Attacks AI models and AI-powered products on purpose, using jailbreaks, prompt injection and misuse scenarios, to find safety and security failures before real attackers do. BLS does not publish separate figures for information security analysts; it counts them within information security analyst (SOC 15-1212), whose median pay is $129,180 a year (BLS OEWS, May 2025). Typical entry-level education: Bachelor's degree.
- SOC 15-1212
- Computer and Mathematical
- Last updated October 9, 2026
At a glance
AI Red Teamer in four numbers
- Median pay
- $129,180a year, or $62.11/hrBLS OEWS, May 2025Lowest 10% $75KTop 10% $200K
US median, all jobs: $50,980
- Projected growth
- +21.0%Much faster than averageBLS EP, 2025–2035This career+21%All jobs+3.5%
Projected employment change, 2025–2035 Item Value This career +21% All jobs +3.5% - Openings a year
- 14,100192,900 jobs todayBLS EP, 2025–2035
- Jobs in 2025192.9K
- Projected 2035233.4K
Employment, 2025–2035 Item Value Jobs in 2025 192.9K Projected 2035 233.4K - Typical education
- Bachelor'sneeded to enterBLS EP, 2025–2035; mix: O*NET
- Certificate7.2%
- Some college2%
- Associate's12.9%
- Bachelor's52.6%
- Post-bacc certificate22.5%
- Master's2.8%
Highest education held by information security analysts Segment Value Certificate 7.2% Some college 2% Associate's 12.9% Bachelor's 52.6% Post-bacc certificate 22.5% Master's 2.8%
Also advertised as: AI Red Team Specialist, AI Red Team Engineer, Adversarial AI Tester, AI Security Researcher, Generative AI Red Teamer.
Pay
How much do Information Security Analysts make?
Every ai red teamer in the US, by percentile of annual wage
Median
$129,180
Middle half earn $97,810 to $163,500
- 10th
- $75,090
- 25th
- $97,810
- 75th
- $163,500
- 90th
- $199,850
All US occupations: $50,980
| Percentile | Value |
|---|---|
| 10th | $75,090 |
| 25th | $97,810 |
| Median | $129,180 |
| 75th | $163,500 |
| 90th | $199,850 |
| All US occupations | $50,980 |
Source: BLS OEWS, May 2025
- Median annual wage
- $129,180
- Median hourly wage
- $62.11/hr
- Mean annual wage
- $132,510
- People employed
- 190,650
Versus all US occupations
At $129,180, Information Security Analysts earn 153% above the $50,980 median across all US occupations, a difference of $78,200 a year.
Versus computer and mathematical occupations
Inside the Computer and Mathematical group, where the middle occupation pays $116,580, this is 11% above the group median.
Pay range
The top 10% earn $199,850 or more while the bottom 10% earn $75,090, a gap of 2.7×. That is a typical spread for a US occupation.
Rank in the bank
This median pays more than 87% of the 1,741 occupations in the NueCareer career bank.
Highest-paying state
Washington pays the most at $154,940, and still leads at $144,786 once local prices are taken into account.
Pay by state
Which states pay Information Security Analysts the most?
State medians come from the same OEWS release as the national figures. The cost-of-living column divides each state median by that state's BEA Regional Price Parity, restating pay in national-average dollars so a high-cost state and a low-cost one can be compared directly.
| State | Median | COL-adjusted | Employed |
|---|---|---|---|
| 1Washington | $154,940 | $144,786 | 6,030 |
| 2Maryland | $139,640 | $133,042 | 8,650 |
| 3California | $138,570 | $125,154 | 15,570 |
| 4Delaware | $137,030 | $137,294 | 720 |
| 5Massachusetts | $136,550 | $129,117 | 6,100 |
| 6Colorado | $135,220 | $131,215 | 5,700 |
| 7District of Columbia | $135,090 | $122,920 | 1,510 |
| 8Virginia | $134,900 | $133,427 | 19,120 |
| 9New Jersey | $134,820 | $123,910 | 4,860 |
| 10New York | $134,660 | $124,776 | 10,060 |
Job outlook
Is AI Red Teamer a growing career?
Employment change over 2025–2035, against every US occupation
Much faster than average. +21.0% projected growth vs 3.5% for all occupations.
| Item | Value |
|---|---|
| Information Security Analysts | +21% |
| All US occupations | +3.5% |
Source: BLS EP, 2025–2035
Much faster than average
BLS projects employment of Information Security Analysts to change 21.0% over 2025–2035, roughly 6.0× the 3.5% projected for all occupations. That is 40,600 more jobs.
Annual openings
About 14,100 openings are projected each year, 7.3% of the 192,900 jobs that existed in 2025. Most come from workers leaving the occupation, not from growth alone.
Getting in
How to become an AI Red Teamer
Many come from penetration testing or application security and add knowledge of how language models work; others come from machine learning and learn offensive security. A bachelor's degree in computer science or a related field is common, and security certifications from bodies such as OffSec or GIAC help on the security side.
Microsoft publishes guidance from its AI Red Team, and NIST's Generative AI Profile describes red teaming as a core risk practice, both useful starting points. Many people build a track record through public AI bug bounty programs, capture-the-flag competitions with AI challenges, and published write-ups of novel attacks before landing a full-time role.
- 1
Typical entry-level education
Bachelor's degree
- 2
Work experience in a related occupation
Less than 5 years
- 3
Typical on-the-job training
None
- 4
Preparation needed (O*NET job zone)
Medium preparation
BLS Employment Projections, 2025–2035; job zone from O*NET 31.0 Database.
What education people in the job have
O*NET incumbent survey: the highest level of education reported by people already working as information security analysts.
- Bachelor's Degree52.6%
- Post-Baccalaureate Certificate22.5%
- Associate's Degree or other 2-year degree12.9%
- Post-Secondary Certificate7.2%
- Master's Degree2.8%
| Item | Value |
|---|---|
| Bachelor's Degree | 52.6% |
| Post-Baccalaureate Certificate | 22.5% |
| Associate's Degree or other 2-year degree | 12.9% |
| Post-Secondary Certificate | 7.2% |
| Master's Degree | 2.8% |
Source: O*NET 31.0 Database
The work
What does an AI Red Teamer do?
AI red teamers think like attackers. They try to make chatbots produce dangerous instructions, leak private data, ignore their rules, or take harmful actions when connected to tools. Common techniques include jailbreak prompts, prompt injection hidden in documents or web pages, and attempts to extract training data or system instructions. They document each successful attack, rate how serious it is, and work with engineers on fixes.
The job sits between traditional cybersecurity and AI safety. Some red teamers focus on security flaws in AI applications, such as an agent that can be tricked into sending email or deleting files. Others probe for harmful content in sensitive areas like weapons, self-harm or election misinformation. Results feed into model training, product guardrails and pre-launch risk reviews.
Day-to-day tasks
- Craft jailbreak and prompt injection attacks against AI models
- Test AI agents for unsafe actions when connected to tools
- Probe models for harmful content in high-risk subject areas
- Document attacks with reproducible steps and severity ratings
- Advise engineers on guardrails and mitigations
- Build automated tools that generate attack prompts at scale
- Contribute findings to pre-release risk assessments
Typical tasks, researched by NueCareer from the sources below.
Working conditions and hours
AI red teamers work at AI labs, large technology companies, security consultancies and government safety institutes. The work is computer-based and often remote. Engagements can be intense before a major model launch. Some testing involves deliberately engaging with disturbing subject matter, so teams usually have wellbeing support and strict handling rules.
Where the work happens
Indoors, climate-controlled
NeverEvery dayIndoors, in a climate-controlled space, every day.
Outdoors in all weather
NeverEvery day
Physical demands
Sitting
NeverAlmost all the timeSeated for more than half the working day.
Standing
NeverAlmost all the timeBending or twisting
NeverAlmost all the time
Working with people
Contact with other people
NoneConstantFace-to-face discussions
NeverEvery dayDealing with the public
Not importantExtremely important
Pressure and stakes
Strict deadlines
NeverEvery dayConflict situations
NeverEvery dayCost of a mistake
Not seriousExtremely serious
Autonomy
Freedom to decide
NoneA lotA lot of freedom to make decisions without checking first.
Conditions: O*NET Work Context survey. Each item has its own scale, so each dot is read against the two answers that end its own line.
Core skills
O*NET importance, 1 to 5
- Reading Comprehension4.0
- Critical Thinking3.9
- Active Listening3.8
- Speaking3.6
- Writing3.5
- Monitoring3.4
- Active Learning3.3
- Learning Strategies2.9
| Item | Value |
|---|---|
| Reading Comprehension | 4.0 |
| Critical Thinking | 3.9 |
| Active Listening | 3.8 |
| Speaking | 3.6 |
| Writing | 3.5 |
| Monitoring | 3.4 |
| Active Learning | 3.3 |
| Learning Strategies | 2.9 |
Source: O*NET 31.0 Database
Transferable skills
O*NET importance, 1 to 5
- Complex Problem Solving3.8
- Judgment and Decision Making3.4
- Systems Analysis3.4
- Time Management3.1
- Coordination3.0
- Operations Monitoring3.0
- Quality Control Analysis3.0
- Systems Evaluation3.0
| Item | Value |
|---|---|
| Complex Problem Solving | 3.8 |
| Judgment and Decision Making | 3.4 |
| Systems Analysis | 3.4 |
| Time Management | 3.1 |
| Coordination | 3.0 |
| Operations Monitoring | 3.0 |
| Quality Control Analysis | 3.0 |
| Systems Evaluation | 3.0 |
Source: O*NET 31.0 Database
Tools and software
- Analytical or scientific software · in demand
- Application server software · in demand
- Business intelligence and data analysis software · in demand
- Cloud-based management software · in demand
- Configuration management software · in demand
- Content workflow software · in demand
- Customer relationship management CRM software · in demand
- Data base management system software · in demand
- Data base reporting software · in demand
- Data base user interface and query software · in demand
- Development environment software · in demand
- Document management software · in demand
“In demand” marks an O*NET Employer-Based Hot Technology, software named in real job postings for this occupation.
Personality fit
What personality type suits an AI Red Teamer?
NueCareer estimate (Holland code IRC) built on O*NET's Information Security Analyst profile, scored 1 to 7
| Axis | AI Red Teamer |
|---|---|
| Realistic | 4 |
| Investigative | 6 |
| Artistic | 1 |
| Social | 2 |
| Enterprising | 3 |
| Conventional | 6 |
Source: O*NET 31.0 Database
What the work is built around
Day to day this is work built around organising, following procedures and working precisely with data, combined with investigating, analysing and solving problems with ideas and data.
- Conventional6.1
- Investigative5.6
- Realistic4.1
- Enterprising2.9
- Social2.1
- Artistic1.3
Closest MBTI types
NueCareer fit scores: cosine similarity between each MBTI type's interest vector and this occupation's O*NET interest profile. Not a BLS or O*NET figure; the method is documented on our methodology page.
Explore further
Careers related to AI Red Teamer
O*NET related occupations
- Computer and Mathematical
- Computer and Mathematical
- Computer and Mathematical
- Computer and Mathematical
- Computer and Mathematical
Network and Computer Systems Administrator
$99,130median a year
Most earn $63K to $155K
−4.1%Bachelor's - Computer and Mathematical
More computer and mathematical careers
Median annual pay, with information security analysts highlighted
- Software Developer$135,980
- Actuary$130,000
- AI Red Teamer$129,180
- Data Scientist$120,230
- Business Intelligence Analyst$120,230
- Database Administrator$104,620
- Web Designer$104,000
- Computer Programmer$100,390
- Web Developer$92,650
| Item | Value |
|---|---|
| Software Developer | $135,980 |
| Actuary | $130,000 |
| AI Red Teamer | $129,180 |
| Data Scientist | $120,230 |
| Business Intelligence Analyst | $120,230 |
| Database Administrator | $104,620 |
| Web Designer | $104,000 |
| Computer Programmer | $100,390 |
| Web Developer | $92,650 |
Source: BLS OEWS, May 2025
Lists AI Red Teamer appears on
Questions
AI Red Teamer: frequently asked questions
How much do Information Security Analysts make?
BLS does not publish a separate wage for information security analysts. It counts them within information security analyst, whose median pay is $129,180 a year (BLS OEWS, May 2025). The middle half of that occupation earn between $97,810 and $163,500, and the top 10% earn $199,850 or more.
Do you need a degree to become an AI Red Teamer?
Yes. BLS reports a bachelor's degree as the typical entry-level education for Information Security Analysts, and O*NET rates the preparation needed as medium preparation. Employers typically expect less than 5 years of related work experience first. In O*NET's survey of people already doing the job, 52.6% hold bachelor's degree.
Is AI Red Teamer a growing career?
Yes, strongly. Employment is projected to grow 21.0% over 2025–2035, more than double the 3.5% projected for all occupations (BLS EP, 2025–2035). BLS still projects about 14,100 openings a year, mostly from workers retiring or moving to other work.
What does an AI Red Teamer do?
AI red teamers think like attackers. A typical task: craft jailbreak and prompt injection attacks against AI models. Employers most often ask for Analytical or scientific software, Application server software, Business intelligence and data analysis software.
Which states pay Information Security Analysts the most?
The highest state medians for Information Security Analysts are Washington ($154,940), Maryland ($139,640), California ($138,570) (BLS OEWS, May 2025).
What personality type suits an AI Red Teamer?
O*NET scores Information Security Analysts highest on the Conventional, Investigative and Realistic interest areas, so the work mixes organising, following procedures and working precisely with data with investigating, analysing and solving problems with ideas and data. On NueCareer's MBTI-to-interest mapping that lines up most closely with ISTJ personalities. Personality is a fit signal, not a gate. The free NueCareer quiz scores your own profile against all 1,731 careers in the bank.