Role maps

Career paths

39 security roles with skills, tools, roadmap levels, and cert hints — imported from CyberPath into CYNARKS Learn.

🛡️ SOC Analyst

Monitor, triage and investigate security alerts.

Skills

NetworkingWindows/LinuxLog analysisSIEMIncident responseThreat intelligence

Roadmap path

Cybersecurity Fundamentals→Networking Fundamentals→Linux & Windows Fundamentals→Security Fundamentals→Incident Response→Security Operations / SOC→Threat Intelligence

Cert hints: CompTIA Security+ · CompTIA CySA+ · BTL1 (not vouchers)

🎯 Penetration Tester

Find and report vulnerabilities in authorized engagements.

Skills

NetworkingLinuxWeb securityActive DirectoryScriptingReporting

Roadmap path

Networking Fundamentals→Linux & Windows Fundamentals→Programming & Scripting→Web Application Security→System Security→Active Directory & Windows Security→Ethical Hacking→Penetration Testing

Cert hints: eJPT · OSCP · PNPT (not vouchers)

🔴 Red Team Operator

Emulate real adversaries to test detection and response.

Skills

PentestingADOPSECC2 conceptsEvasion awareness

Roadmap path

Penetration Testing→Active Directory & Windows Security→Malware Analysis→Red Teaming

Cert hints: CRTO · OSEP (not vouchers)

🔵 Blue Team Analyst

Build and operate defenses, detections and hunts.

Skills

SIEMDetection engineeringHardeningThreat hunting

Roadmap path

Security Fundamentals→System Security→Security Operations / SOC→Blue Teaming→Threat Intelligence

Cert hints: GCIA · BTL2 (not vouchers)

⚙️ Security Engineer

Design, build and automate security controls.

Skills

NetworkingScriptingCloudHardeningArchitecture

Roadmap path

Networking Fundamentals→Programming & Scripting→Security Fundamentals→System Security→Cloud Security→Security Architecture

Cert hints: Security+ · CISSP (later) (not vouchers)

☁️ Cloud Security Engineer

Secure cloud identities, networks and workloads.

Skills

IAMCloud networkingIaCLoggingContainers

Roadmap path

Networking Fundamentals→Programming & Scripting→Security Fundamentals→Cloud Security→Application Security / DevSecOps→Security Architecture

Cert hints: AWS Security Specialty · AZ-500 · CCSP (not vouchers)

🔍 Digital Forensics Analyst

Acquire and analyze evidence after incidents.

Skills

OS internalsFile systemsMemory analysisTimelines

Roadmap path

Computer Fundamentals→Linux & Windows Fundamentals→Incident Response→Digital Forensics→Malware Analysis

Cert hints: GCFA · GCFE (not vouchers)

🧬 Malware Analyst

Reverse engineer malicious software and write detections.

Skills

Assembly basicsReverse engineeringSandboxingYARA

Roadmap path

Computer Fundamentals→Programming & Scripting→Digital Forensics→Malware Analysis→Advanced Exploitation

Cert hints: GREM (not vouchers)

🧩 Application Security Engineer

Secure software through design, review and testing.

Skills

Secure codingThreat modelingSAST/DASTWeb security

Roadmap path

Programming & Scripting→Web Fundamentals→Web Application Security→Application Security / DevSecOps

Cert hints: OSWE · CSSLP (not vouchers)

🔬 Security Researcher

Discover new vulnerabilities and techniques responsibly.

Skills

Reverse engineeringFuzzingExploitationWriting

Roadmap path

Programming & Scripting→Malware Analysis→Advanced Exploitation→Advanced Cybersecurity / Professional

Cert hints: OSED · OSEE (not vouchers)

💰 Bug Bounty Hunter

Find vulnerabilities in programs that explicitly invite testing.

Skills

Web securityReconReport writing

Roadmap path

Web Fundamentals→Web Application Security→Ethical Hacking

Cert hints: BSCP (not vouchers)

🚩 CTF Player

Compete in legal security challenges to sharpen skills.

Skills

CryptoWebForensicsReversing

Roadmap path

Linux & Windows Fundamentals→Programming & Scripting→Cryptography→Web Application Security→Digital Forensics

📋 GRC Analyst

Governance, risk and compliance — policies, audits, control mapping.

Skills

Risk frameworksISO/NIST mappingPolicy writingAudit supportVendor risk

Roadmap path

Cybersecurity Fundamentals→Security Fundamentals→Security Architecture→Advanced Cybersecurity / Professional

Cert hints: CompTIA Security+ · CISA · CRISC · ISO 27001 Lead Implementer (not vouchers)

🧭 Virtual / Fractional CISO

Part-time security leadership: roadmap, board packs, vendor and incident oversight.

Skills

Security strategyRisk communicationBudgetingVendor managementIR leadership

Roadmap path

Security Fundamentals→Security Operations / SOC→Cloud Security→Security Architecture→Advanced Cybersecurity / Professional

Cert hints: CISSP · CISM (not vouchers)

🔑 IAM Engineer

Identity lifecycle, SSO/MFA, privileged access, directory integrations.

Skills

SSO/SAML/OIDCMFADirectory servicesPAMLifecycle automation

Roadmap path

Networking Fundamentals→Linux & Windows Fundamentals→Security Fundamentals→Active Directory & Windows Security→Cloud Security

Cert hints: Security+ · SC-300 · CIAM-oriented vendor certs (not vouchers)

🛡️ Product Security Engineer

Secure SDLC for a product line — threat models, reviews, vulnerability management.

Skills

Threat modelingSecure designVuln managementAppSecDeveloper coaching

Roadmap path

Programming & Scripting→Web Application Security→Application Security / DevSecOps→Security Architecture

Cert hints: CSSLP · OSWE (not vouchers)

📣 Security Awareness Lead

Phishing simulations, training programs, culture and metrics.

Skills

Instructional designPhishing simsMetricsCommsBehavioral change

Roadmap path

Cybersecurity Fundamentals→Security Fundamentals→Advanced Cybersecurity / Professional

Cert hints: Security+ · awareness vendor certs (not vouchers)

🌐 Network Security Engineer

Firewalls, segmentation, VPN, IDS/IPS, secure network design.

Skills

TCP/IPFirewall policyVPNIDS/IPSSegmentation

Roadmap path

Networking Fundamentals→Security Fundamentals→System Security→Blue Teaming

Cert hints: Security+ · CCNA Security / equivalent · GCIA (not vouchers)

🏹 Threat Hunter

Hypothesis-driven hunts across endpoint, network and identity telemetry.

Skills

ATT&CKQuery languagesTelemetry gapsMalware basicsIR collaboration

Roadmap path

Security Operations / SOC→Blue Teaming→Threat Intelligence→Malware Analysis

Cert hints: BTL2 · GCTI · GNFA (not vouchers)

🔏 Privacy / Data Protection Analyst

Data inventory, DPIA support, retention, privacy-by-design reviews.

Skills

GDPR/DPDP basicsData mappingVendor DPAsMinimizationBreach notification

Roadmap path

Cybersecurity Fundamentals→Security Fundamentals→Security Architecture→Advanced Cybersecurity / Professional

Cert hints: CIPP/E or regional privacy cert · Security+ (not vouchers)

📡 Detection Engineer

Write, tune and test detections (SIEM/EDR) mapped to ATT&CK.

Skills

Detection-as-codeATT&CKLog pipelinesFalse-positive tuningPurple team loops

Roadmap path

Security Operations / SOC→Blue Teaming→Threat Intelligence→Programming & Scripting

Cert hints: CySA+ · BTL2 · GCIA (not vouchers)

🏛️ Security Architect

Design reference architectures, control patterns and risk tradeoffs.

Skills

Zero TrustSegmentationIdentity designThreat modelingStandards mapping

Roadmap path

Security Fundamentals→Cloud Security→Blue Teaming→Security Architecture→Advanced Cybersecurity / Professional

Cert hints: CISSP · SABSA/TOGAF-adjacent · CCSP (not vouchers)

👔 CISO / Head of Security

Own security strategy, budget, board reporting and crisis leadership.

Skills

StrategyRisk appetiteBoard commsTeam buildingVendor & audit oversight

Roadmap path

Security Architecture→Advanced Cybersecurity / Professional→Incident Response→Cloud Security

Cert hints: CISSP · CISM (not vouchers)

📱 Mobile Security Engineer

Assess and harden Android/iOS apps against MASVS-class risks.

Skills

MASVSAPK/IPA analysisTraffic interceptSecure storageMobile threat defense

Roadmap path

Web Application Security→Mobile Security→Application Security / DevSecOps

Cert hints: eMAPT / mobile-focused · OSWE-adjacent AppSec (not vouchers)

🏭 OT / ICS Security Analyst

Protect industrial control systems with safety and uptime constraints.

Skills

Purdue modelNetwork segmentationProtocol awarenessChange controlSafety culture

Roadmap path

Networking Fundamentals→System Security→Blue Teaming→Security Architecture

Cert hints: GICSP · ISA/IEC 62443 training (not vouchers)

📎 Security Consultant

Client-facing assessments, roadmaps and remediation coaching.

Skills

ScopingWorkshopsReportingStakeholder mgmtMulti-domain fluency

Roadmap path

Ethical Hacking→Security Architecture→Advanced Cybersecurity / Professional→Cloud Security

Cert hints: Security+ · CISSP (later) · domain specialty certs (not vouchers)

🔌 API Security Engineer

Secure REST/GraphQL APIs, OAuth/OIDC, and microservice authZ.

Skills

OWASP API Top 10OAuth/OIDCJWTRate limitingThreat modeling

Roadmap path

Web Fundamentals→Web Application Security→API Security Specialist→Application Security / DevSecOps

Cert hints: BSCP · OSWE (not vouchers)

🪪 Identity Security Engineer

Harden SSO, MFA, PAM, and directory integrations.

Skills

SAML/OIDCMFAPAMAD securityZero Trust identity

Roadmap path

Identity & Access Management→Active Directory & Windows Security→Cloud Security

Cert hints: SC-300 · CISSP (later) (not vouchers)

🔄 DevSecOps Engineer

Embed SAST/SCA/IaC/secrets scanning into CI/CD with policy gates.

Skills

CI/CDIaCSAST/SCASBOMPipeline design

Roadmap path

Programming & Scripting→Application Security / DevSecOps→Advanced DevSecOps & CI/CD Security→Software Supply Chain Security

Cert hints: CSSLP · CKA (optional) (not vouchers)

☸️ Kubernetes Security Engineer

Secure clusters: RBAC, policies, admission, runtime detection.

Skills

K8s RBACNetworkPolicyAdmission controlImage scanning

Roadmap path

Docker & Kubernetes Security→Cloud Security→Advanced DevSecOps & CI/CD Security

Cert hints: CKS · CKA (not vouchers)

🏗️ Cloud Security Architect

Design secure multi-cloud landing zones and reference architectures.

Skills

Landing zonesIAM at scaleLoggingSegmentationRisk

Roadmap path

Cloud Security→Enterprise Security Architecture→Security Architecture

Cert hints: AWS Security Specialty · CCSP (not vouchers)

📡 Threat Intelligence Engineer

Build feeds, STIX/TAXII pipelines, and intel-driven detections.

Skills

STIX/TAXIIMISP/OpenCTIATT&CKReport writing

Roadmap path

Threat Intelligence→Advanced Detection Engineering→Security Operations / SOC

Cert hints: GCTI · BTL2 (not vouchers)

🟣 Purple Team Specialist

Run collaborative emulations to improve detection and response.

Skills

Adversary emulationATT&CKDetection validationFacilitation

Roadmap path

Purple Team & Adversary Emulation→Red Teaming→Blue Teaming

Cert hints: CRTO · BTL2 (not vouchers)

✅ Security Compliance Analyst

Map controls to ISO/SOC/PCI and support audits.

Skills

Control mappingEvidence collectionPolicyAudit support

Roadmap path

Governance, Risk & Compliance→Security Fundamentals→Advanced Cybersecurity / Professional

Cert hints: CISA · ISO 27001 Lead Auditor (not vouchers)

📟 IoT Security Engineer

Secure embedded devices, firmware updates, and device fleets.

Skills

Firmware analysisSecure bootOTADevice identity

Roadmap path

IoT, ICS & SCADA Security→Mobile Security→Networking Fundamentals

Cert hints: IoT security vendor certs (not vouchers)

🤖 AI Security Engineer

Threat-model LLM features, RAG pipelines, and AI governance.

Skills

Prompt injection defenseRAG ACLsModel monitoringPolicy

Roadmap path

AI & LLM Application Security→Application Security / DevSecOps→Web Application Security

Cert hints: Emerging AI security certs (not vouchers)

🎯 AI Red Team Specialist

Adversarial testing of LLM/agent systems with safe methodologies.

Skills

AI red teamingAgent abuse casesReportingEthics

Roadmap path

AI & LLM Application Security→Agentic & Multi-Agent Security→Ethical Hacking

Cert hints: OSCP-style + AI workshops (not vouchers)

⚡ Security Automation Engineer

Automate SOC/IR with SOAR, scripts, and API integrations.

Skills

PythonSOARAPI integrationPlaybooks

Roadmap path

Security Operations / SOC→Advanced Detection Engineering→Programming & Scripting

Cert hints: CySA+ · BTL2 (not vouchers)

📦 Software Supply Chain Security Engineer

Protect build pipelines, dependencies, signing, and provenance.

Skills

SBOMSigstoreDependency reviewBuild hardening

Roadmap path

Software Supply Chain Security→Advanced DevSecOps & CI/CD Security→Programming & Scripting

Cert hints: SLSA/supply-chain workshops (not vouchers)

Also see sequenced CYNARKS learning paths.