Information Security Analysts earn a median of $129,180 per year ($62.11/hr) (BLS OEWS, May 2025). Employment is projected to grow 21.0% through 2035, with about 14,100 openings a year (BLS EP, 2025–2035). Typical entry-level education: Bachelor's degree.
- SOC 15-1212
- Computer and Mathematical
- Last updated October 15, 2026
At a glance
Information Security Analyst in four numbers
- Median pay
- $129,180a year, or $62.11/hrBLS OEWS, May 2025Lowest 10% $75KTop 10% $200K
US median, all jobs: $50,980
- Projected growth
- +21.0%Much faster than averageBLS EP, 2025–2035This career+21%All jobs+3.5%
Projected employment change, 2025–2035 Item Value This career +21% All jobs +3.5% - Openings a year
- 14,100192,900 jobs todayBLS EP, 2025–2035
- Jobs in 2025192.9K
- Projected 2035233.4K
Employment, 2025–2035 Item Value Jobs in 2025 192.9K Projected 2035 233.4K - Typical education
- Bachelor'sneeded to enterBLS EP, 2025–2035; mix: O*NET
- Certificate7.2%
- Some college2%
- Associate's12.9%
- Bachelor's52.6%
- Post-bacc certificate22.5%
- Master's2.8%
Highest education held by information security analysts Segment Value Certificate 7.2% Some college 2% Associate's 12.9% Bachelor's 52.6% Post-bacc certificate 22.5% Master's 2.8%
Also advertised as: Information Security Officer, Information Security Specialist, Information Systems Security Analyst, Information Systems Security Officer (ISSO), Information Technology Security Analyst (IT Security Analyst), Network Security Analyst.
Pay
How much do information security analysts make?
Information Security Analysts earn a median of $129,180 a year ($62.11 an hour, or about $10,770 a month); the lowest-paid 10% earn less than $75,090 and the top 10% more than $199,850 (BLS OEWS, May 2025).
The best-paying state is Washington, with a median of $154,940. See Information security analyst salary in Washington and every other state. By city, pay is highest around San Jose ($196,710 average): salary in every city.
Every information security analyst in the US, by percentile of annual wage
Median
$129,180
Middle half earn $97,810 to $163,500
- 10th
- $75,090
- 25th
- $97,810
- 75th
- $163,500
- 90th
- $199,850
All US occupations: $50,980
| Percentile | Value |
|---|---|
| 10th | $75,090 |
| 25th | $97,810 |
| Median | $129,180 |
| 75th | $163,500 |
| 90th | $199,850 |
| All US occupations | $50,980 |
Source: BLS OEWS, May 2025
- Median annual wage
- $129,180
- Median hourly wage
- $62.11/hr
- Mean annual wage
- $132,510
- People employed
- 190,650
Versus all US occupations
At $129,180, Information Security Analysts earn 153% above the $50,980 median across all US occupations, a difference of $78,200 a year.
Versus computer and mathematical occupations
Inside the Computer and Mathematical group, where the middle occupation pays $116,580, this is 11% above the group median.
Pay range
The top 10% earn $199,850 or more while the bottom 10% earn $75,090, a gap of 2.7×. That is a typical spread for a US occupation.
Rank in the bank
This median pays more than 87% of the 1,741 occupations in the NueCareer career bank.
Highest-paying state
Washington pays the most at $154,940, and still leads at $144,786 once local prices are taken into account.
Pay by state
Which states pay information security analysts the most?
State medians come from the same OEWS release as the national figures. The cost-of-living column divides each state median by that state's BEA Regional Price Parity, restating pay in national-average dollars so a high-cost state and a low-cost one can be compared directly.
| State | Median | COL-adjusted | Employed |
|---|---|---|---|
| 1Washington | $154,940 | $144,786 | 6,030 |
| 2Maryland | $139,640 | $133,042 | 8,650 |
| 3California | $138,570 | $125,154 | 15,570 |
| 4Delaware | $137,030 | $137,294 | 720 |
| 5Massachusetts | $136,550 | $129,117 | 6,100 |
| 6Colorado | $135,220 | $131,215 | 5,700 |
| 7District of Columbia | $135,090 | $122,920 | 1,510 |
| 8Virginia | $134,900 | $133,427 | 19,120 |
| 9New Jersey | $134,820 | $123,910 | 4,860 |
| 10New York | $134,660 | $124,776 | 10,060 |
Job outlook
Is information security analyst a growing career?
Employment change over 2025–2035, against every US occupation
Much faster than average. +21.0% projected growth vs 3.5% for all occupations.
| Item | Value |
|---|---|
| Information Security Analysts | +21% |
| All US occupations | +3.5% |
Source: BLS EP, 2025–2035
Much faster than average
BLS projects employment of Information Security Analysts to change 21.0% over 2025–2035, roughly 6.0× the 3.5% projected for all occupations. That is 40,600 more jobs.
Annual openings
About 14,100 openings are projected each year, 7.3% of the 192,900 jobs that existed in 2025. Most come from workers leaving the occupation, not from growth alone.
Many of those openings are expected to result from the need to replace workers who transfer to different occupations or exit the labor force, such as to retire.
High demand is expected for information security analysts. Cyberattacks have grown in frequency, and these analysts will be needed to create innovative solutions to prevent hackers from stealing critical information or creating problems for computer networks.
As businesses focus on enhancing cybersecurity, they will need information security analysts to secure new technologies from outside threats or hacks. Increased use of artificial intelligence (AI) and the rise of e-commerce have increased the need for enhanced security, contributing to the projected employment growth of these workers over the decade.
AI exposure: very high
BLS places this occupation in its very high relative AI exposure category, among the occupations most exposed to current AI.
Getting in
How to become an information security analyst
Information security analysts typically need a bachelor’s degree in a computer science field, along with related work experience. Employers may prefer to hire analysts who have professional certification.
- 1
Typical entry-level education
Bachelor's degree
- 2
Work experience in a related occupation
Less than 5 years
- 3
Typical on-the-job training
None
- 4
Preparation needed (O*NET job zone)
Considerable preparation
BLS Employment Projections, 2025–2035; job zone from O*NET 31.0 Database.
What education people in the job have
O*NET incumbent survey: the highest level of education reported by people already working as information security analysts.
- Bachelor's Degree52.6%
- Post-Baccalaureate Certificate22.5%
- Associate's Degree or other 2-year degree12.9%
- Post-Secondary Certificate7.2%
- Master's Degree2.8%
| Item | Value |
|---|---|
| Bachelor's Degree | 52.6% |
| Post-Baccalaureate Certificate | 22.5% |
| Associate's Degree or other 2-year degree | 12.9% |
| Post-Secondary Certificate | 7.2% |
| Master's Degree | 2.8% |
Source: O*NET 31.0 Database
The work
What does an information security analyst do?
Plan, implement, upgrade, or monitor security measures for the protection of computer networks and information. Assess system vulnerabilities for security risks and propose and implement risk mitigation strategies. May ensure appropriate security controls are in place that will safeguard digital files and vital electronic infrastructure. May respond to computer security breaches and viruses.
Information security analysts plan and carry out security measures to protect an organization’s computer networks and systems.
Day-to-day tasks
- Document computer security and emergency measures policies, procedures, and tests.
- Develop plans to safeguard computer files against accidental or unauthorized modification, destruction, or disclosure and to meet emergency data processing needs.
- Confer with users to discuss issues such as computer data access needs, security violations, and programming changes.
- Train users and promote security awareness to ensure system security and to improve server and network efficiency.
- Review violations of computer security procedures and discuss procedures with violators to ensure violations are not repeated.
- Monitor use of data files and regulate access to safeguard information in computer files.
- Modify computer security files to incorporate new software, correct errors, or change individual access status.
- Perform risk assessments and execute tests of data processing system to ensure functioning of data processing activities and security measures.
O*NET core tasks, ordered by reported importance.
Working conditions and hours
Most information security analysts work full time, and some work more than 40 hours per week. Information security analysts sometimes have to be on call outside of normal business hours in case of an emergency.
Where the work happens
Indoors, climate-controlled
NeverEvery dayIndoors, in a climate-controlled space, every day.
Outdoors in all weather
NeverEvery day
Physical demands
Sitting
NeverAlmost all the timeSeated for more than half the working day.
Standing
NeverAlmost all the timeBending or twisting
NeverAlmost all the time
Working with people
Contact with other people
NoneConstantFace-to-face discussions
NeverEvery dayDealing with the public
Not importantExtremely important
Pressure and stakes
Strict deadlines
NeverEvery dayConflict situations
NeverEvery dayCost of a mistake
Not seriousExtremely serious
Autonomy
Freedom to decide
NoneA lotA lot of freedom to make decisions without checking first.
Schedules: BLS Occupational Outlook Handbook, 2025–2035 edition. Conditions: O*NET Work Context survey. Each item has its own scale, so each dot is read against the two answers that end its own line.
Where information security analysts work
Share of jobs by employer type
- Computer systems design and related services22%
- Finance and insurance17%
- Management of companies and enterprises9%
- Information9%
- Management, scientific, and technical consulting services6%
| Item | Value |
|---|---|
| Computer systems design and related services | 22% |
| Finance and insurance | 17% |
| Management of companies and enterprises | 9% |
| Information | 9% |
| Management, scientific, and technical consulting services | 6% |
Source: BLS Occupational Outlook Handbook, 2025–2035 edition
Core skills
O*NET importance, 1 to 5
- Reading Comprehension4.0
- Critical Thinking3.9
- Active Listening3.8
- Speaking3.6
- Writing3.5
- Monitoring3.4
- Active Learning3.3
- Learning Strategies2.9
| Item | Value |
|---|---|
| Reading Comprehension | 4.0 |
| Critical Thinking | 3.9 |
| Active Listening | 3.8 |
| Speaking | 3.6 |
| Writing | 3.5 |
| Monitoring | 3.4 |
| Active Learning | 3.3 |
| Learning Strategies | 2.9 |
Source: O*NET 31.0 Database
Transferable skills
O*NET importance, 1 to 5
- Complex Problem Solving3.8
- Judgment and Decision Making3.4
- Systems Analysis3.4
- Time Management3.1
- Coordination3.0
- Operations Monitoring3.0
- Quality Control Analysis3.0
- Systems Evaluation3.0
| Item | Value |
|---|---|
| Complex Problem Solving | 3.8 |
| Judgment and Decision Making | 3.4 |
| Systems Analysis | 3.4 |
| Time Management | 3.1 |
| Coordination | 3.0 |
| Operations Monitoring | 3.0 |
| Quality Control Analysis | 3.0 |
| Systems Evaluation | 3.0 |
Source: O*NET 31.0 Database
Tools and software
- Analytical or scientific software · in demand
- Application server software · in demand
- Business intelligence and data analysis software · in demand
- Cloud-based management software · in demand
- Configuration management software · in demand
- Content workflow software · in demand
- Customer relationship management CRM software · in demand
- Data base management system software · in demand
- Data base reporting software · in demand
- Data base user interface and query software · in demand
- Development environment software · in demand
- Document management software · in demand
“In demand” marks an O*NET Employer-Based Hot Technology, software named in real job postings for this occupation.
The workforce
Who works as an information security analyst?
Women make up 15.9% of information security analysts, against 47.1% of all employed people: a heavily male-dominated occupation.
Only 17.6% are 55 or older (23.2% across all jobs): a young workforce.
The median worker is 41.5 years old (all workers: 42.1).
- Women
- 15.9%All workers 47.1% · BLS CPS, 2025
- Median age
- 41.5All workers 42.1 · BLS CPS, 2025
- Aged 55+
- 17.6%All workers 23.2% · BLS CPS, 2025
- Employed (CPS)
- 261,000BLS CPS, 2025
| Group | Share of information security analysts | All employed people |
|---|---|---|
| Women | 15.9% | 47.1% |
| White | 70.2% | 75.7% |
| Black or African American | 13.8% | 12.7% |
| Asian | 10.6% | 7.5% |
| Hispanic or Latino (any race) | 11.3% | 20.0% |
| Aged 55 and over | 17.6% | 23.2% |
| Aged 16 to 24 | 6.1% | 12.2% |
Current Population Survey annual averages, 2025 (BLS tables 11 and 11b). Race groups can overlap with Hispanic or Latino ethnicity, so they do not sum to 100%.
Personality fit
What personality type suits an information security analyst?
O*NET Occupational Interests (RIASEC), scored 1 to 7
| Axis | Information Security Analyst |
|---|---|
| Realistic | 4 |
| Investigative | 5 |
| Artistic | 1 |
| Social | 2 |
| Enterprising | 3 |
| Conventional | 6 |
Source: O*NET 31.0 Database
What the work is built around
Day to day this is work built around organising, following procedures and working precisely with data, combined with investigating, analysing and solving problems with ideas and data.
- Conventional6.1
- Investigative5.4
- Realistic3.6
- Enterprising2.9
- Social2.1
- Artistic1.3
Closest MBTI types
NueCareer fit scores: cosine similarity between each MBTI type's interest vector and this occupation's O*NET interest profile. Not a BLS or O*NET figure; the method is documented on our methodology page.
Questions
Information Security Analyst: frequently asked questions
How much do information security analysts make?
Information Security Analysts earn a median of $129,180 a year (BLS OEWS, May 2025). That is 153% above the $50,980 median for all US occupations. That works out at $62.11/hr. The middle half earn between $97,810 and $163,500. The top 10% earn $199,850 or more.
How much do information security analysts make an hour?
The median hourly wage for information security analysts is $62.11 (BLS OEWS, May 2025). On a full-year basis the $129,180 annual median works out to about $10,770 a month before tax.
What is the starting salary for an information security analyst?
BLS does not publish a starting salary. The nearest measure is the low end of the pay range: the lowest-paid 10% of information security analysts earn less than $75,090 a year and the bottom quarter less than $97,810 (BLS OEWS, May 2025). New workers often start near that end, but where a particular job starts depends on the employer, the state and the credentials you bring, so read these as the bottom of the range rather than a guaranteed entry wage.
Do information security analysts make $100k?
Yes, more often than not. The median is $129,180, so more than half of information security analysts earn over $100,000 a year (BLS OEWS, May 2025). In 41 states the median itself is above $100,000: Washington ($154,940), Maryland ($139,640), California ($138,570), Delaware ($137,030), and 37 more.
Which states pay information security analysts the most?
The highest state medians for Information Security Analysts are Washington ($154,940), Maryland ($139,640), California ($138,570) (BLS OEWS, May 2025).
What kind of information security analyst earns the most?
BLS does not split information security analysts' pay by specialty or employer, but its range shows how far the top end runs: the highest-paid 10% earn more than $199,850, against a median of $129,180 (BLS OEWS, May 2025). Location moves pay the most in the published data: the best-paying states are Washington ($154,940), Maryland ($139,640), California ($138,570). BLS also counts a specialty career inside this occupation (AI red teamer), which shares its federal pay figures.
Do you need a degree to become an information security analyst?
Yes. BLS reports a bachelor's degree as the typical entry-level education for Information Security Analysts, and O*NET rates the preparation needed as considerable preparation. Employers typically expect less than 5 years of related work experience first. In O*NET's survey of people already doing the job, 52.6% hold bachelor's degree.
How long does it take to become an information security analyst?
BLS does not publish a fixed length; it depends on the route. What it does publish: the typical way in for information security analysts is a bachelor's degree, plus less than 5 years of work experience in a related occupation. O*NET classes the work as needing considerable preparation.
Is information security analyst a growing career?
Yes, strongly. Employment is projected to grow 21.0% over 2025–2035, more than double the 3.5% projected for all occupations (BLS EP, 2025–2035). BLS still projects about 14,100 openings a year, mostly from workers retiring or moving to other work.
What does an information security analyst do?
Information security analysts plan and carry out security measures to protect an organization’s computer networks and systems. A core O*NET task: document computer security and emergency measures policies, procedures, and tests. Employers most often ask for Analytical or scientific software, Application server software, Business intelligence and data analysis software.
Do information security analysts work 40 hours a week?
Most work more than 40. In O*NET's survey of people in the job, 62% of information security analysts usually work more than 40 hours a week, 31% work exactly 40 and 6% work fewer. 90% say their schedule is regular and 10% irregular. Source: O*NET 31.0 Database, Work Context.
What personality type suits an information security analyst?
O*NET scores Information Security Analysts highest on the Conventional, Investigative and Realistic interest areas, so the work mixes organising, following procedures and working precisely with data with investigating, analysing and solving problems with ideas and data. On NueCareer's MBTI-to-interest mapping that lines up most closely with ISTJ personalities. Personality is a fit signal, not a gate. The free NueCareer quiz scores your own profile against all 1,731 careers in the bank.
What percentage of information security analysts are women?
Women make up 15.9% of information security analysts, against 47.1% of all employed people: a heavily male-dominated occupation. Only 17.6% are 55 or older (23.2% across all jobs): a young workforce. The median worker is 41.5 years old (all workers: 42.1). Source: BLS Current Population Survey, 2025 annual averages.






