{"id":3697,"date":"2026-10-29T10:21:37","date_gmt":"2026-10-29T07:21:37","guid":{"rendered":"https:\/\/niteducation.com\/resources\/?p=3697"},"modified":"2026-10-29T10:21:39","modified_gmt":"2026-10-29T07:21:39","slug":"cybersecurity-analyst-vs-ethical-hacker","status":"publish","type":"post","link":"https:\/\/niteducation.com\/resources\/cybersecurity-analyst-vs-ethical-hacker\/","title":{"rendered":"Cybersecurity Analyst vs Ethical Hacker: Key Differences"},"content":{"rendered":"\n<!--\nNewton Institute of Technology \u2014 Article 206\nMaster Stylesheet v6.3 Premium production build \u2014 28 October 2026\nWordPress supplies the page's only semantic H1; the article hero uses .nit-hero__title.\nLoad the locked nit-articles-master-v6.3.css once at site level.\nNo article-specific CSS, inline styles, scripts, Base64 images or new component classes are used in this body.\nCanonical production URL: https:\/\/niteducation.com\/resources\/cybersecurity-analyst-vs-ethical-hacker\/\nPrimary search intent: help a learner distinguish cybersecurity analyst work from ethical-hacking \/ penetration-testing work and decide which type of cybersecurity work fits them better.\nCannibalization boundary: Cybersecurity Career in Kenya owns the broad roles\/jobs landscape; Article 203 owns learning difficulty; Article 205 owns first-job routes; Cybersecurity Course in Kenya owns programme\/admissions detail. Article 206 owns the deep two-role comparison: mission, workflow, authority, evidence, deliverables, overlap and career fit.\n-->\n<article aria-labelledby=\"nit-article-title\" class=\"nit-article nit-article--cyber nit-article--pathway-guide nit-article--c-plus-degree\" itemscope itemtype=\"https:\/\/schema.org\/Article\">\n  <meta itemprop=\"datePublished\" content=\"2026-10-28\">\n  <meta itemprop=\"dateModified\" content=\"2026-10-28\">\n  <meta itemprop=\"inLanguage\" content=\"en-KE\">\n  <meta itemprop=\"author\" content=\"Newton Institute of Technology Editorial Team\">\n\n  <div aria-labelledby=\"nit-article-title\" class=\"nit-pg-hero\">\n    <div>\n      <p class=\"nit-pg-kicker\">Cybersecurity Career Comparison<\/p>\n      <p class=\"nit-hero__title\" id=\"nit-article-title\" itemprop=\"headline\">Cybersecurity Analyst vs Ethical Hacker:<br>What Is the Difference?<\/p>\n      <p class=\"nit-pg-hero__line\">observe <i>\u2192<\/i> investigate <i>\u2192<\/i> respond <i>\u00b7<\/i> authorise <i>\u2192<\/i> test <i>\u2192<\/i> report<\/p>\n      <p class=\"nit-pg-hero__summary\" itemprop=\"description\">A practical, beginner-friendly comparison of what cybersecurity analysts and ethical hackers actually do, where their work overlaps, what each role delivers, and how to decide which path fits you.<\/p>\n      <div class=\"nit-pg-hero__actions\">\n        <a class=\"nit-pg-button nit-pg-button--gold\" href=\"#quick-answer\">See the direct answer<\/a>\n        <a class=\"nit-pg-button nit-pg-button--outline\" href=\"#same-system\">See one system, two roles<\/a>\n      <\/div>\n    <\/div>\n    <div aria-label=\"Cybersecurity analyst and ethical hacker role comparison\" class=\"nit-deg-hero__art\">\n      <p>Same field. Different centre of gravity.<\/p>\n      <div aria-hidden=\"true\" class=\"nit-deg-orbit\">\n        <strong><small>VS<\/small><\/strong>\n        <span class=\"nit-deg-orbit__chip nit-deg-orbit__chip--tech\">ALERT<\/span>\n        <span class=\"nit-deg-orbit__chip nit-deg-orbit__chip--health\">LOGS<\/span>\n        <span class=\"nit-deg-orbit__chip nit-deg-orbit__chip--business\">SCOPE<\/span>\n        <span class=\"nit-deg-orbit__chip nit-deg-orbit__chip--stem\">TEST<\/span>\n      <\/div>\n      <div class=\"nit-deg-hero__note\">\n        <span>The practical distinction<\/span>\n        <strong>Investigate activity \u00b7 validate weaknesses<\/strong>\n        <small>Compare the mission, authority, evidence and final deliverable\u2014not just the job title.<\/small>\n      <\/div>\n    <\/div>\n    <div aria-label=\"Article summary\" class=\"nit-pg-hero__meta\">\n      <p><span>Primary intent<\/span>Two-role career comparison<\/p>\n      <p><span>Best for<\/span>Students + beginners<\/p>\n      <p><span>Evidence<\/span>Official standards + Kenyan roles<\/p>\n      <p><span>Last reviewed<\/span>28 October 2026<\/p>\n    <\/div>\n  <\/div>\n\n  <div class=\"nit-article__body\" itemprop=\"articleBody\">\n    <section aria-labelledby=\"quick-answer-title\" class=\"nit-quick-answer\" id=\"quick-answer\">\n      <div class=\"nit-quick-answer__head\">\n        <span aria-hidden=\"true\" class=\"nit-quick-answer__mark\">A<\/span>\n        <div>\n          <p class=\"nit-quick-answer__label\">Quick answer<\/p>\n          <p class=\"nit-quick-answer__kicker\" id=\"quick-answer-title\">What is the difference between a cybersecurity analyst and an ethical hacker?<\/p>\n        <\/div>\n      <\/div>\n      <div class=\"nit-quick-answer__body\">\n        <p class=\"nit-quick-answer__text\"><strong>A cybersecurity analyst mainly helps an organisation understand and respond to security risk, while an ethical hacker\u2014often working as a penetration tester\u2014deliberately tests approved systems to find and validate weaknesses.<\/strong> The roles overlap, so the most accurate distinction is their main mission, starting problem, authority and expected output\u2014not a rigid \u201cdefender versus attacker\u201d label. NIST notes that cybersecurity work roles and job titles are not interchangeable, and one job can combine several kinds of work. <a href=\"#source-1\">[1]<\/a><\/p>\n        <ul aria-label=\"Core comparison facts\" class=\"nit-quick-answer__signals\">\n          <li>Analyst: investigate + respond<\/li>\n          <li>Tester: authorised assessment<\/li>\n          <li>Both work with evidence<\/li>\n          <li>Job titles can overlap<\/li>\n          <li>Permission defines testing scope<\/li>\n        <\/ul>\n      <\/div>\n    <\/section>\n\n    <nav aria-labelledby=\"contents-title\" class=\"nit-toc\">\n      <h2 id=\"contents-title\">In this comparison<\/h2>\n      <ol>\n        <li><a href=\"#comparison\">Side-by-side differences<\/a><\/li>\n        <li><a href=\"#titles\">Why job titles can mislead<\/a><\/li>\n        <li><a href=\"#analyst-workflow\">Cybersecurity analyst workflow<\/a><\/li>\n        <li><a href=\"#tester-workflow\">Ethical hacker workflow<\/a><\/li>\n        <li><a href=\"#examples\">Three practical examples<\/a><\/li>\n        <li><a href=\"#same-system\">Same system, two professionals<\/a><\/li>\n        <li><a href=\"#outputs\">What each role delivers<\/a><\/li>\n        <li><a href=\"#overlap\">Where the roles overlap<\/a><\/li>\n        <li><a href=\"#kenya-evidence\">What Kenyan employer evidence shows<\/a><\/li>\n        <li><a href=\"#permission\">What makes ethical hacking ethical<\/a><\/li>\n        <li><a href=\"#choose\">Which role may suit you?<\/a><\/li>\n        <li><a href=\"#faq\">Frequently asked questions<\/a><\/li>\n      <\/ol>\n    <\/nav>\n\n    <section id=\"comparison\">\n      <h2>Cybersecurity Analyst vs Ethical Hacker at a glance<\/h2>\n      <p>The table shows the normal centre of gravity of each role. It is not a rule that every employer must follow.<\/p>\n      <div class=\"nit-pg-table-wrap\">\n        <table class=\"nit-pg-table\">\n          <thead><tr><th scope=\"col\">Factor<\/th><th scope=\"col\">Cybersecurity Analyst<\/th><th scope=\"col\">Ethical Hacker \/ Penetration Tester<\/th><\/tr><\/thead>\n          <tbody>\n            <tr><th scope=\"row\"><strong>Purpose<\/strong><\/th><td>Protect, investigate and reduce security risk<\/td><td>Find and validate weaknesses through authorised testing<\/td><\/tr>\n            <tr><th scope=\"row\"><strong>Starting point<\/strong><\/th><td>Alert, incident, risk, control issue or suspicious activity<\/td><td>Approved target, objective and test scope<\/td><\/tr>\n            <tr><th scope=\"row\"><strong>Main question<\/strong><\/th><td>What happened, how serious is it, and what should we do?<\/td><td>Can this weakness be demonstrated safely, and how should it be fixed?<\/td><\/tr>\n            <tr><th scope=\"row\"><strong>Approach<\/strong><\/th><td>Mainly defensive and operational<\/td><td>Mainly adversarial security testing<\/td><\/tr>\n            <tr><th scope=\"row\"><strong>Evidence<\/strong><\/th><td>Logs, alerts, accounts, endpoints, network events and controls<\/td><td>Test results, reproducible findings, affected systems and technical evidence<\/td><\/tr>\n            <tr><th scope=\"row\"><strong>Monitoring<\/strong><\/th><td>Often important<\/td><td>Usually secondary to testing<\/td><\/tr>\n            <tr><th scope=\"row\"><strong>Pen testing<\/strong><\/th><td>May appear in broader analyst roles<\/td><td>Core work in a penetration-testing role<\/td><\/tr>\n            <tr><th scope=\"row\"><strong>Output<\/strong><\/th><td>Investigation, response, escalation or security improvement<\/td><td>Validated finding, evidence, risk explanation and remediation advice<\/td><\/tr>\n            <tr><th scope=\"row\"><strong>Pattern<\/strong><\/th><td>Often ongoing security operations<\/td><td>Often defined assessments or projects<\/td><\/tr>\n            <tr><th scope=\"row\"><strong>Authority<\/strong><\/th><td>Works under organisational authority<\/td><td>Testing must remain inside explicit authorised scope<\/td><\/tr>\n          <\/tbody>\n        <\/table>\n      <\/div>\n      <p class=\"nit-pg-table-note\">On a small screen, swipe the table sideways to see every column.<\/p>\n    <\/section>\n\n    <section class=\"nit-section-panel\" id=\"titles\">\n      <h2>Job titles are messy: read the responsibilities, not the label alone<\/h2>\n      <p>NIST distinguishes a <strong>job<\/strong> from a cybersecurity <strong>work role<\/strong>. A job is an employer-defined set of responsibilities and may combine more than one work role. That is why two vacancies with similar titles can describe noticeably different work. <a href=\"#source-1\">[1]<\/a><\/p>\n      <div class=\"nit-deg-band-grid\">\n        <article class=\"nit-deg-band\">\n          <div class=\"nit-deg-band__head\"><span>Analyst title<\/span><h3>A cybersecurity analyst is not automatically a SOC analyst<\/h3><\/div>\n          <div class=\"nit-pathway-card__body\"><p>An analyst may work with monitoring, incident investigation, risk, vulnerability management, controls or other defensive responsibilities. A SOC analyst is one specific example of security-operations work.<\/p><\/div>\n        <\/article>\n        <article class=\"nit-deg-band nit-deg-band--competitive\">\n          <div class=\"nit-deg-band__head\"><span>Testing title<\/span><h3>An ethical hacker is often employed as a penetration tester<\/h3><\/div>\n          <div class=\"nit-pathway-card__body\"><p>Professional vacancies often use titles such as penetration tester, offensive-security engineer or security tester. O*NET now profiles Penetration Testers as a distinct occupation centred on simulated cyberattacks, finding weaknesses, documenting results and recommending solutions. <a href=\"#source-3\">[3]<\/a><\/p><\/div>\n        <\/article>\n      <\/div>\n      <div class=\"nit-callout nit-callout--info\">\n        <p class=\"nit-callout__title\">Penetration tester does not automatically mean red teamer<\/p>\n        <p>Penetration testing and red-team simulations can be separate activities. A recent Kenya Airways offensive-security vacancy listed penetration testing and red-team simulations separately, showing that even one employer may treat them as related but distinct work. <a href=\"#source-6\">[6]<\/a><\/p>\n      <\/div>\n    <\/section>\n\n    <section id=\"analyst-workflow\">\n      <h2>What does a cybersecurity analyst actually do?<\/h2>\n      <p>Suppose a security tool reports unusual behaviour on an employee account. The alert is a signal\u2014not proof. The analyst&#8217;s job is to establish what the evidence supports.<\/p>\n      <ol aria-label=\"Cybersecurity analyst investigation workflow\" class=\"nit-process\">\n        <li><strong>Receive the signal.<\/strong><br>An alert may come from SIEM, EDR, a firewall, an identity system, a phishing report or another security control.<\/li>\n        <li><strong>Gather evidence.<\/strong><br>Check the account, time, device, source, network activity and related events.<\/li>\n        <li><strong>Add context.<\/strong><br>Ask whether the behaviour is normal for that user or system and whether other evidence supports the alert.<\/li>\n        <li><strong>Make a judgement.<\/strong><br>Classify the activity as normal, a false positive, suspicious or a confirmed incident.<\/li>\n        <li><strong>Respond or escalate.<\/strong><br>Follow the organisation&#8217;s procedure: monitor, contain, block, reset access or escalate to a more senior responder.<\/li>\n        <li><strong>Document the decision.<\/strong><br>Record what was detected, what was checked, what was found and what action followed.<\/li>\n      <\/ol>\n      <p>O*NET&#8217;s Information Security Analyst profile includes monitoring security measures, assessing vulnerabilities and risks, and taking appropriate steps when breaches occur. <a href=\"#source-2\">[2]<\/a><\/p>\n    <\/section>\n\n    <section class=\"nit-section-panel\" id=\"tester-workflow\">\n      <h2>What does an ethical hacker \/ penetration tester actually do?<\/h2>\n      <p>The starting question is different: <strong>Can this approved system be shown to have a security weakness?<\/strong><\/p>\n      <ol aria-label=\"Authorised penetration-testing workflow\" class=\"nit-process\">\n        <li><strong>Authorise.<\/strong><br>The organisation approves the assessment.<\/li>\n        <li><strong>Scope.<\/strong><br>Define exactly which systems, applications, networks or accounts may be tested and what is excluded.<\/li>\n        <li><strong>Assess.<\/strong><br>Examine the permitted target for weaknesses using the agreed methodology.<\/li>\n        <li><strong>Validate.<\/strong><br>Determine whether an apparent weakness is genuine and meaningful within the approved rules.<\/li>\n        <li><strong>Preserve evidence.<\/strong><br>Record enough reliable evidence to explain the finding without causing unnecessary harm.<\/li>\n        <li><strong>Report.<\/strong><br>Explain what is wrong, where it is, why it matters and how to correct it.<\/li>\n        <li><strong>Remediate.<\/strong><br>The responsible technical team corrects the weakness.<\/li>\n        <li><strong>Retest.<\/strong><br>Where required, verify that the correction actually solved the problem.<\/li>\n      <\/ol>\n      <p>O*NET lists documenting penetration-test findings, identifying weaknesses, writing reports and recommending solutions among core Penetration Tester tasks. <a href=\"#source-3\">[3]<\/a> NIST SP 800-115 similarly describes technical security testing as a planned process of conducting tests, analysing findings and developing mitigation strategies. <a href=\"#source-4\">[4]<\/a><\/p>\n    <\/section>\n\n    <section id=\"examples\">\n      <h2>Three practical examples<\/h2>\n      <p>The examples keep the distinction grounded in work a beginner can picture.<\/p>\n\n      <h3>Example 1 \u2014 A suspicious bank login<\/h3>\n      <p>A bank sees <strong>15 failed login attempts \u2192 one successful login \u2192 unusual account activity<\/strong>.<\/p>\n      <ol aria-label=\"Suspicious bank login analyst workflow\" class=\"nit-process\">\n        <li><strong>Check the alert.<\/strong><br>Which security control generated it and why?<\/li>\n        <li><strong>Identify the account.<\/strong><br>Whose credentials were used?<\/li>\n        <li><strong>Check context.<\/strong><br>Does the device, source and timing fit the user&#8217;s normal behaviour?<\/li>\n        <li><strong>Look for connected evidence.<\/strong><br>What happened before and after the login?<\/li>\n        <li><strong>Judge severity.<\/strong><br>User mistake, unusual but legitimate activity, credential abuse or larger incident?<\/li>\n        <li><strong>Respond + record.<\/strong><br>Follow the approved procedure and document the conclusion.<\/li>\n      <\/ol>\n      <p>Prime Bank&#8217;s 2026 SOC Analyst role describes continuous SIEM and EDR monitoring, alert triage, investigation, escalation and detailed documentation\u2014real examples of this defensive workflow in Kenya. <a href=\"#source-5\">[5]<\/a><\/p>\n\n      <h3>Example 2 \u2014 Testing a school portal<\/h3>\n      <p>A school is preparing an online student portal and authorises a security assessment before wider use.<\/p>\n      <ol aria-label=\"School portal authorised security test workflow\" class=\"nit-process\">\n        <li><strong>Confirm permission.<\/strong><br>The school authorises the assessment.<\/li>\n        <li><strong>Confirm the boundary.<\/strong><br>The student portal may be included while an unrelated finance system is excluded.<\/li>\n        <li><strong>Test the approved application.<\/strong><br>Assess the permitted target for security weaknesses.<\/li>\n        <li><strong>Validate the finding.<\/strong><br>Check whether the suspected problem is genuine.<\/li>\n        <li><strong>Record evidence.<\/strong><br>Document the finding without unnecessarily harming the system or exposing information.<\/li>\n        <li><strong>Explain the risk.<\/strong><br>State what could happen if the weakness were abused.<\/li>\n        <li><strong>Recommend the fix.<\/strong><br>Give the responsible team actionable remediation guidance.<\/li>\n        <li><strong>Retest.<\/strong><br>Verify the fix where the engagement requires it.<\/li>\n      <\/ol>\n      <p>A current Nairobi penetration-tester vacancy describes authorised tests across applications, APIs, mobile systems and networks, followed by reproducible findings, remediation advice and retesting. <a href=\"#source-7\">[7]<\/a><\/p>\n    <\/section>\n\n    <section class=\"nit-section-panel\" id=\"same-system\">\n      <h2>Same system, two professionals: the clearest way to see the difference<\/h2>\n      <p>Imagine an organisation operates an online customer portal.<\/p>\n      <div class=\"nit-deg-band-grid\">\n        <article class=\"nit-deg-band nit-deg-band--competitive\">\n          <div class=\"nit-deg-band__head\"><span>Before launch<\/span><h3>Penetration tester: can the approved system be broken through a weakness?<\/h3><\/div>\n          <div class=\"nit-pathway-card__body\"><p>The tester works through <strong>scope \u2192 test \u2192 validation \u2192 evidence \u2192 risk \u2192 remediation<\/strong>. The result is a documented weakness the development or infrastructure team can correct.<\/p><\/div>\n        <\/article>\n        <article class=\"nit-deg-band\">\n          <div class=\"nit-deg-band__head\"><span>After launch<\/span><h3>Cybersecurity analyst: what is happening in the live environment?<\/h3><\/div>\n          <div class=\"nit-pathway-card__body\"><p>The analyst works through <strong>alert \u2192 evidence \u2192 context \u2192 judgement \u2192 response<\/strong>. The result is a defensive decision based on what the organisation is seeing now.<\/p><\/div>\n        <\/article>\n      <\/div>\n      <div class=\"nit-pg-highlight\">\n        <strong>The system can be identical<\/strong>\n        <p>What changes is the problem being solved. The tester is authorised to challenge security controls. The analyst is trying to understand and respond to security activity in operation.<\/p>\n      <\/div>\n    <\/section>\n\n    <section id=\"outputs\">\n      <h2>The deliverable often reveals the role better than the tool<\/h2>\n      <p>Cybersecurity software changes. The expected professional output is a more durable way to understand the job.<\/p>\n      <div class=\"nit-deg-band-grid\">\n        <article class=\"nit-deg-band\">\n          <div class=\"nit-deg-band__head\"><span>Analyst deliverable<\/span><h3>Investigation + security decision<\/h3><\/div>\n          <div class=\"nit-pathway-card__body\"><p>A completed piece of work may include an incident timeline, evidence, severity assessment, escalation decision, containment action, monitoring improvement or incident report.<\/p><\/div>\n        <\/article>\n        <article class=\"nit-deg-band nit-deg-band--competitive\">\n          <div class=\"nit-deg-band__head\"><span>Tester deliverable<\/span><h3>Validated finding + remediation guidance<\/h3><\/div>\n          <div class=\"nit-pathway-card__body\"><p>A completed assessment may include the approved scope, tested assets, validated findings, technical evidence, risk explanation, recommended fixes and retest results.<\/p><\/div>\n        <\/article>\n      <\/div>\n    <\/section>\n\n    <section class=\"nit-section-panel\" id=\"overlap\">\n      <h2>Where do cybersecurity analysts and ethical hackers overlap?<\/h2>\n      <p>The two careers are different but not sealed off from each other.<\/p>\n      <div class=\"nit-reason-grid\">\n        <article class=\"nit-reason-card\"><span class=\"nit-reason-card__number\">01<\/span><div><h3>Both analyse evidence<\/h3><p>An analyst interprets operational security evidence. A tester interprets assessment evidence.<\/p><\/div><\/article>\n        <article class=\"nit-reason-card\"><span class=\"nit-reason-card__number\">02<\/span><div><h3>Both work with vulnerabilities<\/h3><p>Analysts may track, assess or prioritise vulnerabilities; testers may validate how meaningful a weakness is within scope.<\/p><\/div><\/article>\n        <article class=\"nit-reason-card\"><span class=\"nit-reason-card__number\">03<\/span><div><h3>Both communicate findings<\/h3><p>Security work must be explained clearly enough for another person or team to act.<\/p><\/div><\/article>\n        <article class=\"nit-reason-card\"><span class=\"nit-reason-card__number\">04<\/span><div><h3>Both may use scripting<\/h3><p>Automation, queries and small scripts can support investigation or testing depending on the role.<\/p><\/div><\/article>\n        <article class=\"nit-reason-card\"><span class=\"nit-reason-card__number\">05<\/span><div><h3>Both need systems + networking<\/h3><p>Users, permissions, services, IP addresses, ports, DNS and network traffic matter on both sides.<\/p><\/div><\/article>\n        <article class=\"nit-reason-card\"><span class=\"nit-reason-card__number\">06<\/span><div><h3>Both can contribute to improvement<\/h3><p>Analyst evidence can reveal controls that need strengthening; tester findings can improve monitoring and defensive rules.<\/p><\/div><\/article>\n      <\/div>\n      <p>O*NET itself shows task overlap: Information Security Analysts can assess vulnerabilities and security measures, while Penetration Testers can investigate incidents and recommend security improvements. <a href=\"#source-2\">[2]<\/a> <a href=\"#source-3\">[3]<\/a><\/p>\n    <\/section>\n\n    <section id=\"skills\">\n      <h2>Which skills are shared, and where does the emphasis change?<\/h2>\n      <div class=\"nit-pg-table-wrap\">\n        <table class=\"nit-pg-table\">\n          <thead><tr><th scope=\"col\">Skill area<\/th><th scope=\"col\">Cybersecurity Analyst emphasis<\/th><th scope=\"col\">Ethical Hacker \/ Penetration Tester emphasis<\/th><\/tr><\/thead>\n          <tbody>\n            <tr><th scope=\"row\"><strong>Networking<\/strong><\/th><td>Interpret traffic, connections, firewall and identity context<\/td><td>Understand services, paths, exposures and network controls<\/td><\/tr>\n            <tr><th scope=\"row\"><strong>Windows + Linux<\/strong><\/th><td>Users, processes, services, logs, endpoint evidence<\/td><td>System behaviour, permissions, services and test environments<\/td><\/tr>\n            <tr><th scope=\"row\"><strong>Security data<\/strong><\/th><td>SIEM, EDR, alerts, event correlation<\/td><td>Assessment output, test evidence and vulnerability detail<\/td><\/tr>\n            <tr><th scope=\"row\"><strong>Scripting<\/strong><\/th><td>Queries, automation, log processing, APIs<\/td><td>Automation, tooling, data processing, repeatable assessment tasks<\/td><\/tr>\n            <tr><th scope=\"row\"><strong>Reporting<\/strong><\/th><td>Incident, investigation or risk report<\/td><td>Penetration-test finding and remediation report<\/td><\/tr>\n          <\/tbody>\n        <\/table>\n      <\/div>\n      <p class=\"nit-pg-table-note\">On a small screen, swipe the table sideways to see every column.<\/p>\n      <div class=\"nit-callout nit-callout--info\">\n        <p class=\"nit-callout__title\">Do not choose the role from a tool list<\/p>\n        <p>The better question is what the tool helps you accomplish. For an analyst: <strong>security data \u2192 evidence \u2192 decision<\/strong>. For a tester: <strong>authorised assessment \u2192 validated finding \u2192 remediation<\/strong>.<\/p>\n      <\/div>\n    <\/section>\n\n    <section class=\"nit-section-panel\" id=\"beginner\">\n      <h2>Is one role easier for a beginner?<\/h2>\n      <p>There is no responsible universal rule that says \u201canalyst is easy\u201d while \u201cpenetration testing is advanced\u201d. O*NET currently places both Information Security Analysts and Penetration Testers in <strong>Job Zone Four: Considerable Preparation Needed<\/strong>. That is U.S. occupational data\u2014not a Kenyan hiring rule\u2014but it is useful evidence that neither occupation should be presented as a zero-foundation job. <a href=\"#source-2\">[2]<\/a> <a href=\"#source-3\">[3]<\/a><\/p>\n      <p>A safer beginner sequence for either direction is <strong>computer systems \u2192 networking \u2192 operating systems \u2192 cybersecurity fundamentals \u2192 authorised practical work \u2192 role-specific depth<\/strong>.<\/p>\n      <div class=\"nit-callout nit-callout--success\">\n        <p class=\"nit-callout__title\">Keep this article focused on the two roles<\/p>\n        <p>For the broader question of learning difficulty, use NIT&#8217;s <a href=\"https:\/\/niteducation.com\/resources\/is-cybersecurity-hard-to-learn\/\">Is Cybersecurity Hard to Learn?<\/a> guide. For internships, attachments and realistic first jobs, use <a href=\"https:\/\/niteducation.com\/resources\/entry-level-cybersecurity-jobs-kenya\/\">Entry-Level Cybersecurity Jobs in Kenya<\/a>.<\/p>\n      <\/div>\n    <\/section>\n\n    <section id=\"kenya-evidence\">\n      <h2>What 2026 Kenyan employer evidence shows<\/h2>\n      <p>Real vacancies reinforce the same distinction\u2014and also show why the job title alone is unreliable.<\/p>\n      <div class=\"nit-curriculum-grid\">\n        <article class=\"nit-curriculum-card\">\n          <span class=\"nit-curriculum-card__period\">Defensive operations<\/span>\n          <h3>Prime Bank SOC Analyst<\/h3>\n          <p>The role centres on continuous SIEM and EDR monitoring, alert triage, suspicious-email investigation, threat escalation and documentation. <a href=\"#source-5\">[5]<\/a><\/p>\n        <\/article>\n        <article class=\"nit-curriculum-card\">\n          <span class=\"nit-curriculum-card__period\">Offensive assessment<\/span>\n          <h3>Information Security Engineer \u2014 Penetration Tester<\/h3>\n          <p>A current Nairobi vacancy asks for authorised tests across web applications, APIs, mobile applications and networks, plus reproducible findings, remediation advice and retesting. <a href=\"#source-7\">[7]<\/a><\/p>\n        <\/article>\n        <article class=\"nit-curriculum-card\">\n          <span class=\"nit-curriculum-card__period\">Title overlap<\/span>\n          <h3>Kenya Airways: \u201cAnalysis\u201d title, offensive duties<\/h3>\n          <p>A 2026 Kenya Airways role titled Cyber Security Administrator (Analysis) included penetration testing, red-team simulations and vulnerability assessments. The vacancy has since expired, but it is useful evidence that responsibilities can matter more than the title. <a href=\"#source-6\">[6]<\/a><\/p>\n        <\/article>\n        <article class=\"nit-curriculum-card\">\n          <span class=\"nit-curriculum-card__period\">National context<\/span>\n          <h3>Threat detection + vulnerability management both matter<\/h3>\n          <p>National KE-CIRT\/CC reported 2,696,335,021 detected cyber-threat events for July\u2013September 2026, 14.45% above the preceding quarter, and stressed proactive threat detection, patching and vulnerability management. <a href=\"#source-8\">[8]<\/a><\/p>\n        <\/article>\n      <\/div>\n      <p class=\"nit-table-note\">Vacancy examples are evidence of responsibilities, not promises that the jobs remain open. Always verify the employer&#8217;s current posting before applying.<\/p>\n    <\/section>\n\n    <section class=\"nit-section-panel\" id=\"permission\">\n      <h2>What makes ethical hacking ethical?<\/h2>\n      <p><strong>Good intentions are not enough. Permission and scope matter.<\/strong> Kenya&#8217;s Computer Misuse and Cybercrimes Act addresses unauthorised access, including access where a person lacks entitlement or consent. <a href=\"#source-9\">[9]<\/a><\/p>\n      <ol aria-label=\"Professional ethical hacking authority workflow\" class=\"nit-process\">\n        <li><strong>Authorisation.<\/strong><br>Someone with authority approves the assessment.<\/li>\n        <li><strong>Scope.<\/strong><br>Specific systems, applications, networks or accounts are included or excluded.<\/li>\n        <li><strong>Rules.<\/strong><br>The tester understands permitted methods, timing, limits and reporting expectations.<\/li>\n        <li><strong>Controlled testing.<\/strong><br>Work stays inside the approved boundary.<\/li>\n        <li><strong>Evidence.<\/strong><br>Findings are documented responsibly.<\/li>\n        <li><strong>Reporting + remediation.<\/strong><br>The organisation receives enough information to correct the weakness and verify the fix.<\/li>\n      <\/ol>\n      <div class=\"nit-callout nit-callout--warning\">\n        <p class=\"nit-callout__title\">A learner rule worth remembering<\/p>\n        <p>Do not test somebody else&#8217;s website, Wi-Fi network, phone, user account, server, application or cloud system merely because you know how. Practise on your own systems, deliberately vulnerable training environments, or systems for which you have clear authorisation.<\/p>\n      <\/div>\n    <\/section>\n\n    <section id=\"transition\">\n      <h2>Can a cybersecurity analyst become an ethical hacker?<\/h2>\n      <p><strong>Yes.<\/strong> The shared foundations make movement possible, although there is no universal promotion route.<\/p>\n      <div class=\"nit-deg-band-grid\">\n        <article class=\"nit-deg-band\">\n          <div class=\"nit-deg-band__head\"><span>Shared foundation<\/span><h3>Systems \u2192 networking \u2192 security concepts \u2192 evidence<\/h3><\/div>\n          <div class=\"nit-pathway-card__body\"><p>An analyst may already understand accounts, logs, vulnerabilities, network behaviour, controls and incident evidence.<\/p><\/div>\n        <\/article>\n        <article class=\"nit-deg-band nit-deg-band--competitive\">\n          <div class=\"nit-deg-band__head\"><span>Offensive depth<\/span><h3>Scope \u2192 validation \u2192 testing \u2192 reporting \u2192 retest<\/h3><\/div>\n          <div class=\"nit-pathway-card__body\"><p>Moving into penetration testing requires deeper authorised assessment practice, vulnerability validation and technical reporting. Movement can also happen in the opposite direction into detection, incident response or security engineering.<\/p><\/div>\n        <\/article>\n      <\/div>\n    <\/section>\n\n    <section class=\"nit-section-panel\" id=\"choose\">\n      <h2>Which role may suit you better?<\/h2>\n      <p>Do not choose because one title sounds more exciting. Choose from the work you would like to become good at.<\/p>\n      <div class=\"nit-deg-band-grid\">\n        <article class=\"nit-deg-band\">\n          <div class=\"nit-deg-band__head\"><span>Cybersecurity analyst<\/span><h3>You may prefer investigation + defence<\/h3><\/div>\n          <div class=\"nit-pathway-card__body\"><p>You enjoy following evidence, analysing logs and alerts, spotting patterns, working through incident procedures and improving monitoring or defensive controls.<\/p><\/div>\n        <\/article>\n        <article class=\"nit-deg-band nit-deg-band--competitive\">\n          <div class=\"nit-deg-band__head\"><span>Ethical hacker \/ tester<\/span><h3>You may prefer controlled testing + validation<\/h3><\/div>\n          <div class=\"nit-pathway-card__body\"><p>You enjoy understanding how systems can fail, testing security assumptions inside agreed boundaries, validating weaknesses and explaining how they should be corrected.<\/p><\/div>\n        <\/article>\n      <\/div>\n\n      <h3>A five-question decision test<\/h3>\n      <ul class=\"nit-choice-list\">\n        <li><strong>Problem:<\/strong> Would you rather investigate an alert that appeared, or test an approved system to see whether a weakness exists?<\/li>\n        <li><strong>Evidence:<\/strong> Would you rather study logs and operational events, or test results and reproducible findings?<\/li>\n        <li><strong>Output:<\/strong> Would you rather produce an investigation\/response decision, or a vulnerability\/remediation report?<\/li>\n        <li><strong>Work pattern:<\/strong> Do you prefer ongoing monitoring and security operations, or defined technical assessments?<\/li>\n        <li><strong>Core question:<\/strong> Which sounds more interesting: \u201cWhat happened?\u201d or \u201cCan this weakness really be demonstrated?\u201d<\/li>\n      <\/ul>\n      <p>Your answers do not permanently determine your career. They simply indicate which kind of work currently interests you more.<\/p>\n    <\/section>\n\n    <section id=\"final-answer\" class=\"nit-callout nit-callout--success\">\n      <p class=\"nit-callout__title\">The final answer<\/p>\n      <p><strong>Cybersecurity Analyst: observe \u2192 investigate \u2192 decide \u2192 respond.<\/strong><br><strong>Ethical Hacker \/ Penetration Tester: authorise \u2192 test \u2192 validate \u2192 report \u2192 retest.<\/strong><\/p>\n      <p>There is overlap. The most accurate distinction is the role&#8217;s <strong>main mission, starting problem, authority, evidence and expected deliverable<\/strong>.<\/p>\n    <\/section>\n\n    <section id=\"faq\">\n      <h2>Cybersecurity Analyst vs Ethical Hacker: frequently asked questions<\/h2>\n      <div class=\"nit-faq\">\n        <details class=\"nit-faq__item\"><summary>Is a cybersecurity analyst an ethical hacker?<\/summary><div class=\"nit-faq__answer\"><p>Not usually. Analysts generally centre on protection, monitoring, risk, investigation or response, while ethical hackers centre on authorised security testing. Some jobs combine responsibilities from both sides.<\/p><\/div><\/details>\n        <details class=\"nit-faq__item\"><summary>Is an ethical hacker the same as a penetration tester?<\/summary><div class=\"nit-faq__answer\"><p>The terms overlap strongly. \u201cPenetration tester\u201d is the more specific professional occupation centred on simulated attacks, validated weaknesses, evidence and remediation reporting. <a href=\"#source-3\">[3]<\/a><\/p><\/div><\/details>\n        <details class=\"nit-faq__item\"><summary>Is a penetration tester the same as a red teamer?<\/summary><div class=\"nit-faq__answer\"><p>Not always. Penetration testing and red-team simulations can be separate activities with different scope and objectives. A recent Kenya Airways vacancy explicitly listed both. <a href=\"#source-6\">[6]<\/a><\/p><\/div><\/details>\n        <details class=\"nit-faq__item\"><summary>Which role requires more coding?<\/summary><div class=\"nit-faq__answer\"><p>There is no universal rule. Analysts can use scripting and query languages for automation and investigation; penetration testers can use scripting for automation, tooling and repeatable assessments. The exact requirement depends on the job.<\/p><\/div><\/details>\n        <details class=\"nit-faq__item\"><summary>Which role requires more networking?<\/summary><div class=\"nit-faq__answer\"><p>Networking is important in both. Analysts use it to understand traffic and security events; penetration testers use it to understand exposed services, communication paths and network controls.<\/p><\/div><\/details>\n        <details class=\"nit-faq__item\"><summary>Which role is easier to enter?<\/summary><div class=\"nit-faq__answer\"><p>There is no universal answer. O*NET currently classifies both occupations in Job Zone Four, indicating considerable preparation. Individual Kenyan vacancies can range from internships and junior roles to positions requiring previous professional experience. <a href=\"#source-2\">[2]<\/a> <a href=\"#source-3\">[3]<\/a><\/p><\/div><\/details>\n        <details class=\"nit-faq__item\"><summary>Do ethical hackers need permission?<\/summary><div class=\"nit-faq__answer\"><p>Yes. Professional security testing must operate under appropriate authority and an agreed scope. Kenya&#8217;s Computer Misuse and Cybercrimes Act addresses unauthorised access where the required entitlement or consent is absent. <a href=\"#source-9\">[9]<\/a><\/p><\/div><\/details>\n        <details class=\"nit-faq__item\"><summary>Can a cybersecurity analyst become a penetration tester?<\/summary><div class=\"nit-faq__answer\"><p>Yes. Networks, operating systems, vulnerabilities, security controls and evidence are useful on both paths. The person then needs deeper authorised testing, validation and penetration-test reporting ability.<\/p><\/div><\/details>\n      <\/div>\n    <\/section>\n\n    <section id=\"related-guides\">\n      <h2>Continue with the right NIT cybersecurity guide<\/h2>\n      <div class=\"nit-curriculum-grid\">\n        <article class=\"nit-curriculum-card\"><span class=\"nit-curriculum-card__period\">Learning difficulty<\/span><h3><a href=\"https:\/\/niteducation.com\/resources\/is-cybersecurity-hard-to-learn\/\">Is Cybersecurity Hard to Learn?<\/a><\/h3><p>Use this for the beginner learning curve, foundations and study order.<\/p><\/article>\n        <article class=\"nit-curriculum-card\"><span class=\"nit-curriculum-card__period\">First job<\/span><h3><a href=\"https:\/\/niteducation.com\/resources\/entry-level-cybersecurity-jobs-kenya\/\">Entry-Level Cybersecurity Jobs in Kenya<\/a><\/h3><p>Use this for attachments, internships, junior roles and first-job preparation.<\/p><\/article>\n        <article class=\"nit-curriculum-card\"><span class=\"nit-curriculum-card__period\">Broader careers<\/span><h3><a href=\"https:\/\/niteducation.com\/resources\/cybersecurity-career-in-kenya\/\">Cybersecurity Career in Kenya<\/a><\/h3><p>Use this for the wider career-family and employer-expectation landscape.<\/p><\/article>\n        <article class=\"nit-curriculum-card\"><span class=\"nit-curriculum-card__period\">Course details<\/span><h3><a href=\"https:\/\/niteducation.com\/resources\/cybersecurity-course-in-kenya\/\">Cybersecurity Course in Kenya<\/a><\/h3><p>Use this for current NIT curriculum, duration, study options, requirements and admissions information.<\/p><\/article>\n      <\/div>\n    <\/section>\n\n    <section aria-labelledby=\"register-title\" class=\"nit-pg-enrol\" id=\"register\">\n      <div class=\"nit-pg-enrol__copy\">\n        <p class=\"nit-pg-eyebrow\">Build the foundations for either path<\/p>\n        <h2 id=\"register-title\">Register for the Cybersecurity Course at Newton Institute of Technology<\/h2>\n        <p>NIT&#8217;s Cybersecurity programme develops foundations in computer systems, networking, Linux, authorised security testing, monitoring, incident response and technical reporting before learners complete workplace attachment. <a href=\"#source-10\">[10]<\/a><\/p>\n      <\/div>\n      <div aria-label=\"Cybersecurity course details\" class=\"nit-pg-enrol__details\">\n        <p><span>Institutional training<\/span><strong>6 months \u00b7 <a href=\"#source-10\">[10]<\/a><\/strong><\/p>\n        <p><span>Industrial attachment<\/span><strong>Compulsory 3 months \u00b7 <a href=\"#source-10\">[10]<\/a><\/strong><\/p>\n        <p><span>Location<\/span><strong>Migori Town, Migori County<\/strong><\/p>\n      <\/div>\n      <div class=\"nit-pg-enrol__actions\">\n        <a class=\"nit-pg-button nit-pg-button--gold\" href=\"https:\/\/niteducation.com\/admissions\/\">Register \/ admissions<\/a>\n        <a class=\"nit-pg-button nit-pg-button--outline\" href=\"https:\/\/wa.me\/254713584858?text=Hello%20Newton%20Institute%20of%20Technology.%20I%20would%20like%20to%20register%20for%20the%20Cybersecurity%20Course.\" target=\"_blank\" rel=\"noopener\">WhatsApp +254 713 584 858<\/a>\n      <\/div>\n    <\/section>\n\n    <section aria-labelledby=\"references-title\" class=\"nit-sources\" id=\"references\">\n      <h2 id=\"references-title\">Sources and references<\/h2>\n      <ol>\n        <li id=\"source-1\"><strong>National Institute of Standards and Technology (NIST).<\/strong> <cite>Occupations, Jobs, and Work Roles.<\/cite> Used for the distinction between employer job titles and NICE cybersecurity work roles. Accessed 28 October 2026. <a href=\"https:\/\/www.nist.gov\/itl\/applied-cybersecurity\/nice\/nice-framework-resource-center\/resources\/occupations-jobs-and-work\" rel=\"noopener\" target=\"_blank\">nist.gov<\/a>.<\/li>\n        <li id=\"source-2\"><strong>O*NET OnLine.<\/strong> <cite>Information Security Analysts \u2014 15-1212.00.<\/cite> Used for analyst tasks, preparation level and occupational scope. Updated 2026; accessed 28 October 2026. <a href=\"https:\/\/www.onetonline.org\/link\/details\/15-1212.00\" rel=\"noopener\" target=\"_blank\">onetonline.org<\/a>.<\/li>\n        <li id=\"source-3\"><strong>O*NET OnLine.<\/strong> <cite>Penetration Testers \u2014 15-1299.04.<\/cite> Used for penetration-testing tasks, reporting responsibilities, simulated attacks and preparation level. Updated 2026; accessed 28 October 2026. <a href=\"https:\/\/www.onetonline.org\/link\/details\/15-1299.04\" rel=\"noopener\" target=\"_blank\">onetonline.org<\/a>.<\/li>\n        <li id=\"source-4\"><strong>National Institute of Standards and Technology (NIST).<\/strong> <cite>SP 800-115: Technical Guide to Information Security Testing and Assessment.<\/cite> Used for structured technical security-testing and mitigation methodology. <a href=\"https:\/\/csrc.nist.gov\/pubs\/sp\/800\/115\/final\" rel=\"noopener\" target=\"_blank\">csrc.nist.gov<\/a>.<\/li>\n        <li id=\"source-5\"><strong>Prime Bank Kenya.<\/strong> <cite>SOC Analyst.<\/cite> Used as 2026 Kenyan employer evidence for SIEM\/EDR monitoring, alert triage, investigation, escalation and documentation. Accessed 28 October 2026. <a href=\"https:\/\/www.primebank.co.ke\/job_opportunities\/soc-analyst\/\" rel=\"noopener\" target=\"_blank\">primebank.co.ke<\/a>.<\/li>\n        <li id=\"source-6\"><strong>Kenya Airways PLC.<\/strong> <cite>Cyber Security Administrator (Analysis).<\/cite> Used as recent 2026 employer evidence that penetration testing, red-team simulation, vulnerability assessment and defensive analysis can appear in one role. Vacancy expired 3 October 2026; accessed 28 October 2026. <a href=\"https:\/\/careers.kenya-airways.com\/anonymous\/listing\/a64beedb-c5a2-4ebf-8e7b-5eb704f794f1\/details?division=3925f6b7-2bc4-41cd-9e38-f44ca02156b7&amp;divisionName=Information+Technology\" rel=\"noopener\" target=\"_blank\">careers.kenya-airways.com<\/a>.<\/li>\n        <li id=\"source-7\"><strong>Foresight Tech Group.<\/strong> <cite>Information Security Engineer (Penetration Tester), Nairobi County.<\/cite> Used as current Kenya-based employer evidence for authorised testing, evidence, remediation and retesting. Accessed 28 October 2026. <a href=\"https:\/\/ke.linkedin.com\/jobs\/view\/information-security-engineer-penetration-tester-at-foresight-tech-group-4481479800\" rel=\"noopener\" target=\"_blank\">LinkedIn job page<\/a>.<\/li>\n        <li id=\"source-8\"><strong>Communications Authority of Kenya \/ National KE-CIRT\/CC.<\/strong> <cite>Cyber Security Report Q1 2026\u20132027: July\u2013September 2026.<\/cite> Used for current Kenyan cyber-threat-event figures and the need for proactive detection, patching and vulnerability management. Published October 2026; accessed 28 October 2026. <a href=\"https:\/\/www.ca.go.ke\/sites\/default\/files\/2026-10\/Cyber%20Security%20Report%20Q1%202026-2027.pdf\" rel=\"noopener\" target=\"_blank\">ca.go.ke<\/a>.<\/li>\n        <li id=\"source-9\"><strong>Kenya Law.<\/strong> <cite>Computer Misuse and Cybercrimes Act, Cap. 79C \u2014 Section 14.<\/cite> Used for the legal context of unauthorised access and consent. Accessed 28 October 2026. <a href=\"https:\/\/new.kenyalaw.org\/akn\/ke\/act\/2018\/5\/eng%402022-12-31\/source.pdf\" rel=\"noopener\" target=\"_blank\">new.kenyalaw.org<\/a>.<\/li>\n        <li id=\"source-10\"><strong>Newton Institute of Technology.<\/strong> <cite>Cybersecurity Course in Kenya: 6 Months + 3-Month Attachment.<\/cite> Used for current NIT programme duration, compulsory industrial attachment and training areas. Accessed 28 October 2026. <a href=\"https:\/\/niteducation.com\/resources\/cybersecurity-course-in-kenya\/\">niteducation.com<\/a>.<\/li>\n      <\/ol>\n    <\/section>\n\n    <div class=\"nit-article__footer\">\n      <p><strong>Prepared by:<\/strong> Newton Institute of Technology Editorial Team<\/p>\n      <p>Newton Institute of Technology \u00b7 Migori Town, Migori County, Kenya \u00b7 <a href=\"tel:+254713584858\">+254 713 584 858<\/a> \u00b7 <a href=\"mailto:info@niteducation.com\">info@niteducation.com<\/a><\/p>\n      <p><strong>Editorial review:<\/strong> 28 October 2026<\/p>\n    <\/div>\n  <\/div>\n<\/article>\n","protected":false},"excerpt":{"rendered":"<p>Cybersecurity Career Comparison Cybersecurity Analyst vs Ethical Hacker:What Is the Difference? observe \u2192 investigate \u2192 respond \u00b7 authorise \u2192 test \u2192 report A practical, beginner-friendly comparison of what cybersecurity analysts and ethical hackers actually do, where their work overlaps, what each role delivers, and how to decide which path fits you. See the direct answer [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"set","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[30],"tags":[747,748,749],"class_list":["post-3697","post","type-post","status-publish","format-standard","hentry","category-ict","tag-cybersecurity-analyst-vs-ethical-hacker","tag-cybersecurity-analyst-vs-penetration-tester","tag-security-analyst-vs-ethical-hacker"],"_links":{"self":[{"href":"https:\/\/niteducation.com\/resources\/wp-json\/wp\/v2\/posts\/3697","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/niteducation.com\/resources\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/niteducation.com\/resources\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/niteducation.com\/resources\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/niteducation.com\/resources\/wp-json\/wp\/v2\/comments?post=3697"}],"version-history":[{"count":1,"href":"https:\/\/niteducation.com\/resources\/wp-json\/wp\/v2\/posts\/3697\/revisions"}],"predecessor-version":[{"id":3698,"href":"https:\/\/niteducation.com\/resources\/wp-json\/wp\/v2\/posts\/3697\/revisions\/3698"}],"wp:attachment":[{"href":"https:\/\/niteducation.com\/resources\/wp-json\/wp\/v2\/media?parent=3697"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/niteducation.com\/resources\/wp-json\/wp\/v2\/categories?post=3697"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/niteducation.com\/resources\/wp-json\/wp\/v2\/tags?post=3697"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}