Cybersecurity Analyst Resume Example

Also called Security Analyst, SOC Analyst, Information Security Analyst.

Security teams hire analysts who find real problems among thousands of alerts and respond in an orderly way. Your resume should show the tools you monitor with, the incidents you handled and the frameworks you work to, without giving away anything sensitive.

Use this exampleBrowse all templates

Opens in the builder with this text in place, ready for you to replace with your own.

What this example does well

  • The incident is described by how quickly it was contained and what was protected, with no sensitive detail.
  • Tools are named exactly, which matters because postings often filter by SIEM and EDR product.
  • Reducing false positives shows she improves the system as well as working the queue.

Updated

Nicole Ferguson

Cybersecurity Analyst

Summary

Cybersecurity analyst with five years of experience in a 24/7 security operations center. Triages around 200 alerts a shift in Splunk and CrowdStrike, led the response to a ransomware attempt that was contained within 40 minutes, and wrote detections that cut false positives by 45%. CompTIA Security+ and CySA+ certified.

Experience

Security Analyst II, Potomac Federal Credit Union

Aug 2022 – Present Arlington, Virginia

  • Triage about 200 alerts a shift in Splunk and CrowdStrike Falcon for an organization of 4,000 employees.
  • Led the response to a ransomware attempt, isolating 12 endpoints within 40 minutes; no data was encrypted or lost.
  • Rewrote 30 detection rules mapped to MITRE ATT&CK, reducing false positives by 45%.
  • Run the monthly phishing simulation and cut the click rate from 14% to 4% in a year.

SOC Analyst, Shieldpoint Managed Security

Jun 2020 – Jul 2022 Reston, Virginia

  • Monitored networks for 25 client organizations and escalated confirmed incidents within agreed times.
  • Investigated phishing reports, malware alerts and suspicious logins, documenting each case for the client.
  • Performed vulnerability scans with Nessus and tracked fixes to completion.

Education

BS Cybersecurity, George Mason University

2016 – 2020 Fairfax, Virginia

Skills

SIEM (Splunk), Endpoint detection (CrowdStrike), Incident response, Detection engineering, Vulnerability scanning, MITRE ATT&CK, NIST Cybersecurity Framework, Phishing analysis

Certifications

  • CompTIA CySA+ — CompTIA, 2023
  • CompTIA Security+ — CompTIA, 2020
An example: Nicole Ferguson is not a real person, and the details show the kind of thing to write rather than a real career. Shown in the Ledger template. Words that postings for this job often use are marked in yellow.

How do you write a summary for a cybersecurity analyst resume?

Two to four lines at the top that say what you do, for how long, and what you are best at. Here is one for each stage of a career.

  • Entry level

    Cybersecurity graduate with CompTIA Security+ and a home lab where I practice log analysis and detection writing. Completed an internship in an IT help desk, handling phishing reports and access requests. Looking for a first SOC analyst role and happy to work shifts.

  • Experienced

    Cybersecurity analyst with four years in a security operations center. Monitors and investigates alerts in a SIEM, responds to incidents, runs vulnerability scans and writes detections mapped to MITRE ATT&CK.

  • Senior

    Senior security analyst and incident response lead with ten years of experience. Runs a team of eight analysts, built the incident response plan tested in yearly exercises, and led the company through its SOC 2 and ISO 27001 audits.

How to write a resume summary, with more examples

What are good bullet points for a cybersecurity analyst resume?

Each starts with a verb and says what was done. Change the details and numbers to your own; a number you cannot explain in an interview is worse than none.

  1. Monitored and triaged security alerts in a SIEM for a network of 5,000 endpoints.

  2. Investigated phishing emails, malware detections and unusual logins and documented each case.

  3. Contained a compromised account within 15 minutes by disabling access and resetting sessions.

  4. Wrote and tuned detection rules, cutting false positives by 40%.

  5. Ran weekly vulnerability scans and worked with system owners to fix critical findings within 14 days.

  6. Took part in incident response for a malware outbreak, from containment to the final report.

  7. Reviewed firewall and access logs for signs of data leaving the network.

  8. Delivered security awareness training and phishing simulations for 800 employees.

  9. Gathered evidence for SOC 2 and PCI DSS audits.

  10. Kept incident response playbooks up to date after each exercise.

Which skills should a cybersecurity analyst put on a resume?

Pick the ones the job posting asks for and that you can back up with an example from your work.

Hard skills

  • SIEM tools (Splunk, Microsoft Sentinel, QRadar)
  • Endpoint detection and response
  • Incident response
  • Vulnerability management (Nessus, Qualys)
  • Network traffic analysis
  • Threat frameworks (MITRE ATT&CK)
  • Compliance frameworks (NIST, ISO 27001, PCI DSS)
  • Scripting (Python, PowerShell)
  • Identity and access management

Soft skills

  • Staying calm under pressure
  • Clear incident writing
  • Curiosity
  • Discretion
  • Explaining risk to non-specialists

Licenses and certifications

  • CompTIA Security+
  • CompTIA CySA+
  • Certified Information Systems Security Professional (CISSP)
  • GIAC Security Essentials (GSEC)
  • Certified Ethical Hacker (CEH)

Which keywords belong on a cybersecurity analyst resume?

The words recruiters and applicant tracking systems search for.

  • alerts
  • Splunk
  • CrowdStrike
  • incident
  • MITRE ATT&CK
  • phishing
  • vulnerability scans
  • detection
  • endpoints
  • false positives

Use the ones that are true for you, written the way the posting writes them, and put each where it shows something you did. A list of keywords with nothing behind it helps nobody. To keep them readable by software, choose an ATS-friendly template, and read how applicant tracking systems read a resume.

How do you describe security incidents without revealing too much?

Describe the type of incident, your actions and the outcome, and leave out anything that identifies a weakness or a victim. "Contained a ransomware attempt within 40 minutes; no data lost" says everything a hiring manager needs.

Never include internal system names, IP addresses or the way in that the attacker used. Being careful on your resume is itself evidence that you understand the job.

Which certifications should a cybersecurity analyst list?

Security+ is the usual baseline and is required for many US government and contractor roles. CySA+ and GIAC certificates show hands-on analysis; CISSP needs five years of experience and signals seniority.

List the ones you hold with the year, most advanced first. If one is in progress, say so with the planned exam date.

What do technology employers look for in a resume?

  • Tie each tool to something you did with it. A skills list of twenty languages says little; a bullet that names the service you built in one of them says a lot.
  • Say what changed because of your work: a faster page, fewer incidents, a report that people now use every week.
  • Match the words in the job posting. If it says Kubernetes, write Kubernetes and not only "container orchestration", because screening software and tired recruiters both search for the exact word.

All technology resume examples

Questions about a cybersecurity analyst resume

Should I mention a security clearance?

Yes if you hold one and the role needs it. Put the level and status in your summary or a separate line. Do not include details of cleared work.

Does a home lab count as experience?

For a first role, yes. Describe what you built and what you practiced, such as writing detections or analyzing malware samples in a sandbox.

Is help desk experience relevant?

Very. Many analysts start there. Highlight the security parts: phishing reports, account lockouts, access requests and patching.

How long should a cybersecurity resume be?

One page for analysts, up to two for senior roles.

Make this cybersecurity analyst resume yours.

Start from the example, swap in your own jobs and numbers, and switch to any template without retyping a word.

Use this example