CCAIR
CCAIR Student Guide · Part 4 of 8

Get hired: resumes, interviews and offers

Every employer wants the same evidence: what you did, with what result. This page covers industry hiring first. Federal hiring follows different rules, summarized at the end.

Last verified: October 2026 · Reviewed by Dr. Benjamin M. Ampel, Director of CCAIR

Write a one-page resume, then tailor it

  • Keep it to one page. Career centers advise one page for new and recent undergraduates[1]. Two pages suit people with substantial experience, such as PhD students[2].
  • Lead with evidence. Use numbers: labs completed, competition ranks, systems you supported, hours per week. Link your portfolio.
  • Tailor it to each posting. Use the posting's terms for skills you actually have[2].
  • List certifications with dates. Include one in progress with your target exam date.

Get through applicant tracking systems

Employers often collect applications in an applicant tracking system (ATS), software that recruiters use to review resumes, take notes and manage candidates. Virginia Tech's career center calls automatic rejection for missing keywords highly unlikely. Screening questions about required qualifications (knockout questions) are the more common filter, so answer them accurately[3].

Use a simple single-column layout with standard section headings, and avoid tables, columns and images[2]. Ignore claims that most resumes never reach a human. The same career center calls that idea outdated[3].

Show your work online

  • LinkedIn. Put your target role in your headline, and list your projects and certifications. The Open to Work setting lets you choose who sees it: all members or only recruiters[4].
  • GitHub. Pin your three best repositories. Give each a README that says what it does, how to run it and what you learned.
  • A portfolio site. One page of links to your write-ups is enough. See Build skills.

Network and ask for referrals

  • Go where practitioners are. Chapter meetings, BSides events and career fairs. See Start here for local chapters.
  • Ask for advice, not a job. Ask for 20 minutes to learn what someone's team does and how they got there.
  • Ask for a referral when a posting fits. Send the posting link, your resume and two sentences on why you fit.
  • Use your career center's job board. Handshake, for example, partners with more than 1,500 schools and colleges[5].

Prepare for technical interviews

  • Practical scenarios. Expect questions such as how you would investigate a suspicious login alert. Talk through your steps out loud, and name the logs and tools you would use.
  • Take-home labs. Some employers send a short exercise, such as a set of logs or a vulnerable app. Finish within the time limit, document your steps and say what you would do next.
  • Behavioral questions with STAR. STAR stands for Situation, Task, Action and Result. Spend most of the answer (about 60%) on the actions you personally took, and quantify the result where you can[6]. Prepare six to eight STAR stories.
  • Ask your own questions. Ask about on-call duties, team size, mentoring and the training budget.

Research pay

  • Bureau of Labor Statistics (BLS). The median annual pay for information security analysts was $129,180 in May 2025. BLS projects 21% employment growth from 2025 to 2035[7].
  • NACE. Employers projected an average starting salary of $81,535 for Class of 2026 computer science bachelor's graduates (base salary only)[8].
  • CyberSeek. It counted 514,359 cybersecurity job listings from May 2024 through April 2025[9], and maps demand by state and metro area[10].

A median covers all experience levels, so expect less than the BLS figure in your first job. Compare any offer with data for your own metro area.

Compare and negotiate offers

  • Ask for time. NACE calls a one-to-two-week decision window common and says less time can be undue pressure[11]. You do not need to accept an offer on the phone[12].
  • Compare total compensation. Benefits can add 25 to 40 percent to the value of a salary[12]. Compare base pay, bonus, retirement match, health insurance, training budget and cost of living.
  • Negotiate with data. Research what similar jobs pay, treat it as a discussion, and get the updated offer in writing[12].
  • Keep your word. Once you accept an offer, stop interviewing. Backing out later can hurt your school's relationship with that employer.

If you want a federal job

Federal civilian jobs are posted on USAJOBS[13]. The rules differ from industry hiring in four ways.

  • Two pages at most. Since September 27, 2025, USAJOBS limits resumes to two pages for Title 5 competitive and excepted service announcements. A longer resume makes you ineligible[14].
  • Complete job entries. For each job, list the title, the employer, start and end dates by month and year, and hours worked per week[14]. Leave out your Social Security Number, photos and other personal data[15].
  • Pathways Programs. The Internship Program takes students enrolled at least part-time, and the Recent Graduates Program takes applicants within two years of their degree[16].
  • Formal assessments. The Office of Personnel Management (OPM) Merit Hiring Plan requires at least one technical or alternative assessment before a hiring manager sees candidates[17].

CISA[18], the DHS Cybersecurity Service[19] and the Intelligence Community[20] also run their own cyber hiring. Many of these jobs need a security clearance. See Working in government or defense.

Related Pathway Finder roles

Each role guide covers the work, the realistic first job, starter certifications and free practice.

SOC AnalystPenetration TesterCloud Security EngineerGRC AnalystApplication Security Engineer

Sources

We checked each source in October 2026. Rules, prices and dates change, so confirm them on the source before you act.

  1. [1] University of Delaware Lerner College. Undergraduate resume guide.
  2. [2] MIT Career Advising & Professional Development. Career toolkit: crafting an effective resume.
  3. [3] Virginia Tech Career and Professional Development. What is an applicant tracking system? Your questions answered.
  4. [4] LinkedIn Help. Let recruiters know you're open to work.
  5. [5] Handshake. Handshake for career centers.
  6. [6] University of Washington Career & Internship Center. STAR method of interviewing.
  7. [7] U.S. Bureau of Labor Statistics. Occupational Outlook Handbook: Information security analysts.
  8. [8] National Association of Colleges and Employers. Salaries expected to climb for Class of 2026 grads despite flat hiring (February 12, 2026).
  9. [9] CompTIA. CyberSeek expands cybersecurity workforce data coverage (June 2, 2025).
  10. [10] CyberSeek. Cybersecurity supply and demand heat map.
  11. [11] National Association of Colleges and Employers. Advisory opinion: setting reasonable deadlines for job offers.
  12. [12] Washington University in St. Louis Center for Career Engagement. Negotiating job offers.
  13. [13] OPM. USAJOBS.
  14. [14] OPM. Agency guidance on the two-page limit on resume length.
  15. [15] U.S. Department of the Treasury. Tips for building an effective resume (USAJOBS guidance).
  16. [16] OPM. Students and recent graduates (Pathways Programs).
  17. [17] OPM. Merit Hiring Plan (May 29, 2025).
  18. [18] CISA. Careers.
  19. [19] Department of Homeland Security. DHS Cybersecurity Service.
  20. [20] Office of the Director of National Intelligence. IntelligenceCareers.gov.

Last verified: October 2026. Written for students by the Center for CyberAI Research (CCAIR) at Georgia State University. Found an outdated fact? Tell us through the contact page.