Answer architecture
Build a credible 60-second career story
Specific evidence makes motivation sound genuine rather than rehearsed.
Trigger
What first caught your attention
Action
The lab, project or learning you pursued
Insight
What you discovered about the work
Fit
Why this role matches your strengths
Direction
What you want to learn next
Why did you choose cyber security? 7 answers that actually work
Almost every cyber security interview in India — from SOC trainee to security engineer — includes this question. It looks like small talk. It is not. The interviewer is checking three things: whether you understand what the job actually is, whether your motivation will survive a night shift of false positives, and whether you can tell a coherent story about yourself.
Here is how to answer it, with structures you can adapt to your own background.
unavailable | Reviewed original Verizon DBIR and cybersecurity role skills. The breach dataset does not establish salaries, certification returns, remote-work rates, interview success or readiness timelines for this article. Prior unattributed statistic cards removed; no replacement numerical claim invented.01Trigger
Describe what attracted your attention | user
02Action
Name a lab or project you actually completed | laptop
03Insight
Explain what you learned about security work | search
04Fit
Connect that evidence to the target role | shield
05Direction
Identify your next learning goal | learn
What the interviewer is really asking
- Do you know what this work involves? Candidates who romanticise hacking fail here.
- Will you stay? Security has a learning curve; companies invest months in training you.
- Can you communicate? Your answer is a live demo of how you will write incident reports.
Answer structures that work
1. The problem-solver story
"I have always been the person who takes things apart to see how they break. In college I set up a small home lab, deliberately infected a VM with malware, and watched what it did. That moment — seeing how a single phishing email turns into a compromised machine — made it clear this is what I want to do professionally."
Works because: it is specific, shows hands-on curiosity, and connects to real work.
2. The impact story
"Every company I read about in a breach headline had users who trusted it with their data. I want to be on the side that protects that trust. Security is one of the few fields where your work directly protects people who will never know your name."
Works because: it signals maturity and purpose without sounding rehearsed.
3. The career-switch story (IT support / networking)
"In two years of IT support I saw the same pattern: the tickets that mattered most were security incidents — a compromised account, a suspicious login. I started studying for Security+ alongside work, built a small detection lab, and realised I wanted to do this full time, not occasionally."
Works because: it turns your non-security background into evidence, not a weakness.
4. The fresher story
"I chose cyber security because it is one of the few fields where a fresher can prove skill without permission. I cannot show you five years of experience, but I can show you my TryHackMe profile, my home-lab write-ups, and the three CTF events I placed in."
Works because: it reframes inexperience as initiative.
5. The continuous-learning story
"Security is a field where the syllabus never stops moving — new attack techniques every month. I tried other areas and got bored once I mastered the basics. Here, the learning curve is the job, and that is exactly what I want."
6. The incident story
"My own account was compromised in my second year of college — a phishing page I should have spotted. Recovering it taught me more than any course had. I went from embarrassed to curious to obsessed with understanding how I was fooled."
Works because: vulnerability plus growth is memorable and human.
7. The market-realist story (use carefully)
"Honestly, two reasons. The demand — India has a large cyber security talent gap and the field is growing fast. And the fit — I enjoy investigation and pattern-finding more than building features. I would rather find the one malicious login in ten thousand than write the login page."
Works because: honesty about career economics, paired with genuine fit, reads as self-aware rather than mercenary.
What to avoid
- "I watch a lot of hacking videos" — signals entertainment, not profession.
- "It pays well" alone — fine as one factor, fatal as the only one.
- A memorised paragraph — interviewers hear the same scripted answer daily. Speak from a structure, not a script.
Practise it out loud
This question is almost always asked verbally, early, when nerves are highest. Rehearse your 60-second version out loud — not in your head — until it sounds like conversation. Our free AI mock interview asks this exact question and scores your answer on clarity and structure.
Related reading: cyber security interview questions and answers · how to get a cyber security job with no experience
Preparation map: recall to reasoning
Concept | Explain the mechanism; distinguish related terms | learn
Example | Use a real authorised lab; identify evidence | laptop
Decision | State what you would check first and why | search
Limit | Identify missing context; avoid overstating certainty | shield
Delivery | Answer in a clear sequence; pause before details | user
Review | Record gaps; practise corrected answers; revisit later | database