Cyber security analyst CV example
Security teams hire analysts who can triage alerts quickly and explain what happened. This UK example shows a SOC analyst’s CV with the tools, volumes and incidents a hiring manager wants to see, plus clearance and certifications.
By the OpusStride team · Updated · 1 min read
Example cyber security analyst CV
Written for UK employers. The employer is fictional and the figures are illustrative — replace them with your own.
Professional summary
SOC analyst with 3 years in a 24/7 security operations centre for financial services clients. Triages around 120 alerts a shift in Microsoft Sentinel and Splunk, and led response on 9 confirmed incidents in 2025. CompTIA Security+ and Microsoft SC-200; holds SC clearance.
Experience
Security Operations Centre Analyst (Tier 2)
Ashgrove Cyber (fictional), Manchester · Feb 2023 – Present
- Triage around 120 alerts a shift across 14 client environments in Microsoft Sentinel and Splunk.
- Led investigation and containment on 9 confirmed incidents in 2025, including a business email compromise caught within 40 minutes.
- Wrote 22 KQL detection rules that cut false positives on the highest-volume alerts by 35%.
- Produce monthly threat reports for client security leads, mapped to MITRE ATT&CK.
Skills
Microsoft Sentinel · Splunk · KQL · Incident response · MITRE ATT&CK · Microsoft Defender XDR · Python scripting
Licences and certifications to list
- CompTIA Security+
- Microsoft SC-200
- Security Check (SC) clearance
Show volume and judgement
A SOC role is about handling a high volume of alerts and making good calls on the few that matter. Give your alert volume, the environments you covered, and two or three incidents with what you found and how fast you contained it. Detection rules you wrote, and false positives you reduced, show you improve the system rather than just working in it.
Clearance and certifications
Many UK security roles in government, defence and their suppliers require Security Check (SC) or Developed Vetting (DV). If you hold either, put it in your profile and your credentials, and say whether it is active. List certifications with the year earned, most relevant first.
Frequently asked questions
- Do I need a degree for cyber security jobs in the UK?
- Not always. Many SOC roles accept certifications and hands-on experience instead, such as Security+, home labs or capture-the-flag results. List what you have done, with specifics.
- Should I include home lab projects?
- Yes, especially early in your career. Describe what you built and tested, the tools used, and link to a write-up if you have one.
Templates for this
Related reading
Put it into practice
Build it from a region-matched template, then check what an ATS reads.