What you’ll learn in this article…
- NIST's Career Week resources from October 2026 stay live for planning.
- NICE Framework work roles turn job postings into a learnable vocabulary.
- Some free NIST learning content leads to certifications and online degrees.
Two students watched the same Cybersecurity Career Week webinars in October 2026. One bookmarked the pages and moved on. The other opened the NICE Framework, matched two work roles to their current IT job, and started a twelve-month plan before the week ended.
Career Week ran October 19 to 24, 2026, coordinated by the NICE program at NIST. The event closed. The resources did not.
Before anyone pays tuition, one detail matters: NIST's free and low-cost learning page includes content that counts toward professional learning objectives and can lead to certifications and online degrees. Free first, paid second, is a defensible order.
What Cybersecurity Career Week Is, and Why It Still Matters in November
Cybersecurity Career Week is a weeklong public campaign, held October 19 to 24, 2026, coordinated by the NICE program at NIST under the U.S. Department of Commerce and supported by government, academic, nonprofit, and private industry stakeholders. It is not a conference and not a recruitment pitch: it is a scheduled run of webinars, employer events, and classroom-ready activities meant to move people toward cybersecurity work. The hub at nist.gov/nice/ccw stays up long after the week ends.
What You May Have Missed
Three pieces from this year's run are still worth your time:
- The October 21 webinar: "Helping to Chart the Course" walked through interactive tools for matching your interests to careers built on Work Roles in the NICE Framework.
- The October 22 panel: "Cyber Career Realities Revealed" covered the key skills and foundational competencies that show up across work role categories.
- The Six Day #mycyberjob Media Challenge: short videos, photos, and stories from people doing the jobs, which is the fastest way to see what the work actually looks like day to day.
Why It Still Counts in November
A campaign week is a forcing function, not an expiration date. The calendar dates pass; the framework, the free learning index, and the archived sessions do not. If you browsed during the week and then got busy, you can run the same checklist now, on your own schedule.
NIST has pointed to the third week of October for the 2027 cycle; exact dates are not set yet. When they post, re-run the checklist: one work role, one free course, one conversation.
Agenda and recap details: https://www.nist.gov/news-events/news/2026/10/day-three-cybersecurity-career-week-explore-cybercareerweek-resources
The NIST Resource Stack: Which Tool to Open First, Second, and Third
Career Week 2026 produced more free guidance than any one person can absorb in a week, which is why sequence matters more than volume. The Cybersecurity Career Week pages NIST built for October 19-24, 2026 stay live at nist.gov/nice/ccw, and three of them are worth opening in a specific order.
First: Discovering Cybersecurity Careers
Open this before anything else. It collects job descriptions, salary information, employment outlooks, and educational requirements in one place. Give it 20 minutes and skim three descriptions, writing down which tasks sound tolerable rather than aspirational. Tolerable is what you will still be doing in year five.
Second: The Cyber Career Pathways Tool and NICE work roles
Vocabulary comes second. Work roles give you the shared language that job postings, degree syllabi, and interviewers already use, and learning the names early stops you from describing yourself vaguely in applications.
Third: Free and Low Cost Online Cybersecurity Learning Content
Skills come third, once you know what you are aiming at. This page mixes genuinely free material with low-cost options, and some of it counts toward professional learning objectives or leads to industry certifications and online degrees. Read it as a comparison tool, not a link dump: it lets you price a self-taught route against a paid program before you enroll anywhere.
The mistake worth skipping
Starting with a course list. Without a target role and the vocabulary to name it, a beginner drifts between platforms for months and finishes nothing. Three tabs, one sitting, one page of notes. That order costs an afternoon and can save a semester.
Mapping Your Interests to NICE Framework Work Roles
The NICE Framework is a vocabulary, not a job board. Its work roles are named bundles of tasks, knowledge, and skills, and those bundles reappear, sometimes almost word for word, in real job postings. Learn the vocabulary and you can read a listing and know within a paragraph whether it fits you.
The translation exercise
Start with what you already enjoy, then trace it to a work role category.
- "I like puzzles" points toward vulnerability assessment and cyber defense analysis, where the daily work is finding the gap and explaining it.
- "I like rules and documentation" points toward cyber policy, governance, risk, and compliance, plus security awareness work.
- "I like building and tinkering" points toward network operations and systems administration, the roles that keep infrastructure running.
A Cybersecurity Career Week webinar on October 21, "Helping to Chart the Course," framed the exercise exactly this way: interactive tools plus aligning student interests to careers based on Work Roles in the NICE Framework. Use the tools the same way.
Rewrite your resume in NICE language
Career changers get the most from this step. Before you apply anywhere, rewrite three or four resume bullets to name the task, the knowledge, and the skill each one demonstrates. "Managed vendor onboarding" becomes a description of tasks performed, standards applied, and people coordinated. That is transferability shown rather than claimed.
Read task statements before salaries
Do not choose a work role category by salary first. Read the task statements. A category that pays well but describes work you would dread is a bad three-year investment.
Degree, Certification, or Both? What Each Entry Path Actually Costs
Certification costs below are published exam fees as of late 2026, and study-hour estimates come from the vendors' own preparation guidance. Degree costs vary too widely by institution, residency, and aid to print as a single number, so those rows describe structure and timeline rather than price. Read the table as a sampling menu: a certification is cheap enough to test a specialty, while a degree is a multi-year commitment worth de-risking before you enroll, since some employers screen on a degree and others screen on certification plus demonstrable skills.
| Path | Example Credential | Exam or Tuition Cost | Typical Study Hours | Time to Job-Ready | Best For |
|---|---|---|---|---|---|
| Certification: entry-level networking | CompTIA Network+ ce | $150 | 8 to 10 hours | N/A | Building the networking foundation that security roles assume you already have |
| Certification: entry-level security | CompTIA Security+ ce | N/A | 8 to 10 hours | N/A | A first security credential for career changers who need a hiring signal quickly |
| Certification: intermediate analyst | CompTIA CySA+ V4 | $425 | 30 to 55 hours | At least four years of hands-on SOC or incident response experience | Candidates with Network+ or Security+ level knowledge aiming at analyst, incident response, or SOC work |
| Certification: cloud fundamentals | AWS Certified Cloud Practitioner | $100 | 20 to 30 hours | N/A | Learners new to IT who need working knowledge of core AWS services and security definitions |
| Degree: two-year | Associate of Applied Science in Cybersecurity or Information Technology | Varies by institution and residency | Full-time enrollment across four semesters | About two years of full-time study | Students who want a structured, transferable credential plus internship and transfer pathways |
| Degree: four-year | Bachelor of Science in Cybersecurity | Varies by institution and residency | Full-time enrollment across eight semesters | About four years of full-time study, less with transfer credit | Employers and public-sector roles that screen on a degree, and preparation for graduate study |
Entry-Level Cyber Roles You Can Realistically Target
SOC Analyst I postings commonly ask for one to three years of equivalent experience1, and entry-level GRC analyst roles often ask for zero to two.2 That gap is the market's working definition of "entry level": adjacent IT work or a documented portfolio, not a cold start with no evidence behind it.
The roles that actually hire beginners
- SOC Analyst I or junior security analyst: alert triage, SIEM monitoring, escalation, and documentation. CompTIA Security+ is the usual baseline credential3, and degree language typically reads "preferred" rather than required.
- IT support with a security tilt: the most common on-ramp into SOC and GRC work, because it builds the TCP/IP, DNS, and firewall fluency those roles assume.
- GRC or compliance analyst: postings accept an associate's or bachelor's in information systems, cybersecurity, business, or accounting, or equivalent experience4, with Security+ and SSCP preferred.
- Network technician: hands-on, adjacent, and frequently overlooked.
Junior penetration tester is not a first job for most people. Offensive roles assume exploitation depth and client-ready reporting that usually follow a tour on a defensive team.
What replaces the degree
Where degree language is flexible, evidence fills the gap. Managed security providers and some enterprise SOC teams hire tier-one analysts on certifications plus lab work: TryHackMe and LetsDefend paths, Security Onion or Wazuh detections you can explain out loud, and a short portfolio of written incident reports.3
The least code-heavy doors
GRC, security awareness, and tier-one SOC triage lean on process and communication more than programming. If scripting is your sticking point, start there and add Python later.
Hiring volume shifts sharply by metro, so scan local postings before committing to a target title. Private-sector employers tend to bend on degree requirements more readily than the federal pathway does.
What Information Security Analysts and Network Admins Actually Earn
Entry-level pay matters more than the headline median, so start with the 25th-to-75th percentile spread. In the 2025 Occupational Employment and Wage Statistics, information security analysts earned between $97,810 and $163,500 across that middle half, while network and computer systems administrators earned between $78,010 and $126,640. These figures describe each occupation nationally, not graduates of any particular program, and the Bureau of Labor Statistics projects 21% growth for security analysts through 2035 alongside a 4% decline for network administrators.
| Occupation | 25th percentile | Median | 75th percentile | Mean | National employment | Projected growth, 2025 to 2035 | Projected annual openings, 2025 to 2035 |
|---|---|---|---|---|---|---|---|
| Information Security Analysts | $97,810 | $129,180 | $163,500 | $132,510 | 190,650 | 21% | 14,100 |
| Network and Computer Systems Administrators | $78,010 | $99,130 | $126,640 | $103,680 | 314,340 | -4% | 13,400 |
Related Articles
Free vs. Low-Cost Learning: What Actually Builds a Portfolio
NIST's Free and Low Cost Online Cybersecurity Learning Content page works best when you use it to compare options. Some entries lead toward industry certifications or online degree credit, others are simply reading. Skim the free material for vocabulary, then prove you can do the work.
Five projects worth documenting
- Home lab: virtualized Windows and Linux hosts, a firewall, and a captured traffic log, with a network diagram and build notes.
- A TryHackMe or Blue Team Labs room written up as a short report: objective, commands, screenshots, and what tripped you up.
- A Wireshark packet-analysis report on one capture, explaining protocol flow and anything anomalous.
- A one-page tabletop for a fictional company: scenario, decisions, escalation path.
- A small script that parses authentication logs and flags repeated failures.
What the platforms cost
TryHackMe's free tier includes hundreds of rooms and one hour of AttackBox daily; Premium runs about 10.50 euros a month and MAX about 17.99 euros, though regional pricing varies. Hack The Box's free tier gives rotating machines and 30 Cubes in Academy Tier 0; Labs VIP+ is listed at $25 a month or $223 a year, with Pro Labs around $49 a month per lab, billed separately. Blue Team Labs Online PRO lists 274 labs at 15 pounds monthly or 144 pounds a year.
Where it lives, and what reviewers scan
Host it in a GitHub repo with a README per project, or a simple personal site. Reviewers scan for four things: the problem, your method, the finding, and what you would do differently. Sanitize anything real, and never post credentials or customer data.
A certificate earns its price when a job posting names it, a degree program grants credit for it, or an employer reimburses it. Bought instead of practiced, it is a badge with no story behind it.
NIST's Cybersecurity Career Week resources point students to a curated list of free and low-cost online cybersecurity learning content, and some of it counts toward professional learning objectives or leads to industry certifications and even online degrees. In other words, you can test a path before you pay for one.
Funded Routes: Cybercorps, Gencyber, and Programs That Pay You
The most overlooked line item in a cyber career plan is the one where somebody else pays the tuition.
CyberCorps: tuition, a stipend, and a service contract
Run through the U.S. Office of Personnel Management, the Scholarship for Service program covers tuition and eligible fees for up to three years and adds a national stipend of $27,000 for undergraduates and $37,000 for graduate students, plus a $6,000 professional allowance.2 Applicants must be U.S. citizens or lawful permanent residents enrolled full time in a cybersecurity-focused program at a participating institution.1 Housing, meals, and parking are on you. In exchange, you owe one year of qualifying government or government-affiliated service per scholarship year, starting within 18 months of graduation and finishing within five years.3 Deadlines are set campus by campus, not nationally; Marymount asks for a 3.0 minimum GPA4, and UMass Dartmouth requires full-time enrollment plus evidence you can obtain a clearance.5
GenCyber: the low-commitment on-ramp
GenCyber summer camps are free and hosted by individual sites, so grade levels and dates vary.6 Western Illinois, for example, takes 30 high school students for June 6 to 11, 2027, with applications due December 1, 2026 and recommendations due December 15.7
What to have ready
- A current transcript
- A one-page resume
- A short statement of interest naming two or three work roles you want to grow into
CyberCorps requires enrollment in a degree program, which is exactly why the free NIST learning content belongs first on your list: work through it, confirm the subject holds your attention, then commit to a campus and a service obligation.
There are many types of cybersecurity roles and many pathways to a cybersecurity career.
Your 12-Month Study and Application Plan
A career change built in one motivated weekend rarely survives contact with a Tuesday night shift. A career change built across twelve scheduled months usually does. Here is the calendar version, starting from wherever you are in 2026.
Months 1-3: Explore and narrow
Work through NIST's Discovering Cybersecurity Careers page for job descriptions, salary data, and educational requirements. Then hold three informational conversations with people in roles that interest you. Write down a shortlist of two or three NICE Framework work roles you can name out loud without checking notes.
Months 4-6: Pick one credential
One credential, not three. Choose it based on the work roles on your shortlist, then open NIST's free and low-cost learning content and start a study schedule that fits around your job or course load. Two focused hours on weekday mornings beats a heroic Sunday every time.
Months 7-9: Build evidence
Finish two documented projects, lab write-ups or a small home-lab build, and publish them where an employer can see them. If you need income while you study, start applying to help desk, IT support, and adjacent roles now rather than waiting for a finished certificate.
Months 10-12: Apply on purpose
Target five to eight applications per month. Rewrite each resume around the work-role language in the posting, and put internship and funded program deadlines on the same calendar, since those run on fixed cycles.
Be honest about the timeline: most beginners need 9 to 18 months of consistent part-time effort to become credibly job-ready. A plan that says so is easier to keep than one that promises six weeks.
Open One Door: Turning a Career Week Contact Into an Interview
Open One Door was the concrete Career Week request: during October 19-24, 2026, cybersecurity professionals, educators, and employers were each urged to take one high-impact action for a student, whether mentoring, making an introduction, or offering a hands-on experience. A single referral conversation usually converts better than a cold application, because one door opened by one person moves faster than a stack of forms.
The 15-minute ask
Name why you picked this person, ask one specific question, and request a small block of time: "Your talk on threat detection at our October meetup was the clearest explanation of triage I've heard. Could I borrow 15 minutes in the next two weeks to ask how you'd sequence a certification alongside a home lab project? I'll send a short agenda first." Ask for advice before you ask for a job, then close the loop with a thank-you note describing what you did with the suggestion. That second message is what turns a stranger into a referrer.
Warm up the room first
Post a short video or write-up after a lab, a course module, or a certification attempt, using the Career Week tags #mycyberjob and #CyberCareerWeek. Fifteen seconds explaining a phishing analysis you ran is enough. When your name reaches someone's feed before your message reaches their inbox, the outreach reads warmer.
Today, pull one name from your Career Week notes or your local ISSA or BSides chapter and send that 15-minute ask before you open your course portal.
