if a digital crisis occurs. In these cases, you may be expected to stay at work until the issue is resolved, or at least the systems are secure. Some employers may ask for 24-hour coverage from the entire cyber security team, which may entail shift work.

Notable Locations

Cyber security jobs are often remote, as experts can work online from anywhere, although some employers may prefer you to come into the office. Hybrid working between the office and home may be an option.

Due to the online nature of the work, cyber security jobs are not usually dependent on geographical location. However, most employers would prefer you to reside in the same country as the company.

Notable Companies

National Cyber Security Centre, UK: Consultancy company providing advice and support to governments and large companies
BAE Systems, UK: Responds to advanced cyber threats in the security, aerospace and defence sectors
Darktrace, UK: AI-led cyber security services focusing on IoT devices, industrial systems and the cloud
HackerOne, CA, US: Ethical hacking company that offers Attack Resistance management. Customers include Nintendo, AT&T and PayPal
Microsoft, CA, US: World-renowned tech company that recently acquired RiskIQ and now offers advanced cyber security services

Next Steps

Sign up to JobLookup for the latest cyber security jobs straight to your inbox. To start your job search today, read The Ultimate Jobseeker Guide for tips and advice on landing your next role.