Cybersecurity Analyst
Protect organizations from digital threats
¿No sabes si es para ti? Encuentra tu vocación →
0 de 20 misiones hechas
¿Esta carrera es para ti?
Dos minutos antes de dedicarle meses
Marca lo que suena a ti
Marca las que son ciertas para ti.
Habilidades que te llevarás
Trabajos a los que lleva
- Security Analyst
- SOC Analyst
- Penetration Tester
- Security Engineer
- CISO (long-term)
Antes de empezar
- ✓ Basic computer networking knowledge
- ✓ Comfort with command-line tools
20 misiones hasta Cybersecurity Analyst
4 mundos, 20 misiones. Toca cualquier círculo para abrirlo; el que brilla es el siguiente.
You can't secure what you don't understand.
Learn the core of cybersecurity.
Pick a track and build real skills.
Land your first role and keep growing.
Más sobre esta carrera
Sobre el trabajo, el salario donde vives, preguntas frecuentes y a dónde puede llevarte esta carrera después.
Sobre el trabajo
Qué harías
- Vigilar las redes de la organización en busca de brechas e investigar cuando ocurre una
- Usar y mantener software de protección, como cortafuegos y cifrado de datos
- Revisar los sistemas informáticos y de red en busca de vulnerabilidades
- Realizar evaluaciones de riesgo y pruebas de los sistemas
- Redactar informes sobre intentos de ataque y brechas de seguridad
- Recomendar mejoras de seguridad a la dirección o al personal de TI sénior
Dónde trabajarías
- Empresas de diseño de sistemas informáticos (cerca del 22 % de los analistas de seguridad de EE. UU.)
- Finanzas y seguros (cerca del 17 % en EE. UU.)
- Sedes centrales de empresas (cerca del 9 % en EE. UU.)
- Empresas del sector de la información (cerca del 9 % en EE. UU.)
- Consultoras de gestión y técnicas (cerca del 6 % en EE. UU.)
Todos los pasos completos
El texto completo de cada paso, para leer o imprimir. Avanza por ellos en el viaje de arriba.
IT & Networking Foundations 5 pasos
Master foundational computer networking: TCP/IP model, DNS, HTTP/HTTPS, routing, and subnetting.
Master foundational computer networking: TCP/IP model, DNS, HTTP/HTTPS, routing, and subnetting.
Abrir este paso ↑Deepen your understanding of operating systems — master Linux permissions and Windows Active Directory internals.
Deepen your understanding of operating systems — master Linux permissions and Windows Active Directory internals.
Abrir este paso ↑Learn basic Python scripting or Bash to automate repetitive system tasks and log parsing.
Learn basic Python scripting or Bash to automate repetitive system tasks and log parsing.
Abrir este paso ↑Familiarize yourself with enterprise IT infrastructure and cloud basics (AWS/Azure).
Familiarize yourself with enterprise IT infrastructure and cloud basics (AWS/Azure).
Abrir este paso ↑Study for and theoretically grasp the CompTIA Network+ material (certification optional but recommended).
Study for and theoretically grasp the CompTIA Network+ material (certification optional but recommended).
Abrir este paso ↑
Security Fundamentals 5 pasos
Study network security appliances (firewalls, IDS/IPS), advanced cryptography, and Access Control models.
Study network security appliances (firewalls, IDS/IPS), advanced cryptography, and Access Control models.
Abrir este paso ↑Analyze real-world threat vectors: malware, phishing, ransomware, SQL injection, and social engineering.
Analyze real-world threat vectors: malware, phishing, ransomware, SQL injection, and social engineering.
Abrir este paso ↑Learn vulnerability scanning and how to read/interpret CVEs (Common Vulnerabilities and Exposures).
Learn vulnerability scanning and how to read/interpret CVEs (Common Vulnerabilities and Exposures).
Abrir este paso ↑Prepare for and acquire the CompTIA Security+ certification.
Prepare for and acquire the CompTIA Security+ certification.
Abrir este paso ↑Practice identifying vulnerabilities in safe, gamified environments like TryHackMe & HackTheBox.
Practice identifying vulnerabilities in safe, gamified environments like TryHackMe & HackTheBox.
Abrir este paso ↑
Specialize & Get Hands-On 5 pasos
Choose a specialty: Blue Team (defense/SOC/incident response), Red Team (offensive/pen-testing), or GRC (compliance).
Choose a specialty: Blue Team (defense/SOC/incident response), Red Team (offensive/pen-testing), or GRC (compliance).
Abrir este paso ↑Blue Team: Learn SIEM tools (Splunk, ELK stack), alert triage, and incident response frameworks (NIST/SANS).
Blue Team: Learn SIEM tools (Splunk, ELK stack), alert triage, and incident response frameworks (NIST/SANS).
Abrir este paso ↑Red Team: Master widely-used offensive tools like Burp Suite, Metasploit, Nmap, and Wireshark.
Red Team: Master widely-used offensive tools like Burp Suite, Metasploit, Nmap, and Wireshark.
Abrir este paso ↑Participate in bug bounty programs (HackerOne, Bugcrowd) or CTF (Capture The Flag) competitions for real-world practice.
Participate in bug bounty programs (HackerOne, Bugcrowd) or CTF (Capture The Flag) competitions for real-world practice.
Abrir este paso ↑Consider an intermediate certification that matches your track, like CySA+ (Blue) or eJPT/PNPT (Red).
Consider an intermediate certification that matches your track, like CySA+ (Blue) or eJPT/PNPT (Red).
Abrir este paso ↑
Job Hunt & Career Growth 5 pasos
Build a home lab: set up defensive monitoring (SIEM, honeypots) or a malware analysis sandbox in a virtual machine.
Build a home lab: set up defensive monitoring (SIEM, honeypots) or a malware analysis sandbox in a virtual machine.
Abrir este paso ↑Document your home lab setups, CTF write-ups, or bug bounty findings on a personal blog or GitHub.
Document your home lab setups, CTF write-ups, or bug bounty findings on a personal blog or GitHub.
Abrir este paso ↑If pursuing Red Team long-term, aim for the OSCP; if management/architecture, look toward CISSP (requires 5 years experience).
If pursuing Red Team long-term, aim for the OSCP; if management/architecture, look toward CISSP (requires 5 years experience).
Abrir este paso ↑Tailor your resume and apply aggressively to SOC Analyst, Junior Security Engineer, or Junior Pentester roles.
Tailor your resume and apply aggressively to SOC Analyst, Junior Security Engineer, or Junior Pentester roles.
Abrir este paso ↑Network actively: attend local B-Sides conferences, DEF CON groups (DCGs), or OWASP chapter meetings.
Network actively: attend local B-Sides conferences, DEF CON groups (DCGs), or OWASP chapter meetings.
Abrir este paso ↑
Preguntas frecuentes sobre Cybersecurity Analyst
Respuestas claras sobre salarios, duración y metodología.
¿Cuánto se tarda en ser Cybersecurity Analyst?
Esta ruta estima 6–18 months (with IT background) or 1–2 years (from scratch). Tiene 4 fases y 20 pasos, desde «IT & Networking Foundations» hasta «Job Hunt & Career Growth».
¿Cómo llego a ser Cybersecurity Analyst?
Sigue las 4 fases en orden, empezando por la fase 1, «IT & Networking Foundations». Tu primera tarea: Master foundational computer networking: TCP/IP model, DNS, HTTP/HTTPS, routing, and subnetting.
¿Cuánto gana un Cybersecurity Analyst?
El sueldo depende del país. El recuadro de salario de esta página muestra la estimación de DraftMyCareer, en moneda local, para el país elegido en el menú.
¿Qué necesito antes de empezar?
Esta ruta indica: Basic computer networking knowledge; Comfort with command-line tools.
¿Qué habilidades necesita un Cybersecurity Analyst?
Esta ruta cubre: Network Security, Threat Analysis, Incident Response, Linux, Python, SIEM Tools.
Cambiar de carrera: caminos desde y hacia este rol
Ver todos los cambios →Próximos pasos y cambios laterales desde este rol
- Cloud Architect
Combine critical cybersecurity expertise with cloud architecture for premier enterprise security architect roles.
⏱ 4–6 months🧭 ModerateLo que aprenderíasCloud Infrastructure Design (AWS/Azure/GCP) · Terraform & Infrastructure Automation · High Availability & Scaling
Ver plan paso a paso
- Month 1–2: Cloud Core Services Deeply study compute, storage, VPC networking, and database services on AWS or Azure.
- Month 3–4: Cloud Security & IaC Author secure Terraform templates with automated compliance guardrails and least-privilege IAM.
- Month 5–6: Solutions Architecture Design resilient, fault-tolerant enterprise systems and pass Cloud Solutions Architect Pro exam.