A useful starting point
Lead with scope (estate size, clearance if you can say it, frameworks). Two pages. Skip movie-hacker language. Skip this if you are applying for a first SOC job with only a home lab — use a one-page student-style cut and name the lab honestly.
These examples illustrate structure, not a real applicant’s history. Replace every sample detail with your own evidence. Follow the employer’s instructions on qualifications, registration, document length and file format.
Evidence to consider
- Frameworks (NIST, ISO 27001, Cyber Essentials) you actually worked under
- Clearance level only if allowed
- Detection or control you owned
- Incident role
Illustrative achievement bullets
- Tuned 40 SIEM rules; cut false positives 22% in a quarter
- Owned Cyber Essentials Plus evidence pack for a 900-seat estate
- Led tabletop ransomware exercise for 12 stakeholders
- Reviewed 30 vendor DPAs with legal for a cloud migration
Relevant skills to substantiate
SIEM · Incident response · IAM · Vulnerability management · ISO 27001 · Stakeholder briefing
What to leave out
- Illegal activity as “experience”
- Photos
- Tool logos instead of names
Choose a layout
Explore the professional template or use it in the CV builder. This is a suggested layout; follow the vacancy’s requirements.