ResumeProof

Role vocabulary

ATS resume keywords for Cybersecurity (SOC and Security Operations)

These are the 24 terms our scorer checks a Cybersecurity (SOC and Security Operations) resume against. It is the same list the free check uses, published in full.

Check my resume against these Build a Cybersecurity (SOC and Security Operations) resume

The vocabulary

Coverage is 25 of the 100 points. Sixty percent of this list is full marks, so you do not need all of it, and stuffing every term in is penalised separately.

  • siem
  • soc
  • incident response
  • threat detection
  • vulnerability management
  • phishing
  • malware
  • edr
  • firewall
  • ids
  • ips
  • splunk
  • qradar
  • sentinel
  • mitre att&ck
  • log analysis
  • triage
  • escalation
  • penetration testing
  • iso 27001
  • threat intelligence
  • playbook
  • false positive
  • compliance

The eight questions for Cybersecurity (SOC and Security Operations)

The guided builder asks these, in this order, and turns each answer into a line on the page. Nothing is written that you did not type.

  1. 1.How many alerts do you handle in a shift?
  2. 2.What proportion do you escalate, and how many turn out to be real?
  3. 3.Which SIEM and EDR platforms do you work in daily?
  4. 4.How many incidents have you led or been part of end to end?
  5. 5.What is your mean time to detect or respond, and has it improved?
  6. 6.How many detection rules or playbooks have you written or tuned?
  7. 7.How many endpoints, users or assets are in your estate?
  8. 8.Which frameworks and standards do you map your work to?
Answer them and see your score before paying

Words are the easy half

A resume can carry every term above and still be rejected, because coverage says what you know and nothing about what you delivered. The heaviest category on the rubric is evidence: how many of your bullets carry an actual figure.

Seven in ten is full marks. Most resumes we see manage two.

Get your number free

Other functions