Information Security Analysts
Plan, implement, upgrade, or monitor security measures for the protection of computer networks and information. Assess system vulnerabilities for security risks and propose and implement risk mitigation strategies. May ensure appropriate security controls are in place that will safeguard digital files and vital electronic infrastructure. May respond to computer security breaches and viruses.
Also called: AI Security Specialist (Artificial Intelligence Security Specialist), All-Source Analyst, Application Security Analyst, Applications Security Analyst, Automatic Data Processing Systems Security Specialist (ADP Systems Security), Blue Team Member
Median pay
$129,180
per year, U.S.
Pay range (10th–90th)
$75,090 – $199,850
People employed
190,650
Holland code
CIR
Conventional · Investigative · Realistic
Updated October 2026 · Data: O*NET 31.0 and BLS OEWS May 2025 · How we match careers
Is this career right for you?
These are the things that stand out in this job compared with other U.S. jobs (O*NET 31.0 work context). Answer honestly.
- 1.Are you comfortable sitting at a desk most of the day?
- 2.Are you OK working more than 40 hours a week?
The hard parts
- Tight deadlines are common
Information Security Analysts pay by state
Highest-paying states
Annual median pay by state (47 states and DC with published data). Source: BLS OEWS May 2025.
What information security analysts do
- 01Develop plans to safeguard computer files against accidental or unauthorized modification, destruction, or disclosure and to meet emergency data processing needs.
- 02Monitor current reports of computer viruses to determine when to update virus protection systems.
- 03Encrypt data transmissions and erect firewalls to conceal confidential information as it is being transmitted and to keep out tainted digital transfers.
- 04Perform risk assessments and execute tests of data processing system to ensure functioning of data processing activities and security measures.
- 05Modify computer security files to incorporate new software, correct errors, or change individual access status.
- 06Review violations of computer security procedures and discuss procedures with violators to ensure violations are not repeated.
Skills that matter most
- Reading Comprehension
- Critical Thinking
- Active Listening
- Speaking
- Writing
- Monitoring
Knowledge
- Computers and Electronics
- English Language
- Administration and Management
- Telecommunications
- Engineering and Technology
Work styles that stand out
- Dependability
- Attention to Detail
- Integrity
- Cautiousness
- Intellectual Curiosity
Education and first steps
Share of workers by required education, as reported to O*NET.
How people get started
- Usually needs a bachelor's degree (O*NET Job Zone 4).
- Related work experience: over 2 years, up to and including 4 years.
- On-the-job training: over 6 months, up to and including 1 year.
Most common answers from O*NET 31.0 Education, Training and Experience.
Interest fit (Holland code)
O*NET occupational interest scores, scale 1–7. Take the Free Career Test to compare with your own.
Career changes
Change from information security analysts
- Radio Frequency Identification Device Specialists81% · group pay
- Computer and Information Systems Managers80% · +36%
- Clinical Data Managers76% · group pay
- Computer Hardware Engineers76% · +25%
- Business Intelligence Analysts75% · group pay
Change into information security analysts
Jobs whose skills carry over best (skill match, their median pay).
- Intelligence Analysts84% · $93,790
- Business Continuity Planners82% · $83,050
- Security Management Specialists82% · $83,050
- Radio Frequency Identification Device Specialists81% · $130,220
- Statistical Assistants78% · $50,330
Majors that lead here
- Information Technology
- Computer Science
- Computer Systems Networking and Telecommunications
- Network and System Administration/Administrator
- System, Networking, and LAN/WAN Management/Manager
- Computer and Information Systems Security/Auditing/Information Assurance
- Information Technology Project Management
- Cyber/Computer Forensics and Counterterrorism
- Healthcare Information Privacy Assurance and Security
From the NCES CIP 2020 to SOC 2018 crosswalk.