Roles
Assessments by role, grouped by the kind of work. Each is built on knowledge, task, and skill statements from the NIST NICE Framework v2.2.0, and each role page includes job description templates you can edit.
Generalist roles
Defend and respond
Detection EngineerYou build and tune the rules that turn raw logs into alerts worth waking up for.Incident ResponderWhen something breaks in, you contain it, find the root cause, and write it up.SOC AnalystYou live in the alert queue: triage, escalate, and keep watch.Threat HunterYou go looking for what slipped past the alerts.Threat Intelligence AnalystYou track adversaries and turn what you learn into intelligence others can act on.Vulnerability Management AnalystYou find the weaknesses, rank them, and drive the fixes to done.
Govern, risk, and advisory
AI GRC ConsultantYou govern how organizations adopt AI: risk, policy, and oversight.CMMC AssessorYou decide, on evidence, whether an organization meets CMMC, and say so in a form the Department of Defense can rely on.CMMC Compliance ProfessionalYou run CMMC compliance to the standard an assessor will hold it to: objectives, evidence, inherited controls, and closeout.CMMC Readiness PractitionerYou take a defense supplier from a DFARS clause to an honest self-assessment, a signed affirmation, and assessment readiness.Cyber/Privacy AttorneyYou advise on data protection law, breach duties, and the contracts that carry them.Cyber Risk AnalystYou tell the business what is risky, how much, and what to do about it.Cybersecurity ConsultantClients bring you their security problems; you bring back a plan.Cybersecurity ManagerYou run the security function: people, priorities, and the budget.Deputy CISOYou back up the CISO across strategy, policy, running the program, and leading people.Global AI Privacy & Compliance AnalystYou keep AI and data practices compliant across jurisdictions, including under GDPR and the EU AI Act.GRC AnalystYou keep policies, controls, and evidence lined up with the frameworks.IT AuditorYou test whether the controls actually work and say so in writing.
Build and architect
AI Security EngineerYou secure models, pipelines, and the applications built on them.Azure Security ArchitectYou own the security design of a Microsoft Azure estate: identity, network flows, governance, and recovery.Cloud Security ArchitectYou design how security works across cloud accounts, services, and workloads.DevSecOps EngineerYou wire security into the delivery pipeline so every release ships with it.IAM EngineerYou decide who gets access to what, and build the systems that enforce it.Network Security EngineerYou run and secure enterprise networks, from routing and firewalls to VPNs and recovery.Security ArchitectYou draw the blueprint: how identity, network, and data protection fit together.Security EngineerYou build and harden the systems that keep everything else safe.