Observed career paths · incident_response

Where does a SOC Analyst go next?

6 observed directions, from real career histories. Percentages are the share of people who made each move; the count is how many careers each number rests on. This is the generic map. No aspiration, no filler.

Typical advancement
Incident Responder+45% typical comp change · ~3.0y typical
75% of observed moves out of SOC Analyst go here (4,200 careers)
progressionconfidence high4,200 careers100% of observed exits move upward from there
Senior Incident Response Engineer+89% typical comp change · ~3.0y typical
25% of observed moves out of SOC Analyst go here (1,400 careers)
progressionconfidence high1,400 careers86% of observed exits move upward from there
Management path
IR Team Lead+142% typical comp change · ~6.0y typical
reachable via Incident Responder. 19% joint share of observed careers
leadership branchconfidence high1,400 careers100% of observed exits move upward from there
Director of Security Operations+225% typical comp change · ~6.0y typical
reachable via Senior Incident Response Engineer. 5% joint share of observed careers
leadership branchconfidence high1,400 careers0% of observed exits move upward from there
Career pivot
IAM Engineer+81% typical comp change · ~7.0y typical
reachable via Senior Incident Response Engineer. 2% joint share of observed careers
pivotconfidence moderate460 careers86% of observed exits move upward from there
Senior Offensive Security Engineer+97% typical comp change · ~7.0y typical
reachable via Senior Incident Response Engineer. 2% joint share of observed careers
pivotconfidence moderate460 careers86% of observed exits move upward from there

What this page can’t know: which of these fit you. Your skills change the overlap, your record changes the difficulty, your priorities change the order. One question. What do you do today?. And this map becomes yours.

See your version of this map →
Where does a SOC Analyst go next? · Startline