Answers to the most frequently asked questions about a career in cybersecurity
Cybersecurity refers to the practice of protecting computers from attacks or unauthorized access. This involves preventing hackers from accessing data or systems, detecting malicious activities, and responding appropriately. Here you'll find some common questions about careers in cybersecurity.
You've probably heard of cybersecurity analysts before. They're the ones who monitor cyber threats and report them to companies or government agencies. What exactly does a cybersecurity analyst do?
Your daily tasks in an entry-level role will depend on the company you’re working for. Generally, day-to-day tasks might include:
Monitoring a SIEM tool for anomalies
Responding to alerts and escalating where appropriate
Cybersecurity involves several technical skills, and the fast-paced work environment can be challenging. Having said that, it’s completely possible to gain the required knowledge and learn the right skills with some time and dedication.
Set aside a little time for your cybersecurity learning each day, and consider setting up your own virtual environment to practice those skills.
Cybersecurity as a field typically has more open jobs than there are qualified candidates to fill them. There are over half a million cybersecurity job openings in the US at the time of writing, according to Cyber Seek [2]. These jobs also tend to be well-paid. The US Bureau of Labor Statistics reports a median salary of $112,000 for information security analysts in the US [3].
Most cybersecurity analysts work full time, but they don’t always work typical 9-to-5 hours. Since cyber attacks can happen at any time, come organizations and security companies keep security analysts on-call outside of typical business hours. If you’re looking for a job with the flexibility to work evenings or weekend hours, cybersecurity could be a good fit.
The skills, practices, and technologies you’ll use as a cybersecurity professional will continue to evolve along with computer and network technology. The desire to learn, ability to problem solve, and attention to detail will serve you well in this field. Other, more technical skills and technologies to learn include:
SIEM tools (security information and event management)
Firewalls, Intrusion Detection Systems (IDS), and Intrusion Prevention Systems (IPS)
Digital forensics
Mobile device management
Data management
Application security development
Audit and compliance knowledge
Effective cybersecurity professionals often leverage workplace skills like communication, collaboration, risk management, adaptability, and critical thinking on the job.
No, cybersecurity does not require a lot of math. But it is considered a science, technology, engineering, and mathematics (STEM) concentration, and familiarity with math will certainly get you farther as you move forward in your career.
Security professionals often calculate risk, which involves using math, statistics, and logic. Writing and understanding software code also requires some basic math. Finally, cryptography is the science of codes and encryption, and a part of cybersecurity, in which knowledge of math can help decipher and create algorithms for automated reasoning and data processing.
As you begin a career in cybersecurity, you’ll find a variety of different roles and specializations to pursue. Earning a degree in cybersecurity could be a step toward career opportunities like:
A bachelor’s degree in cybersecurity typically takes four years of full-time study to complete. A master’s degree involves another two years of full-time study, though some universities offer accelerated or part-time programs that may take shorter or longer to complete.
Cybersecurity degree programs tend to have fewer higher-level math and science requirements than computer science and other STEM (science, technology, engineering, math) degrees. This means that you might not have to take classes like calculus and chemistry, often considered among the most challenging for college students. While some courses require labs, these are generally not research-based.
On the other hand, you can expect courses to get increasingly challenging as you move through a cybersecurity program. The material can also be quite technical and challenging to read.
The length of time you’ll need to prepare for a certification exam will depend on what you already know and what you’ll need to learn. Preparing could take anywhere from a week to several months (assuming you meet the work prerequisites).
You don’t necessarily need a related degree to work in penetration testing. Earning a bachelor’s or master’s degree in computer science, cybersecurity, or information security could make you a more competitive candidate.
While no two career paths are the same, it’s possible to transition into a pen testing role after gaining one to four years of work experience in IT and information security.
Ethical hacking courses cover a wide range of topics essential for understanding and securing computer systems. These include the fundamentals of cybersecurity, network security, and the principles of ethical hacking. Learners will explore topics such as vulnerability assessment, penetration testing, and threat modeling. Advanced courses might cover specialized areas like web application security, wireless network security, and cryptography. Practical exercises and labs help learners apply these concepts in real-world scenarios, simulating attacks and defenses to improve system security.
Ethical hackers help organizations improve their security by breaching computer systems and networks to find vulnerabilities before cybercriminals exploit them.
Working as an ethical hacker can mean abundant job opportunities and high salaries with the right skill set. It’s also a role where you can constantly challenge yourself and develop new skills. Knowing that your work keeps people’s data secure can be rewarding in its own way.
As the cost and severity of cyber attacks continue to rise, so too does the demand for cybersecurity professionals with the skills to help defend organizations. This includes ethical hackers. In fact, both the Certified Ethical Hacker (CEH) and Offensive Security Certified Professional (OSCP) certifications rank among the 10 cybersecurity certifications that appear most frequently on job descriptions.
A certificate in ethical hacking can open up various career opportunities in the cybersecurity field. Common roles include ethical hacker, penetration tester, security analyst, and cybersecurity consultant. These positions involve identifying and exploiting vulnerabilities in computer systems, conducting security assessments, and helping organizations improve their security posture. With the increasing importance of cybersecurity in protecting sensitive information and critical infrastructure, earning an ethical hacking certificate can significantly enhance your career prospects and opportunities for advancement in fields such as information technology, finance, healthcare, and government.
Ethical hackers in the US make an average base salary of $109,540, according to September 2023 from Glassdoor.
Choosing the right ethical hacking course depends on your current skill level and career aspirations. Beginners should look for courses that introduce the basics of cybersecurity, ethical hacking principles, and foundational tools and techniques. Those with some experience might benefit from intermediate courses focusing on specific hacking techniques, advanced penetration testing, and network security. Advanced learners or professionals seeking specialized knowledge might consider courses on advanced exploit development, ethical hacking certifications like CEH (Certified Ethical Hacker), or preparing for roles in security consulting. Reviewing course content, instructor expertise, and learner feedback can help ensure the course aligns with your goals.
About 62 percent of online job listings for security engineers request a bachelor’s degree, according to Cyberseek. Another 23 percent of listings request a master’s degree [4]. While a bachelor’s degree is the most common entry-level qualification, it is possible to have a successful career as a security engineer without one, so long as you have the right skills. Common majors for cybersecurity professionals include computer science, cybersecurity, or information technology.
Security engineers in the US can make a median base salary of $91,796, according to Glassdoor. Additional pay such as cash bonuses, commission, tips, and profit sharing adds up on average to $37,395 for a total average annual pay in the US of $129,191.
Cybersecurity skills FAQ
With the rise of new technologies such as IoT (Internet of Things), cloud computing, big data analytics, mobile devices, social media, and artificial intelligence, cybersecurity professionals are needed more than ever before. If you want to get into cybersecurity, you'll need to develop several skills.
Cybersecurity degrees and certifications FAQ
Are you looking for cybersecurity training or certification? The demand for cybersecurity professionals has never been higher. If you want to get into the field, now is the time to start preparing with a cybersecurity degree or credential.
Expert tip on choosing a cybersecurity certification
Narrowing your certification options based on your current job can be helpful, but you might also consider thinking more broadly about your future and what certifications could support your long-term goals across a variety of industries.
"Stop limiting which certification you're going after because, in this industry, you have the ability to navigate it. The opportunity is everywhere, and it's with almost every type of organization and every industry," said Steve Graham, Senior Vice President Head of Product at EC-Council, during Coursera's virtual panel, "How can online learning accelerate cybersecurity careers and talent?"
You are Currently on slide 1
Penetration testing and ethical hacking FAQ
Penetration testing is a method of evaluating the security posture of a system or network. This involves identifying vulnerabilities and weaknesses within a computer network. The goal is to identify potential threats and prevent them from being exploited. Ethical Hacking is the practice of using computer security tools to test network security systems and identify vulnerabilities. These professionals are trained to perform penetration tests or scan networks for weaknesses.
Security engineering FAQ
Security engineering is the practice of designing secure systems. This involves identifying risks and vulnerabilities, developing countermeasures, and testing them. The goal is to ensure that the system is safe from attack or misuse.
Coursera’s editorial team is comprised of highly experienced professional editors, writers, and fact...
This content has been made available for informational purposes only. Learners are advised to conduct additional research to ensure that courses and other credentials pursued meet their personal, professional, and financial goals.
![[Featured image] Two cybersecurity professionals wearing name badges and work-casual clothing stand in a server room and look at information on a tablet held by one of them.](https://d3njjcbhbojbot.cloudfront.net/api/utilities/v1/imageproxy/https://images.ctfassets.net/wp1lcwdav1p1/7io90CsUH96MC5PAn1bHoM/7aff6e9fc1ef1ef15a70bc73bb697a21/GettyImages-514410109.jpg?w=1500&h=680&q=60&fit=fill&f=faces&fm=jpg&fl=progressive&auto=format%2Ccompress&dpr=1&w=1000)
