# Careers Part of the Cybersecurity Merit Badge Digital Resource Guide: [Introduction & Overview](https://merit-badge.university/merit-badges/cybersecurity/guide/index.md) *Projects & Careers* > **9.** Do ONE of the following: Cybersecurity has a massive workforce shortage — there are hundreds of thousands of unfilled cybersecurity jobs in the United States alone. This means opportunity for you. Whether you choose Option A or B, you will discover that cybersecurity careers are diverse, well-paying, and in extremely high demand. --- ### Option A: Research a Career > **9a.** Identify three career opportunities that would use skills and knowledge in cybersecurity. Pick one and research the training, education, certification requirements, experience, and expenses associated with entering the field. Research the prospects for employment, starting salary, advancement opportunities and career goals associated with this career. Discuss what you learned with your counselor and whether you might be interested in this career. Here are cybersecurity career paths to consider. Choose three that interest you, then deep-dive into one. **Security Analyst** — The front-line defender. Security analysts monitor networks and systems for suspicious activity, investigate alerts, and respond to incidents. This is often the entry point into cybersecurity careers. - **Education:** Bachelor's degree in cybersecurity, computer science, or related field (some roles accept certifications in lieu of a degree) - **Certifications:** CompTIA Security+, Certified Ethical Hacker (CEH) - **Starting salary:** $60,000–$85,000 - **Growth:** Can advance to senior analyst, security engineer, or security architect **Penetration Tester (Ethical Hacker)** — Hired to break into systems on purpose. "Pen testers" think like attackers, finding vulnerabilities before real hackers do. Companies pay them to attack their own networks, then fix what they find. - **Education:** Bachelor's degree or equivalent experience; strong technical skills matter most - **Certifications:** OSCP (Offensive Security Certified Professional), CEH, GPEN - **Starting salary:** $70,000–$100,000 - **Growth:** Senior pen tester, red team lead, security consultant **Digital Forensics Investigator** — The cyber detective. Forensics investigators examine digital evidence after a breach or crime — recovering deleted files, tracing attack paths, and preserving evidence for legal proceedings. - **Education:** Bachelor's in cybersecurity, computer science, or criminal justice - **Certifications:** GCFE, EnCE, CFCE - **Starting salary:** $55,000–$80,000 - **Growth:** Senior investigator, forensics manager, expert witness **Other careers to explore:** - **Security Engineer** — designs and builds secure systems - **Chief Information Security Officer (CISO)** — leads an organization's entire security program - **Cryptographer** — develops encryption algorithms and protocols - **Incident Responder** — the first to arrive when a breach happens, containing damage and investigating - **Security Software Developer** — writes the tools that other security professionals use - **Threat Intelligence Analyst** — researches emerging threats and predicts future attack trends > **Did You Know?** > > The cybersecurity field has a 0% unemployment rate — demand for qualified professionals far exceeds supply. The U.S. has over 500,000 unfilled cybersecurity positions, and the global shortage exceeds 3 million. This gap is expected to persist for years, making cybersecurity one of the most job-secure career paths available. ### Research Framework When researching your chosen career, cover these areas: **Career Research Guide** — Answer these questions for your chosen career - [ ] Training and education: What degree(s) or training programs are recommended? Are boot camps or self-study paths viable alternatives? - [ ] Certifications: Which certifications are required or preferred? What do they cost? How long do they take? - [ ] Experience: What entry-level experience is needed? Are internships, apprenticeships, or lab work available? - [ ] Starting salary: What can you expect to earn in your first role? - [ ] Advancement: What does the career ladder look like? What positions can this role grow into? - [ ] Work environment: Office, remote, government, private sector, military? - [ ] Day-to-day: What does a typical workday look like? What tools and technologies are used? --- ### Option B: Visit a Cybersecurity Organization > **9b.** Visit a business or organization that does work in cybersecurity. Find out about different work roles, what they do, and how they acquired their knowledge through college degrees or certifications. Share what you learned with your counselor. If you choose this option, look for organizations in your area: - **Technology companies** with security teams - **Government agencies** (many have public outreach programs) - **Military installations** with cybersecurity units - **Banks and financial institutions** (they have large security operations) - **Hospitals and healthcare systems** (cybersecurity is critical for patient data protection) - **Universities** with cybersecurity programs or research labs - **Managed Security Service Providers (MSSPs)** — companies that provide security services to other businesses During your visit, ask about: - The different roles on their security team - How team members got into cybersecurity (education, career changers, military background) - What a typical day looks like - What certifications they recommend for someone starting out - What skills matter most beyond technical knowledge (communication, problem-solving, teamwork) > **Tip** > > If an in-person visit is not possible, many cybersecurity professionals are active on LinkedIn and are willing to do informational interviews over video calls. Your Scout leader or counselor may be able to help you connect with someone in the field. You can also attend virtual cybersecurity career events — many organizations like CISA and ISC² host free online career days. ## Paths for Young People Right Now You do not have to wait for college to start building cybersecurity skills: - **CyberPatriot** — competitive experience that looks great on college applications - **picoCTF** — free, self-paced challenges that build real skills - **CompTIA ITF+ and Security+** — certifications available to high school students - **Cisco Networking Academy** — free online courses in networking and cybersecurity - **Scholarship programs** — organizations like CyberCorps offer full scholarships for cybersecurity students who commit to government service after graduation [Careers in Cybersecurity — CompTIA Future of Tech](https://www.futureoftech.org/cybersecurity/6-careers-in-cybersecurity/): Explore cybersecurity career paths, required skills, and how to get started in the field. [Degrees & Certifications — Cyber.org](https://cyber.org/career-exploration/degrees-certifications): Learn about the education and certification pathways into cybersecurity careers. ![Career progression infographic showing paths from Entry Level to Security Analyst, Penetration Tester, Forensics Investigator, Security Engineer, and CISO](https://ik.imagekit.io/doulacoop/tr:w-800/mbu-assets/merit-badges/cybersecurity/guide/cybersecurity-career-paths?v=5fa4d364) --- - Previous: [Cybersecurity Activities](https://merit-badge.university/merit-badges/cybersecurity/guide/req8/index.md) - Next: [Extended Learning](https://merit-badge.university/merit-badges/cybersecurity/guide/extended-learning/index.md)