role learning roadmap

Learning roadmap: how to become a Cybersecurity Analyst

A cited, step-by-step route into Cybersecurity Analyst — the skills to build and the credentials to earn, in a sensible order.

Build my personalized career plan

Certification details change. Always confirm final pricing, availability, and credential terms on the official provider page linked in the sources below before you pay for anything.

Cited role roadmap

Learning roadmap: how to become a Cybersecurity Analyst

Skills plus cited role-mapped credentials; not every credential must be completed.

Role context

What this roadmap points toward

  • Mapped occupation: Information Security Analysts (15-1212)
  • BLS national median: $129,180 (2025-05)
  • BLS wage range: $75,090 to $199,850
  • Projected employment change: 28.5% (2024-2034)
  • Typical entry education: Bachelor's degree
  • Experience in another occupation required for entry (BLS): Less than 5 years

This role has a high-confidence mapping to the listed O*NET-SOC/BLS occupation.

Proof to build

Skills, portfolio, and credential posture

Plan, implement, upgrade, or monitor security measures for the protection of computer networks and information. Assess system vulnerabilities for security risks and propose and implement risk mitigation strategies. May ensure appropriate security controls are in place that will safeguard digital files and vital electronic infrastructure. May respond to computer security breaches and viruses.

Core skills

Security fundamentals and Networking fundamentals

Portfolio proof

A small cybersecurity analyst proof artifact that demonstrates Security fundamentals and Networking fundamentals, with notes explaining the decisions you made

Credential posture

Start with Cisco Certified Support Technician Cybersecurity (RoleMath Difficulty Score 20/100, Foundational) only if it fits the skills you need; the credential is a planning milestone, not a job requirement.

This role context is derived from the cited RoleMath role page, O*NET skill edges, and role-certification mappings; treat it as planning context pending human review.

The sequence

What to learn, in order

  1. 1

    Stage 1 — Start here (foundation)

    foundation

    Start with the foundational skills and beginner-appropriate credentials currently mapped to this role.

    Practice proof Document a small cybersecurity analyst proof artifact around Security fundamentals before treating any credential as the milestone.

    Skills to build

    • Security fundamentalsimportance 5/5

    Credentials or courses to consider

    • Cisco Certified Support Technician Cybersecurity

      CCST Cybersecurity validates entry cybersecurity concepts but should be treated as a bridge into deeper preparation.

      Cost detail
      entryEntry stage - no prior experience asked$125 exam
    • CC - Certified in Cybersecurity

      CC - Certified in Cybersecurity maps to Cybersecurity Analyst as an entry security foundation based on cited ISC2 credential identity and generated role evidence.

      Cost detail
      entryEntry stage - no prior experience asked$199 exam
    • CompTIA Network+

      Networking fundamentals can improve readiness for cybersecurity analysis.

      Cost detail
      foundationCore stage - about 1-2 years recommended$399 exam
  2. 2

    Stage 2 — Build the core

    core

    Build the core role capabilities and stronger role-aligned credentials after the foundation is in place.

    Practice proof Turn Networking fundamentals into hands-on evidence: a lab, dashboard, runbook, repo, or case note that a reviewer can inspect.

    Skills to build

    • Networking fundamentalsimportance 4/5

    Credentials or courses to consider

    • CompTIA Security+

      Security+ is a common baseline security credential for entry and early cybersecurity analysis routes.

      Cost detail
      foundationCore stage - about 1-2 years recommended$439 exam
    • Cisco CCNA Cybersecurity

      Cisco's cybersecurity associate exam covers security concepts monitoring host analysis network intrusion analysis and security policies.

      Cost detail
      associateCore stage - about 1-2 years recommended$300 exam
    • CompTIA CySA+

      CySA+ should be positioned after Security+ or equivalent knowledge for analyst work.

      Cost detail
      intermediateAdvanced stage - about 3-4 years recommended$439 exam
  3. 3

    Stage 3 — Go deeper / specialize

    specialize

    Go deeper through specialization, hands-on projects, and role-specific practice.

    Practice proof Use CompTIA PenTest+ and CISSP - Certified Information Systems Security Professional to build a specialization proof point, then compare it against the role's cited skill and credential map.

    Credentials or courses to consider

    • CompTIA PenTest+

      PenTest+ supports offensive security but should be gated behind stronger security foundations.

      Cost detail
      intermediateAdvanced stage - about 3-4 years recommended$439 exam
    • CISSP - Certified Information Systems Security Professional

      CISSP maps to experienced cybersecurity analyst progression only after the official ISC2 five-year work-experience gate; ISC2 names Security Analyst among aligned CISSP positions and the role packet provides occupation-level context.

      Cost detail
      advancedExpert stage - 5+ years required or expected$749 examlater-stage
  4. 4

    Stage 4 — Where it leads next

    later_stage

    Treat these as later-stage options after real experience, not beginner first steps.

    Practice proof Treat CompTIA SecurityX as later-stage evidence after real practice; do not use it as a beginner shortcut.

    Credentials or courses to consider

    • CompTIA SecurityX

      SecurityX is relevant only after substantial security experience.

      Cost detail
      advancedExpert stage - 5+ years required or expected$544 examlater-stage

Where it can lead

Next roles in the same domain

Sources

What supports this roadmap

This is ONE cited route to the role — not the only order, and not a guarantee of a job. Credentials validate skills; hiring also depends on hands-on practice, a portfolio, experience, location, and the interview. Build the skills alongside (not just before) the exams. Advanced credentials are marked as such — they are later-stage steps that usually need real experience first, never a beginner's first move. A course is not a certification. draft_noindex pending review.

Core source records

This table lists the page’s core content records and when they were checked. Claim-specific citations appear beside the relevant text and may not be repeated here.

Show all 11 sources
IDSupportsSourceChecked
CIT-01Security fundamentals importance 5/5CompTIA — Security+ Certification2026-07-21
CIT-02CC - Certified in Cybersecurity maps to this role (Foundational credential for this role)official exam source2026-07-05
CIT-03Cisco Certified Support Technician Cybersecurity maps to this role (Beginner-friendly starting point)official exam source2026-06-30
CIT-04CompTIA Network+ maps to this role (Foundational credential for this role)official exam source2026-06-29
CIT-05Networking fundamentals importance 4/5CompTIA — Network+ Certification2026-06-29
CIT-06Cisco CCNA Cybersecurity maps to this role (Strong curated match — after a foundation cert)official exam source2026-06-30
CIT-07CompTIA Security+ maps to this role (Strong curated match for this role)official exam source2026-07-21
CIT-08CompTIA CySA+ maps to this role (Strong curated match — after a foundation cert)official exam source2026-07-20
CIT-09CompTIA PenTest+ maps to this role (Adjacent step after a foundation)official exam source2026-07-21
CIT-10CISSP - Certified Information Systems Security Professional maps to this role (Strong curated match — after some experience)official exam source2026-07-05
CIT-11CompTIA SecurityX maps to this role (Advanced / longer-term)official exam source2026-06-25

Ready to turn this decision into a plan?

Not sure Cybersecurity Analyst is your best-fit target? Start the RoleMath planner to check fit before you invest time or money.