Skip to content
TANYM
Let's talk

Career · Building digital products

Cybersecurity specialist

Protects systems and data by investigating warnings, checking safeguards and planning recovery.

What a day looks like

Imagine a specialist on a team protecting a company information system. This is an illustrative workday rather than a particular employee’s story. The morning starts with a shift handover and a review of unusual sign-ins, blocked messages and update notifications. An alert is not proof of an attack. The specialist compares timing, devices and other authorised information to distinguish a dangerous event from a user mistake. Checked facts and unanswered questions go into the incident record.

Today, somebody reports a suspicious email. Instead of opening the attachment on a work computer, the team follows its procedure. The specialist preserves relevant evidence, coordinates with responsible colleagues and checks whether other accounts are affected. Restricting access requires attention to both security and service availability: a protective action can disrupt legitimate work. If there is no evidence of an attack, the report says so. Tests of another organisation’s systems require explicit authorisation and an agreed scope.

After lunch, the specialist discusses updates and backup checks with administrators. In a test environment, the team verifies that recovery actually works. A short guide explains how to report suspicious messages and why login codes should not be shared. Before finishing, the specialist documents the results, hands unresolved issues to the next shift and updates procedures. Some teams have on-call duties and emergencies. The job needs technical understanding, careful observation and calm communication; much of it is investigation, documentation and prevention.

Try it yourself this week

  • 30 minutes

    Find 5 problems in your favourite app and describe them like a tester

    1. Choose an app or game you play or use.
    2. Explore it for 15 minutes and look for annoying things: confusing buttons, extra steps, strange wording.
    3. Write down five findings like this: what I did, what I expected, what actually happened.
    4. Mark which problem is the most annoying for users and explain why.

    What you'll learn about yourself: Whether you notice small details and enjoy finding things other people missed.

  • 30 minutes

    Figure out how your favourite website works

    1. Open a website or app you use often.
    2. Draw a map of it on a sheet of paper: the home page, with arrows to the other sections.
    3. Write down five things you can tap or click on it and what happens after you do.
    4. Think it over and write down: what would you remove and what would you add if you were making this site yourself?

    What you'll learn about yourself: Whether you like breaking complex things into parts and seeing how they connect.

What you can do next

  1. Next 3 months

    • Review your own habits

      List updates, backups and two-factor sign-in without recording passwords. Discuss your device settings with an adult.

    • Draw a network

      Sketch the route from a home device to a website. Explain the router, address and secure connection.

    • Write a practice bug report

      Complete t03 on ordinary app features. Do not bypass safeguards; describe steps and expected behaviour.

  2. In six months

    • Practise event analysis

      Create a fictional sign-in log. Identify suspicious entries and alternative explanations.

    • Test file recovery

      Copy and restore your own practice file. Record what the test established and what remains unknown.

  3. In a year

    • Make a safe learning project

      On your own device or an explicitly authorised training environment, document safeguards and checks. Do not use other people’s systems.

    • Compare study and work options

      Read two official curricula. Compare monitoring, security engineering and risk management, then confirm admissions requirements.

What it pays

Pay varies by region, experience and employer. The figures below are approximate ranges from public sources.

United States

  • All levelsstatistics

    129,180 $ per year

    before tax · data: May 2025 · checked: October 2026

    US median annual pay for Information Security Analysts, May 2025. It is neither an entry-level salary nor Kazakhstan data.

    Source: bls.gov (opens in a new tab)

Where to study

How to get into college

College gets you a profession faster than university. You can apply after grade 9 or after grade 11.

  • Colleges accept students both after grade 9 and after grade 11. After grade 9 you study longer — about 3 years 10 months; after grade 11, about 2 years 10 months. The exact length depends on the college and the specialty.
    Source: kchk.edu.kz (opens in a new tab)
  • About 80% of students admitted to colleges in the 2024/25 school year study on a state order, which means in state-funded places (in 2023/24 it was about 70%). But each college and each specialty has its own number of state-funded places.
    Source: inbusiness.kz (opens in a new tab)
  • There are also paid colleges. For example, training as a nurse at ADILMED costs 450,000 ₸ per year. Check the price and conditions on the college's website.
    Source: adilmed.kz (opens in a new tab)
UNT: which subjects to take for university

The UNT (Unified National Testing) is Kazakhstan's national university entrance test. You need it to get into university after grade 11.

  • The UNT 2026 has three compulsory subjects: History of Kazakhstan, Reading Literacy and Mathematical Literacy. On top of these, you take two profile subjects, chosen to match your specialty.
    Source: testcenter.kz (opens in a new tab)
  • In total, the test has 120 questions (maximum 140 points) and you get 4 hours. The format is the same as in 2025.
    Source: testcenter.kz (opens in a new tab)
  • Profile subjects depend on the group of specialties. For example: information technology — Mathematics and Computer Science; nursing and veterinary medicine — Biology and Chemistry; electrical engineering — Mathematics and Physics; law — World History and Fundamentals of Law. The full list is published by the National Testing Center.
    Source: testcenter.kz (opens in a new tab)
  • For creative specialties (for example, media and design), you take History of Kazakhstan and Reading Literacy through the UNT, and two creative exams at the university itself.
    Source: testcenter.kz (opens in a new tab)
  • Some universities have their own admission rules. Nazarbayev University, for example, requires a UNT score of at least 85, a GPA of 4.0 and English at IELTS 6.0 level.
    Source: nu.edu.kz (opens in a new tab)

Courses and opportunities

Opportunities near this field

Can you work before you turn 18?

Under Kazakhstan's Labour Code, teenagers can work, but with limits.

History of the career

Cybersecurity predates modern social networks. NIST traces its computer security programme to 1972. Work expanded into several areas, including access management, cryptography and risk assessment. This is the history of one organisation, rather than an exact starting date for the entire profession.

Protection now combines technical controls, communication and recovery. BLS describes network monitoring, investigation, vulnerability checks and recovery planning. The profession therefore extends beyond finding errors in code: specialists need to understand which information and processes matter to an organisation and reduce risk while keeping essential services usable.

Source: csrc.nist.gov (opens in a new tab)

Well-known people in this field

Article sources

Is this right for you?

The article is about the career; the conversation is about you. The AI mentor will help you see which fields are worth testing.

Talk to the AI All careers