how to become a security analyst