Cyber Security Analyst Roadmap
A step-by-step Cyber Security Analyst roadmap: the full stack, the skills to learn in order and the best places to learn each step.
The stack, end to end
- Fundamentals: IP addressing, TCP and UDP, DNS, Firewalls, Load balancing, Linux command line, File permissions, Processes, Shell scripting
- Security: Security principles, Cryptography basics, Threat modelling, Identity and access, OWASP Top 10, Burp Suite basics, SQL injection, Cross-site scripting, Network scanning, Log analysis, Incident response basics, Security reporting
- Get hired: Portfolio projects, Technical resume, Interview preparation
Networking basics
Understand IP addresses, ports, TCP and UDP, DNS, firewalls, load balancers and how traffic gets from one machine to another. Cloud, DevOps and security work all depend on it.
Skills
- IP addressing
- TCP and UDP
- DNS
- Firewalls
- Load balancing
Tips
- Draw the path of a request from your laptop to a website, step by step.
Where to learn
- Cloudflare: Learning Center (docs, free)
- MDN: HTTP (docs, free)
Linux and the command line
Servers mostly run Linux. Learn to move around the file system, read and edit files, manage permissions and processes, and write small shell scripts.
Skills
- Linux command line
- File permissions
- Processes
- Shell scripting
Tips
- Use the terminal for everyday tasks for a few weeks and it will start to feel natural.
Where to learn
- Linux Journey (course, free)
- Bash reference manual (docs, free)
Security fundamentals
Learn the core ideas: confidentiality, integrity and availability, threats and risks, encryption, authentication, least privilege, and how attacks usually unfold.
Skills
- Security principles
- Cryptography basics
- Threat modelling
- Identity and access
Tips
- Only test systems you own or have written permission to test.
Where to learn
- OWASP Cheat Sheet Series (docs, free)
- Cloudflare: Learning Center (docs, free)
Web application security
Practise finding and fixing the common web flaws: injection, broken authentication, cross-site scripting, request forgery and insecure access control, in safe training labs.
Skills
- OWASP Top 10
- Burp Suite basics
- SQL injection
- Cross-site scripting
Tips
- Use deliberately vulnerable practice labs, never real sites you do not own.
Where to learn
- PortSwigger Web Security Academy (practice, free)
- OWASP Top Ten (docs, free)
Security tools and hands-on practice
Build practical skill in guided labs: scanning and analysing networks, reading logs, investigating alerts and writing up what you found.
Skills
- Network scanning
- Log analysis
- Incident response basics
- Security reporting
Tips
- Keep a write-up of every lab. It is great material for interviews.
Where to learn
- TryHackMe (practice)
- Hack The Box Academy (practice)
Build your portfolio, resume and interview skills
Employers want proof. Finish two or three projects you can show and explain, put them on GitHub, write a clear resume that matches the jobs you apply for, and practise the interview questions for the role.
Skills
- Portfolio projects
- Technical resume
- Interview preparation
Tips
- Describe what you built, why, and what you would improve. That is what interviewers ask about.
Build your resume · Check your resume (ATS) · Interview questions · Salaries · Browse jobs
Frequently asked questions
Where should I start with Cyber Security Analyst?
Start at step 1 and work down in order, because later steps build on earlier ones. If you are signed in, the roadmap compares your resume with each step and marks where you could start.
Do I need a degree to work as a Cyber Security Analyst?
It depends on the employer and the country. Many employers accept proven skills and projects, while others ask for a degree. Read the adverts for the roles you want and ask the employer if it is unclear.
How do I know I am ready to apply?
When you can build a small project from start to finish without copying a tutorial, and explain why you made your choices. Apply while you keep learning; you do not need to know everything.