Cybersecurity Careers
Cybersecurity job roles described from workforce frameworks, occupation data, and standards bodies. The NICE Framework from NIST and the DoD Cyber Workforce Framework (DCWF) define work roles and their tasks, and O*NET and the Bureau of Labor Statistics publish data on the occupations behind them.
Last reviewed
Roles
13 rolesPenetration Tester
Penetration testers evaluate network and system security by running simulated internal and external cyberattacks with adversary tools and techniques, trying to breach critical systems and reach sensitive information.
Cybersecurity Analyst
Cybersecurity analysts plan and carry out security measures that protect an organization's computer networks and systems.
SOC Analyst
SOC analysts work in a security operations center (SOC), where they triage alerts from security sensors and monitoring tools and decide whether the activity points to a real incident.
Threat Intelligence Analyst
Threat intelligence analysts collect, process, analyze, and share information about cyber threats, producing threat assessments and reports that support security and risk decisions.
Digital Forensics Analyst
Digital forensics analysts investigate computer-based crimes and computer security incidents.
Incident Responder
Incident responders investigate, analyze, and respond to cyber incidents within a network environment or enclave.
Chief Information Security Officer (CISO)
A chief information security officer (CISO) manages and implements an organization-wide information security program.
GRC Analyst
Governance, risk, and compliance (GRC) analysts assess the management, operational, and technical security controls of an IT system and determine how effective they are.
Information Security Manager
Information security managers are responsible for the cybersecurity of a program, organization, system, or enclave.
Cloud Security Engineer
Cloud security engineers protect cloud data, applications, and infrastructure from internal and external threats.
Cybersecurity Engineer
Cybersecurity engineers develop and oversee information security procedures and policies, and build, maintain, and upgrade security technology such as firewalls.
Security Architect
Security architects make sure an organization's security requirements are addressed across its enterprise architecture, including reference models, segment and solution architectures, and the systems built from them.
IAM Engineer
IAM engineers build and run the systems that manage digital identities and access, covering user account lifecycles, single sign-on, multi-factor authentication, and identity governance.
Roles and Frameworks
13 roles| Role | DCWF work roles | O*NET occupation | DoD certs |
|---|---|---|---|
| Chief Information Security Officer (CISO) | None listed | None listed | - |
| Cloud Security Engineer | None listed | None listed | - |
| Cybersecurity Analyst | 511 Cyber Defense Analyst | 15-1212.00 Information Security Analysts | 20 |
| Cybersecurity Engineer | 461 Systems Security Analyst, 632 Systems Developer | 15-1299.05 Information Security Engineers | 8 |
| Digital Forensics Analyst | 212 Cyber Defense Forensics Analyst | 15-1299.06 Digital Forensics Analysts | 8 |
| GRC Analyst | 612 Security Control Assessor, 805 IT Program Auditor | None listed | 22 |
| IAM Engineer | None listed | None listed | - |
| Incident Responder | 531 Cyber Defense Incident Responder | None listed | 22 |
| Information Security Manager | 722 Information Systems Security Manager | None listed | 20 |
| Penetration Tester | 541 Vulnerability Assessment Analyst | 15-1299.04 Penetration Testers | 19 |
| Security Architect | 652 Security Architect | None listed | 18 |
| SOC Analyst | None listed | None listed | - |
| Threat Intelligence Analyst | None listed | None listed | - |
A role is matched to a DCWF work role or O*NET occupation only where that source lists the role's title; other roles show "None listed". Pay figures appear only where BLS or O*NET publishes a wage for the role's own occupation (Cybersecurity Analyst).
Frequently Asked Questions
What jobs are there in cybersecurity?→
This guide covers 13 roles: Chief Information Security Officer (CISO), Cloud Security Engineer, Cybersecurity Analyst, Cybersecurity Engineer, Digital Forensics Analyst, GRC Analyst, IAM Engineer, Incident Responder, Information Security Manager, Penetration Tester, Security Architect, SOC Analyst, Threat Intelligence Analyst. Each role page lists the tasks, knowledge, and certification options that its sources describe.
What is the NICE Framework?→
The NICE Workforce Framework for Cybersecurity is developed by NIST under the U.S. Department of Commerce. It helps employers develop their cybersecurity workforce and sets a common vocabulary that describes cybersecurity work and workers, wherever and for whomever the work is done.
What is the DoD Cyber Workforce Framework (DCWF)?→
The DCWF is the Department of Defense's standard set of cyber work roles used to code positions. DoD Manual 8140.03 sets the qualification criteria for each DCWF work role, and the DoD 8140 qualification matrix lists the degree, training, and certification options that meet them.
Related
Role descriptions draw on U.S. government sources (CISA, NICCS, O*NET, NIST, BLS) first, then standards bodies and, where a role page names them, certification issuers. Each role page lists its sources and review date. This site is not affiliated with CISA, NIST, the Department of Labor, or the Department of Defense.