Q: How do I write a CV for cyber security roles?

This newsletter edition has one single goal: to share the best practices that will help you write the perfect CV (aka resume) and boost your chances of landing an interview / job offer.

Imagine that your CV is like a sales pitch, and you are the product you're trying to sell to potential employers. To create a winning CV, you need to approach it as if you're convincing your audience (employers) that they absolutely need to "buy" into what you're offering – your skills, experiences, and potential as an employee.

Crafting a stellar CV can be quite painful, and I understand the challenges it presents. I'll guide you through the essentials, help you steer clear of common mistakes, share useful templates, and address your most pressing CV-related questions. Let's tackle this together.

TL;DR

CV Structure:

Summary section

Crafting a personal summary for your CV is akin to creating an irresistible opening act at a concert. It's your chance to captivate the audience (or hiring manager) right from the start. Using vibrant action words and showcasing your soft skills alongside your technical abilities will give your summary a unique character.

Tailoring your summary to the specific job you're applying for is like tuning your instrument to play the perfect note. Each application may require a slight adjustment, but steer clear of clichés that leave the hiring manager yawning. Write in the third person, keep it crisp, and focus on what truly matters in those initial sentences.

Your CV's opening sentence acts as the spotlight, and it should illuminate your understanding of the job's requirements and how your past experiences align with those expectations. This is where you make your most impactful entrance.

In the summary section, spotlight your most significant accomplishments and experiences that directly relate to the job at hand. When employers quickly scan your CV, these highlights will shine brightest and seize their attention. Your personal summary is your opening chord, and with the right notes, you'll set the stage for a compelling performance.

Example:

Note: for experienced applicants, include years experience in the first line of your summary.

Common pitfall: Don’t waffle. Space is limited and time is limited for the person reviewing your CV.

Experience Section

List your work experience starting with the most recent and going backward. For each job or project, include the job title, company name, location, and the start and end dates (month and year). Highlight the key responsibilities that match the job you're applying for. If some work experience isn't related to the job, you can leave it out of your CV.

The goal: Share the most impressive, relevant accomplishments of your career, backed up with quantifiable data in a familiar context.

It's good to say you can fix vulnerabilities, but it's even better to specify the types and quantity you've fixed, preferably as a percentage to demonstrate your impact. Many applicants use vague language instead of solid, quantifiable data.

You should use action words, terms relevant to the industry, and measurable results in your descriptions.

When adding metrics to your resume, be sure to put them into context for your readers, helping them understand exactly why a given metric is relevant or impressive.

Pro tip: referencing specific tooling that features in the job spec is a big win!

Example:

If you’re struggling to come up with metrics, here’s some inspiration:

• Efficiency: How much were you able to improve efficiency in time or percentage terms?

• Output: By how much did you increase productivity or output?

• Client Satisfaction: How much did you improve customer satisfaction metrics?

• Projects: How many projects did you analyse?

• Modelling: How many models did you create? How many people used them?

• Outcomes: What results were you able to drive by leveraging insights from your analysis?

• Quantity: How many items did you analyse, how many did you act upon, or how many people you delivered your results to?

• Impact: What was the impact of the work you did in terms of time saved, cost saved, satisfaction improved etc?

• Size: What was the size of the average project you worked on?

Note: If this is your first role and you lack industry experience, you can title this section ‘Experience’. You can list personal projects, volunteer work and other short-term temp jobs.

Common pitfall: Not highlighting the outcome of your responsibility with a measurable metric to prove that you were successful in your role.

Skills Section

Most CV templates include a section for one-word skills, but remember to emphasise your hard and soft skills in your summary and experience sections as well.

The skills section serves a critical purpose in beating Applicant Tracking Systems (ATS), which are used by recruiters and employers to process job applications. Surprisingly, 75% of applications get rejected before human eyes see them.

To make the most of this section, study the job description for the role you're applying for. Create a list of keywords and skills mentioned in the job posting. If you possess these skills and they aren't already highlighted in other sections, list them here.

Select the right mix of skills that match the role, and the hiring manager will want to learn more about you. During the interview, you'll need to provide examples of experiences and achievements that demonstrate these skills. Additionally, you can include specific tools you're experienced with in this section, although they're not technically considered skills.

Example Hard Skills:

Example Soft Skills:

When it comes to soft skills, I prefer to mention a select few, accompanied by a brief description to illustrate each one. Just listing 'Leadership' without any context provides limited insight.

Common pitfall: not using keywords from the job spec (only use things you can actually back up).

Education Section

The education section in a cybersecurity CV typically extends beyond a university degree. It's essential to include all certifications, workshops, and online courses relevant to the job you're applying for. Well-known certifications like CISSP usually don't need further elaboration. For less recognised courses or workshops, consider providing a brief explanation, highlighting key skills gained if space permits.

Pro tip: Even if you lack a degree but have completed cybersecurity courses, don't hesitate to submit your application.

Education often finds its place towards the end of a CV since experience holds greater importance. However, if your degree or certifications are your strongest assets and you lack extensive experience, consider a format that places them earlier in your CV.

Before applying, check the education requirements for the specific job, as the absence of certain qualifications may lead to rejection by an ATS system.

Other / Interests Section

The “other” / "interests" section in your cyber security CV offers a glimpse into your personality, interests, and potential alignment with the company culture. It's an opportunity for your prospective interviewer to discover common ground and engage in conversations about your passions. It’s an opportunity to flex any achievements you haven’t already highlighted.

Keep this section concise; there's no need for an exhaustive description of each interest; a brief mention suffices.

Consider these six pointers:

1. Relevance: Include interests that directly relate to the cybersecurity field or the specific job you're pursuing. For example, mentioning your interest in cybersecurity forums or ethical hacking communities can showcase your dedication and enthusiasm.

2. Passions and Achievements: Highlight hobbies and interests that you're genuinely passionate about and have invested time and effort in. If you're a skilled white-hat hacker or have achieved certifications in cybersecurity, it underscores your commitment and expertise.

3. Teamwork and Leadership: If your interests involve teamwork or leadership, it signals your ability to work effectively with others and assume leadership roles.

4. Learning and Development: Include interests that demonstrate your commitment to continuous learning and self-improvement.

5. Community Involvement: Mention any volunteer work, mentorship, or community involvement, it reflects your commitment to making a positive impact helping others.

6. Avoid Controversial Interests: Exercise caution when including potentially controversial interests, as they may not resonate well with all employers.

By considering these guidelines, you can make your "interests" section a valuable addition to your cybersecurity CV, showcasing your enthusiasm and alignment with the industry's demands.

Tailoring your CV

Once you have a foundational CV, your approach should involve reverse-engineering the job posting for each application, customising your CV to match the unique demands of the role and the organisation. The goal is to identify the crucial keywords and specific requirements outlined in the job description.

Pro tip: to give your reader a feeling of comfort and familiarity, use their colour themes. This also signals attention to detail.

Example: Security Operations Centre Analyst at J.P. Morgan (Nov 2023)

Templates

Here are two straightforward, free CV templates designed to be ATS-friendly. You can use these as a source of inspiration and craft your own using Microsoft Word; there are numerous tutorials available on YouTube for guidance. I've opted for Google Docs due to its accessibility and the fact that it's free for everyone.

To use these templates, you must copy this file to your Google Drive in order to edit it.

Click on File > Make a copy

• Template 1

• Template 2

CV FAQs

Do I need a cover letter to go with my CV?
If formally requested, yes. If not, focus on your LinkedIn - this is what most recruiters will look at.

Is a colourful CV unprofessional? 
A splash of colour and a visually pleasing format will delight the eyes of any hiring manager. Don’t go crazy.

Should I include a CV objective? 
An objective can be deployed as part of a CV summary to indicate the desired direction of your career. It doesn’t make sense if you are moving to a similar role, but for career changers, freelancers or recent grads, it makes sense to spell out where you see your future lie.

Which accomplishments could I include in my work experience?

• Increased productivity and solutions to problems

• Financial cost savings or improved bottom line

• Innovations that led to set-change solutions

• Procedures and processes you helped develop

How do I just start writing? 
No one sits down and masters CV writing at the first attempt. You should expect hours of chats with friends, meticulous research and painfully honest soul searching. Your CV has the power to dictate your future path (or not). Take your time with it.

Should I include a photo?
Generally, no. If you’re considered an attractive person, you risk appearing vain. If you’re not, you risk subconscious bias. Better to let your skills and experience speak for you.

That’s a wrap!

www.cyberproclub.com