Cybersecurity Analyst Resume Example
Security resumes need to show both technical depth and risk reduction. Focus on incidents handled, controls implemented and audits passed.
Use this example Template: ATS Cybersecurity
Avery Kim
Senior Security Engineer
Arlington, VA 22201 | (703) 555-0333 | avery.kim@example.com | linkedin.com/in/averykimsec | github.com/akim-sec
Continued · Avery Kim
Summary
Security engineer with 8 years in detection, response, and cloud hardening. Cut MTTD 40%, led SOC2 Type II readiness, and built detections at CrowdStrike, Capital One, and Mandiant. Cybersecurity with mid-career depth across product, people, and P&L-adjacent outcomes. Known for quantified delivery, cross-functional leadership, and clear operating cadence. Sample profile is intentionally dense so you mostly edit, not invent.
Experience
Senior Security Engineer
CrowdStrike · Remote
01/2021 – Present
Detection content and IR playbooks.
40%MTTD down
SOC2Type II
200+Detections
Ransomware Playbook
IR automation
- Cut MTTD 40% for ransomware family
- Automated containment runbooks
- Shipped on time across 4 workstreams
Detection Pack
Cloud & endpoint
- Authored 200+ high-fidelity detections
- Raised SLA attainment from 92% to 99.2%
- Reduced severity-1 incidents 41%
Platform Migration (CrowdStrike)
Multi-region service cutover
- Migrated 40% of monolith traffic with zero Sev-1s
- Cut p95 latency 35% via caching and query redesign
- Introduced SLO error budgets adopted by 6 teams
Key achievements
- Security Star
- Reduced rework through clearer acceptance criteria at CrowdStrike
- Improved test coverage on critical path at CrowdStrike
- Cut API p95 latency through redesign
Security Star · 2023
Security Engineer
Capital One · McLean, VA
06/2018 – 12/2020
Cloud security posture.
60%Critical findings
25%Efficiency gain
98%Goal hit rate
CSPM Rollout
AWS guardrails
- Reduced critical cloud findings 60%
- Shipped versioned APIs used by 200+ partners
- Authored docs that cut onboarding from 2 weeks to 4 days
Platform Migration (Capital)
Multi-region service cutover
- Migrated 40% of monolith traffic with zero Sev-1s
- Cut p95 latency 35% via caching and query redesign
- Introduced SLO error budgets adopted by 6 teams
Cross-Functional Launch (Capital)
Multi-team go-to-market program
- Shipped on time across 4 workstreams
- Grew adoption 34% in first quarter
- Built RAID log that removed weekly surprises
Key achievements
- Supported red-team remediations
- Reduced rework through clearer acceptance criteria at Capital
- Owned executive status pack for steering committee at Capital
- Cut API p95 latency through redesign
Delivery Excellence · 2022
Incident Responder
Mandiant · Reston, VA
07/2016 – 05/2018
DFIR consulting.
25Engagements
98%Goal hit rate
4.8Stakeholder score
IR Engagements
Enterprise breaches
- Led or supported 25 forensic engagements
- Raised pipeline success from 94% to 99.6%
- Added contract tests blocking breaking schemas
Platform Migration (Mandiant)
Multi-region service cutover
- Migrated 40% of monolith traffic with zero Sev-1s
- Cut p95 latency 35% via caching and query redesign
- Introduced SLO error budgets adopted by 6 teams
Key achievements
- Client commendations ×3
- Reduced incident MTTR with runbook automation at Mandiant
- Reduced rework through clearer acceptance criteria at Mandiant
Manager's Choice · 2023
Cyber Intern
NSA · Fort Meade, MD
05/2015 – 08/2015
Network defense analysis.
10Reports
4.8Stakeholder score
3×Scope owned
Traffic Analysis
Anomaly reports
- Produced 10 analyst reports on anomalous traffic
- Raised SLA attainment from 92% to 99.2%
- Reduced severity-1 incidents 41%
Platform Migration (NSA)
Multi-region service cutover
- Migrated 40% of monolith traffic with zero Sev-1s
- Cut p95 latency 35% via caching and query redesign
- Introduced SLO error budgets adopted by 6 teams
Key achievements
- Clearance process initiated
- Reduced incident MTTR with runbook automation at NSA
- Improved test coverage on critical path at NSA
Education
Carnegie Mellon
B.S. in Information Security · Pittsburgh, PA · GPA 3.6
08/2012 – 05/2016
Skills
Languages
TypeScript 92%Go 86%Python 84%SQL 88%
Systems
Distributed Systems 90%Kubernetes 86%CI/CD 88%Observability 85%
Leadership
Tech Mentorship 88%Design Reviews 90%Incident Command 84%
Certifications
CISSP — (ISC)² · 2022
OSCP — Offensive Security · 2020
AWS Solutions Architect – Associate — Amazon Web Services · 2023 · AWS-SAA-88421 aws.amazon.com/verification
Awards
Security Star
CrowdStrike · 2023
Ransomware playbook
Engineering Excellence
Company Awards · 2024
Reliability & mentorship
Innovation Spotlight
Tech Council · 2024
Process breakthrough
Projects
Playbook Hub
Internal knowledge base for delivery standards
Notion, Loom
Impact Dashboard
Live KPI board for leadership reviews
Looker, Sheets
Languages
English · NativeSpanish · Conversational
Achievements
- Reduced mean time to detect 40%
- Spoke at industry meetup on delivery craft
- Built repeatable operating cadence used by peer teams
Summary example
Cybersecurity analyst with [X] years protecting [industry] systems through monitoring, incident response and practical controls. [Certification] holder.
Example bullet points for a Cybersecurity Analyst
- Monitored and triaged [N] alerts per week in [SIEM], escalating [N] confirmed incidents
- Cut mean time to respond from [X] hours to [Y] hours with new playbooks
- Ran quarterly vulnerability scans and drove remediation of [N] critical findings
- Supported [SOC 2 / ISO 27001] audit with zero major findings
- Rolled out phishing training to [N] employees, lowering click rate from [X%] to [Y%]
- Implemented MFA and conditional access for [N] users
- Cut monthly cloud costs by [X%] ([$X]) through rightsizing, reserved capacity and cleanup
- Raised service availability from [X%] to [Y%] by adding health checks, autoscaling and runbooks
- Reduced mean time to recovery from [X] to [Y] minutes with better alerts and on-call playbooks
- Moved [N] services to infrastructure as code with [Terraform], eliminating manual changes
Replace the [brackets] with your own numbers and facts. Never claim results you didn't achieve.
Skills to include
- SIEM (Splunk / Sentinel)
- Incident Response
- Vulnerability Management
- Network Security
- IAM
- Threat Intelligence
- NIST CSF
- Python
- Linux
- Cloud Security
Tips for a Cybersecurity Analyst resume
- List certifications (Security+, CISSP, CEH) near the top if you have them.
- Describe incidents in general terms — never include confidential details.
- Show measurable risk reduction: fewer findings, faster response, audit results.
- Group tools by area (SIEM, EDR, cloud) for easy scanning.
- Run the built-in resume checker and paste the job description into the keyword match before you download.
Related: How to write a resume · Action verbs · ATS templates