olly – Fotolia
Organizations have their work cut out for them cybersecurity-wise, which is why they need competent cybersecurity professionals who can bring the right balance of skills, knowledge, best practices and experience to protect the company. The “2023 Cybersecurity Skills Gap” report from Fortinet found that 56% of firms struggle to recruit cybersecurity talent while 54% find it hard to retain them, putting many organizations at risk.
This problem represents a world of opportunities for skilled cybersecurity professionals. With 83% of company boards recommending a higher security headcount, according to the Fortinet report, the demand for trained, certified and skilled cybersecurity professionals is at an all-time high — particularly for the eight specialists described below.
Who are these specialists? What are their skill sets? What does a career in cybersecurity look like for each of them? What’s the role type? And what’s the average salary for each role?
Read on to learn about the most in-demand cybersecurity jobs.
Role level: Advanced/experienced
Role type: Technical
Average salary: $101,584
A cybersecurity engineer builds information security (infosec) systems and IT architectures and protects them from unauthorized access and cyber attacks. Cybersecurity engineers develop and enforce security plans, standards, protocols and best practices, and they build emergency plans to get things up and running quickly in case of a disaster.
Proactive thinking, planning and action are critical to this role. Cybersecurity engineers often spend a lot of time finding system vulnerabilities through penetration testing and figuring out how to deal with them before they become serious security issues. They might also review the organization’s legal, technical and regulatory areas that affect IT security and recommend modifications for the same.
Other duties include the following:
In addition, a cybersecurity engineer’s job includes dealing with a detected security issue by moving data or information, or by working with outside teams to help the organization recover from a data breach.
People in this role must have strong communication skills to explain complex issues to management and to lay out the best ways to implement the latest security plans and procedures. They might also have to work with law enforcement following an attack.
Role level: Entry-level/midlevel/experienced
Role type: Technical
Average salary: $80,967
A security analyst’s role is fairly broad and can encompass numerous responsibilities, such as monitoring security best practices, protocols and procedures with the right tools and ensuring practices are properly implemented and followed. People in this role analyze reports from these tools to proactively identify unusual or anomalous network behaviors. They might also control file access and credentialing, network updates and firewall maintenance.
A well-trained security analyst will have a solid understanding of how data is stored and managed, and the different kinds of cybersecurity threats, including ransomware attacks, social engineering and data theft. They might perform penetration testing and vulnerability scans and recommend relevant changes to improve security.
At large companies, security analysts might work in a security operations center to specifically monitor, detect, contain and remediate threats. At midsize and smaller organizations, security analysts might play a broad role, handling everything from security analysis and intrusion detection to firewall maintenance, antivirus updates and patch updates. Since they have expertise in security risks and best practices, they might be asked to train employees on cybersecurity hygiene.
Role level: Advanced/experienced
Role type: Technical and managerial
Average salary: $126,166
A network security architect plays a critical role in improving the security strength of enterprise architecture, while maintaining network productivity, efficiency, availability and performance. Network security architects help translate business needs into functional systems, define appropriate policies and procedures for those systems and even help train users and administrators. They also keep an eye on budgetary and operational constraints. This is why people and managerial skills are important to have in this role.
To ensure ongoing security throughout the network lifecycle, network security architects undertake defensive measures, such as firewall and antivirus configuration, and offensive measures, such as penetration testing. They also oversee network changes to ensure minimal risk to the organization. They’re expected to have advanced knowledge of different security tools and techniques related to firewalls, penetration testing and incident response. They must also be aware of computer systems’ networking requirements, including routing, switching and trust domains, as well as security best practices, technologies and industry-standard frameworks.
They conduct network and systems analyses to identify and select the best control mechanisms for the required security level. They must be aware of various access control mechanisms, including role-based access control, mandatory access control and discretionary access control.
Role level: Midlevel/senior/lead
Role type: Technical
Average salary: $75,776
A security software developer’s role is perfect for someone who wants to write software code and is also interested in infosec. By combining technical programming knowledge with product development and security analysis skills, a security software developer creates software and adds security to it to “harden” it from potential attack. To do this, they must have up-to-date knowledge of the threat landscape, which is why entry-level roles in this area are virtually nonexistent.
A security software developer should be able to conceptualize tomorrow’s threats today and take action to address those threats early. They should also balance product speed, functionality, user experience and security, so there are no unnecessary tradeoffs or costly errors. Security software developers will typically work with other professionals — such as designers, engineers and testers — so, in addition to technical knowledge of software architecture, design and coding, they should have strong communication and collaboration skills.
In general, security software developers are in great demand and have plenty of opportunities in IoT and other emerging areas of technology.
The following encompass the education and skills generally desired for midlevel roles:
Those seeking advanced roles generally need the education and skills listed above, plus the following:
Role level: Junior/associate/midlevel/senior/lead
Role type: Technical and reporting
Average salary: $92,759
Ethical hackers are the private eyes of the cybersecurity world: They act like the bad guys to understand the attackers’ motives, approaches and threat actions. They conduct penetration testing to find vulnerabilities and gaps in security protocols for networks, OSes, devices and web-based applications. They also suggest relevant fixes before these vulnerabilities can be exploited by bad actors. They play a proactive role in safeguarding the organization’s information and systems.
Since they often work on highly confidential and time-sensitive projects, ethical hackers should be trustworthy and able to tolerate high levels of stress and uncertainty. They should also be creative and highly organized to effectively record and track their projects. Most importantly, they must constantly update their knowledge, skills and techniques to preempt cybercriminals’ activities, and assist in incident handling and forensic analysis to improve the organization’s security posture.
Some organizations differentiate between pen testers and ethical hackers. In these firms, pen testing is one of the functions of an ethical hacker who also has strong tactical cyber skills plus deep knowledge of the organization’s vulnerabilities and vulnerability management approach. In others, the two roles are considered interchangeable.
Role level: Junior/midlevel
Role type: Technical and communication
Average salary: $137,404
In the software development lifecycles (SDLCs) of the past, security was viewed as something that could be reviewed and then simply tacked on to the finished software product once development was complete. But as we have seen, organizations are increasingly vulnerable to cyber attacks and data breaches. To stay safe from such serious threats, organizations need to ensure that security is not tacked on but baked into software applications. And this is primarily the responsibility of an application security engineer.
This specialist ensures developers follow secure coding practices at every step of the SDLC. They also help the development team test the application against specific security risks and parameters prior to its release.
The application security engineer is responsible for engineering the software in a secure manner. And for this, they must be able to do the following:
An application security engineer plays a vital role in improving application security and ensuring the final product can successfully operate in the current threat landscape. Ideally, this person should have coding experience. However, they can do their job even if they lack this experience, provided they can effectively communicate with the dev team and other teams in the product engineering pipeline and explain any security issues in the context of the application’s code.
Enhancing your cybersecurity knowhow is a great way to start moving into a job on a security team. Check out these resources for some initial steps to take:
Cybersecurity certifications to boost your career
Cybersecurity online courses
Cybersecurity interview questions and answers
Role level: Midlevel/experienced
Role type: Technical, plus reporting and communication
Average salary: $155,000
Education and government were the favorite targets of ransomware attackers, experiencing an increase in such attacks by 411% and 887%, respectively, according to the “2023 SonicWall Cyber Threat Report.”
Malware types and capabilities are constantly evolving, which explains why more organizations are falling victim to this threat. Worse, many companies are struggling to keep up with new and emerging forms of malware that spread quickly and are difficult to detect. This is why the demand for malware analysts is surging like never before.
A malware analyst identifies and examines malware-related threats. They also analyze malware-related incidents that have already happened. Their goal is to understand the nature of such threats and attacks to do the following:
Since malware analysts must understand code as well as threats, they’re required to combine the skills of both security engineers and programmers. Many malware analysts first gain several years of experience in programming and software development before they step into this niche role.
A competent malware analyst must also have strong digital forensics skills, know how to use debugger tools like OllyDbg and dev environments like IDA Pro and be aware of cutting-edge attack techniques and anti-attack methods. It’s unlikely a recent graduate would have all these skills and capabilities, which is why most malware analysts are mid-senior-level cybersecurity professionals.
Role level: Entry-level/midlevel/senior
Role type: Technical, reporting and communication
Average salary: $76,289
A computer forensics analyst — also known as a digital forensics examiner, forensic technician or cyberforensic analyst — is the crime scene investigator of the cybercrime world. This specialist is of immense value when it comes to investigating cybercrimes that have affected an organization and figuring out how to prevent them from happening again.
Through their investigations, computer forensics analysts discover how a threat actor gained access to the enterprise network and what security gaps must be plugged to prevent the recurrence of such unauthorized access events. They also analyze digital evidence left behind by the attacker, prepare evidence for legal or law enforcement purposes and, when required, provide expert testimony during court proceedings.
Other crucial tasks performed by a computer forensics analyst include the following:
This is a critical role in cybersecurity teams. Moreover, it requires a knowledge of cybersecurity from a technical, criminal and legal perspective, which fresh graduates typically can’t yet bring to the table. Therefore, most digital forensics roles are in the mid-senior career range. However, some companies in the private sector, as well as some local, state and federal government agencies, do hire forensics analysts at the entry level, provided the candidate can show they have the required knowledge and skills.
As the number, scope and scale of cyber attacks increases, the demand for qualified cybersecurity professionals is also on an upswing. Not only is the field interesting and fulfilling, it offers numerous opportunities for career growth, high rewards and the chance to make a real difference to organizations and industry.
Rahul Awati is a PMP-certified project manager with IT infrastructure experience spanning storage, compute and enterprise networking.
Cybersecurity career path: Guide to success
Must-have cybersecurity skills for career success
Top-of-rack switching is a data center architecture design in which computing equipment like servers, appliances and other …
An edge device is any piece of hardware that controls data flow at the boundary between two networks.
Transmission Control Protocol (TCP) is a standard that defines how to establish and maintain a network conversation by which …
A sandbox is an isolated testing environment that enables users to run programs or open files without affecting the application, …
The NIST Cybersecurity Framework (CSF) provides guidance on how to manage and reduce IT infrastructure security risk.
Cybercrime is any criminal activity that involves a computer, network or networked device.
A smart machine is a device embedded with machine-to-machine and/or cognitive computing technologies such as artificial …
Hyperautomation is a framework and a set of advanced technologies for scaling automation in the enterprise. The ultimate goal of …
A pilot program, also called a feasibility study or experimental trial, is a small-scale, short-term experiment that helps an …
An employee resource group is a workplace club or more formally realized affinity group organized around a shared interest or …
Employee training and development is a set of activities and programs designed to enhance the knowledge, skills and abilities of …
Employee sentiment analysis is the use of natural language processing and other AI techniques to automatically analyze employee …
Customer profiling is the detailed and systematic process of constructing a clear portrait of a company’s ideal customer by …
Customer insight, also known as consumer insight, is the understanding and interpretation of customer data, behaviors and …
A buyer persona is a composite representation of a specific type of customer in a market segment.
All Rights Reserved, Copyright 1999 – 2024, TechTarget
Privacy Policy
Cookie Preferences
Do Not Sell or Share My Personal Information
