State medians come from the same OEWS release as the national figures. The cost-of-living column divides each state median by that state's BEA Regional Price Parity, restating pay in national-average dollars so a high-cost state and a low-cost one can be compared directly.
Information Security Analyst Salary (2026): Data, Outlook & How to Become One
Information Security Analysts earn a median of $129,180 per year ($62.11/hr) (BLS OEWS, May 2025). Employment is projected to grow 28.5% through 2034, with about 16,000 openings a year (BLS EP, 2024–2034). Typical entry-level education: Bachelor's degree.
SOC 15-1212Computer and MathematicalLast updated August 15, 2026
- Median pay
- $129,180
- Projected growth
- +28.5%
- Openings a year
- 16,000
- Typical education
- Bachelor's
BLS OEWS, May 2025
BLS EP, 2024–2034
BLS EP, 2024–2034
BLS EP, 2024–2034
Also advertised as: Information Security Officer, Information Security Specialist, Information Systems Security Analyst, Information Systems Security Officer (ISSO), Information Technology Security Analyst (IT Security Analyst), Network Security Analyst.
How much do Information Security Analysts make?
10th percentile$75,090
Entry / lowest-paid tenth
25th percentile$97,810
Lower quartile
Median (50th)$129,180
Half earn more, half earn less
75th percentile$163,500
Upper quartile
90th percentile$199,850
Top-paid tenth
| Median annual wage | $129,180 |
|---|---|
| Median hourly wage | $62.11/hr |
| Mean annual wage | $132,510 |
| People employed | 190,650 |
Versus all US occupations
At $129,180, Information Security Analysts earn 153% above the $50,980 median across all US occupations, a difference of $78,200 a year.
Versus computer and mathematical occupations
Inside the Computer and Mathematical group, where the middle occupation pays $116,580, this is 11% above the group median.
Pay range
The top 10% earn $199,850 or more while the bottom 10% earn $75,090, a gap of 2.7×. That is a typical spread for a US occupation.
Rank in the bank
This median pays more than 91% of the 923 occupations in the NueCareer career bank.
Highest-paying state
Washington pays the most at $154,940, and still leads at $144,786 once local prices are taken into account.
Which states pay Information Security Analysts the most?
| State | Median | COL-adjusted | Employed |
|---|---|---|---|
| Washington | $154,940 | $144,786 | 6,030 |
| Maryland | $139,640 | $133,042 | 8,650 |
| California | $138,570 | $125,154 | 15,570 |
| Delaware | $137,030 | $137,294 | 720 |
| Massachusetts | $136,550 | $129,117 | 6,100 |
| Colorado | $135,220 | $131,215 | 5,700 |
| District of Columbia | $135,090 | $122,920 | 1,510 |
| Virginia | $134,900 | $133,427 | 19,120 |
| New Jersey | $134,820 | $123,910 | 4,860 |
| New York | $134,660 | $124,776 | 10,060 |
Is Information Security Analyst a growing career?
Information Security Analysts28.5%
All US occupations3.1%
+28.5% projected growth vs 3.1% for all occupations.
Much faster than average
BLS projects employment of Information Security Analysts to change 28.5% over 2024–2034, roughly 9.2× the 3.1% projected for all occupations. That is 52,100 more jobs.
Annual openings
About 16,000 openings are projected each year, 8.8% of the 182,800 jobs that existed in 2024. Most come from workers leaving the occupation, not from growth alone.
Many of those openings are expected to result from the need to replace workers who transfer to different occupations or exit the labor force, such as to retire.
High demand is expected for information security analysts. Cyberattacks have grown in frequency, and these analysts will be needed to create innovative solutions to prevent hackers from stealing critical information or creating problems for computer networks.
As businesses focus on enhancing cybersecurity, they will need information security analysts to secure new technologies from outside threats or hacks. Increased use of artificial intelligence (AI) and the rise of e-commerce have increased the need for enhanced security, contributing to the projected employment growth of these workers over the decade.
How to become an Information Security Analyst
Information security analysts typically need a bachelor’s degree in a computer science field, along with related work experience. Employers may prefer to hire analysts who have professional certification.
| Typical entry-level education | Bachelor's degree |
|---|---|
| Preparation needed (O*NET job zone) | Medium preparation |
| Work experience in a related occupation | Less than 5 years |
| Typical on-the-job training | None |
What education people in the job have
O*NET incumbent survey: the highest level of education reported by people already working as information security analysts.
- Bachelor's Degree52.6%
- Post-Baccalaureate Certificate22.5%
- Associate's Degree (or other 2-year degree)12.9%
- Post-Secondary Certificate7.2%
- Master's Degree2.8%
What does an Information Security Analyst do?
Plan, implement, upgrade, or monitor security measures for the protection of computer networks and information. Assess system vulnerabilities for security risks and propose and implement risk mitigation strategies. May ensure appropriate security controls are in place that will safeguard digital files and vital electronic infrastructure. May respond to computer security breaches and viruses.
Information security analysts plan and carry out security measures to protect an organization’s computer networks and systems.
Day-to-day tasks
- Document computer security and emergency measures policies, procedures, and tests.
- Develop plans to safeguard computer files against accidental or unauthorized modification, destruction, or disclosure and to meet emergency data processing needs.
- Confer with users to discuss issues such as computer data access needs, security violations, and programming changes.
- Train users and promote security awareness to ensure system security and to improve server and network efficiency.
- Review violations of computer security procedures and discuss procedures with violators to ensure violations are not repeated.
- Monitor use of data files and regulate access to safeguard information in computer files.
- Modify computer security files to incorporate new software, correct errors, or change individual access status.
- Perform risk assessments and execute tests of data processing system to ensure functioning of data processing activities and security measures.
O*NET core tasks, ordered by reported importance.
Where information security analysts work
| Computer systems design and related services | 22% |
|---|---|
| Finance and insurance | 16% |
| Management of companies and enterprises | 10% |
| Information | 9% |
| Management, scientific, and technical consulting services | 6% |
BLS Occupational Outlook Handbook, 2024–2034 edition.
Core skills
- Reading Comprehension4.0/5
- Critical Thinking3.9/5
- Active Listening3.8/5
- Speaking3.6/5
- Writing3.5/5
- Monitoring3.4/5
- Active Learning3.3/5
- Learning Strategies2.9/5
Transferable skills
- Complex Problem Solving3.8/5
- Judgment and Decision Making3.4/5
- Systems Analysis3.4/5
- Time Management3.1/5
- Coordination3.0/5
- Operations Monitoring3.0/5
- Quality Control Analysis3.0/5
- Systems Evaluation3.0/5
Tools and software
- Analytical or scientific software · in demand
- Application server software · in demand
- Business intelligence and data analysis software · in demand
- Cloud-based management software · in demand
- Configuration management software · in demand
- Content workflow software · in demand
- Customer relationship management CRM software · in demand
- Data base management system software · in demand
- Data base reporting software · in demand
- Data base user interface and query software · in demand
- Development environment software · in demand
- Document management software · in demand
“In demand” marks an O*NET Employer-Based Hot Technology, software named in real job postings for this occupation.
What personality type suits an Information Security Analyst?
Interest profile: O*NET Occupational Interests, scored 1–7
Realisticprimary3.6
Investigativeprimary5.4
Artistic1.3
Social2.1
Enterprising2.9
Conventionalprimary6.1
Day to day this is work built around organising, following procedures and working precisely with data, combined with investigating, analysing and solving problems with ideas and data.
Closest MBTI types
NueCareer fit scores: cosine similarity between each MBTI type's interest vector and this occupation's O*NET interest profile. Not a BLS or O*NET figure; the method is documented on our methodology page.
Information Security Analyst: frequently asked questions
How much do Information Security Analysts make?
Information Security Analysts earn a median of $129,180 a year (BLS OEWS, May 2025). That is 153% above the $50,980 median for all US occupations. That works out at $62.11/hr. The middle half earn between $97,810 and $163,500. The top 10% earn $199,850 or more.
Do you need a degree to become an Information Security Analyst?
Yes. BLS reports a bachelor's degree as the typical entry-level education for Information Security Analysts, and O*NET rates the preparation needed as medium preparation. Employers typically expect less than 5 years of related work experience first. In O*NET's survey of people already doing the job, 52.6% hold bachelor's degree.
Is Information Security Analyst a growing career?
Yes, strongly. Employment is projected to grow 28.5% over 2024–2034, more than double the 3.1% projected for all occupations (BLS EP, 2024–2034). BLS still projects about 16,000 openings a year, mostly from workers retiring or moving to other work.
What does an Information Security Analyst do?
Information security analysts plan and carry out security measures to protect an organization’s computer networks and systems. A core O*NET task: document computer security and emergency measures policies, procedures, and tests. Employers most often ask for Analytical or scientific software, Application server software, Business intelligence and data analysis software.
Which states pay Information Security Analysts the most?
The highest state medians for Information Security Analysts are Washington ($154,940), Maryland ($139,640), California ($138,570) (BLS OEWS, May 2025).
What personality type suits an Information Security Analyst?
O*NET scores Information Security Analysts highest on the Conventional, Investigative and Realistic interest areas, so the work mixes organising, following procedures and working precisely with data with investigating, analysing and solving problems with ideas and data. On NueCareer's MBTI-to-interest mapping that lines up most closely with ISTJ personalities. Personality is a fit signal, not a gate. The free NueCareer quiz scores your own profile against all 923 occupations in the bank.