Information Security Analysts

High School

In high school, take as many computer science classes as possible—particularly in database management, programming, and software design. Try to obtain hands-on experience by joining your school’s computer club, helping out in the computer lab, and simply playing around with computers. You should also take English and speech classes because analysts need strong communication skills to write detailed reports, explain their solutions to security issues to top managers and executives, and interact effectively with coworkers. Other recommended classes include business, mathematics, science, and social studies.

Postsecondary Education

Many colleges and universities offer degrees in information security. If your college doesn’t offer such a major, you can earn a bachelor’s degree in computer science, networking, programming, or database management and a minor in computer security, or you can earn a graduate degree in information security. Some employers prefer applicants to have a master’s of business administration in information systems.

Certification

Some colleges and universities offer undergraduate and graduate certificates in Internet security, programming, database management, computer science, and related areas. For example, the University of Maryland offers the following graduate certificates in cybersecurity: Cybersecurity Management and Policy; Cybersecurity Technology; Homeland Security Management; and Information Assurance. Contact schools in your area to learn about available programs.

The IEEE Computer Society offers certificates of achievement to those who complete the following security-related courses Foundations of Software Security, Secure Software Design, Managing Secure Software Development, Cloud Governance and Security and Secure Software Coding.

Other Education or Training

Hackers and other cybercriminals constantly seek new ways to break into secure networks and create other types of digital mayhem, so it’s important that information security analysts continue to learn throughout their careers. Professional associations and government agencies often provide continuing education (CE) opportunities. For example, the CERT Division offers online and in-person CE classes such as Fundamentals of Incident Handling; Secure Coding in C and C++; Practical Risk Management: Framework and Methods; Insider Threat Program Implementation and Operation; Managing Computer Security Incident Response Teams; and Malware Analysis Apprenticeship. Other opportunities are provided by the International Association of Computer Investigative Specialists Information Systems Security Association, (ISC)², SANS Institute, Association for Computing Machinery, and the IEEE Computer Society. Contact these organizations for more information.