🎉 Limited offer: Get 3 months free when you sign up for an annual plan. See pricing →

Free template · Technology

Cybersecurity Analyst job description template

Cybersecurity analysts protect a company's systems and data from attacks. They monitor for threats, investigate alerts, manage vulnerabilities, and help employees follow safe security practices. Copy this template, replace the bracketed parts, then run it through the free JD Analyzer.

Check it for bias

Cybersecurity Analyst

About the role

[Company Name] is seeking a Cybersecurity Analyst to help protect our systems, data, and customers. You will monitor for threats, investigate alerts, manage vulnerabilities, and help our team build safe habits. This role suits a curious, detail-focused person who can stay calm during incidents and explain risk in plain language.

Responsibilities

  • Monitor security alerts from SIEM, EDR, and other tools
  • Investigate suspicious activity and document findings
  • Support incident response, including containment and recovery
  • Run vulnerability scans and track remediation with IT and engineering
  • Review user access and help enforce least-privilege policies
  • Analyze and respond to phishing reports
  • Help maintain security policies and compliance evidence
  • Deliver security awareness training to employees
  • Stay current on threats relevant to our industry

Requirements

  • Experience in security operations, IT, or networking with security responsibilities
  • Understanding of common attack techniques and the MITRE ATT&CK framework
  • Familiarity with SIEM and endpoint detection tools
  • Working knowledge of networking, firewalls, and Windows and Linux systems
  • Strong analytical skills and attention to detail
  • Ability to communicate security risk clearly to non-technical colleagues
  • Commitment to handling sensitive information with discretion

Nice to have

  • Certifications such as Security+, CySA+, or GIAC
  • Experience with cloud security in AWS, Azure, or Google Cloud
  • Scripting skills in Python or PowerShell
  • Familiarity with frameworks such as NIST CSF, SOC 2, or ISO 27001

Pay

[Pay range] · [Benefits summary]

Pay transparency

Many states, including CA, CO, NY, WA, and IL, require a good-faith pay range in job postings, so check your state's rules and include one before posting.

See the rules for your state in HR laws by state.

Write a more inclusive posting

  • Avoid 'hacker mindset' or 'cyber warrior' language that can feel exclusionary; describe the investigative work instead
  • If you need a background check, say so clearly but follow fair chance rules in your state or city about when and how to ask
  • List certifications as preferred, since many skilled analysts transition from IT or networking roles

Hiring a cybersecurity analyst?

Prepare the interview too: 15 questions, red flags and questions to avoid.

Cybersecurity Analyst interview questions

Frequently asked questions

What practical test works for a cybersecurity analyst interview?

A short log review or simulated alert triage is effective because it mirrors daily work. Ask the candidate to explain what they see, what they would check next, and how urgent it is.

Should a cybersecurity analyst job description require certifications?

Certifications can show baseline knowledge, but hands-on experience and problem-solving matter more. Listing them as preferred helps you reach career changers from IT and networking.

Can I run background checks on cybersecurity candidates?

Many employers do for roles with sensitive access, but federal FCRA rules and state and local fair chance laws affect timing and process. Check your state's rules before adding background check language to the posting.

More job description templates

Weekly HR Digest

HR insights in your inbox

Join 2,400+ HR professionals. No spam, ever.

Free forever. Privacy policy