Information Security Analysts
SOC code 15-1212 · O*NET-SOC 15-1212.00 · Considerable preparation needed · Computer and IT
Bright Outlook — O*NET expects rapid growth for this occupation
Information Security Analysts pay
U.S. national figures, May 2025 BLS survey · How we got this number
Median pay
$129,180
a year
Hourly
$62.11
per hour
The solid band is the middle 50% of workers; the bar spans the 10th to 90th percentile.
Average pay
$132,510
$63.71 per hour
Middle 50%
$97,810 – $163,500
25th to 75th percentile
Full spread
$75,090 – $199,850
10th to 90th percentile
People employed
190,650
nationwide
National U.S. figure, May 2025. Local pay can be higher or lower.
- 10th percentile
- $75,090
- $36.10/hr
- 25th percentile
- $97,810
- $47.03/hr
- Median percentile
- $129,180
- $62.11/hr
- 75th percentile
- $163,500
- $78.61/hr
- 90th percentile
- $199,850
- $96.08/hr
Job outlook · federal projection 2024–34
+29%
Growing much faster than average
182,800
jobs in 2024
234,900
projected for 2034
About 52,100 more jobs
U.S. Bureau of Labor Statistics employment projections, 2024–34. Projections describe the broader occupation group and are estimates, not guarantees.
What does an information security analyst do?
Plan, implement, upgrade, or monitor security measures for the protection of computer networks and information. Assess system vulnerabilities for security risks and propose and implement risk mitigation strategies. May ensure appropriate security controls are in place that will safeguard digital files and vital electronic infrastructure. May respond to computer security breaches and viruses.
The tasks that matter most day to day
- Develop plans to safeguard computer files against accidental or unauthorized modification, destruction, or disclosure and to meet emergency data processing needs.
- Monitor current reports of computer viruses to determine when to update virus protection systems.
- Encrypt data transmissions and erect firewalls to conceal confidential information as it is being transmitted and to keep out tainted digital transfers.
- Perform risk assessments and execute tests of data processing system to ensure functioning of data processing activities and security measures.
- Modify computer security files to incorporate new software, correct errors, or change individual access status.
- Review violations of computer security procedures and discuss procedures with violators to ensure violations are not repeated.
- Document computer security and emergency measures policies, procedures, and tests.
- Confer with users to discuss issues such as computer data access needs, security violations, and programming changes.
How to become an information security analyst
Most people in this role hold bachelor's degree — 53% of workers surveyed reported it as their level of education.
Preparation level: zone 4 — Considerable preparation needed
- Education
- Most of these occupations require a four-year bachelor's degree, but some do not.
- Experience
- A considerable amount of work-related skill, knowledge, or experience is needed for these occupations. For example, an accountant must complete four years of college and work for several years in accounting to be considered qualified.
- Training
- Employees in these occupations usually need several years of work-related experience, on-the-job training, and/or vocational training.
Education reported by people doing this job
- Bachelor's Degree53%
- Post-Baccalaureate Certificate23%
- Associate's Degree or other 2-year degree13%
- Post-Secondary Certificate7%
Common questions
How much does an information security analyst earn?
The national median is $129,180 a year. The full range runs from $75,090 at the 10th percentile to $199,850 at the 90th — entry pay sits closer to the lower figure, and experience, licensing and specialisation move you up the range.
Can you become an information security analyst without a degree?
Not usually — this occupation sits in preparation zone 4, where the typical entry route is most of these occupations require a four-year bachelor's degree, but some do not. The education breakdown above shows what people in the role actually reported.
Is information security analyst in demand?
Federal projections expect employment to grow by about 29% between 2024 and 2034 — growing much faster than average. Openings also come from people retiring or changing jobs, which the growth figure does not count.
Skills and knowledge you need
Core skills
- Reading Comprehension4.0/5
- Critical Thinking3.9/5
- Active Listening3.8/5
- Speaking3.6/5
- Writing3.5/5
- Monitoring3.4/5
- Active Learning3.3/5
Knowledge areas
- Computers and Electronics4.3/5
- English Language4.3/5
- Administration and Management3.7/5
- Engineering and Technology3.6/5
- Telecommunications3.6/5
- Customer and Personal Service3.4/5
- Public Safety and Security3.3/5
- Education and Training3.2/5
Transferable strengths: Complex Problem Solving, Judgment and Decision Making, Systems Analysis.