Cybersecurity

Protecting systems, data, and organisations from threats

Overview

Cybersecurity covers the roles responsible for protecting organisations from digital threats — detecting attacks, investigating incidents, securing infrastructure, testing for vulnerabilities, and building the systems that make defence possible. It is one of the fastest-growing career areas in technology, driven by rising attack volumes, regulatory pressure, and a persistent global shortage of qualified practitioners.

The category spans a wide range of specialisms. Defensive roles — SOC analysts, incident responders, and security engineers — focus on detecting and containing threats. Offensive roles — penetration testers and ethical hackers — find vulnerabilities before attackers do. Governance and compliance roles manage policy, risk, and regulatory requirements. Cloud and application security roles embed security into infrastructure and software delivery. Most practitioners begin in a broad defensive role and develop specialism over time.

Roles in this Category

21 roles

Role	Tagline	Outlook
Data Privacy Officer	Ensuring an organisation processes personal data lawfully and in line with data protection law	Growing	View →
Security Engineer	Building and maintaining the technical controls that protect systems, data, and infrastructure	Booming	View →
Cryptographer	Designing and evaluating the cryptographic systems that secure digital communications and data	Growing	View →
PKI Specialist	Managing the certificate infrastructure that underpins encryption and authentication	Growing	View →
SIEM Engineer	Building and maintaining the detection platform at the centre of security operations	Growing	View →
Vulnerability Analyst	Scanning, prioritising, and tracking remediation of vulnerabilities across the estate	Growing	View →
Digital Forensics Analyst	Collecting and analysing digital evidence to reconstruct security incidents and breaches	Growing	View →
Ethical Hacker	Attempting to breach systems and networks to expose vulnerabilities before attackers do	Booming	View →
Cloud Security Engineer	Designing and implementing security controls across cloud infrastructure and deployments	Booming	View →
Security Operations Manager	Leading the SOC team that monitors, investigates, and responds to security threats	Growing	View →
SOC Analyst	Monitoring security alerts and triaging threats inside a Security Operations Centre	Booming	View →
Penetration Tester	Running structured, scoped attacks against systems and applications to find weaknesses	Booming	View →
DevSecOps Engineer	Integrating security controls directly into software delivery pipelines and CI/CD workflows	Booming	View →
Information Security Manager	Overseeing the security programme that protects an organisation's data and systems	Growing	View →
Compliance Analyst	Assessing and monitoring security controls against regulatory frameworks and audit requirements	Growing	View →
Cybersecurity Analyst	Monitoring systems for threats, investigating incidents, and reducing security risk	Booming	View →
IT Risk Analyst	Identifying and assessing technology risks to keep the organisation's exposure understood	Growing	View →
Mobile Security Specialist	Securing mobile applications and devices across iOS and Android environments	Growing	View →
Incident Response Analyst	Containing and investigating cybersecurity incidents from first alert through to resolution	Booming	View →
Identity Access Management Specialist	Controlling who can access an organisation's systems, data, and applications — and how	Booming	View →
Network Security Engineer	Designing and maintaining the security controls that protect an organisation's network	Growing	View →

Skills

Hard Skills

Network Security
Risk Management
Threat Intelligence
Regulatory Compliance
Vulnerability Management
Security Architecture
Incident Management
Identity and Access Management
Secure Coding

Soft Skills

CommunicationTranslating technical risk for non-security audiences
Analytical ThinkingPattern-matching across noisy alert streams
Attention to DetailMissed indicators become missed incidents
Methodical ApproachSystematic investigation under pressure
Risk AwarenessWeighing impact and likelihood under uncertainty
Engineering DisciplineBuilding defences that scale with the threat surface

Tools & Software

SplunkMicrosoft SentinelCrowdStrikeWiresharkNmapTenableElastic StackKali Linux

Core Themes

Monitoring systems and networks for signs of attack or compromise
Investigating and responding to security incidents and breaches
Identifying vulnerabilities through testing, scanning, and assessment
Building and maintaining security controls across endpoints, networks, and cloud
Managing identity, access, and privilege across the organisation
Embedding security into software development and cloud infrastructure
Governing risk, compliance, and security policy across the business

Typical Entry Points

SOC Analyst and Cybersecurity Analyst are the most common entry roles. CompTIA Security+ is the widely recognised entry credential. Platforms such as TryHackMe and Blue Team Labs Online provide practical skills outside of employment. Degrees in Cybersecurity or Computer Science are common but not required — certifications and demonstrated hands-on ability carry significant weight.

Who This Category Is For

People who are genuinely curious about how systems can be attacked and defended
Those who enjoy investigative work — tracing what happened and why
People comfortable working under pressure during live incidents
Those drawn to the offensive side — finding vulnerabilities before attackers do
Career switchers looking for a high-demand field with a clear certification entry pathway
People who want to specialise over time — the category has many distinct directions
Those who are comfortable with on-call responsibilities in security operations roles
People who want to work in a field where the stakes and the salaries are both high

Related Categories

Networking Cloud and Infrastructure IT Support and Operations