Cybersecurity Resume: Skills, Certifications and Examples for SOC, Pentest and GRC Roles

Security hiring is driven by keywords and certifications. Recruiters filter for tools, frameworks and certificates first, then hiring managers look for proof that you can handle real incidents.

Name your track

«Cybersecurity professional» is too broad. Choose: SOC Analyst, Penetration Tester, Cloud Security Engineer, Incident Responder or GRC Analyst. Recruiters search for these exact titles.

Keywords by track

• SOC and incident response: SIEM (Splunk, Microsoft Sentinel, QRadar), EDR, threat hunting, MITRE ATT&CK, log analysis, playbooks.
• Offensive security: Burp Suite, Metasploit, Nmap, OWASP Top 10, Active Directory attacks, report writing.
• Cloud and engineering: AWS or Azure security, IAM, Terraform, zero trust, vulnerability management.
• GRC: ISO 27001, NIST CSF, SOC 2, risk assessments, policies, audits.

Certifications

List certifications in a section near the top, with the year. Entry level: CompTIA Security+, CySA+, Google Cybersecurity. Mid level: CEH, OSCP, GCIH. Senior and management: CISSP, CISM, CISA. List only certifications you hold, and mark those in progress clearly.

Write results, not tools

• «Tuned 40 SIEM rules in Splunk, cutting false positives by 35 % without missing true alerts.»
• «Reduced mean time to respond from 4 hours to 50 minutes by writing 12 incident playbooks.»
• «Found 3 critical and 11 high vulnerabilities in a web application test; all fixed before release.»
• «Led ISO 27001 readiness; certification achieved with no major non-conformities.»

No experience yet?

• Home lab: describe what you built and what you detected.
• CTFs and platforms: rankings on Hack The Box or TryHackMe.
• Bug bounty: accepted reports, without disclosing confidential details.
• Adjacent experience: IT support or system administration is a common path into the SOC.

Be careful with confidential details

Never name clients from penetration tests or describe unpatched vulnerabilities. Use general descriptions: «a financial services client».

Security recruiters want two things: the right keywords to find you, and proof that you can handle a real incident.

Match the job ad

CV Analyz covers more than 780 professions, including security roles. It compares your resume with the job ad and shows the missing tools, frameworks and certifications, then rewrites only what you actually did. It never adds a certification you do not hold.