edX Online

How to become a cybersecurity analyst

Cybersecurity professionals help thwart malicious actors and protect data. Explore the cybersecurity analyst career path, and learn how to get started in this important field.

Browse online cybersecurity programs and courses

With cybercrime surging, businesses and governments are working to strengthen their defenses. The emergent landscape spells opportunity, and now is an excellent time to start building a cybersecurity career.

You can choose from multiple pathways to qualify for entry-level cybersecurity analyst roles, with educational options providing structured training and proof of your skills. Gain insight into the skills you need, and discover how to build them as you prepare for a career in cybersecurity.

What do cybersecurity analysts do?

"Cybersecurity analyst" is an umbrella term covering many specific roles. Your precise duties will depend on your job title and the scope of your position, but they typically involve:

  • Conducting risk assessments and testing active defenses.
  • Monitoring networks and systems for signs of unusual or malicious activity.
  • Responding to security breaches or cyberattacks.
  • Documenting and analyzing security incidents.
  • Researching known, evolving, and emerging cyberthreats.

As a cybersecurity analyst, you may hold an in-house position with a single employer or work for a firm that provides information security services to multiple clients. You can also provide services as a self-employed, independent cybersecurity contractor.

Cybersecurity analyst vs. network security administrator

Cybersecurity analyst roles overlap with some security-focused information technology positions. The following table highlights one example, exploring the similarities and differences between cybersecurity analysts and network security administrators:

Cybersecurity analyst vs. network security administrator
AspectCybersecurity analystNetwork security administrator
Primary goalIdentify and close cybersecurity vulnerabilities and respond to security incidentsBuild efficient and functional yet safe and secure computing networks
FocusWorks across networks and systems in support of organization-wide cybersecurity interestsFocuses specifically on one or more computing networks
ScopeMainly concerned with cyberthreats and security incidentsMainly concerned with network infrastructure and access controls
DutiesTesting cyberdefenses, updating security measures, and monitoring trafficUpdating security measures and monitoring traffic

Steps to become a cybersecurity analyst

You can choose from multiple paths to become a cybersecurity analyst, but degree-based education and professional certifications play an important role in cybersecurity analyst training.

The steps below outline one route to becoming an entry-level cybersecurity analyst and advancing in your career.

Earn a bachelor's degree

A bachelor's degree can position you for career entry and advancement. Earn a bachelor's in computer science to build versatile skills or a bachelor's in cybersecurity to train as a specialist.

If you pursue a general bachelor's degree in computer science, consider choosing electives focused on cybersecurity. This will help you develop the hard skills you need to become a cybersecurity analyst. You can also pursue a cybersecurity analyst internship to build targeted skills in a field-based setting.

Prerequisites and entry requirements vary, but it will help if you have:

  • At least basic fluency in computer science.
  • Knowledge of one or more programming languages.
  • A strong background in mathematics.

Standard bachelor's programs require about 120 credits of coursework and four years of full-time study.

What jobs can you get as a cybersecurity analyst?

According to the Bureau of Labor Statistics (BLS), information security analysts earned a median annual salary of $124,910 as of May 2024. The BLS projects that jobs for these and related security professionals will grow by 29% between 2024 and 2034, much faster than the 3% average across all occupations.

Note that the BLS category of "information security analysts" includes many different roles — some with similar-sounding names, such as cybersecurity analyst. The following table highlights additional job titles:

Entry-level cybersecurity job titles

  • Cybercrime analyst
  • Cybersecurity specialist
  • Incident/intrusion analyst
  • Information technology auditor

Mid-level-to-advanced cybersecurity job titles

  • Cybersecurity architect
  • Cybersecurity engineer
  • Cybersecurity manager
  • Penetration/vulnerability tester

Pay rates vary depending on factors like experience level and location. For example, the BLS reports that cybersecurity analysts in California earned an average of $152,640 per year in 2024 — $24,000 more annually than the national average of $127,730 per year.

For additional location-specific insights, explore the top-paying states for cybersecurity analysts.


Get started on edX

You can connect with a wealth of opportunities to learn cybersecurity on edX. Start with cybersecurity courses for beginners, explore cybersecurity certificates, and compare bachelor's programs in cybersecurity to start your journey.

Browse online Cybersecurity Certificates

Find new interests and advance your career opportunities

Stand out in your field

Use the knowledge and skills you have gained to drive impact at work and grow your career.

Learn at your own pace

On your computer, tablet or phone, online courses make learning flexible to fit your busy life.

Earn a valuable credential

Showcase your key skills and valuable knowledge.

Certificates

Frequently asked questions

What do I need to become a cybersecurity analyst?

Employer requirements vary, but a bachelor's degree in cybersecurity or a related subject is often an entry-level requirement. A master's degree can support your advancement into higher-level cybersecurity roles, especially when paired with one or more relevant professional certifications.

How long does it take to become a cybersecurity analyst?

If you start as a complete beginner, allow four years of full-time study to earn a bachelor's degree in cybersecurity. According to the BLS, a bachelor's degree is the minimum level of education you typically need to get started in the field.

If you already have a strong computer science background and an undergraduate degree in a related field, consider spending 1-2 years earning your master's degree in cybersecurity.

How different are information security analysts and cybersecurity analysts?

Information security analysts protect an organization from physical and digital threats, whereas cybersecurity analysts focus exclusively on digital threats. Both are concerned with securing a range of sensitive data, including company trade secrets, employee information, and customer details. As such, day-to-day tasks often overlap.

As an information security analyst, you may specifically be responsible for:

  • Creating data privacy procedures and best practices and communicating them to employees and stakeholders.
  • Performing periodic compliance testing.
  • Staying up-to-date on potential threats.
  • Monitoring both physical and electronic data for potential breaches.
  • Responding to incidents in real time, including writing reports.
What is the most challenging part of being a cybersecurity analyst?

It varies depending on who you ask, but many professionals cite the constantly evolving nature of cyberthreats as a major challenge. Also, cybersecurity roles often involve long hours spent on intensive, high-stakes tasks, which can lead to burnout.

Can I become a cybersecurity analyst without a degree?

Yes, you can become a cybersecurity analyst without a degree. However, you will need to validate your skills to employers through an alternative pathway, such as a professional certification program. Some employers value demonstrable hard skills over formal credentials, but degree-based education remains one of the most direct and reliable ways to build those skills. For that reason, it is recommended.

Last updated November 12, 2025