Technology & Data
Cybersecurity Analyst
Monitors, investigates and helps contain security events, and checks systems against a control framework.
Duties vary by employer, sector and team size. Use this as a memory aid — only add what you actually did.
What a typical day looks like
Triages alerts from monitoring tools, escalates real incidents, writes an investigation note, and tracks control gaps to closure.
What you actually do
- Triaged and documented security alerts
- Investigated incidents and produced a timeline
- Reviewed vulnerability scan output and tracked remediation
- Checked systems against a control framework such as NCA ECC
- Supported access reviews and security awareness activity
Common tools and systems
SIEM
EDR
Vulnerability scanners
Ticketing
Firewalls
Transferable skills
Alert triage
Incident response
Vulnerability management
Control frameworks
Reporting
How it changes by level
- Entry
- Handles first-line triage under a defined playbook.
- Mid
- Leads investigations and improves detection rules.
- Senior
- Owns the control programme and reports risk to leadership.
Related moves
Software Engineer
Compliance Specialist
Data Analyst
Questions that surface your evidence
- Which tools and alert volumes did you actually work with?
- Which framework or audit did your work support?
- What incident did you help contain, and what changed afterwards?
Source and review
HRSD Saudi Skills & Occupations framework (editorially reviewed) · hrsd.gov.sa
Reviewed: 2026-08-01 · Saudi-specific reference
No salary figures are shown. We only publish market numbers when a licensed, dated source exists.