United Kingdom · Technology and data · Principal/Manager (12-16 years)

IT Security Assistant Manager

Here is the whole job, in plain words. What it is, what you decide, how you're judged, how people get here and where they go next. Then the part no course gives you: twelve AI tutors who learn your work.

See how AI is changing this job, and get the full read by email.

Start my free Automation Fluency module

As an IT Security Assistant Manager, a good place to start on AI-Driven Security Orchestration & Automation (SOAR) is Planning Automation Across a Department, a free Future Fluency module at Level 5. You'd practise working out what in your department's work could be automated, what should not be, and what to recommend.

Free to start, no card.

Keep this job description

Where should we send it?

One email: what AI is changing in this job, the new skills it asks for, where it leads, and where to start free. With a link back here. Nothing else follows unless you confirm your address.

Leading a team? Try this with up to five of them for 14 days, free.

Experience bandPrincipal/Manager (12-16 years)
Direct reports5-8 reports
Reports toDirector of Information Security
UK framework levelUsually someone running a function, or a director

Also advertised as Security Operations Manager · Head of Security Operations · Cyber Security Manager · Information Security Manager

Built on 43,079 real UK job descriptions we analysed · grounded in what real qualifications cover

Two short quizzes about you

1From this job to a course

The qualifications matched to this job

ATHE Level 7 Extended Diploma in Computing ATHE Ltd · Level 7 · covers 3 of 6 standards

Qualifi Level 5 Extended Diploma in Cyber Security Qualifi Ltd · Level 5 · covers 5 of 6 standards

Qualifi Level 4 Diploma in Cyber Security Qualifi Ltd · Level 4 · covers 4 of 6 standards

SFJ Awards Level 4 Certificate for Protective Security Advisers SFJ Awards · Level 4 · covers 3 of 6 standards

Qualifi Level 5 Extended Diploma in Networking and Cyber Security Qualifi Ltd · Level 5 · covers 2 of 6 standards

OCNLR Level 5 Diploma in Software Engineering with Cybersecurity OCN London · Level 5 · covers 1 of 6 standards

Matched from the standards this job is measured against: a suggestion, not an official ruling.

The units you would start with

Managing and Implementing Information Security ATHE Level 7 Extended Diploma in Computing

Incident Response, Investigations and Forensics Qualifi Level 5 Extended Diploma in Cyber Security

Incident Response and Management SFJ Awards Level 4 Certificate for Protective Security Advisers

Incident Response and Intrusion Detection OCNLR Level 5 Diploma in Software Engineering with Cybersecurity

The future skills this job leans on

AI Fluency working with AI as a thinking partner

Data Fluency turning numbers into a decision

AI Governance Fluency using AI responsibly

Automation Fluency building AI into how work runs

Trust Fluency keeping the digital world safe

Your Plan Illustration

Built for IT Security Assistant Manager

4 units that map to this job, from the qualifications that cover it.

Managing and Implementing Information Security ATHE Ltd · covers 3 of 6 standards Level 7
Incident Response, Investigations and Forensics Qualifi Ltd · covers 5 of 6 standards Level 5
Incident Response and Management SFJ Awards · covers 3 of 6 standards Level 4
Incident Response and Intrusion Detection OCN London · covers 1 of 6 standards Level 5

These are the real units behind this job, in the order they rank for it. Nothing here is marked done, because this plan has not been started by anyone yet. Yours would fill in as you go.

2AI and this work

Will AI change your work as an IT Security Assistant Manager?

Nobody can say exactly how. Here is what this job is being asked for next, and where to start.

The new skills this role is being asked for

AI-Driven Security Orchestration & Automation (SOAR)
Cloud-Native Security Architecture & Governance

Why each one is rising

The future skills this job leans on

AI Fluencyworking with AI as a thinking partner
Data Fluencyturning numbers into a decision
AI Governance Fluencyusing AI responsibly
Automation Fluencybuilding AI into how work runs
Trust Fluencykeeping the digital world safe

We'll only ever tell you what we can actually back up. No hype, no scare tactics.

What happens when you start

Next, a free account. We build your IT Security Assistant Manager plan as you set up, starting with the free Automation Fluency module. No card.

Your first Future Fluency module is free. After that, your AI tutor is £70 a month.

Ready to pay? Subscribe for £70 a month

Keep this read. One email with what AI is changing in this job, the new skills it asks for and where to start free. Nothing else follows unless you confirm your address.

3What this role really is

An IT Security Assistant Manager runs day-to-day security operations and helps keep systems safe from threats. The work involves managing a team, handling technical detail, and making sure security work fits the wider goals of the organisation.

4What you'd actually use

The tools this job runs on, and how well you'd need to know each one.

Splunk / Microsoft Sentinel / QRadar (SIEM) Strategic/Architect

Leading SIEM platform selection, defining data ingestion strategy, integrating it with enterprise risk frameworks, and ensuring your team optimises its use for detection and response.

CrowdStrike Falcon / SentinelOne / Microsoft Defender for Endpoint (EDR/EPP) Strategic/Architect

Setting enterprise endpoint security policy, evaluating new EDR vendors, ensuring comprehensive coverage across all corporate and cloud assets, and overseeing advanced threat hunting initiatives by your team.

Tenable Nessus / Qualys VMDR / Rapid7 InsightVM (Vulnerability Management) Strategic/Architect

Owning the enterprise vulnerability management programme, negotiating and enforcing remediation SLAs with infrastructure teams, and reporting on the overall risk posture to leadership.

Active Directory / Okta / Azure AD (IAM) Strategic/Architect

Designing the enterprise IAM strategy (e.g., Zero Trust principles), managing privileged access management (PAM) systems, and governing the entire identity lifecycle for the organisation.

Jira / ServiceNow / Confluence (Ticketing & Collaboration) Advanced

Using these platforms for program management, reporting on team performance (SLAs, MTTR), communicating effectively with stakeholders, and ensuring robust documentation of security processes and incidents.

ServiceNow GRC / OneTrust (GRC & Reporting) Strategic/Architect

Owning the GRC platform, presenting risk-based reports to the board using executive dashboards, and automating compliance reporting to reduce manual effort.

Power BI / Tableau (Reporting & Visualisation) Advanced

Building and overseeing the creation of executive dashboards for security metrics, incident trends, and compliance status, ensuring clear and impactful reporting to leadership.

5What you get to decide, and how that grows

Power in a job isn't your title. It's what you're allowed to decide. Here's how it grows as you move up.

The choice	Coming in	Where you are now	The step above
Incident Prioritisation & Resource Allocation	Escalates to Senior Analyst for prioritisation; follows guidance on resource allocation.	Prioritises routine incidents, allocates own time; escalates complex resource conflicts.	Prioritises and allocates resources for complex incidents; consults Lead on major resource shifts.
Security Tool Selection & Procurement	Uses existing tools; reports issues or limitations.	Recommends minor tool improvements or feature requests; researches alternatives.	Evaluates new tools for specific use cases; provides detailed recommendations to Lead/Manager.
Team Hiring & Performance Management	No hiring authority; receives performance feedback.	No hiring authority; contributes to peer feedback.	Interviews junior candidates; provides input on performance reviews.
Operational Policy & Process Changes	Follows established policies; reports process inefficiencies.	Proposes minor process improvements within own scope.	Designs and implements significant process improvements for specific workstreams; consults Manager.

6How you'll be judged

The scoreboard, and what is not on it. The hard targets, how often each is actually looked at, and the quiet signals that never reach a dashboard.

Mean Time to Detect (MTTD) for Critical Incidents

The average time it takes for your team to identify a critical security incident from its inception.

Target · < 30 minutes (for 90% of critical incidents)

If a critical alert fires at 10:00, your team should have it confirmed as a true positive and flagged as an incident by 10:30. We track this closely.

Mean Time to Respond (MTTR) for Critical Incidents

The average time from detection of a critical incident to its containment and initial remediation.

Target · < 4 hours (for 90% of critical incidents)

A confirmed ransomware alert at 10:30 should see affected systems isolated and initial recovery steps underway by 14:30. This is where the rubber meets the road.

Vulnerability Remediation Rate (Critical & High)

The percentage of critical and high-severity vulnerabilities identified that are patched or mitigated within their agreed-upon SLA.

Target · > 95% within SLA

If we find 100 critical vulnerabilities, you'll ensure at least 95 are fixed within 7 days, or whatever the agreed timeframe is with the infrastructure team. It's about chasing people, honestly.

Security Operations Budget Adherence

Managing the security operations budget, ensuring spend is within allocated limits and provides clear value.

Target · +/- 5% variance from allocated budget

If your team's budget is £750K, you'll aim to spend between £712.5K and £787.5K, making sure we're getting the most out of our tools and resources.

Team Development & Mentorship

How well you're growing your team, helping them develop their skills, and fostering a collaborative environment.

Regular 1:1s with clear development plans, at least 75% of team members completing a relevant certification annually, positive feedback in skip-level meetings, and a demonstrable reduction in staff turnover.

Incident Response Plan Maturity

The continuous improvement and effectiveness of our incident response playbooks and processes.

Post-incident reviews consistently identifying process improvements, successful tabletop exercises with clear lessons learned, and a reduction in 'ad-hoc' incident responses where playbooks weren't followed or didn't exist.

Stakeholder Engagement & Communication

Your ability to clearly communicate security risks and operational status to non-technical stakeholders and get their buy-in.

Positive feedback from IT Operations and Product teams on collaboration, timely and clear incident communications to leadership, and active participation in cross-functional planning meetings where security input is genuinely valued.

Proactive Threat Hunting & Risk Reduction

The extent to which your team is actively seeking out threats and implementing controls before they become incidents.

Regular threat hunting exercises leading to discovery of previously undetected risks, implementation of new detection rules based on emerging threats, and a demonstrable reduction in the number of 'surprise' incidents.

7Would you like it

Both sides. What people enjoy, and what grinds them down.

What people enjoy

Protecting the Organisation

You get genuine satisfaction from knowing your team's efforts directly prevent breaches and keep our data safe. It's the core reason you come to work. You'll celebrate when a new detection rule catches something nasty early, or when an audit goes smoothly because of your team's diligence.

Successfully leading the response to a sophisticated phishing campaign, preventing any data loss, and then reviewing the post-incident report with a sense of accomplishment.

Team Development & Mentorship

You thrive on seeing your team members grow, learn new skills, and take on more responsibility. You enjoy coaching, unblocking, and helping them navigate complex technical and interpersonal challenges. Their success is your success.

Watching a junior analyst you've mentored confidently lead a complex investigation, or seeing a senior analyst present their findings to a wider audience with polish.

Solving Complex Problems

The daily puzzle of cyber security – figuring out how an attacker might get in, designing a defence, or piecing together the clues of an incident – genuinely excites you. You're always looking for better ways to do things, optimising processes and tools.

Designing a new detection strategy for a novel threat vector, or finding a way to automate a previously manual and time-consuming security task, freeing up your team for more interesting work.

What frustrates people

Alert Fatigue for your team: You'll be managing the constant battle against thousands of low-priority, automated alerts, trying to tune them down so your team can find the real threats. It's like managing a team of people searching for needles in a stack of needles.
The 'Department of No' Stigma: You'll often be seen as the blocker, the one who has to say 'no' to new, shiny (but insecure) tools or processes. It's a constant battle to be seen as a business enabler, not just a barrier.
User Negligence is Your Problem: Despite all the training, someone will click that phishing link. And then it's your team's late-night incident to clean up, and your job to manage the fallout and the retraining.
Fighting for Budget Pre-Breach: Trying to justify a significant investment in proactive security tools or additional headcount to executives can be an uphill battle, especially when they don't see an immediate ROI. It's often only after a major incident that the purse strings loosen.
The Remediation Black Hole: Your team will identify critical vulnerabilities, but getting other teams (Dev, Ops) to prioritise and fix them can be a nightmare. You'll be chasing, escalating, and reporting on overdue items constantly, feeling like you're holding the bag if something goes wrong.

What this role does not give you

A quiet, predictable 9-5 routine – incidents don't care about your schedule.
The ability to completely eliminate all risk – that's just not realistic in security.
A role where you only deal with technical challenges, without the people management and political aspects.
A job where you get to build everything from scratch without dealing with legacy systems or existing processes.

8Who you work with

This role is absolutely central to our operational security posture. You'll directly influence the effectiveness of our threat detection and response, the robustness of our access controls, and our overall compliance with security standards. Your team's performance directly translates into reduced risk of breaches, data loss, and operational disruption. Get it right, and the business runs smoothly; get it wrong, and we're in crisis mode.

Inside the business

Director of Information Security (your boss)
IT Operations Leads
Head of Infrastructure
Product Development Managers
Legal and Compliance Teams
Internal Audit

Outside the business

External Security Auditors
Cyber Insurance Providers
Security Vendors and Partners
Law Enforcement (in case of major incidents)

9What you need before you start

Not a wish list. The things you would be expected to already have.

At least 5-8 years of hands-on experience in a Senior IT Security Analyst or Lead Security Engineer role, where you've led complex investigations and mentored junior team members.
Demonstrable experience in designing, implementing, and optimising security operations processes and playbooks.
Proven track record of managing and developing a small team of security professionals.
Strong understanding of enterprise IT infrastructure, networking, and cloud environments (AWS, Azure, or GCP).
Experience with security architecture principles and the ability to contribute to the design of secure systems.
A deep, practical understanding of one or more major SIEM platforms (Splunk, Sentinel, QRadar) and EDR solutions (CrowdStrike, SentinelOne, Defender for Endpoint).

10What to practise next

Where the job is going, and what to do about it starting this week.

Advanced Threat Modelling & Attack Surface Management

Attackers are getting smarter, and our systems are getting more complex. You'll need to move beyond basic threat modelling to proactively identify and reduce our attack surface across the entire enterprise, including supply chain risks and third-party integrations. This is about anticipating where we'll be hit next.

Software Bill of Materials (SBOM) · External Attack Surface Management (EASM) · Red Teaming & Purple Teaming

This quarter: Read up on EASM best practices and evaluate tools that can help us map our external attack surface.
Next 6 months: Partner with a Red Team vendor for a targeted engagement and use the findings to improve your team's detection rules.
Next 12 months: Implement a process for requiring and reviewing SBOMs for critical third-party software components.
Ongoing: Regularly review industry reports on common attack vectors and supply chain compromises.

Quick win: Start by mapping out our critical internet-facing assets and ensure they are all covered by our vulnerability management programme. Identify any 'shadow IT' that might be exposed.

11Staying current once you are in

What people here do to keep up

Regularly attend industry conferences (e.g., Black Hat, RSA Conference, Infosecurity Europe) to stay abreast of emerging threats and technologies. We'll support your attendance.
Actively participate in local or online security communities and forums. Sharing knowledge and learning from peers is invaluable.
Subscribe to leading cybersecurity publications and threat intelligence feeds. You need to know what's happening in the world of cyber.
Undertake continuous learning through online courses (e.g., SANS OnDemand, Coursera, Pluralsight) to deepen your technical and leadership skills.
Mentor junior security professionals, even outside of your direct team. Teaching others solidifies your own understanding and builds your leadership skills.

12The rising capability

The rising capability

Zavmo analysis

What's rising in its place

This is where the work is heading, and the higher pay with it. Get fluent here and the shift stops being a threat and starts being your edge.

AI-Driven Security Orchestration & Automation (SOAR)

AI is no longer just for detection; it's automating response actions. Competitors are using intelligent SOAR platforms to respond to incidents in minutes, not hours, dramatically reducing impact and freeing up analysts. If you're not leveraging this, you'll be left behind.

Automated Playbook Development
Contextual Enrichment with LLMs
Autonomous Remediation
AI for Threat Prediction

Cloud-Native Security Architecture & Governance

More and more of our infrastructure is moving to the cloud. Traditional on-prem security approaches simply don't cut it. You need to understand how to secure cloud environments from the ground up, not just bolt on old solutions. This means understanding cloud provider security services and how to govern them effectively.

Cloud Security Posture Management (CSPM)
Cloud Workload Protection Platforms (CWPP)
Identity and Access Management (IAM) in Cloud
Serverless Security

13What you’ll use

What you’ll use

Skills this role draws on

Technical

Incident Response Lifecycle (NIST SP 800-61)
Vulnerability Management Lifecycle
The Cyber Kill Chain / MITRE ATT&CK Framework
Access Control Principles (Least Privilege, RBAC, PAM)
Threat Modeling (STRIDE)
Security Auditing & Compliance

14The pathway

The pathway

How you actually get there, here

How you become one varies far more by country than what one does. This is the UK route. Most people take one of these ways in; the right one depends on where you're starting from.

1
Senior IT Security Analyst / Lead Security Engineer
5-8 years of experience leading complex investigations, tuning security tools, and informally mentoring junior team members.
Skills to master
- Deep technical expertise in SIEM/EDR, incident response, vulnerability management, and a proven ability to lead projects and influence technical decisions. You'll need to have demonstrated leadership potential.
You're ready to move on when
- Consistently leading complex incident responses from start to finish.
- Successfully designing and implementing new detection rules or security controls.
- Receiving positive feedback on your mentorship of junior colleagues.
- Taking initiative on process improvements and strategic projects.
2
Security Consultant (with management experience)
8-12 years of experience, including leading security engagements for clients and potentially managing small project teams.
Skills to master
- Broad exposure to various security domains, strong client-facing communication, project management skills, and experience in implementing security programmes or controls in diverse environments. You'll need to show you can transition from advising to owning.
You're ready to move on when
- Successfully delivered multiple security projects on time and budget.
- Managed client expectations and resolved complex project issues.
- Demonstrated ability to build and lead a project team.
- Deep understanding of security frameworks and compliance requirements.
3
IT Operations Manager (with strong security focus)
10-15 years in IT operations, with significant responsibility for security aspects of infrastructure, systems, or networks.
Skills to master
- Strong understanding of IT infrastructure, networking, and systems administration, coupled with a proven track record of implementing and enforcing security controls within an operational context. You'll need to show a clear passion and aptitude for dedicated security management.
You're ready to move on when
- Successfully managed security configurations for critical IT systems.
- Led incident response efforts involving IT infrastructure.
- Implemented significant security improvements within an IT operations context.
- Actively pursued security certifications and professional development.

15Where this role leads

The long view: This role can lead to positions such as Chief Information Security Officer or Head of GRC and Compliance.

The ten Future Fluencies

Zavmo analysis

The credential is what you can do today. These are what keep you valuable.

A qualification proves you can do the job as it's defined today. These ten are what decide whether you're still the obvious person for it in five years. They're the capabilities employers are now writing into senior roles faster than people are learning them. Zavmo weaves them through whatever you study, so you come out with both: the credential and the fluency.

The highlighted ones are the Fluencies your role leans on hardest, from how IT Security Assistant Manager is actually changing.

How you would learn this

One to one, on the work you already do

A tutor sets the task against your own job and marks the reasoning, at your pace. There is no cohort to fall behind.

A lesson from Managing and Implementing Information Security, worked against IT Security Assistant Manager.

Managing and Implementing Information Security Level 7

Applied to your work in IT Security Assistant Manager

This unit aims to equip learners with a thorough understanding of information security principles, protection methods, and threat detection techniques. Learners will be able to manage and implement information security measures, including testing, to protect organisational assets and data.

How the thinking builds

1 Remember
2 Understand
3 Apply
4 Analyse
5 Evaluate
6 Create

An illustration of a Zavmo lesson, built from this role’s own route. The unit, its objective and every criterion above are the awarding body’s own words, not an example.

It is £70 a month, billed monthly. Your free first module is Future Fluency, and you can cancel any time.

See Your Progress Grow Illustration

IT Security Assistant Manager

Incident Response Lifecycle (NIST SP 800-61)
Vulnerability Management Lifecycle
The Cyber Kill Chain / MITRE ATT&CK Framework
Access Control Principles (Least Privilege, RBAC, PAM)
Threat Modeling (STRIDE)
Security Auditing & Compliance

This is your Mind Palace on learn.zavmo.ai. Every skill above comes from this role's own record, not an example borrowed from another job. A node lights up when you evidence it, and what you build stays yours between jobs. That is the part a course cannot do.

16The detail, folded away

Everything else the record holds

The career branches in full, how AI is already showing up in the day-to-day, and the questions people ask about this job. Here when you want them, out of the way while you decide.

Where it leads next, rung by rung

Where it leads

The career path, and where it branches

IT Security Assistant Manager is a start, not a ceiling. Each step below asks for new skills and hands back more autonomy.

Director of Information Security
3-5 years in the IT Security Assistant Manager role.

This is a significant jump, moving from managing operations to owning the entire security programme and strategy for the organisation.
- Security Architecture & Design Overseeing the enterprise security architecture, ensuring all new systems are built securely.
- Vendor & Partner Management Strategic relationships with key security vendors and external partners.
- Regulatory Compliance & Governance Ensuring the organisation meets all relevant industry regulations and compliance frameworks at a strategic level.
- Risk Quantification Moving beyond qualitative risk assessment to quantify cyber risk in financial terms.
Principal Security Architect / Engineer
3-5 years in the IT Security Assistant Manager role.

This is an Individual Contributor (IC) path, focusing on deep technical expertise and strategic design without direct people management.
- Security Architecture Frameworks Expertise in frameworks like TOGAF or SABSA as applied to security.
- Cloud Security Architecture (Advanced) Designing highly secure, resilient, and compliant cloud environments.
- Application Security (Advanced) Deep expertise in secure coding practices, SAST/DAST, and API security.
- Security Product Evaluation & Strategy Defining the long-term strategy for our security product ecosystem.

Working with AI on the job

Working with AI

Where AI is starting to help

Let's be real, security operations can feel like a never-ending game of whack-a-mole. But what if you could give your team a superpower? AI isn't just a buzzword; it's a game-changer for security managers looking to boost efficiency, empower their teams, and elevate their strategic focus.

For an IT Security Assistant Manager, AI means less time sifting through noise and more time leading, strategising, and building a truly resilient defence. You'll be using these tools not just for yourself, but to make your entire team more effective, faster, and less prone to burnout. Think of it as your force multiplier.

Automated Alert Triage & Response

Imagine an AI-powered SOAR platform automatically investigating, enriching, and even closing low-level alerts. Your team won't waste hours on false positives; instead, they'll focus on the real threats. You'll define the rules, the AI does the grunt work. This frees up your analysts for more complex, interesting work, boosting morale and efficiency.

Advanced Threat Pattern Analysis

Use AI/ML features within your SIEM (like Splunk's UBA or Microsoft Sentinel's behavioural analytics) to spot subtle, slow-moving attack patterns that human eyes would miss. As a manager, you'll direct the AI to look for specific TTPs, giving your team a huge advantage in proactive threat hunting and identifying sophisticated adversaries. It's like having an army of super-sleuths.

Vulnerability Intelligence Summarisation

Instead of your team manually sifting through daily CVEs and threat intel feeds, an AI assistant can digest all that information and provide a concise, prioritised summary tailored to your specific tech stack. You'll get the critical insights you need to make informed decisions about patching and risk, without drowning in data. Faster decisions, better protection.

Incident Report Generation & Post-Mortem Analysis

After an incident, feed all the investigation notes, logs, and timelines into an AI tool. It can generate a structured, well-written initial draft of the incident report, including executive summary, technical analysis, and remediation steps. This dramatically cuts down on the tedious reporting time for your team, letting them get back to securing the environment, and giving you polished reports for leadership much faster.

Common questions

How do you become an IT Security Assistant Manager?

Common routes in include Senior IT Security Analyst / Lead Security Engineer (5-8 years of experience leading complex investigations, tuning security tools, and informally mentoring junior team members.), Security Consultant (with management experience) (8-12 years of experience, including leading security engagements for clients and potentially managing small project teams.) and IT Operations Manager (with strong security focus) (10-15 years in IT operations, with significant responsibility for security aspects of infrastructure, systems, or networks.). Times vary with prior experience.

Where can an IT Security Assistant Manager progress to?

This role can lead on to Director of Information Security (3-5 years in the IT Security Assistant Manager role.) and Principal Security Architect / Engineer (3-5 years in the IT Security Assistant Manager role.), depending on the skills you build.

What new skills matter most for an IT Security Assistant Manager?

Increasingly, AI-Driven Security Orchestration & Automation (SOAR) and Cloud-Native Security Architecture & Governance. These are the skills our record of this role lists as growing.

You're not behind. You're right on time. The shift is only just beginning. Your role won't look the same in two years. Be the one who leads the change, not the one it happens to. Start my free Automation Fluency module What happens next: a free account, then we build your plan as you set up. No card. Build your plan, see your roadmap and meet the twelve tutors matched to you. All free. When you're ready to start learning, it's £70 a month, billed monthly. Cancel any time and billing stops.

IT Security Assistant Manager

Where should we send it?

Two short quizzes about you

Will AI change your work as an IT Security Assistant Manager?

What's rising in its place

AI-Driven Security Orchestration & Automation (SOAR)

Cloud-Native Security Architecture & Governance

Skills this role draws on

Technical

How you actually get there, here

Senior IT Security Analyst / Lead Security Engineer

Security Consultant (with management experience)

IT Operations Manager (with strong security focus)

The credential is what you can do today. These are what keep you valuable.

Roles this leads to

One to one, on the work you already do

Everything else the record holds

The career path, and where it branches

Director of Information Security

Principal Security Architect / Engineer

Where AI is starting to help

Automated Alert Triage & Response

Advanced Threat Pattern Analysis

Vulnerability Intelligence Summarisation

Incident Report Generation & Post-Mortem Analysis

Common questions

Want a read on where you stand?