Computer and Mathematical

Information Security Analyst Salary (2026), outlook and how to become one

Plan, implement, upgrade, or monitor security measures for the protection of computer networks and information.

Median pay
$129,180
Growth to 2035
+21.0%
Openings a year
14,100
Typical entry
Bachelor's

Information Security Analysts earn a median of $129,180 per year ($62.11/hr) (BLS OEWS, May 2025). Employment is projected to grow 21.0% through 2035, with about 14,100 openings a year (BLS EP, 2025–2035). Typical entry-level education: Bachelor's degree.

  • SOC 15-1212
  • Computer and Mathematical
  • Last updated October 15, 2026

At a glance

Information Security Analyst in four numbers

Median pay
$129,180a year, or $62.11/hr
Lowest 10% $75KTop 10% $200K

US median, all jobs: $50,980

BLS OEWS, May 2025
Projected growth
+21.0%Much faster than average
This career
+21%
All jobs
+3.5%
Projected employment change, 2025–2035
ItemValue
This career+21%
All jobs+3.5%
BLS EP, 2025–2035
Openings a year
14,100192,900 jobs today
  • Jobs in 2025192.9K
  • Projected 2035233.4K
Employment, 2025–2035
ItemValue
Jobs in 2025192.9K
Projected 2035233.4K
BLS EP, 2025–2035
Typical education
Bachelor'sneeded to enter
  • Certificate7.2%
  • Some college2%
  • Associate's12.9%
  • Bachelor's52.6%
  • Post-bacc certificate22.5%
  • Master's2.8%
Highest education held by information security analysts
SegmentValue
Certificate7.2%
Some college2%
Associate's12.9%
Bachelor's52.6%
Post-bacc certificate22.5%
Master's2.8%
BLS EP, 2025–2035; mix: O*NET

Also advertised as: Information Security Officer, Information Security Specialist, Information Systems Security Analyst, Information Systems Security Officer (ISSO), Information Technology Security Analyst (IT Security Analyst), Network Security Analyst.

Pay

How much do information security analysts make?

Information Security Analysts earn a median of $129,180 a year ($62.11 an hour, or about $10,770 a month); the lowest-paid 10% earn less than $75,090 and the top 10% more than $199,850 (BLS OEWS, May 2025).

The best-paying state is Washington, with a median of $154,940. See Information security analyst salary in Washington and every other state. By city, pay is highest around San Jose ($196,710 average): salary in every city.

Annual pay, lowest-paid to highest-paid

Every information security analyst in the US, by percentile of annual wage

Median

$129,180

Middle half earn $97,810 to $163,500

10th
$75,090
25th
$97,810
75th
$163,500
90th
$199,850

All US occupations: $50,980

Information Security Analyst annual wages
PercentileValue
10th$75,090
25th$97,810
Median$129,180
75th$163,500
90th$199,850
All US occupations$50,980

Source: BLS OEWS, May 2025

Median annual wage
$129,180
Median hourly wage
$62.11/hr
Mean annual wage
$132,510
People employed
190,650

Versus all US occupations

At $129,180, Information Security Analysts earn 153% above the $50,980 median across all US occupations, a difference of $78,200 a year.

Versus computer and mathematical occupations

Inside the Computer and Mathematical group, where the middle occupation pays $116,580, this is 11% above the group median.

Pay range

The top 10% earn $199,850 or more while the bottom 10% earn $75,090, a gap of 2.7×. That is a typical spread for a US occupation.

Rank in the bank

This median pays more than 87% of the 1,741 occupations in the NueCareer career bank.

Highest-paying state

Washington pays the most at $154,940, and still leads at $144,786 once local prices are taken into account.

Pay by state

Which states pay information security analysts the most?

State medians come from the same OEWS release as the national figures. The cost-of-living column divides each state median by that state's BEA Regional Price Parity, restating pay in national-average dollars so a high-cost state and a low-cost one can be compared directly.

Top 10 states by median annual wage for Information Security Analysts
StateMedianCOL-adjustedEmployed
1Washington$154,940$144,7866,030
2Maryland$139,640$133,0428,650
3California$138,570$125,15415,570
4Delaware$137,030$137,294720
5Massachusetts$136,550$129,1176,100
6Colorado$135,220$131,2155,700
7District of Columbia$135,090$122,9201,510
8Virginia$134,900$133,42719,120
9New Jersey$134,820$123,9104,860
10New York$134,660$124,77610,060
See all 49 states, sortable, with cost-of-living adjustments

Job outlook

Is information security analyst a growing career?

Projected change in jobs

Employment change over 2025–2035, against every US occupation

Information Security Analysts
+21%
All US occupations
+3.5%

Much faster than average. +21.0% projected growth vs 3.5% for all occupations.

Projected employment change, 2025–2035
ItemValue
Information Security Analysts+21%
All US occupations+3.5%

Source: BLS EP, 2025–2035

Much faster than average

BLS projects employment of Information Security Analysts to change 21.0% over 2025–2035, roughly 6.0× the 3.5% projected for all occupations. That is 40,600 more jobs.

Annual openings

About 14,100 openings are projected each year, 7.3% of the 192,900 jobs that existed in 2025. Most come from workers leaving the occupation, not from growth alone.

Many of those openings are expected to result from the need to replace workers who transfer to different occupations or exit the labor force, such as to retire.

High demand is expected for information security analysts. Cyberattacks have grown in frequency, and these analysts will be needed to create innovative solutions to prevent hackers from stealing critical information or creating problems for computer networks.

As businesses focus on enhancing cybersecurity, they will need information security analysts to secure new technologies from outside threats or hacks. Increased use of artificial intelligence (AI) and the rise of e-commerce have increased the need for enhanced security, contributing to the projected employment growth of these workers over the decade.

AI exposure: very high

BLS places this occupation in its very high relative AI exposure category, among the occupations most exposed to current AI.

Will AI replace information security analysts? →

Getting in

How to become an information security analyst

Information security analysts typically need a bachelor’s degree in a computer science field, along with related work experience. Employers may prefer to hire analysts who have professional certification.

  1. 1

    Typical entry-level education

    Bachelor's degree

  2. 2

    Work experience in a related occupation

    Less than 5 years

  3. 3

    Typical on-the-job training

    None

  4. 4

    Preparation needed (O*NET job zone)

    Considerable preparation

BLS Employment Projections, 2025–2035; job zone from O*NET 31.0 Database.

What education people in the job have

O*NET incumbent survey: the highest level of education reported by people already working as information security analysts.

  • Bachelor's Degree52.6%
  • Post-Baccalaureate Certificate22.5%
  • Associate's Degree or other 2-year degree12.9%
  • Post-Secondary Certificate7.2%
  • Master's Degree2.8%
Highest education held by information security analysts
ItemValue
Bachelor's Degree52.6%
Post-Baccalaureate Certificate22.5%
Associate's Degree or other 2-year degree12.9%
Post-Secondary Certificate7.2%
Master's Degree2.8%

Source: O*NET 31.0 Database

Full BLS Occupational Outlook Handbook entry

The work

What does an information security analyst do?

Plan, implement, upgrade, or monitor security measures for the protection of computer networks and information. Assess system vulnerabilities for security risks and propose and implement risk mitigation strategies. May ensure appropriate security controls are in place that will safeguard digital files and vital electronic infrastructure. May respond to computer security breaches and viruses.

Information security analysts plan and carry out security measures to protect an organization’s computer networks and systems.

Day-to-day tasks

  1. Document computer security and emergency measures policies, procedures, and tests.
  2. Develop plans to safeguard computer files against accidental or unauthorized modification, destruction, or disclosure and to meet emergency data processing needs.
  3. Confer with users to discuss issues such as computer data access needs, security violations, and programming changes.
  4. Train users and promote security awareness to ensure system security and to improve server and network efficiency.
  5. Review violations of computer security procedures and discuss procedures with violators to ensure violations are not repeated.
  6. Monitor use of data files and regulate access to safeguard information in computer files.
  7. Modify computer security files to incorporate new software, correct errors, or change individual access status.
  8. Perform risk assessments and execute tests of data processing system to ensure functioning of data processing activities and security measures.

O*NET core tasks, ordered by reported importance.

Working conditions and hours

Most information security analysts work full time, and some work more than 40 hours per week. Information security analysts sometimes have to be on call outside of normal business hours in case of an emergency.

Where the work happens

  • Indoors, climate-controlled

    NeverEvery day

    Indoors, in a climate-controlled space, every day.

  • Outdoors in all weather

    NeverEvery day

Physical demands

  • Sitting

    NeverAlmost all the time

    Seated for more than half the working day.

  • Standing

    NeverAlmost all the time
  • Bending or twisting

    NeverAlmost all the time

Working with people

  • Contact with other people

    NoneConstant
  • Face-to-face discussions

    NeverEvery day
  • Dealing with the public

    Not importantExtremely important

Pressure and stakes

  • Strict deadlines

    NeverEvery day
  • Conflict situations

    NeverEvery day
  • Cost of a mistake

    Not seriousExtremely serious

Autonomy

  • Freedom to decide

    NoneA lot

    A lot of freedom to make decisions without checking first.

Schedules: BLS Occupational Outlook Handbook, 2025–2035 edition. Conditions: O*NET Work Context survey. Each item has its own scale, so each dot is read against the two answers that end its own line.

Where information security analysts work

Share of jobs by employer type

  • Computer systems design and related services22%
  • Finance and insurance17%
  • Management of companies and enterprises9%
  • Information9%
  • Management, scientific, and technical consulting services6%
Largest employers of Information Security Analysts
ItemValue
Computer systems design and related services22%
Finance and insurance17%
Management of companies and enterprises9%
Information9%
Management, scientific, and technical consulting services6%

Source: BLS Occupational Outlook Handbook, 2025–2035 edition

Core skills

O*NET importance, 1 to 5

  • Reading Comprehension4.0
  • Critical Thinking3.9
  • Active Listening3.8
  • Speaking3.6
  • Writing3.5
  • Monitoring3.4
  • Active Learning3.3
  • Learning Strategies2.9
Core skills for Information Security Analysts
ItemValue
Reading Comprehension4.0
Critical Thinking3.9
Active Listening3.8
Speaking3.6
Writing3.5
Monitoring3.4
Active Learning3.3
Learning Strategies2.9

Source: O*NET 31.0 Database

Transferable skills

O*NET importance, 1 to 5

  • Complex Problem Solving3.8
  • Judgment and Decision Making3.4
  • Systems Analysis3.4
  • Time Management3.1
  • Coordination3.0
  • Operations Monitoring3.0
  • Quality Control Analysis3.0
  • Systems Evaluation3.0
Transferable skills for Information Security Analysts
ItemValue
Complex Problem Solving3.8
Judgment and Decision Making3.4
Systems Analysis3.4
Time Management3.1
Coordination3.0
Operations Monitoring3.0
Quality Control Analysis3.0
Systems Evaluation3.0

Source: O*NET 31.0 Database

Tools and software

  • Analytical or scientific software · in demand
  • Application server software · in demand
  • Business intelligence and data analysis software · in demand
  • Cloud-based management software · in demand
  • Configuration management software · in demand
  • Content workflow software · in demand
  • Customer relationship management CRM software · in demand
  • Data base management system software · in demand
  • Data base reporting software · in demand
  • Data base user interface and query software · in demand
  • Development environment software · in demand
  • Document management software · in demand

“In demand” marks an O*NET Employer-Based Hot Technology, software named in real job postings for this occupation.

The workforce

Who works as an information security analyst?

Women make up 15.9% of information security analysts, against 47.1% of all employed people: a heavily male-dominated occupation.

Only 17.6% are 55 or older (23.2% across all jobs): a young workforce.

The median worker is 41.5 years old (all workers: 42.1).

Women
15.9%All workers 47.1% · BLS CPS, 2025
Median age
41.5All workers 42.1 · BLS CPS, 2025
Aged 55+
17.6%All workers 23.2% · BLS CPS, 2025
Employed (CPS)
261,000BLS CPS, 2025
Share of information security analysts by sex, race, ethnicity and age, against all employed people
GroupShare of information security analystsAll employed people
Women
15.9%
47.1%
White
70.2%
75.7%
Black or African American
13.8%
12.7%
Asian
10.6%
7.5%
Hispanic or Latino (any race)
11.3%
20.0%
Aged 55 and over
17.6%
23.2%
Aged 16 to 24
6.1%
12.2%

Current Population Survey annual averages, 2025 (BLS tables 11 and 11b). Race groups can overlap with Hispanic or Latino ethnicity, so they do not sum to 100%.

Personality fit

What personality type suits an information security analyst?

Interest profile

O*NET Occupational Interests (RIASEC), scored 1 to 7

Information Security Analyst · Realistic: 4Information Security Analyst · Investigative: 5Information Security Analyst · Artistic: 1Information Security Analyst · Social: 2Information Security Analyst · Enterprising: 3Information Security Analyst · Conventional: 6
Information Security Analyst interest profile
AxisInformation Security Analyst
Realistic4
Investigative5
Artistic1
Social2
Enterprising3
Conventional6

Source: O*NET 31.0 Database

What the work is built around

Day to day this is work built around organising, following procedures and working precisely with data, combined with investigating, analysing and solving problems with ideas and data.

  • Conventional6.1
  • Investigative5.4
  • Realistic3.6
  • Enterprising2.9
  • Social2.1
  • Artistic1.3

Closest MBTI types

NueCareer fit scores: cosine similarity between each MBTI type's interest vector and this occupation's O*NET interest profile. Not a BLS or O*NET figure; the method is documented on our methodology page.

Questions

Information Security Analyst: frequently asked questions

How much do information security analysts make?

Information Security Analysts earn a median of $129,180 a year (BLS OEWS, May 2025). That is 153% above the $50,980 median for all US occupations. That works out at $62.11/hr. The middle half earn between $97,810 and $163,500. The top 10% earn $199,850 or more.

How much do information security analysts make an hour?

The median hourly wage for information security analysts is $62.11 (BLS OEWS, May 2025). On a full-year basis the $129,180 annual median works out to about $10,770 a month before tax.

What is the starting salary for an information security analyst?

BLS does not publish a starting salary. The nearest measure is the low end of the pay range: the lowest-paid 10% of information security analysts earn less than $75,090 a year and the bottom quarter less than $97,810 (BLS OEWS, May 2025). New workers often start near that end, but where a particular job starts depends on the employer, the state and the credentials you bring, so read these as the bottom of the range rather than a guaranteed entry wage.

Do information security analysts make $100k?

Yes, more often than not. The median is $129,180, so more than half of information security analysts earn over $100,000 a year (BLS OEWS, May 2025). In 41 states the median itself is above $100,000: Washington ($154,940), Maryland ($139,640), California ($138,570), Delaware ($137,030), and 37 more.

Which states pay information security analysts the most?

The highest state medians for Information Security Analysts are Washington ($154,940), Maryland ($139,640), California ($138,570) (BLS OEWS, May 2025).

What kind of information security analyst earns the most?

BLS does not split information security analysts' pay by specialty or employer, but its range shows how far the top end runs: the highest-paid 10% earn more than $199,850, against a median of $129,180 (BLS OEWS, May 2025). Location moves pay the most in the published data: the best-paying states are Washington ($154,940), Maryland ($139,640), California ($138,570). BLS also counts a specialty career inside this occupation (AI red teamer), which shares its federal pay figures.

Do you need a degree to become an information security analyst?

Yes. BLS reports a bachelor's degree as the typical entry-level education for Information Security Analysts, and O*NET rates the preparation needed as considerable preparation. Employers typically expect less than 5 years of related work experience first. In O*NET's survey of people already doing the job, 52.6% hold bachelor's degree.

How long does it take to become an information security analyst?

BLS does not publish a fixed length; it depends on the route. What it does publish: the typical way in for information security analysts is a bachelor's degree, plus less than 5 years of work experience in a related occupation. O*NET classes the work as needing considerable preparation.

Is information security analyst a growing career?

Yes, strongly. Employment is projected to grow 21.0% over 2025–2035, more than double the 3.5% projected for all occupations (BLS EP, 2025–2035). BLS still projects about 14,100 openings a year, mostly from workers retiring or moving to other work.

What does an information security analyst do?

Information security analysts plan and carry out security measures to protect an organization’s computer networks and systems. A core O*NET task: document computer security and emergency measures policies, procedures, and tests. Employers most often ask for Analytical or scientific software, Application server software, Business intelligence and data analysis software.

Do information security analysts work 40 hours a week?

Most work more than 40. In O*NET's survey of people in the job, 62% of information security analysts usually work more than 40 hours a week, 31% work exactly 40 and 6% work fewer. 90% say their schedule is regular and 10% irregular. Source: O*NET 31.0 Database, Work Context.

What personality type suits an information security analyst?

O*NET scores Information Security Analysts highest on the Conventional, Investigative and Realistic interest areas, so the work mixes organising, following procedures and working precisely with data with investigating, analysing and solving problems with ideas and data. On NueCareer's MBTI-to-interest mapping that lines up most closely with ISTJ personalities. Personality is a fit signal, not a gate. The free NueCareer quiz scores your own profile against all 1,731 careers in the bank.

What percentage of information security analysts are women?

Women make up 15.9% of information security analysts, against 47.1% of all employed people: a heavily male-dominated occupation. Only 17.6% are 55 or older (23.2% across all jobs): a young workforce. The median worker is 41.5 years old (all workers: 42.1). Source: BLS Current Population Survey, 2025 annual averages.