Req 9 — Careers
Cybersecurity has a massive workforce shortage — there are hundreds of thousands of unfilled cybersecurity jobs in the United States alone. This means opportunity for you. Whether you choose Option A or B, you will discover that cybersecurity careers are diverse, well-paying, and in extremely high demand.
Option A: Research a Career
Here are cybersecurity career paths to consider. Choose three that interest you, then deep-dive into one.
Security Analyst — The front-line defender. Security analysts monitor networks and systems for suspicious activity, investigate alerts, and respond to incidents. This is often the entry point into cybersecurity careers.
- Education: Bachelor’s degree in cybersecurity, computer science, or related field (some roles accept certifications in lieu of a degree)
- Certifications: CompTIA Security+, Certified Ethical Hacker (CEH)
- Starting salary: $60,000–$85,000
- Growth: Can advance to senior analyst, security engineer, or security architect
Penetration Tester (Ethical Hacker) — Hired to break into systems on purpose. “Pen testers” think like attackers, finding vulnerabilities before real hackers do. Companies pay them to attack their own networks, then fix what they find.
- Education: Bachelor’s degree or equivalent experience; strong technical skills matter most
- Certifications: OSCP (Offensive Security Certified Professional), CEH, GPEN
- Starting salary: $70,000–$100,000
- Growth: Senior pen tester, red team lead, security consultant
Digital Forensics Investigator — The cyber detective. Forensics investigators examine digital evidence after a breach or crime — recovering deleted files, tracing attack paths, and preserving evidence for legal proceedings.
- Education: Bachelor’s in cybersecurity, computer science, or criminal justice
- Certifications: GCFE, EnCE, CFCE
- Starting salary: $55,000–$80,000
- Growth: Senior investigator, forensics manager, expert witness
Other careers to explore:
- Security Engineer — designs and builds secure systems
- Chief Information Security Officer (CISO) — leads an organization’s entire security program
- Cryptographer — develops encryption algorithms and protocols
- Incident Responder — the first to arrive when a breach happens, containing damage and investigating
- Security Software Developer — writes the tools that other security professionals use
- Threat Intelligence Analyst — researches emerging threats and predicts future attack trends
Research Framework
When researching your chosen career, cover these areas:
Career Research Guide
Answer these questions for your chosen career
- Training and education: What degree(s) or training programs are recommended? Are boot camps or self-study paths viable alternatives?
- Certifications: Which certifications are required or preferred? What do they cost? How long do they take?
- Experience: What entry-level experience is needed? Are internships, apprenticeships, or lab work available?
- Starting salary: What can you expect to earn in your first role?
- Advancement: What does the career ladder look like? What positions can this role grow into?
- Work environment: Office, remote, government, private sector, military?
- Day-to-day: What does a typical workday look like? What tools and technologies are used?
Option B: Visit a Cybersecurity Organization
If you choose this option, look for organizations in your area:
- Technology companies with security teams
- Government agencies (many have public outreach programs)
- Military installations with cybersecurity units
- Banks and financial institutions (they have large security operations)
- Hospitals and healthcare systems (cybersecurity is critical for patient data protection)
- Universities with cybersecurity programs or research labs
- Managed Security Service Providers (MSSPs) — companies that provide security services to other businesses
During your visit, ask about:
- The different roles on their security team
- How team members got into cybersecurity (education, career changers, military background)
- What a typical day looks like
- What certifications they recommend for someone starting out
- What skills matter most beyond technical knowledge (communication, problem-solving, teamwork)
Paths for Young People Right Now
You do not have to wait for college to start building cybersecurity skills:
- CyberPatriot — competitive experience that looks great on college applications
- picoCTF — free, self-paced challenges that build real skills
- CompTIA ITF+ and Security+ — certifications available to high school students
- Cisco Networking Academy — free online courses in networking and cybersecurity
- Scholarship programs — organizations like CyberCorps offer full scholarships for cybersecurity students who commit to government service after graduation
