यह रोडमैप अभी हिंदी में अनुवादित नहीं है: इसकी सामग्री अंग्रेज़ी में दिखाई जा रही है।
Cybersecurity Analyst
Protect organizations from digital threats
पक्का नहीं कि यह आपके लिए सही है? अपना करियर खोजें →
11 में से 0 मिशन पूरे
क्या यह करियर आपके लिए है?
महीनों लगाने से पहले दो मिनट
जो आप जैसा लगे, उस पर टिक करें
जो बातें आप पर सही बैठती हैं, उन पर टिक करें।
आप ये कौशल सीखेंगे
इससे मिलने वाली नौकरियाँ
- Security Analyst
- SOC Analyst
- Penetration Tester
- Security Engineer
- CISO (long-term)
शुरू करने से पहले
- ✓ Basic computer networking knowledge
- ✓ Comfort with command-line tools
Cybersecurity Analyst तक 11 मिशन
4 वर्ल्ड, 11 मिशन। खोलने के लिए किसी भी गोले पर टैप करें; चमकता हुआ गोला अगला है।
You can't secure what you don't understand.
Learn the core of cybersecurity.
Pick a track and build real skills.
Land your first role and keep growing.
इस करियर के बारे में और
नौकरी के बारे में, आपके इलाके का वेतन, लोगों के सवाल, और यह करियर आगे आपको कहाँ ले जा सकता है।
काम के बारे में
आप क्या करेंगे
- Monitor the organisation's networks for security breaches and investigate when one happens
- Run and maintain protective software such as firewalls and data encryption
- Check computer and network systems for vulnerabilities
- Perform risk assessments and test systems
- Write reports on attempted attacks and security breaches
- Recommend security improvements to management or senior IT staff
आप कहाँ काम करेंगे
- Computer systems design firms (about 22% of US information security analysts)
- Finance and insurance (about 17% in the US)
- Company head offices (about 9% in the US)
- Information sector companies (about 9% in the US)
- Management and technical consulting firms (about 6% in the US)
हर कदम पूरा पढ़ें
हर कदम का पूरा पाठ, पढ़ने या प्रिंट करने के लिए। इन पर काम ऊपर की यात्रा में करें।
IT & Networking Foundations 3 कदम
Network Protocols & Architecture
Understanding exactly how data moves from point A to point B across the internet.
असली काम: Use Wireshark on your home network. Capture a simple HTTP packet and an HTTPS packet. Physically locate the IP headers, TCP flags, and payload in the HTTP packet, and observe why the HTTPS payload is unreadable.
यह क्यों ज़रूरी है: Most attacks happen over the network. If you don't know how DNS resolves or what port SSH uses by default, you won't recognize anomalous traffic.
चेकलिस्ट
- Master the OSI and TCP/IP models
- Understand subnetting, IP addressing (IPv4/IPv6), and routing
- Learn core protocols: DNS, HTTP/HTTPS, FTP, SSH, RDP
- Understand the function of routers, switches, and load balancers
- Learn how NAT (Network Address Translation) works
Operating Systems & Linux Command Line
Knowing how systems are structured internally to recognize when they have been manipulated.
असली काम: Set up an Ubuntu Server virtual machine. Create three users, assign them to different groups, and modify folder permissions so User A cannot read User B's files. Verify the logs to see the changes you made.
यह क्यों ज़रूरी है: Hackers 'live off the land' using built-in OS tools to escalate privileges. You have to know the OS better than they do.
चेकलिस्ट
- Navigate Linux natively via the CLI (cd, ls, grep, find)
- Understand Linux file permissions and user groups (chmod, chown)
- Learn how Windows Active Directory organizes enterprise users logically
- Monitor running processes and services (top, ps, Windows Task Manager)
- Read system logs to track events (var/log in Linux, Event Viewer in Windows)
Automation & Scripting (Python/Bash)
Writing code to automate repetitive defense tasks and parse massive security logs.
असली काम: Write a Python script that opens a dummy Apache web server log file, parses out all the IP addresses using regular expressions, courts their frequency, and prints the top 5 most hyperactive IPs.
यह क्यों ज़रूरी है: A SOC analyst might look at 10,000 security logs a day. You cannot manually read them; you must script the sorting process.
चेकलिस्ट
- Write basic Bash scripts for Linux administration
- Learn Python syntax (variables, loops, dictionaries)
- Use Python's regex (re) module to search for IP addresses in text
- Understand how to make API calls using Python (requests library)
- Learn basic PowerShell for querying Windows operating systems
Security Fundamentals 3 कदम
Threat Modeling & Vulnerabilities
Understanding the taxonomy of how attacks actually happen in the wild.
असली काम: Read three recent, major data breach reports (e.g., SolarWinds, Equifax). For each, write a one-paragraph summary of the initial attack vector and what security control theoretically should have stopped it.
यह क्यों ज़रूरी है: You need a mental library of attacks to rapidly hypothesize what might be happening when a system starts acting strangely.
चेकलिस्ट
- Understand the CIA Triad (Confidentiality, Integrity, Availability)
- Learn common attack vectors: Phishing, Ransomware, SQLi, XSS
- Interpret CVEs (Common Vulnerabilities and Exposures) and CVSS scoring
- Understand Social Engineering tactics
- Learn the concept of Zero Trust architecture
Cryptography & Access Control
The math and policies that keep unauthorized users out.
असली काम: Generate an SSH key pair on your machine. Configure a cheap cloud VPS (like DigitalOcean) to only accept login via your private key, expressly disabling password logins. Test that password login fails.
यह क्यों ज़रूरी है: Poor access control is the leading cause of compromises. You need to know how to lock doors cryptographically, not just theoretically.
चेकलिस्ट
- Differentiate between Symmetric and Asymmetric encryption
- Understand Hashing (SHA-256) and why it's used for passwords
- Learn about Digital Certificates and PKI (Public Key Infrastructure)
- Understand Multi-Factor Authentication (MFA) mechanisms
- Learn Principle of Least Privilege and Role-Based Access Control (RBAC)
Defensive Infrastructure & Appliances
The hardware and software barriers establishing the enterprise perimeter.
असली काम: Set up a pfSense firewall in a VirtualBox lab. Create rules that explicitly block Ping (ICMP) requests from an external machine while allowing HTTP traffic on port 80.
यह क्यों ज़रूरी है: When a threat is detected, you need to know exactly which firewall rule or appliance to modify to isolate the attacker instantly.
चेकलिस्ट
- Understand Firewalls (Stateful vs. Stateless, WAFs)
- Learn the difference between IDS (Intrusion Detection) and IPS (Intrusion Prevention)
- Understand Endpoint Detection and Response (EDR) platforms
- Learn how VPNs secure remote access
- Understand basic cloud security concepts (AWS Security Groups)
Specialize & Get Hands-On 3 कदम
Blue Team: SOC Operations & SIEM
Working the defense line: monitoring alerts, investigating logs, and kicking out intruders.
असली काम: Install Splunk Enterprise (free tier) locally. Ingest a sample dataset of Windows Security Event Logs. Write a query to detect whenever a user account is repeatedly locked out (Event ID 4740).
यह क्यों ज़रूरी है: The majority of entry-level cyber jobs are in the SOC (Security Operations Center). Being able to navigate a SIEM on day one gets you hired.
चेकलिस्ट
- Learn SIEM (Security Information and Event Management) tools like Splunk or ELK
- Practice Alert Triage: determining False Positives vs True Positives
- Learn the Incident Response Lifecycle (NIST Framework)
- Understand the MITRE ATT&CK framework for categorizing adversary tactics
- Write basic correlation rules to trigger alerts
Red Team: Offensive Security Tools
Thinking like a hacker to test your own company's defenses.
असली काम: Download the 'Metasploitable' vulnerable virtual machine. Use Nmap to discover open ports, identify an outdated service, find the exploit in Metasploit, and achieve a reverse root shell. Document every step.
यह क्यों ज़रूरी है: To defend a network, you must know how adversaries probe and exploit it. Red team skills make you a drastically better Blue team defender.
चेकलिस्ट
- Master Nmap for port scanning and OS fingerprinting
- Learn Metasploit to execute known exploits against vulnerable machines
- Use Burp Suite to intercept and modify web requests
- Understand privilege escalation techniques on Linux and Windows
- Learn basic password cracking with Hashcat or John the Ripper
Live Range Practice & Certifications
Formalizing your skills through gamified environments and industry-recognized exams.
असली काम: Complete the 'Web Fundamentals' path on TryHackMe. Then, prepare for and schedule the CompTIA Security+ exam within a 60-day window to force yourself to study.
यह क्यों ज़रूरी है: Cyber IT is heavily certification-driven. HR filters resumes automatically looking for the 'Security+' keyword.
चेकलिस्ट
- Complete learning paths on TryHackMe or HackTheBox
- Participate in Capture The Flag (CTF) events
- Pass the CompTIA Security+ (the gold standard entry-level cert)
- Consider a specialized cert like CySA+ (Defense) or eJPT (Offense)
- Join Bug Bounty platforms to read public vulnerability write-ups
Job Hunt & Career Growth 2 कदम
Building a Home Lab Portfolio
Demonstrating practical competence through self-directed projects.
असली काम: Build an 'Active Directory Lab' with 1 Domain Controller and 2 Client VMs. Write a detailed README on GitHub explaining how you configured Group Policies to enforce password complexity, accompanied by screenshots.
यह क्यों ज़रूरी है: Security experience is a catch-22: you need experience to get hired, but getting hired gives experience. A documented home lab proves to hiring managers that you possess practical, functional initiative.
चेकलिस्ट
- Set up an Active Directory lab environment using Virtualization (Hyper-V / VMware)
- Deploy a honeypot on a cloud server to monitor brute force attacks
- Run an IDS (like Suricata or Snort) locally to inspect traffic
- Document your architecture with professional network diagrams (Draw.io)
- Write detailed blog posts explaining how you built the lab
Navigating the Cyber Job Market
Breaking through the HR filters to land a SOC Analyst or Junior Admin job.
असली काम: Locate an upcoming BSides or local cybersecurity meetup in your city. Attend in person, strike up conversations with 3 people, and ask what they look for in junior hires. Networking is overwhelmingly effective in the security community.
यह क्यों ज़रूरी है: Many 'entry-level' cyber jobs actually expect 1-2 years of general IT experience. You have to sell your deep technical curiosity and foundational knowledge to bypass this requirement.
चेकलिस्ट
- Ensure your resume emphasizes IT fundamentals (networking, AD) just as much as security tools
- Apply broadly for Tier 1 SOC Analyst, Helpdesk, and Junior Network Admin roles
- Prepare for technical interviews: know the ports (SSH, RDP, DNS), explain the OSI model, and describe what happens when you type google.com
- Attend local security conferences like BSides, DEF CON groups, or OWASP chapters
Cybersecurity Analyst के बारे में लोगों के सवाल
समय, ज़रूरी योग्यता, वेतन और पढ़ाई के त रीकों पर साफ़ जवाब।
Cybersecurity Analyst बनने में कितना समय लगता है?
यह रोडमैप 6–18 months (with IT background) or 1–2 years (from scratch) का अनुमान देता है। इसमें 4 चरण और 11 कदम हैं, “IT & Networking Foundations” से “Job Hunt & Career Growth” तक।
Cybersecurity Analyst कैसे बनें?
4 चरणों को क्रम से पूरा करें, पहले चरण “IT & Networking Foundations” से शुरुआत करें। आपका पहला काम: Use Wireshark on your home network. Capture a simple HTTP packet and an HTTPS packet. Physically locate the IP headers, TCP flags, and payload in the HTTP packet, and observe why the HTTPS payload is unreadable.
Cybersecurity Analyst कितना कमाते हैं?
वेतन देश पर निर्भर करता है। इस पेज का वेतन बॉक्स मेन्यू में चुने गए देश के लिए DraftMyCareer का अनुमान, वहाँ की मुद्रा में, दिखाता है।
शुरू करने से पहले मुझे क्या चाहिए?
यह रोडमैप बताता है: Basic computer networking knowledge; Comfort with command-line tools।
Cybersecurity Analyst के लिए कौन-से कौशल चाहिए?
यह रोडमैप इन्हें सिखाता है: Network Security, Threat Analysis, Incident Response, Linux, Python, SIEM Tools।
करियर बदलें: इस भूमिका में आने और यहाँ से आगे जाने के रास्ते
सारे बदलाव देखें →यहाँ से आगे बढ़ने और दूसरी भूमिकाओं में जाने के रास्ते
- Cloud Architect
Combine critical cybersecurity expertise with cloud architecture for premier enterprise security architect roles.
⏱ 4–6 months🧭 Moderateआप क्या सीखेंगेCloud Infrastructure Design (AWS/Azure/GCP) · Terraform & Infrastructure Automation · High Availability & Scaling
कदम-दर-कदम योजना देखें
- Month 1–2: Cloud Core Services Deeply study compute, storage, VPC networking, and database services on AWS or Azure.
- Month 3–4: Cloud Security & IaC Author secure Terraform templates with automated compliance guardrails and least-privilege IAM.
- Month 5–6: Solutions Architecture Design resilient, fault-tolerant enterprise systems and pass Cloud Solutions Architect Pro exam.