Answers to the most frequently asked questions about a career in cybersecurity
Cybersecurity refers to the practice of protecting computers from attacks or unauthorized access. This involves preventing hackers from accessing data or systems, detecting malicious activities, and responding appropriately. Here you'll find some common questions about careers in cybersecurity.
You've probably heard of cybersecurity analysts before. They're the ones who monitor cyber threats and report them to companies or government agencies. What exactly does a cybersecurity analyst do?
Your daily tasks in an entry-level role will depend on the company you’re working for. Generally, day-to-day tasks might include:
Monitoring a security information and event management (SIEM) tool for anomalies
Responding to alerts and escalating where appropriate
Checking for proper firewall configuration
Completing basic penetration testing
Preparing security incident reports
Researching new threats and attack methods
Automating repetitive security tasks
Cybersecurity involves several technical skills, and the fast-paced work environment can be challenging. Having said that, it’s completely possible to gain the required knowledge and learn the right skills with some time and dedication.
Set aside a little time for your cybersecurity learning each day, and consider setting up your own virtual environment to practice those skills.
Cybersecurity as a field typically has more open jobs than there are qualified candidates to fill them. There are over half a million cybersecurity job openings in the US as of June 2025, according to CyberSeek 1. These jobs also tend to be well-paid. The US Bureau of Labor Statistics reports a median salary of $124,910 for information security analysts in the US 2.
Most cybersecurity analysts work full time, but they don’t always work typical nine-to-five hours. Since cyberattacks can happen at any time, some organizations and security companies keep security analysts on call outside of typical business hours. If you’re looking for a job with the flexibility to work evenings or weekend hours, cybersecurity could be a good fit.
The skills, practices, and technologies you’ll use as a cybersecurity professional will continue to evolve along with computer and network technology. The desire to learn, ability to problem solve, and attention to detail will serve you well in this field. Other, more technical skills and technologies to learn include:
SIEM tools
Firewalls, Intrusion Detection Systems (IDS), and Intrusion Prevention Systems (IPS)
Digital forensics
Mobile device management
Data management
Application security development
Audit and compliance knowledge
Effective cybersecurity professionals often leverage workplace skills like communication, collaboration, risk management, adaptability, and critical thinking on the job.
No, cybersecurity does not require a lot of math. But it is considered a science, technology, engineering, and mathematics (STEM) concentration, and familiarity with math will certainly get you further as you move forward in your career.
Security professionals often calculate risk, which involves using math, statistics, and logic. Writing and understanding software code also requires some basic math. Finally, cryptography is the science of codes and encryption, and a part of cybersecurity, in which knowledge of math can help decipher and create algorithms for automated reasoning and data processing.
Many entry-level cybersecurity roles do not require programming skills, but it is an important skill for mid- and senior-level cybersecurity jobs.
As you begin a career in cybersecurity, you’ll find a variety of different roles and specializations to pursue. Earning a degree in cybersecurity could be a step toward career opportunities like:
A bachelor’s degree in cybersecurity typically takes four years of full-time study to complete. A master’s degree involves another two years of full-time study, though some universities offer accelerated or part-time programs that may take shorter or longer to complete.
Cybersecurity degree programs tend to have fewer higher-level math and science requirements than computer science and other STEM (science, technology, engineering, math) degrees. This means that you might not have to take classes like calculus and chemistry, often considered among the most challenging for college students. While some courses require labs, these are generally not research-based.
On the other hand, you can expect courses to get increasingly challenging as you move through a cybersecurity program. The material can also be quite technical and challenging to read.
The length of time you’ll need to prepare for a certification exam will depend on what you already know and what you’ll need to learn. Preparing could take anywhere from a week to several months (assuming you meet the work prerequisites).
You don’t necessarily need a related degree to work in penetration testing. Earning a bachelor’s or master’s degree in computer science, cybersecurity, or information security could make you a more competitive candidate.
While no two career paths are the same, it’s possible to transition into a pen testing role after gaining one to four years of work experience in information technology (IT) and information security.
Ethical hackers help organizations improve their security by breaching computer systems and networks to find vulnerabilities before cybercriminals exploit them.
Working as an ethical hacker can mean abundant job opportunities and high salaries with the right skill set. It’s also a role where you can constantly challenge yourself and develop new skills. Knowing that your work keeps people’s data secure can be rewarding in its own way.
As the cost and severity of cyber attacks continue to rise, so too does the demand for cybersecurity professionals with the skills to help defend organizations. This includes ethical hackers. In fact, both the Certified Ethical Hacker (CEH) and GIAC Certified Incident Handler (GCIH) certifications rank among the cybersecurity certifications that appear most frequently on job descriptions.
Upon completing ethical hacking courses, learners can obtain credentials that may support their professional development:
Professional Certificates that indicate a foundational understanding and practical skills in ethical hacking
Specializations that focus on advanced topics in cybersecurity, potentially enhancing both knowledge and practical application skills
Certificates that may demonstrate proficiency to employers in the cybersecurity field, potentially supporting career advancement or new opportunities
Ethical hackers in the US make an average base salary of $173,000, according to June 2025 from Glassdoor [3].
Ethical hacking courses on Coursera are designed to cater to both newcomers and experienced professionals:
Beginners interested in cybersecurity can start with introductory courses that cover the basics of network and information security.
Those with some IT background can advance their skills in specific areas of ethical hacking, such as network penetration testing or malware analysis.
Advanced cybersecurity professionals can deepen their expertise with courses on complex hacking techniques and advanced defense strategies.
About 43 percent of online job listings for security engineers request a bachelor’s degree, according to CyberSeek. Another 2 percent of listings request a master’s degree [4]. While a bachelor’s degree is the most common entry-level qualification, it is possible to have a successful career as a security engineer without one, so long as you have the right skills. Common majors for cybersecurity professionals include computer science, cybersecurity, or information technology.
Security engineers in the US can make a median base salary of $169,000, according to Glassdoor [5]. Additional pay such as cash bonuses, commission, tips, and profit sharing adds up on average to $37,500 [5].
What are the five Cs of cybersecurity?
The five Cs of cybersecurity are change, compliance, cost, continuity, and coverage. Change indicates the ever-evolving nature of cybersecurity threats and staying up-to-date with them. Compliance involves adhering to industry regulations and standards. Cost involves investing in cybersecurity measures to minimize the financial repercussions of a cyberattack. Continuity calls for having a consistent cybersecurity plan even in the face of ongoing threats. Finally, coverage involves ensuring your organization has extensive coverage against cyberattacks, which may even include cybersecurity insurance coverage.
Cybersecurity skills FAQ
With the rise of new technologies such as IoT (Internet of Things), cloud computing, big data analytics, mobile devices, social media, and artificial intelligence, cybersecurity professionals are needed more than ever before. If you want to get into cybersecurity, you'll need to develop several skills.
Cybersecurity degrees and certifications FAQ
Are you looking for cybersecurity training or certification? The demand for cybersecurity professionals has never been higher. If you want to get into the field, now is the time to start preparing with a cybersecurity degree or credential.
Expert tip on choosing a cybersecurity certification
Narrowing your certification options based on your current job can be helpful, but you might also consider thinking more broadly about your future and what certifications could support your long-term goals across a variety of industries.
"Stop limiting which certification you're going after because, in this industry, you have the ability to navigate it. The opportunity is everywhere, and it's with almost every type of organization and every industry," said Steve Graham, Senior Vice President Head of Product at EC-Council, during Coursera's virtual panel, "How can online learning accelerate cybersecurity careers and talent?"
You are Currently on slide 1
Penetration testing and ethical hacking FAQ
Penetration testing is a method of evaluating the security posture of a system or network. This involves identifying vulnerabilities and weaknesses within a computer network. The goal is to identify potential threats and prevent them from being exploited. Ethical hacking is the practice of using computer security tools to test network security systems and identify vulnerabilities. These professionals are trained to perform penetration tests or scan networks for weaknesses.
Computer security engineering FAQ
Security engineering is the practice of designing secure systems. This involves identifying risks and vulnerabilities, developing countermeasures, and testing them. The goal is to ensure that the system is safe from attack or misuse.
Get started in cybersecurity
With these cybersecurity FAQs answered, you can start your search for a rewarding career in this growing field. Develop your cybersecurity skills by completing a course or earning a certificate on Coursera. Consider Cybersecurity for Everyone by the University of Maryland on Coursera. Designed for cybersecurity beginners, this course highlights important topics in the field, including basic cybersecurity principles, risk management, and privacy.
US Bureau of Labor Statistics. “Information Security Analysts, https://www.bls.gov/ooh/computer-and-information-technology/information-security-analysts.htm.” Accessed June 30, 2025.
3.
Glassdoor. “Ethical Hacker Salaries, https://www.glassdoor.com/Salaries/ethical-hacker-salary-SRCH_KO0,14.htm.” Accessed June 30, 2025.
Coursera’s editorial team is comprised of highly experienced professional editors, writers, and fact...
This content has been made available for informational purposes only. Learners are advised to conduct additional research to ensure that courses and other credentials pursued meet their personal, professional, and financial goals.
![[Featured image] Two cybersecurity professionals wearing name badges and work-casual clothing stand in a server room and look at information on a tablet held by one of them.](https://d3njjcbhbojbot.cloudfront.net/api/utilities/v1/imageproxy/https://images.ctfassets.net/wp1lcwdav1p1/7io90CsUH96MC5PAn1bHoM/7aff6e9fc1ef1ef15a70bc73bb697a21/GettyImages-514410109.jpg?w=1500&h=680&q=60&fit=fill&f=faces&fm=jpg&fl=progressive&auto=format%2Ccompress&dpr=1&w=1000)
