Security Analyst

What is a security analyst?

Security analysts can work across the spectrum of computer and information networks. From corporate databases to banking networks and from office networks to military intelligence, security analysts can be found anywhere that large amounts of information are being stored, shared, or used by a computer. A well-trained security analyst will probably have an advanced understanding of both hardware and software, and how data is stored and managed. The top three cybersecurity threats facing information technology networks of all scales are ransomware attacks, social engineering attacks, and the theft or compromise of sensitive information from inside an organization or company. This means that cybersecurity analysts need to be prepared to deal with a wide variety of threats and look for security issues both internally and externally. 

Security analyst skills

The cybersecurity skills and expertise required will vary widely from job to job. Some security analyst job openings are looking for people with specific skills, like managing a proprietary network, or training other employees, or conducting penetration testing on the organization’s digital properties. For students and early career professionals, one key tactic to understand what the most valuable and marketable job skills is to study a number of different job descriptions at various kinds of employers. That research should start to show trends and reveal how current skills and experience map to opportunities. Understanding the current job market will also help make decisions about what kinds of security certifications and degrees to pursue.

Despite the wide variability of cybersecurity analyst jobs, there are a number of characteristics or skills that are common to the profession.

1) Programming experience. Since cybersecurity analysts are charged with defending digital infrastructure, it makes sense that cybersecurity professionals are expected to have some base level of programming experience and familiarity with foundational programming languages such as C, C++, PHP, Perl, and Java. 

2) Analytical. Security analysts work with data from a variety of sources and so they need to be able to take information from many inputs to make decisions.

3) Detail-oriented. Much of the work of cybersecurity analysts comes down to examining small details — like lines of computer code or network commands — that could have major impacts.

4) Forward-thinking. Security analysts need to anticipate the future based on current data and trends and then make security recommendations accordingly.

What do security analysts do?

A security analyst often wears a lot of hats in an organization or company. They might be part police officers, part systems designers, part policymakers, and part trainers or teacher. 

While security analysts could be thought of as the first responders of the digital world, as they are often called on to triage security incidents the reality is that most cybersecurity analysts spend their time developing policies and procedures and reviewing best practices, and providing training for company or organization employees. In an optimal world, a security analyst is taking proactive steps to prevent security breaches in the first place. That could mean constantly updating systems and software, or it could mean actively looking for ways to knock down firewalls or find loopholes in computer code or operating systems. 

Outlook for security analysts

As the digital transformation across industries and sectors grows, security analysts will continue to be in high demand. Traditional cybersecurity analysts worked in niche industries related to vulnerable sectors of the economy such as the military, finance and banking, and the oil and gas companies. But now, consumer companies and everyday brands are hiring cybersecurity analysts to help protect their companies and operations. The need for well-trained cybersecurity analysts is so pronounced that the Bureau of Labor Statistics (BLS) predicts that employment opportunities for cybersecurity professionals will grow by 36 percent through 2024. The projected rate of job growth is much faster than other sectors of the economy and is projected to continue to grow into the next several years as more companies and organizations begin investing in cybersecurity positions.