Field
Cybersecurity
Protect systems, identities, networks, applications, and data.
Security is not one job — it is a dozen very different ones that happen to share a goal. Some of it is investigation, some is engineering, some is design, some is arguing about risk in a spreadsheet. Almost none of it is a first job, and anyone who tells you otherwise is selling something. The road in runs through networking, systems or support.
Inside cybersecurity
All 17 roles in this field
Each page covers what you actually do, the technologies, where the work happens, the honest downside, and only then the certifications.
Application Security Engineer
Find and fix the flaws in software before it ships.
Usually a second role
Detection Engineer
Write the rule that catches it next time — without crying wolf.
Usually a second role
Digital Forensics Analyst
Reconstruct exactly what happened, in a way that would survive a courtroom.
A senior destination
GRC Analyst
Decide what risk is acceptable, and prove the controls actually work.
Reachable as a first job
Identity Engineer
Own the system that decides who everyone is and what they may reach.
Usually a second role
Incident Responder
Take control of a compromise that is happening right now.
A senior destination
Network Security Engineer
Protect the pathways that information travels through.
Usually a second role
OT / ICS Security Engineer
Secure the systems running factories, utilities and physical processes — where a reboot is not an option.
A senior destination
Penetration Tester
Break in on purpose, with permission, so the gaps get closed first.
Usually a second role
Security Architect
Decide the shape of defence before anything is built — then defend the decision.
A senior destination
Security Engineer
Build and run the controls that everyone else’s safety quietly depends on.
Usually a second role
SOC Analyst
Decide, quickly, which of today’s thousand alerts is the one that matters.
Reachable as a first job
Threat Hunter
Go looking for the intruder nobody has raised an alert about.
A senior destination
Vulnerability Management Analyst
Know what is broken across ten thousand machines, and what to fix first.
Reachable as a first job
Zero Trust Engineer
Stop trusting anything for being "inside", and build what replaces that assumption.
A senior destination
Cloud Security Engineer
Secure infrastructure that can be created, changed and destroyed in seconds.
Usually a second role
DevSecOps Engineer
Put the security checks inside the pipeline, so nobody has to remember them.
A senior destination
Technologies you’ll meet here
Click any of them for a plain-English explanation.