Information Security Analystsresume guide.
Plan, implement, upgrade, or monitor security measures for the protection of computer networks and information. A strong Information Security Analysts resume shows reading comprehension, critical thinking and active listening, and names the tools you have worked with, such as JavaScript, Hypertext markup language HTML and PHP.
See a sample Information Security Analysts resumeAnnotated against this guide · 3 templates↓This guide, on a real page.
A Information Security Analysts resume built in ResumeXRays, annotated against the data below. Flip the pages, try a template, then make it yours.
- 1Name the tools and the rules you work under.Splunk Enterprise, Microsoft Azure and AWS are hot tools on this guide, and NIST CSF and HIPAA tell a hiring manager which kind of risk you already know.
- 2Show the result, not just the task."Monitor current reports of computer viruses" from the guide becomes fewer false alarms and a faster time to detect, numbers security leads already track.
- 3Turn a risk assessment into a count."Perform risk assessments and execute tests" is a core task here. Saying how many high-risk findings you closed before the audit shows it was finished.
- 4Show you can secure AI, not just use it.Security teams now rank AI as their top skill need. Writing the rules that kept patient data safe while staff used AI tools proves it with a result.
- 5Name each certification in full.Write CISSP with its issuer, ISC2, and say it is active. Spell out the AWS specialty too, since cloud security is the second skill employers ask for most.
- 6Keep education to one line.Most roles ask for a bachelor's degree, so the degree, school and year are enough. Your experience and certifications do the rest.
Sample resume. The candidate is fictional; the layout and templates are real.
01Also called
O*NET02Skills employers expect
O*NETImportance is how much the skill matters to the job; level is how much of it the job demands. Both are worth naming on the resume, in this order.
| Skill | Importance | Level |
|---|---|---|
| Reading Comprehension | Very high | Advanced |
| Critical Thinking | High | Advanced |
| Active Listening | High | Intermediate |
| Complex Problem Solving | High | Intermediate |
| Speaking | High | Intermediate |
| Writing | High | Intermediate |
| Judgment and Decision Making | High | Intermediate |
| Monitoring | High | Intermediate |
| Systems Analysis | High | Intermediate |
| Active Learning | High | Intermediate |
03Knowledge areas
O*NET- Computers and Electronics
- English Language
- Administration and Management
- Engineering and Technology
- Telecommunications
- Customer and Personal Service
- Public Safety and Security
- Education and Training
- Mathematics
- Communications and Media
04Common responsibilities
O*NETOrdered by importance. Each one is a bullet waiting for a result and a number.
- Develop plans to safeguard computer files against accidental or unauthorized modification, destruction, or disclosure and to meet emergency data processing needs.
- Monitor current reports of computer viruses to determine when to update virus protection systems.
- Encrypt data transmissions and erect firewalls to conceal confidential information as it is being transmitted and to keep out tainted digital transfers.
- Perform risk assessments and execute tests of data processing system to ensure functioning of data processing activities and security measures.
- Modify computer security files to incorporate new software, correct errors, or change individual access status.
- Review violations of computer security procedures and discuss procedures with violators to ensure violations are not repeated.
- Confer with users to discuss issues such as computer data access needs, security violations, and programming changes.
- Document computer security and emergency measures policies, procedures, and tests.
- Monitor use of data files and regulate access to safeguard information in computer files.
- Coordinate implementation of computer system plan with establishment personnel and outside vendors.
05Software and tools
O*NET245 tools across 59 categories. The six largest categories are below; Hot marks a hot technology, In demand a tool employers ask for most often.
- MetasploitIn demand
- Portswigger BurP SuiteIn demand
- NortonLifeLock cybersecurity software
- McAfee
- Ping Identity
- Virus scanning software
- Anti-spyware software
- Norton AntiVirus
- Root kit detection software
- Honeypot
- HP WebInspect
- McAfee VirusScan
- Penetration testing software
- Rapid7 Nexpose
- Anti-phishing software
- Anti-Trojan software
- Check Point Next Generation Secure Web Gateway
- End-to-end encryption software
- Link encryption software
- Password cracker software
- Program checksumming software
- Secure internet filtering software
- Security risk assessment software
- Stack smashing protection SSP software
- Symantec Endpoint Protection
- Wireshark
- Nagios
- Snort
- Network intrusion prevention systems NIPS
- Tcpdump
- Ethereal
- IBM QRadar SIEM
- AccessData FTK
- Micro Focus OpenView
- Oracle Net Manager
- Quest BigBrother
- Automated audit trail analysis software
- Automated media tracking software
- Guidance Software EnCase Forensic
- Integrity verification software
- Keystroke monitoring software
- Network, hardware, and software auditing software
- Sniffer Investigator
- Symantec Blue Coat Data Loss Prevention
- JavaScriptHotIn demand
- Hypertext markup language HTMLHotIn demand
- PHPHotIn demand
- JavaScript Object Notation JSONHotIn demand
- Node.jsHotIn demand
- Google AngularHotIn demand
- Spring FrameworkHotIn demand
- Microsoft Active Server Pages ASPHot
- AJAXHot
- Apache TomcatHot
- DjangoHot
- Microsoft ASP.NETHot
- DrupalIn demand
- Extensible hypertext markup language XHTML
- Oracle JavaServer Pages JSP
- Apache Struts
- Ruby on Rails
- Enterprise JavaBeans
- LAMP Stack
- CHotIn demand
- Microsoft Azure softwareHotIn demand
- Microsoft Visual StudioHotIn demand
- Microsoft Visual Basic for Applications VBAHotIn demand
- Eclipse IDEHotIn demand
- Microsoft .NET FrameworkHotIn demand
- Microsoft PowerShellHotIn demand
- GoHotIn demand
- Apache KafkaHotIn demand
- Microsoft Visual BasicHot
- RubyHot
- Apache MavenHot
- National Instruments LabVIEWIn demand
- Microsoft Visual Basic Scripting Edition VBScript
- Adobe ActionScript
- Integrated development environment IDE software
- Apache Ant
- Common business oriented language COBOL
- Microsoft WindowsHotIn demand
- LinuxHotIn demand
- UNIXHotIn demand
- Apple macOSHotIn demand
- Shell scriptHotIn demand
- BashHotIn demand
- Red Hat Enterprise LinuxHotIn demand
- UNIX ShellHot
- Oracle Solaris
- Hewlett Packard HP-UX
- Job control language JCL
- Ubuntu
- KornShell
- Microsoft Hyper-V Server
- Apache HadoopHotIn demand
- NoSQLHotIn demand
- MongoDBHotIn demand
- Oracle PL/SQLHotIn demand
- Teradata DatabaseHot
- Apache HiveHot
- Apache CassandraHot
- ElasticsearchHot
- Amazon DynamoDBHot
- Apache Pig
- Relational database management software
- Apache Solr
- PythonHotIn demand
- C++HotIn demand
- Oracle JavaHotIn demand
- PerlHotIn demand
- C#HotIn demand
- ScalaHotIn demand
- Microsoft SQL Server Reporting Services SSRSHot
- SwiftHot
- Apache Groovy
- Advanced business application programming ABAP
- Objective C
- Microsoft AccessHotIn demand
- Structured query language SQLHotIn demand
- Microsoft SQL ServerHotIn demand
- Oracle DatabaseHotIn demand
- Amazon Web Services AWS softwareHotIn demand
- MySQLHotIn demand
- Amazon RedshiftHotIn demand
- Amazon Elastic Compute Cloud EC2Hot
- Blackboard software
- Oracle JDBC
- Firewall softwareIn demand
- Virtual private networking VPN software
- Juniper Networks NetScreen-Security Manager
- Cryptographic key management software
- Imperva SecureSphere
- IpFilter
- IpTables
- Palo Alto Networks Next-Generation Security Platform
- Trend Micro TippingPoint
- Intrusion prevention system IPS
- Intrusion detection system IDS
- Network and system vulnerability assessment software
- Security incident management software
- Websense Data Loss Prevention
- HP Fortify
- ISS RealSecure
- Network security auditing software
- SAP softwareHotIn demand
- Oracle PeopleSoftHot
- Microsoft Dynamics
- Oracle JD Edwards EnterpriseOne
- Oracle Hyperion
- Oracle PeopleSoft Financials
- Oracle Fusion Applications
- GitHubHotIn demand
- DockerHotIn demand
- Microsoft Windows ServerHotIn demand
- Red Hat OpenShiftHot
- Oracle WebLogic Server
- Red Hat WildFly
- TableauHotIn demand
- Apache SparkHotIn demand
- IBM Cognos Impromptu
- Qlik Tech QlikView
- MicroStrategy
- Oracle Business Intelligence Enterprise Edition
- PuppetHot
- ChefHot
- Perforce Helix software
- Automated installation software
- Patch and update management software
- Microsoft Active DirectoryHotIn demand
- Network directory services software
- Active directory software
- Domain name system DNS
- Berkeley Internet Domain Name BIND
- SeleniumHotIn demand
- MITRE ATT&CK softwareIn demand
- Kali LinuxIn demand
- System testing software
- Conformance and validation testing software
- Password management software
- Diameter
- IBM Tivoli Identity Management TIM
- Remote authentication dial-in user service RADIUS software
- Extensible markup language XMLHotIn demand
- Microsoft SQL Server Integration Services SSISHotIn demand
- Atlassian Bamboo
- Oracle Fusion Middleware
- Citrix cloud computing software
- Access management software
- IBM Tivoli Access Management TAM
- Veritas NetBackup
- System and data disaster recovery software
- Backup and archival software
- Splunk EnterpriseHotIn demand
- Amazon Web Services AWS CloudFormationHotIn demand
- IBM WebSphere
- GitHotIn demand
- Apache Subversion SVNHot
- WinMerge
- Microsoft ProjectHotIn demand
- Atlassian ConfluenceHotIn demand
- Microsoft TeamsHotIn demand
- SASHotIn demand
- The MathWorks MATLABHotIn demand
- Tenable NessusIn demand
- Qualys Cloud PlatformIn demand
- IBM Notes
- Microsoft Exchange
- Oracle E-Business Suite Financials
- Delphi Technology
- ESRI ArcGIS softwareHotIn demand
- Geographic information system GIS softwareIn demand
- eMASSIn demand
- ArcSight Enterprise Threat and Risk Management
- Microsoft WordHotIn demand
- 3M Post-it App
- Cisco Systems CiscoWorks
- VMware
- IBM Domino
- Atlassian JIRAHotIn demand
- Salesforce softwareHotIn demand
- SAP Crystal Reports
- Secure shell SSH software
- Microsoft SharePointHotIn demand
- IBM Power Systems software
- Ansible softwareHotIn demand
- Computer forensic software
- Human resource management software HRMS
- Supervisory control and data acquisition SCADA software
- LexisNexis
- Blink
- Voice over internet protocol VoIP system software
- Epic SystemsHotIn demand
- PostgreSQLHotIn demand
- Microsoft Office softwareHotIn demand
- Smart card management software
- Apache HTTP Server
- Microsoft PowerPointHotIn demand
- Microsoft VisioHotIn demand
- Unified modeling language UML
- Microsoft ExcelHotIn demand
- Amazon Simple Storage Service S3
- Border Gateway Protocol BGPHotIn demand
- Customer information control system CICS
- Google Sites
06Education and preparation
O*NET07Putting it on your resume
ResumeXRays guidanceLead with what you built. For a Job Zone 4 role, hiring managers and parsers both look for outcomes before credentials. Put two or three results at the top of each job entry, with the scale or effect stated plainly.
Name the tools exactly. This occupation is heavy on named software. A skills section that says "JavaScript, Hypertext markup language HTML, PHP, JavaScript Object Notation JSON" matches more job descriptions than a general phrase. Use the spelling employers use.
Show critical thinking and active listening, not just reading comprehension. Critical thinking and active listening rank close to reading comprehension for this occupation. One bullet per role that shows a decision, a tradeoff or a result covers them.
Run your resume through the free scan →See your fitbefore youhit apply.
Drop your resume and see what a parser flags before you send it. Free, no card.
Analyze your resume free →$0 to start · No card · Free plan forever