Skip to main content

Back to Build Your Career

Cyber career pathways

Cybersecurity career
pathways

See how roles connect — from a first job to a specialisation to a senior seat — and find the route that fits you.

The short answer

What does a cybersecurity career path look like?

There is no single cybersecurity career path. Most people enter through a foundational role — help desk, IT support or a junior analyst seat — then specialise into security operations, cloud security, governance and risk, or offensive security. From there the route splits into a deeper technical track or a leadership track, and lateral moves between specialisations are normal.

The ladder metaphor does more harm than good in security. Careers here branch more than they climb, and some of the strongest practitioners arrived sideways — from networking, software, audit, law enforcement or the military.

The tracks

Specialisation tracks

Five directions. They share fundamentals and almost nothing else.

  • SOC and detection

    Watching, triaging and hunting. The busiest front door in security.

  • Cloud security

    Securing the platforms the business actually runs on.

  • Governance and risk

    Frameworks, controls and evidence. Less tooling, more consequence.

  • Offensive security

    Testing what holds by trying to break it.

  • Leadership

    Direction, budget and risk at organisational level.

Lateral and non-linear moves

Moving between specialisations is common and does not reset your career. So is arriving from outside security entirely — help desk and IT support are the most travelled routes in, and experience in networking, software, audit or the military transfers more than people expect.

From map to move

Plan and pursue your path

Seeing the route is the easy part. These four steps are how you walk it.

Step 01

Assess your fit

Find which of these tracks actually suits you.

Step 02

Find your gaps

See what the target role needs that you do not have yet.

Step 03

Build the plan

Turn the gap into goals with dates against them.

Step 04

Prove the skills

Verified skills in a Skills Wallet make the move visible to employers.

Pursue your path

There is more than one. Most start in a foundational role, specialise into detection, cloud, governance or offensive security, then move toward either a deeper technical seat or a leadership one.
Usually a specialisation rather than a promotion. From SOC tier one, the common next moves are detection engineering, incident response, cloud security or governance.
Yes, and it is common. The fundamentals carry across, and a move between tracks does not reset your seniority.
It varies enormously by track, employer and starting point, and anyone quoting you a fixed number is guessing. What you can control is the evidence you build along the way.
Assess your fit, find your gaps against the target role, then build a growth plan with milestones you can actually track.

Frequently asked questions

Career pathways,
answered

How the routes actually work — including the ones that are not a straight line.

Next step

Find the route that actually fits you

The map shows where cyber careers go. The free career assessment tells you which of these routes suits
how you work — and what to do first.