A resume that’s only skills-focused doesn’t move the needle. Anyone can list tools and keywords. Recruiters see that all day.
Projects show real ability. They prove how you applied those skills, what problems you solved, and what impact you made. That’s what hiring managers actually care about.
I still include skills, but I anchor them inside projects.
Example. Instead of listing tools like SIEM or Incident Response, I describe:
- Investigating brute-force and persistence activity using Windows event logs and SIEM queries
- Building alert enrichment or automation workflows to speed up triage
- Mapping detections to MITRE ATT&CK and documenting response actions
Skills help with ATS. Projects drive interviews.
If you’re entry-level, this matters even more. Labs, detections, and automations are your experience.
What do you focus on more in your resume. Skills or projects?