Also called: CVE Analyst, PSIRT Coordinator
Acts as the go-between when a hacker reports a security hole, making sure the company fixes it and the public is warned at the right time.
A researcher in Brazil emails proof that your company's routers can be taken over remotely. You confirm the bug, assign it an official CVE number, and push engineers toward a fix within 90 days. On release day you publish the security advisory and thank the researcher publicly.
Estimated from product security team postings.
Approximate: anchored on Bureau of Labor Statistics data for a broader job group.
Bachelor's degree (4-year), about 4 years after high school. Bachelor's in cybersecurity or computer science.
Ways in: 4-year college, Certification. Training cost: $15k – $60k.
Majors to look at: Cybersecurity, Computer Science, Technical Communication.
Growing faster than average. More companies now run formal bug-report programs.
Medium risk for 10 years. AI drafts advisories and sorts reports, but judging severity and handling tense researcher relationships stay human.
Classes: Computer science, English, Government.
Official data: O*NET occupation 15-1212.
Career Universe is an early version. Pay, training and AI-risk figures are estimates to start your own research, not verified facts. The research was written with AI research assistants, checked by validation scripts and spot-checked by hand. Check anything important with schools, employers and official sources. How the numbers work.