Cybersecurity Analyst Resume Example
An entry-level SOC analyst in San Antonio, about 18 months on a 24x7 tier 1 desk after two years in IT support, with Security+ and CySA+.
A fictional resume written by our team. The person, employers and numbers are invented; the tools, licenses and schools are real.
Why it works
- 1
“Tier 1 SOC analyst at a 24x7 MSSP covering 30 client environments in Splunk and CrowdStrike. Triage about 70 alerts a shift and escalate 6% of them. Security+ and CySA+, after 2 years on an IT help desk.”
Names the lane (tier 1, MSSP), the environment count and the tool stack in the first line, so a SOC manager knows where this analyst sat.
- 2
“Triage about 70 alerts per 12-hour shift across 30 client environments, escalating 6% against a 10% team average”
Quantifies the queue and compares the escalation rate to the team. A lower rate with no missed incidents shows judgment, not just volume.
- 3
“Escalated a business email compromise 9 minutes after an impossible-travel alert, mailbox contained in 50 minutes”
One real incident with a trigger and a containment time, described by category so nothing confidential is shared.
- 4
“Tuned 14 noisy Splunk correlation searches with tier 2, cutting false positives on those rules 41% in 3 months”
Shows work that outlasts a shift. Detection tuning with a measured result is what separates an analyst from someone watching a console.
- 5
“Ran monthly KnowBe4 phishing tests for 400 staff, cutting the click rate from 18% to 5% in one year”
Pulls the security work out of a help desk job with a before and after number, which makes the move into the SOC look planned.
How it scored
We ran this example through the same free roast you can use, three times, and kept the middle result. The roast ranks a resume against a typical applicant pile and grades hard: even a resume with a number in nearly every bullet usually lands in the B range.
Copy the text
Use it as a skeleton, then replace every line with your own work. A copied bullet with someone else's numbers is the fastest way to fail an interview question.
Riley Tran SOC Analyst, Tier 1, Splunk and CrowdStrike San Antonio, TX | riley.tran@example.com SUMMARY Tier 1 SOC analyst at a 24x7 MSSP covering 30 client environments in Splunk and CrowdStrike. Triage about 70 alerts a shift and escalate 6% of them. Security+ and CySA+, after 2 years on an IT help desk. EXPERIENCE SOC Analyst I, Lonestar Shield Security | Jul 2024 - Present - Triage about 70 alerts per 12-hour shift across 30 client environments, escalating 6% against a 10% team average - Escalated a business email compromise 9 minutes after an impossible-travel alert, mailbox contained in 50 minutes - Tuned 14 noisy Splunk correlation searches with tier 2, cutting false positives on those rules 41% in 3 months - Wrote 9 MITRE ATT&CK-mapped playbooks for phishing and brute-force alerts, now used by all 11 tier 1 analysts - Analyzed 1,200+ user-reported phishing emails and blocked 85 malicious domains and sender IPs at client gateways IT Support Specialist, Alamo Ridge Credit Union | Jun 2022 - Jun 2024 - Enrolled 310 laptops in Intune and CrowdStrike Falcon ahead of a 2023 audit, finishing 2 weeks early - Ran monthly KnowBe4 phishing tests for 400 staff, cutting the click rate from 18% to 5% in one year EDUCATION AND CREDENTIALS CompTIA Security+, 2023, CompTIA CySA+, 2025 B.S. Information Systems, University of Texas at San Antonio, 2022 SKILLS Splunk (SPL), CrowdStrike Falcon, MITRE ATT&CK, Phishing analysis, Defender for Office 365, Wireshark, Intune, Python scripting
How does yours compare?
Paste or upload your own cybersecurity analyst resume and get the same grade, buzzword score and line-by-line notes. Free, no account, deleted within 24 hours.