Networking and operating-system foundations
Understand how hosts, networks, and common operating systems communicate and record activity.
- Network fundamentals
- Linux and Windows basics
- Scripting and automation
- Security vocabulary
BEGINNER TO INTERMEDIATE · 4 LEARNING STAGES
Cybersecurity Analyst Roadmap
A cybersecurity analyst helps protect systems by understanding threats, reviewing signals, investigating incidents, and improving defensive controls. This roadmap focuses on defensive, authorized practices and does not promise a job or certification.
What does a cybersecurity analyst do?
A cybersecurity analyst monitors and investigates security signals, helps assess vulnerabilities and risks, supports incident response, and works with system owners to strengthen defensive controls.
INTERACTIVE LEARNING MAP
Cybersecurity Analyst learning path
4 connected stages from core skills to role-ready projects.
100%
- 01Networking and operating-system foundationsUnderstand how hosts, networks, and common operating systems communicate and record activity.
- 02Identity, vulnerabilities, and secure basicsLearn foundational defensive controls for accounts, applications, and known weaknesses.
- 03Security monitoring and investigationInterpret alerts and logs, preserve context, and investigate suspicious activity using authorized data.
- 04Incident response and cloud securityPrepare for incident handling and learn cloud identity, configuration, and recovery fundamentals.
Select a stage to explore its concepts and project. The suggested sequence is flexible, not a prerequisite checklist.
STEP-BY-STEP LEARNING PATH
What to learn for a cybersecurity analyst role
Open a stage to see its concepts, practical project, and readiness checks.
Identity, vulnerabilities, and secure basics
Learn foundational defensive controls for accounts, applications, and known weaknesses.
- Identity and access management
- Vulnerability management
- Application security concepts
- Endpoint protection
Security monitoring and investigation
Interpret alerts and logs, preserve context, and investigate suspicious activity using authorized data.
- Logs and telemetry
- Alert triage
- Detection concepts
- Threat intelligence context
Incident response and cloud security
Prepare for incident handling and learn cloud identity, configuration, and recovery fundamentals.
- Incident response lifecycle
- Cloud security fundamentals
- Business continuity and recovery
- Risk and security communication
Frequently asked questions
What does a cybersecurity analyst do?
A cybersecurity analyst monitors and investigates security signals, helps assess vulnerabilities and risks, supports incident response, and works with system owners to strengthen defensive controls.
What should I learn first for cybersecurity analysis?
Start with networking, operating-system fundamentals, identity and access, and basic scripting. Then practice log analysis, alert triage, vulnerability management, and incident-response documentation in authorized labs.
Career outlook sources and scope
These sources provide broader context, not a forecast of vacancies for this exact role in every country or a guarantee of hiring.
- The Future of Jobs Report 2025 (opens in a new tab)
International employer survey and outlook through 2030; identifies networks and cybersecurity among growing skill areas.
- Information Security Analysts: Occupational Outlook Handbook (opens in a new tab)
United States occupational definition and employment outlook for information security analysts.