Resume guide · Job Zone 4

Information Security Analystsresume guide.

Plan, implement, upgrade, or monitor security measures for the protection of computer networks and information. A strong Information Security Analysts resume shows reading comprehension, critical thinking and active listening, and names the tools you have worked with, such as JavaScript, Hypertext markup language HTML and PHP.

See a sample Information Security Analysts resumeAnnotated against this guide · 3 templates↓
Sample resume

This guide, on a real page.

A Information Security Analysts resume built in ResumeXRays, annotated against the data below. Flip the pages, try a template, then make it yours.

  1. 1Name the tools and the rules you work under.Splunk Enterprise, Microsoft Azure and AWS are hot tools on this guide, and NIST CSF and HIPAA tell a hiring manager which kind of risk you already know.
  2. 2Show the result, not just the task."Monitor current reports of computer viruses" from the guide becomes fewer false alarms and a faster time to detect, numbers security leads already track.
  3. 3Turn a risk assessment into a count."Perform risk assessments and execute tests" is a core task here. Saying how many high-risk findings you closed before the audit shows it was finished.
  4. 4Show you can secure AI, not just use it.Security teams now rank AI as their top skill need. Writing the rules that kept patient data safe while staff used AI tools proves it with a result.
  5. 5Name each certification in full.Write CISSP with its issuer, ISC2, and say it is active. Spell out the AWS specialty too, since cloud security is the second skill employers ask for most.
  6. 6Keep education to one line.Most roles ask for a bachelor's degree, so the degree, school and year are enough. Your experience and certifications do the rest.

Sample resume. The candidate is fictional; the layout and templates are real.

Wendell Lockhart

Information Security Analyst, CISSP

[email protected] / (716) 555-0120 / Buffalo, NY

Summary

Information security analyst with seven years protecting healthcare and insurance networks, the last three leading detection and cloud security for a 6,000-employee health system. Build Splunk Enterprise detections, run risk assessments against NIST CSF and HIPAA, and lock down Microsoft Azure and AWS workloads. Recently set the controls that let clinical teams use generative AI tools without exposing patient data.

Experience

Senior Information Security Analyst
Lissadell Health Network / Buffalo, NY
Apr 2023 - Present
Rebuilt 140 Splunk Enterprise detection rules around real attack patterns, cutting false-positive alerts 55% and bringing mean time to detect from 19 hours to 3.
Ran the annual HIPAA security risk assessment across 38 clinics and 2 hospitals, closing 31 of 34 high-risk findings before the external audit.
Wrote the data-handling rules and Microsoft Entra conditional access policies for staff use of generative AI tools; 1,200 clinicians onboarded with zero patient-data leaks flagged by DLP in the first year.
Moved 60 Microsoft Azure and AWS accounts onto infrastructure-as-code guardrails in AWS CloudFormation, dropping publicly exposed storage buckets from 22 to 0.
Led containment on a phishing-driven credential theft affecting 14 accounts; reset access, isolated two endpoints and closed the incident in 6 hours with no data leaving the network.
Information Security Analyst
Ranwick Mutual Insurance / Rochester, NY
Jan 2020 - Apr 2023
Owned weekly vulnerability scanning in Nessus for 2,400 hosts and worked patch priorities with IT, cutting critical vulnerabilities older than 30 days by 70%.
Replaced shared admin accounts with role-based access in Microsoft Active Directory, removing 410 stale privileged accounts in one quarter.
Wrote Python and Microsoft PowerShell scripts that pulled user access reviews automatically, turning a three-week quarterly task into two days.
Documented the incident response and disaster recovery plans and ran two tabletop exercises a year with claims and IT leadership.
IT Security Analyst
Ormond Bay Logistics / Buffalo, NY
Jun 2018 - Jan 2020
Monitored firewall and endpoint alerts for 900 users and rolled out full-disk encryption to every company laptop within six months.

Skills

Practices:Risk assessment, incident response, threat detection, zero trust access, AI security governance, NIST CSF, HIPAA, ISO 27001
Security tools:Splunk Enterprise, Microsoft Sentinel, CrowdStrike Falcon, Nessus, Microsoft Active Directory, Microsoft Entra ID
Cloud and automation:Microsoft Azure software, Amazon Web Services AWS software, AWS CloudFormation, Docker, Python, Microsoft PowerShell, Linux, GitHub

Certifications

Certified Information Systems Security Professional (CISSP), ISC2, active
AWS Certified Security - Specialty, Amazon Web Services
CompTIA Security+

Education

Bachelor of Science in Information Technology
Moorcroft State University
2018

01Also called

O*NET
Information Security OfficerInformation Security SpecialistInformation Systems Security AnalystInformation Systems Security Officer (ISSO)Information Technology Security Analyst (IT Security Analyst)Network Security AnalystSecurity AnalystSystems AnalystAI Security Specialist (Artificial Intelligence Security Specialist)All-Source Analyst

02Skills employers expect

O*NET

Importance is how much the skill matters to the job; level is how much of it the job demands. Both are worth naming on the resume, in this order.

SkillImportanceLevel
Reading ComprehensionVery highAdvanced
Critical ThinkingHighAdvanced
Active ListeningHighIntermediate
Complex Problem SolvingHighIntermediate
SpeakingHighIntermediate
WritingHighIntermediate
Judgment and Decision MakingHighIntermediate
MonitoringHighIntermediate
Systems AnalysisHighIntermediate
Active LearningHighIntermediate

03Knowledge areas

O*NET
  • Computers and Electronics
  • English Language
  • Administration and Management
  • Engineering and Technology
  • Telecommunications
  • Customer and Personal Service
  • Public Safety and Security
  • Education and Training
  • Mathematics
  • Communications and Media

04Common responsibilities

O*NET

Ordered by importance. Each one is a bullet waiting for a result and a number.

  1. Develop plans to safeguard computer files against accidental or unauthorized modification, destruction, or disclosure and to meet emergency data processing needs.
  2. Monitor current reports of computer viruses to determine when to update virus protection systems.
  3. Encrypt data transmissions and erect firewalls to conceal confidential information as it is being transmitted and to keep out tainted digital transfers.
  4. Perform risk assessments and execute tests of data processing system to ensure functioning of data processing activities and security measures.
  5. Modify computer security files to incorporate new software, correct errors, or change individual access status.
  6. Review violations of computer security procedures and discuss procedures with violators to ensure violations are not repeated.
  7. Confer with users to discuss issues such as computer data access needs, security violations, and programming changes.
  8. Document computer security and emergency measures policies, procedures, and tests.
  9. Monitor use of data files and regulate access to safeguard information in computer files.
  10. Coordinate implementation of computer system plan with establishment personnel and outside vendors.

05Software and tools

O*NET

245 tools across 59 categories. The six largest categories are below; Hot marks a hot technology, In demand a tool employers ask for most often.

Transaction security and virus protection software25
  • MetasploitIn demand
  • Portswigger BurP SuiteIn demand
  • NortonLifeLock cybersecurity software
  • McAfee
  • Ping Identity
  • Virus scanning software
  • Anti-spyware software
  • Norton AntiVirus
  • Root kit detection software
  • Honeypot
  • HP WebInspect
  • McAfee VirusScan
  • Penetration testing software
  • Rapid7 Nexpose
  • Anti-phishing software
  • Anti-Trojan software
  • Check Point Next Generation Secure Web Gateway
  • End-to-end encryption software
  • Link encryption software
  • Password cracker software
  • Program checksumming software
  • Secure internet filtering software
  • Security risk assessment software
  • Stack smashing protection SSP software
  • Symantec Endpoint Protection
+ 20 more
Network monitoring software19
  • Wireshark
  • Nagios
  • Snort
  • Network intrusion prevention systems NIPS
  • Tcpdump
  • Ethereal
  • IBM QRadar SIEM
  • AccessData FTK
  • Micro Focus OpenView
  • Oracle Net Manager
  • Quest BigBrother
  • Automated audit trail analysis software
  • Automated media tracking software
  • Guidance Software EnCase Forensic
  • Integrity verification software
  • Keystroke monitoring software
  • Network, hardware, and software auditing software
  • Sniffer Investigator
  • Symantec Blue Coat Data Loss Prevention
+ 14 more
Web platform development software19
  • JavaScriptHotIn demand
  • Hypertext markup language HTMLHotIn demand
  • PHPHotIn demand
  • JavaScript Object Notation JSONHotIn demand
  • Node.jsHotIn demand
  • Google AngularHotIn demand
  • Spring FrameworkHotIn demand
  • Microsoft Active Server Pages ASPHot
  • AJAXHot
  • Apache TomcatHot
  • DjangoHot
  • Microsoft ASP.NETHot
  • DrupalIn demand
  • Extensible hypertext markup language XHTML
  • Oracle JavaServer Pages JSP
  • Apache Struts
  • Ruby on Rails
  • Enterprise JavaBeans
  • LAMP Stack
+ 14 more
Development environment software18
  • CHotIn demand
  • Microsoft Azure softwareHotIn demand
  • Microsoft Visual StudioHotIn demand
  • Microsoft Visual Basic for Applications VBAHotIn demand
  • Eclipse IDEHotIn demand
  • Microsoft .NET FrameworkHotIn demand
  • Microsoft PowerShellHotIn demand
  • GoHotIn demand
  • Apache KafkaHotIn demand
  • Microsoft Visual BasicHot
  • RubyHot
  • Apache MavenHot
  • National Instruments LabVIEWIn demand
  • Microsoft Visual Basic Scripting Edition VBScript
  • Adobe ActionScript
  • Integrated development environment IDE software
  • Apache Ant
  • Common business oriented language COBOL
+ 13 more
Operating system software14
  • Microsoft WindowsHotIn demand
  • LinuxHotIn demand
  • UNIXHotIn demand
  • Apple macOSHotIn demand
  • Shell scriptHotIn demand
  • BashHotIn demand
  • Red Hat Enterprise LinuxHotIn demand
  • UNIX ShellHot
  • Oracle Solaris
  • Hewlett Packard HP-UX
  • Job control language JCL
  • Ubuntu
  • KornShell
  • Microsoft Hyper-V Server
+ 9 more
Data base management system software12
  • Apache HadoopHotIn demand
  • NoSQLHotIn demand
  • MongoDBHotIn demand
  • Oracle PL/SQLHotIn demand
  • Teradata DatabaseHot
  • Apache HiveHot
  • Apache CassandraHot
  • ElasticsearchHot
  • Amazon DynamoDBHot
  • Apache Pig
  • Relational database management software
  • Apache Solr
+ 7 more
Object or component oriented development software11
  • PythonHotIn demand
  • C++HotIn demand
  • Oracle JavaHotIn demand
  • PerlHotIn demand
  • C#HotIn demand
  • ScalaHotIn demand
  • Microsoft SQL Server Reporting Services SSRSHot
  • SwiftHot
  • Apache Groovy
  • Advanced business application programming ABAP
  • Objective C
+ 6 more
Data base user interface and query software10
+ 5 more
Network security and virtual private network VPN equipment software9
  • Firewall softwareIn demand
  • Virtual private networking VPN software
  • Juniper Networks NetScreen-Security Manager
  • Cryptographic key management software
  • Imperva SecureSphere
  • IpFilter
  • IpTables
  • Palo Alto Networks Next-Generation Security Platform
  • Trend Micro TippingPoint
+ 4 more
Network security or virtual private network VPN management software8
  • Intrusion prevention system IPS
  • Intrusion detection system IDS
  • Network and system vulnerability assessment software
  • Security incident management software
  • Websense Data Loss Prevention
  • HP Fortify
  • ISS RealSecure
  • Network security auditing software
+ 3 more
Enterprise resource planning ERP software7
+ 2 more
Application server software6
  • GitHubHotIn demand
  • DockerHotIn demand
  • Microsoft Windows ServerHotIn demand
  • Red Hat OpenShiftHot
  • Oracle WebLogic Server
  • Red Hat WildFly
+ 1 more
Business intelligence and data analysis software6
  • TableauHotIn demand
  • Apache SparkHotIn demand
  • IBM Cognos Impromptu
  • Qlik Tech QlikView
  • MicroStrategy
  • Oracle Business Intelligence Enterprise Edition
+ 1 more
Configuration management software5
  • PuppetHot
  • ChefHot
  • Perforce Helix software
  • Automated installation software
  • Patch and update management software
Internet directory services software5
  • Microsoft Active DirectoryHotIn demand
  • Network directory services software
  • Active directory software
  • Domain name system DNS
  • Berkeley Internet Domain Name BIND
Program testing software5
  • SeleniumHotIn demand
  • MITRE ATT&CK softwareIn demand
  • Kali LinuxIn demand
  • System testing software
  • Conformance and validation testing software
Authentication server software4
  • Password management software
  • Diameter
  • IBM Tivoli Identity Management TIM
  • Remote authentication dial-in user service RADIUS software
Enterprise application integration software4
Access software3
  • Citrix cloud computing software
  • Access management software
  • IBM Tivoli Access Management TAM
Backup or archival software3
  • Veritas NetBackup
  • System and data disaster recovery software
  • Backup and archival software
Cloud-based management software3
  • Splunk EnterpriseHotIn demand
  • Amazon Web Services AWS CloudFormationHotIn demand
  • IBM WebSphere
File versioning software3
  • GitHotIn demand
  • Apache Subversion SVNHot
  • WinMerge
Project management software3
  • Microsoft ProjectHotIn demand
  • Atlassian ConfluenceHotIn demand
  • Microsoft TeamsHotIn demand
Analytical or scientific software2
Cloud-based protection or security software2
  • Tenable NessusIn demand
  • Qualys Cloud PlatformIn demand
Electronic mail software2
Financial analysis software2
  • Oracle E-Business Suite Financials
  • Delphi Technology
Geographic information system2
Risk management data and analysis software2
  • eMASSIn demand
  • ArcSight Enterprise Threat and Risk Management
Word processing software2
Administration software1
  • Cisco Systems CiscoWorks
Clustering software1
  • VMware
Communications server software1
  • IBM Domino
Content workflow software1
  • Atlassian JIRAHotIn demand
Customer relationship management CRM software1
Data base reporting software1
  • SAP Crystal Reports
Desktop communications software1
  • Secure shell SSH software
Document management software1
Enterprise system management software1
  • IBM Power Systems software
Expert system software1
  • Ansible softwareHotIn demand
Filesystem software1
  • Computer forensic software
Human resources software1
  • Human resource management software HRMS
Industrial control software1
  • Supervisory control and data acquisition SCADA software
Information retrieval or search software1
  • LexisNexis
Instant messaging software1
  • Blink
Internet protocol IP multimedia subsystem software1
  • Voice over internet protocol VoIP system software
Medical software1
  • Epic SystemsHotIn demand
Object oriented data base management software1
  • PostgreSQLHotIn demand
Office suite software1
Point of sale POS software1
  • Smart card management software
Portal server software1
  • Apache HTTP Server
Presentation software1
Process mapping and design software1
Requirements analysis and system architecture software1
  • Unified modeling language UML
Spreadsheet software1
Storage networking software1
  • Amazon Simple Storage Service S3
Switch or router software1
  • Border Gateway Protocol BGPHotIn demand
Transaction server software1
  • Customer information control system CICS
Web page creation and editing software1
  • Google Sites

06Education and preparation

O*NET
Typical education
Bachelor's Degree
53% of surveyed workers. Others report Post-Baccalaureate Certificate (23%) and Associate's Degree or other 2-year degree (13%).
Preparation level
Job Zone 4 · Considerable preparation
Usually a four-year degree and several years of related experience.

07Putting it on your resume

ResumeXRays guidance
BEE · How to show it

Lead with what you built. For a Job Zone 4 role, hiring managers and parsers both look for outcomes before credentials. Put two or three results at the top of each job entry, with the scale or effect stated plainly.

Name the tools exactly. This occupation is heavy on named software. A skills section that says "JavaScript, Hypertext markup language HTML, PHP, JavaScript Object Notation JSON" matches more job descriptions than a general phrase. Use the spelling employers use.

Show critical thinking and active listening, not just reading comprehension. Critical thinking and active listening rank close to reading comprehension for this occupation. One bullet per role that shows a decision, a tradeoff or a result covers them.

Run your resume through the free scan →

See your fitbefore youhit apply.

Drop your resume and see what a parser flags before you send it. Free, no card.

Analyze your resume free →$0 to start · No card · Free plan forever