IT
Cybersecurity specialist CV: example and template
This example is for SOC analysts, IT security specialists and engineers, penetration testers and compliance specialists at banks, technology companies, energy firms, public administration and consultancies, and for administrators moving into security.
The employer wants to know which incidents you handle, with which tools, how you test and secure systems and which standards and laws you know. We show you how to describe this on your CV without revealing your employer's data.
How to write a cybersecurity specialist CV
Professional summary
Write which area of security you work in: SOC, testing, security engineering, compliance, and at which organisation. Add tools, standards and certificates, because recruiters search for them by name. Do not give details of incidents that could harm your employer.
Systems administrator with 3 years of experience responsible for updates, backups and permissions. I hold Security+, practise on CTF platforms and know the basics of SIEM. I am looking for work as a junior SOC analyst.
Experience: duties and achievements
Describe the types of tasks, tools, scale and results: the number of events, response time, fewer false positives, vulnerabilities closed. Show your work with IT and the business, because security requires persuading others to change.
Weaker: Security monitoring.
Better: Analysing alerts in Microsoft Sentinel and Splunk, about 300 events a week.
Weaker: Incident handling.
Better: Handling incidents from detection to post-incident review, including phishing attacks.
Weaker: Rules.
Better: Detection rules and automated response, about 35% fewer false positives.
Skills worth listing
List tools, techniques, standards and laws. In your soft skills show analytical thinking, discretion and calm under pressure, because in an incident a fast and considered response is what counts.
Professional skills
- SIEM
- Incident response
- Vulnerability testing
- Network and cloud security
- Standards and laws
- Scripting and automation
Personal skills
- Analytical thinking
- Discretion
- Calm under pressure
- Communicating risk
- Curiosity
Certificates
List certificates with the year, for example CompTIA Security+, CEH, OSCP, CISSP or ISO 27001 auditor. For work in public administration and companies covered by cybersecurity law, knowledge of NIS2 requirements is useful.
How to start a career in cybersecurity
People usually start in administration, on the helpdesk or in development. On your CV show security-related tasks, for example permissions, updates and backups.
Add an entry level certificate, CTF platforms and a home lab. The first role is often a first line SOC analyst.
Tailoring your CV to the job offer
A bank looks for SOC work, procedures and regulatory compliance, a consultancy for testing and work with clients, and a product company for application and cloud security. Move to the top what the job ad is about.
Questions and answers
What should a cybersecurity specialist put on a CV?
The area of work, tools, incidents, testing, standards and laws, results in numbers, certificates and education.
Which certificates are valued in cybersecurity?
CompTIA Security+ to start, then CEH, OSCP and CISSP, and in compliance ISO 27001 auditor certificates.
How do you start in cybersecurity with no experience?
Through administration, the helpdesk or development, with an entry level certificate and practice on CTF platforms.
Should you describe specific incidents on a CV?
In general terms yes, but without system names, data or details that could harm your employer.