Exploring Cybersecurity Career Opportunities

What is this page about?

A guide to cybersecurity career paths, treating the field as a family of distinct careers rather than one job. It gives full treatment to five tracks, offensive security (red team and penetration testing), defensive security (blue team, SOC, detection engineering), governance, risk, and compliance (GRC), cloud security, and digital forensics and incident response (DFIR), covering what each involves day to day, salary by level from ISC2/ISACA 2024 data, the fastest path to entry, and the career ceiling, plus skills that transfer across tracks.

What has been corrected on this page?

Every accepted correction to this page is recorded with the exact change, so readers can see how the page improved over time.

1. 11 July 2026 · corrected by Emir Baycan

   2 corrections applied: 'The Practice of Network Security Monitoring' is by Richard Bejtlich; Chris Sanders wrote 'Applied Network Security Monitoring.' | Sanders and Smith wrote 'Applied Network Security Monitoring', not 'The Practice of Network Security Monitoring' (which is Bejtlich's).

   Before

   Chris Sanders, author of 'The Practice of Network Security Monitoring,'...; Chris Sanders and Jason Smith, 'The Practice of Network Security Monitoring'

   After

   Chris Sanders, author of 'Applied Network Security Monitoring,' SANS...; Chris Sanders and Jason Smith, 'Applied Network Security Monitoring'

   Why: 'The Practice of Network Security Monitoring' is by Richard Bejtlich; Sanders and Smith wrote 'Applied Network Security Monitoring'. Verified both fixes (blockquote attribution and bibliography entry) already live in body; no leftover instances found in faq/excerpt/meta.

   View the full record →

Who checked this page?

1 contributor has checked "Exploring Cybersecurity Career Opportunities" on When Notes Fly. Each name below links to that person's public CitePep profile, where every contribution they have made is listed with the exact change they proposed.