Cybersecurity Analyst resume example
Security hiring managers scan for three things: what you monitored, what you found and how you responded. This example shows a SOC analyst resume with tools, incident handling and improvements, without exposing anything confidential.
Called a CV in the UK, Ireland, India, Africa, Australia and many other places, and a resume in North America. The layout below works for both.
Samuel Adeyemi
Cybersecurity Analyst | SOC Monitoring, Incident Response and Vulnerability Management
Toronto, Canada samuel.adeyemi@example.com
Summary
Cybersecurity analyst with four years in security operations, moving from IT support into a 24/7 SOC. Experienced in alert triage, incident response, phishing investigations and vulnerability management. Calm under pressure, careful with documentation, and good at explaining risk to non-technical colleagues.
Skills
- SIEM (Microsoft Sentinel, Splunk)
- EDR (Microsoft Defender for Endpoint)
- Incident response
- Phishing analysis
- Vulnerability scanning (Nessus)
- Active Directory and Entra ID
- Network fundamentals (TCP/IP, DNS, firewalls)
- MITRE ATT&CK
- KQL and basic Python
- Security awareness training
Experience
Security Operations Centre Analyst
May 2023 to Present
Maplegate Credit Union, Toronto, Canada
- Triage around 60 alerts per shift in Microsoft Sentinel and escalate confirmed incidents using the incident response playbook.
- Tuned 15 noisy detection rules, cutting false positives by about a third and freeing time for real investigations.
- Led the response to a credential phishing campaign, resetting affected accounts and blocking the sender domain within 40 minutes of the first report.
- Ran monthly vulnerability scans and tracked remediation with IT, reducing critical findings older than 30 days to zero.
IT Support Analyst
Aug 2021 to Apr 2023
Lakeshore Logistics, Mississauga, Canada
- Resolved 25 to 35 tickets a day covering accounts, devices and network access for 400 staff.
- Rolled out multi-factor authentication to all staff with step-by-step guides and drop-in sessions.
- Created a phishing reporting button process that doubled the number of suspicious emails reported by staff.
Education
Diploma in Computer Systems TechnologyLakeview College of Applied Technology, Toronto, Canada
2021
Certifications
- CompTIA Security+
- Microsoft Certified: Security Operations Analyst Associate
- CompTIA Network+
Languages
English (fluent) · Yoruba (native)
This example is fictional: the person, employers and figures are invented to show good structure. Use it as a guide and write your own, true details.
What makes this resume work
- 1Specific tools (Sentinel, Splunk, Defender) are named because security job ads are very tool-specific.
- 2Response time and false positive reduction are clear, measurable security outcomes.
- 3The move from IT support to SOC is shown as a natural progression, which is the most common route into security.
- 4Certifications appear in their own section, because security recruiters often filter on them.
- 5Details are general enough that no confidential information about the employer's systems is revealed.
Common mistakes to avoid
- Revealing sensitive details about an employer's security setup, incidents or weaknesses.
- Listing certifications you are only studying for as if you hold them. Write 'in progress' instead.
- Using only acronyms. Recruiters may search for 'security information and event management' as well as 'SIEM'.
Applying for a cybersecurity analyst job?
Pair your resume with a short, specific cover letter. See the cybersecurity analyst cover letter example, or draft your own with the cover letter generator.
Questions people ask
How do I get into cybersecurity without experience?
A common path is IT support or networking first, plus an entry-level security certification and home lab projects. Show security-related tasks from your support role, such as MFA rollouts or phishing reports.
Which certifications matter for SOC analyst roles?
Entry-level vendor-neutral certifications such as CompTIA Security+ are widely requested, along with vendor certifications for the SIEM or cloud platform the employer uses. Check what appears in job ads in your area.
Can I describe incidents I worked on?
Yes, in general terms. Describe the type of incident, your role and the outcome, without naming systems, vulnerabilities or anything confidential.