5 answers
Jeaneille
Student
Windsor, Connecticut
1
Question
Updated
1051 views
Advice on getting into Security Awareness or Technical writer ?
I am a recent Cybersecurity graduate looking to break into Security Awareness and Human Risk Management, I am looking for advice on the most strategic entry-to-junior level roles to target. Specifically, would it be more effective to build foundational skills as a Technical Writer to master security documentation, or should I aim directly for Junior Security Awareness Analyst roles? I’d love insight into which path hiring managers value more for someone starting out.
Login to comment
5 answers
Shawn Coleman
IT Security Anaylst
10
Answers
Richmond, Virginia
Updated
Shawn’s Answer
Hi Jeaneille,
As someone targeting Security Awareness and Human Risk Management, I would generally advise aiming directly for Junior Security Awareness Analyst roles while also developing technical writing skills on the side. Between the two paths, hiring managers in awareness and HRM typically value demonstrated experience influencing human behavior, creating training content, communications, metrics, and program management more than pure documentation experience.
As someone targeting Security Awareness and Human Risk Management, I would generally advise aiming directly for Junior Security Awareness Analyst roles while also developing technical writing skills on the side. Between the two paths, hiring managers in awareness and HRM typically value demonstrated experience influencing human behavior, creating training content, communications, metrics, and program management more than pure documentation experience.
Hi Shawn, Thank you for the advice, I really appreciate it. Yeah I have been looking at the Junior Security Awareness Analyst role but it been hard to find a way to gain experience or full time role.
Jeaneille
Megan VanDiver
Communications Manager
1
Answer
Minneapolis, Minnesota
Updated
Megan’s Answer
First, congratulations on your graduation! Breaking into Security Awareness and Human Risk Management is an exciting goal because it sits at the intersection of cybersecurity, communication, and behavioral science.
If your long-term objective is Security Awareness, I would encourage you to apply for both Junior Security Awareness Analyst and security-focused Technical Writer roles rather than viewing them as separate paths.
A Junior Security Awareness Analyst role provides the most direct experience with awareness campaigns, phishing simulations, training development, metrics, and influencing secure behaviors. If you have the opportunity to start there, it’s a natural fit.
That said, don’t underestimate the value of Technical Writing, particularly within cybersecurity. As a former technical writer myself, who now works in the communication department, documentation is very important to me as well as being on the same page as our cyber and engineering team. The ability to translate complex technical concepts into clear, actionable guidance is one of the most valuable skills in Security Awareness. Strong writing also demonstrates empathy for the audience, something every effective awareness professional needs.
For others reading this who may be in a similar position, remember that hiring managers are often looking for more than technical knowledge. They want people who can communicate clearly, collaborate across teams, and help make security understandable and practical for everyone.
Whichever path you pursue, keep building a portfolio. Writing awareness articles, creating phishing education materials, designing training content, or volunteering for security awareness initiatives can help demonstrate your skills long before you land your first role.
Best of luck as you start your career!
Create or present one sample security awareness project, such as a phishing awareness guide or a short employee training module, and include it in your portfolio. It will help demonstrate your communication skills to hiring managers.
If your long-term objective is Security Awareness, I would encourage you to apply for both Junior Security Awareness Analyst and security-focused Technical Writer roles rather than viewing them as separate paths.
A Junior Security Awareness Analyst role provides the most direct experience with awareness campaigns, phishing simulations, training development, metrics, and influencing secure behaviors. If you have the opportunity to start there, it’s a natural fit.
That said, don’t underestimate the value of Technical Writing, particularly within cybersecurity. As a former technical writer myself, who now works in the communication department, documentation is very important to me as well as being on the same page as our cyber and engineering team. The ability to translate complex technical concepts into clear, actionable guidance is one of the most valuable skills in Security Awareness. Strong writing also demonstrates empathy for the audience, something every effective awareness professional needs.
For others reading this who may be in a similar position, remember that hiring managers are often looking for more than technical knowledge. They want people who can communicate clearly, collaborate across teams, and help make security understandable and practical for everyone.
Whichever path you pursue, keep building a portfolio. Writing awareness articles, creating phishing education materials, designing training content, or volunteering for security awareness initiatives can help demonstrate your skills long before you land your first role.
Best of luck as you start your career!
Megan recommends the following next steps:
Hi Megan, Thank you so much for your thoughtful response and encouragement! I really appreciate the advice you shared.
I found it especially interesting that you transitioned from technical writing into communications. Since Security Awareness is the career path I'm working toward, I'd love to learn more about your journey and how your technical writing experience prepared you for the role you have today.
Jeaneille
Tracy Hickey
Principal Security Governance Engineer
5
Answers
Anchorage, Alaska
Updated
Tracy’s Answer
Congrats on graduating! That in itself is a huge achievement! So, Security Awareness and HRM is actually my current position. But I started out developing technical training and reviewing/updating the technical content pages for the products my company offered. I helped the service teams by doing bug bashes and playing with the products and really learning how to use them, then took that knowledge and turned it into both training materials and instructional How-To's for customers. Understanding both the skills to write coherently and the basics of Security Awareness really helped me grow.
Data analysis has never been my "passion", but I do love reviewing the data presented to me and then making a strategic plan on how to attack the problem we see, whether it be insider threat, phishing, etc. I'm consistently creating content, whether it be training materials, blogs, Slack announcements, posters for the office, etc. and it's been amazing getting to reach so many people. Definitely keep proof of what you've delivered and developed so you can show potential employers. One thing I will say, is don't be afraid to be yourself in your writing. Especially when it comes to training materials. Boring trainings are not retained. But interesting trainings are very much remembered. Just make sure you match your audience.
Data analysis has never been my "passion", but I do love reviewing the data presented to me and then making a strategic plan on how to attack the problem we see, whether it be insider threat, phishing, etc. I'm consistently creating content, whether it be training materials, blogs, Slack announcements, posters for the office, etc. and it's been amazing getting to reach so many people. Definitely keep proof of what you've delivered and developed so you can show potential employers. One thing I will say, is don't be afraid to be yourself in your writing. Especially when it comes to training materials. Boring trainings are not retained. But interesting trainings are very much remembered. Just make sure you match your audience.
Hi Tracy. Thank you for the advice I really appreciate it . one problem that I keep seeing is that most Security awareness role are more senior level roles than entry level. So I am trying to find the best entry role.
Jeaneille
Robiah Thabit
Operations Support
16
Answers
Lagos, Nigeria
Updated
Robiah’s Answer
Both paths can lead to Security Awareness, but if your long-term goal is Security Awareness and Human Risk Management, I would encourage you to apply directly for junior Security Awareness Analyst roles while also considering Technical Writer opportunities. Don’t see them as mutually exclusive.
Technical writing helps you develop skills in communicating complex technical concepts clearly, creating documentation, and understanding security processes, all of which are valuable in awareness roles. However, Security Awareness positions also require skills such as communication, stakeholder engagement, training, content creation, and influencing behavior, so gaining experience in those areas is equally important.
I’d also recommend building a small portfolio. For example, create sample phishing awareness campaigns, security newsletters, training materials, or user guides. These demonstrate your ability to educate people, which hiring managers often value as much as certifications for entry-level roles.
Ultimately, apply for both paths if they align with your interests. The first opportunity that allows you to build communication and security knowledge can become a strong stepping stone toward Human Risk Management.
Best of luck in your endeavors.
Technical writing helps you develop skills in communicating complex technical concepts clearly, creating documentation, and understanding security processes, all of which are valuable in awareness roles. However, Security Awareness positions also require skills such as communication, stakeholder engagement, training, content creation, and influencing behavior, so gaining experience in those areas is equally important.
I’d also recommend building a small portfolio. For example, create sample phishing awareness campaigns, security newsletters, training materials, or user guides. These demonstrate your ability to educate people, which hiring managers often value as much as certifications for entry-level roles.
Ultimately, apply for both paths if they align with your interests. The first opportunity that allows you to build communication and security knowledge can become a strong stepping stone toward Human Risk Management.
Best of luck in your endeavors.
Hi Robiah, Thank you very much for the advice
Jeaneille
Yoav Traeger
Bid Manager
152
Answers
Kiryat Ono, Tel Aviv District
Updated
Yoav’s Answer
Hi. Both paths are fantastic ways to break in, but if your ultimate goal is Security Awareness and Human Risk Management, aiming directly for Junior Security Awareness Analyst roles, or related entry-level positions like Security Operations Associate, IT Communications Specialist, or Junior Risk Analyst, is usually the most direct route. While technical writing is incredible for learning how to break down complex security concepts into clear documentation, hiring managers in human risk management specifically look for folks who understand human behavior, culture change, training metrics, and phishing simulations, which you'll get far more exposure to in a security awareness role. That said, you can actually blend the two by creating a portfolio right now that features sample security newsletters, engaging awareness campaigns, or clear policy guides to show hiring managers you already possess those sharp communication skills. Your degree gives you a strong foundation, and your focus on the human side of security is deeply needed in the field today, so keep putting yourself out there with confidence. I wish you the best of luck in your job search!
Hi Yoav, Thank you very much for the advice. You gave me some important things to start learning and roles I can start in so I am really grateful
Jeaneille