CCAIRFind where you fit in cybersecurity
Cybersecurity is not one job. It is fourteen very different ones, from catching scams to auditing companies to protecting power plants. Answer a few plain questions and see which ones suit you, and exactly how to get your first one.
How it works
No jargon. No experience needed.
Tap what appeals
Short, everyday statements like "Teaching people how to spot scam emails." Answer Not for me, Maybe or Yes.
Settle the close calls
A few this-or-that choices separate jobs that sound alike, like building a security plan versus checking one.
Get a real plan
Your top 3 roles, why they fit, the realistic first job, which certifications to start with and free places to practise.
The finder
Which cyber role fits you?
All roles
Fourteen ways into cybersecurity
Each guide covers what the job is like, the honest first-job route, certifications and free practice. Labels show how often graduates are hired straight in.
SOC Analyst
The organization's lookout: you watch for signs of trouble and raise the alarm.
How to get in → Usually a second jobIncident Responder
The emergency team: when an attack gets through, you contain it and clean up.
How to get in → Entry-levelDigital Forensics and Cybercrime Investigator
The detective: you recover digital evidence and work out exactly what happened.
How to get in → Usually a second jobThreat Intelligence Analyst
The researcher: you study attackers so the organization can see them coming.
How to get in → Usually a second jobPenetration Tester
The ethical hacker: you break in, with permission, so the real attackers can't.
How to get in → Usually a second jobApplication Security Engineer
The builder-defender: you make sure software is safe before it ships.
How to get in → Usually a second jobCloud Security Engineer
The cloud guardian: you keep services on AWS, Azure and Google Cloud locked down.
How to get in → Entry-levelGRC Analyst
The planner: you set the rules and priorities that keep a business safe.
How to get in → Entry-levelIT Auditor
The independent checker: you test whether an organization really does what it says.
How to get in → Entry-levelPrivacy Analyst
The data rights advocate: you make sure personal information is handled fairly and legally.
How to get in → Entry-levelSecurity Awareness Specialist
The teacher: you help people spot scams and make safer choices.
How to get in → Entry-levelNetwork and Systems Security Administrator
The keeper of the systems: you run networks and servers and keep them secure.
How to get in → Usually a second jobOT / ICS Security Specialist
The infrastructure protector: you secure power, water and factory systems.
How to get in → Emerging fieldAI Security Specialist
The new frontier: you find ways AI systems can be tricked and help make them safer.
How to get in →Questions
Common questions from students
Which cybersecurity job is right for me?
Start with what you enjoy rather than what sounds impressive. The CCAIR Pathway Finder asks 61 quick, plain-language questions about activities you would enjoy and ranks 14 cybersecurity roles for you, with the realistic first job, starter certifications and free practice for each.
What cybersecurity jobs are entry-level?
Roles commonly hired straight from school or a bootcamp include SOC Analyst, Digital Forensics and Cybercrime Investigator, GRC Analyst, IT Auditor, Privacy Analyst, Security Awareness Specialist, Network and Systems Security Administrator. Others, such as penetration tester and incident responder, are usually reached after one to three years in a related first job.
Do I need to know how to code to work in cybersecurity?
No. Many roles, including GRC analyst, IT auditor, privacy analyst, security awareness and SOC analyst, need little or no programming. Coding matters most in application security, cloud security and AI security.
Which certification should I get first?
For most beginners, CompTIA Security+ or ISC2 Certified in Cybersecurity (CC) is a sensible first credential. The best choice depends on the role: each role guide lists starter and later certifications.
Is this quiz a test of my ability?
No. It is an interest guide, not an aptitude test. It compares what you say you would enjoy with what each job involves, based on the NIST NICE Workforce Framework. Use it to decide what to explore next.
Do you store my answers?
No. Scoring happens in your browser and nothing you answer is saved or sent. If you copy a results link, your answers are packed into the link itself.