Entry-level cybersecurity analysts, often working in a security operations center (SOC), watch for threats and respond to them. They review security alerts, investigate suspicious activity, analyze phishing emails, and document everything they find. Most people reach this role after some time in help desk, systems administration, or networking, because understanding how normal systems work makes it easier to spot what's wrong.

What hiring managers look for

They look for a solid technical foundation, careful attention to detail, calm judgment, and clear writing. Security+ is one of the most requested certifications for entry-level security roles, and it's often required for government and defense work. Hands-on practice with security tools, through a job, a lab, or training platforms, helps a lot. So does IT experience, since analysts need to understand networks, operating systems, and user accounts.

Resume summary

Detail-oriented cybersecurity analyst experienced in monitoring alerts, investigating suspicious activity, and helping keep systems and data protected. Follows response procedures carefully and documents findings clearly. Looking to bring sharp attention and a strong security foundation to a new role.

Skills to list

  • Security alert monitoring and triage
  • SIEM tools
  • Phishing email analysis
  • Incident response procedures
  • Vulnerability scanning
  • Endpoint protection tools
  • Log analysis
  • Access reviews
  • Security awareness training support
  • Clear incident documentation

Experience bullet points

  • Monitored security alerts and triaged events to separate real threats from false alarms
  • Investigated suspicious logins, malware alerts, and unusual network activity
  • Analyzed reported phishing emails and removed malicious messages from user inboxes
  • Followed incident response procedures and escalated confirmed incidents to senior staff
  • Ran vulnerability scans and tracked fixes with system owners until they were resolved
  • Reviewed logs from firewalls, servers, and endpoints to find the source of problems
  • Helped run user access reviews to remove accounts that were no longer needed
  • Supported security awareness training and phishing simulations for staff
  • Documented every investigation with clear timelines and findings
  • Kept up with new threats and shared updates with the team

Coming from help desk or IT support

Your IT support work likely included security tasks already. Pull them forward: account lockouts you investigated, phishing reports you handled, access you removed, and security tools you helped run. Then add training and practice labs in a "Security Projects" section.

IT Support Specialist (security duties), Credit Union, Birmingham, AL. 2023 to Present. Analyzed 20+ reported phishing emails a week and removed malicious messages from user mailboxes; investigated suspicious login alerts and escalated 4 confirmed incidents; helped roll out multi-factor authentication to 300 users.

Tips for this role

  • List security tools you've actually used. SIEM platforms, endpoint protection, and vulnerability scanners you've worked with belong in your skills section.
  • Show your writing. Clear incident notes and reports are a big part of the job. Mention documentation and reporting in your bullets.
  • Include practice honestly. Home labs and training platforms are valuable, but label them as projects or training, not as job experience.
  • Mention a clearance if you have one. Many security jobs with government agencies and contractors require one. List the level and status near the top.

Build your resume free

Open the 360 Quick Resume builder, choose IT Workers & Managers, then pick Cybersecurity Analyst (Entry-Level / SOC). This summary, skills list, and these bullet points load in for you to edit. Download as PDF, Word, or plain text, free.

For more help, read our full guide on how to write an IT resume, including where certifications go and how to break into IT.

More IT resume examples