Prompt to Promotion: Using AI to Advance Your Cyber Career

Run these three prompts in order, in the same chat, with any AI tool (ChatGPT, Copilot, Gemini, Claude). Start with your LinkedIn About section or role bullet points. Nothing to copy between prompts.

1. Map It: Role Gap Analysis

Align your current experience to NICE work roles and see the gaps to your next ones.

I work in cybersecurity. Here's my background: [paste your LinkedIn About section and/or current role bullet points, or just list your title, 2-3 responsibilities, and any certs], and any regulatory environment you work within (e.g. PCI DSS, HIPAA, CJIS, FedRAMP) if applicable.

Using the NIST NICE Cybersecurity Workforce Framework, tell me: (1) which NICE work role(s) my current experience best aligns with, (2) 2-3 adjacent work roles I could realistically move into, and (3) the top 3 skill or experience gaps standing between me and each of those adjacent roles — accounting for any regulatory specialization I mentioned. Keep it specific to what I gave you, not generic career advice.

2. Close the Gap: Personalized Learning Path

Turn those gaps into a sequenced, realistic plan.

Based on the above, build me a sequenced plan to close these gaps. For each adjacent role, give me: one certification or skill to prioritize first and why, one concrete next step to start building it this month (a course, a project, a volunteer or community opportunity), and a rough timeline (what's realistic in 90 days vs. what's a longer-term build). Order by impact, not just difficulty.

3. Own It: Claim Your Next Move

See the foundation you've already built and the momentum you carry forward.

Based on everything above, and the role I'm eyeing next — [name it, or describe it] — first reflect back to me what I've already accomplished: be specific about the experience, certs, and skills I already have, not just what's missing. Then show me how that existing foundation already connects to the role I'm eyeing next, and what momentum I'm carrying into it. End with encouragement, not a to-do list — I'll get the to-do list from the previous step.

NIST NICE, fast

Design and DevelopmentDesigning and building secure systems and software

Implementation and OperationKeeping systems and networks running and supported

Oversight and GovernanceLeading, governing, and managing cybersecurity risk, policy and people

Protection and DefenseDetecting and defending against threats

Cyberspace IntelligenceCollecting and analyzing intelligence on threats and adversaries

Cyberspace EffectsPlanning and carrying out cyberspace operations

InvestigationInvestigating cybercrime and analyzing digital evidence

Regulatory specializations (PCI DSS, HIPAA, CJIS, FedRAMP) typically layer onto Oversight and Governance or Protection and Defense roles. They're a knowledge specialty, not a separate category.

Presented at ISC2 Security Congress 2026

Invite Victor to Speak