All careers › Information Security Analysts
Information security analyst: pay, job outlook and how to become one
- $75,090lowest 10% earn less
- $97,81025th percentile
- $129,180median
- $163,50075th percentile
- $199,850top 10% earn more
An information security analyst had a median pay of $129,180 a year in May 2025[1]. BLS projects employment to grow 21% from 2025 to 2035, against 3.5% for all occupations[2][3].
How much do information security analysts make?
The median wage for information security analysts was $129,180 a year, or $62.11 an hour, in May 2025[1]. Half of workers earned more and half earned less[1]. The mean (average) was $132,510 a year, or $63.71 an hour[8]. For all occupations, the median annual wage was $50,980[5]. So the typical analyst earned more than twice the all-occupation median.
Pay varies widely within the job. The lowest-paid 10% earned less than $75,090 a year, and the highest-paid 10% earned more than $199,850[4]. The 25th percentile was $97,810 and the 75th was $163,500[4]. Hourly, the 10th percentile was $36.10 and the 90th was $96.08[9]. A percentile is a boundary in the pay scale. BLS does not publish a starting salary[10].
| Measure | Annual wage | Source |
|---|---|---|
| 10th percentile[4] | $75,090 | |
| 25th percentile[4] | $97,810 | |
| Median[1] | $129,180 | |
| 75th percentile[4] | $163,500 | |
| 90th percentile[4] | $199,850 |
These figures cover wage and salary workers, part time and full time. They leave out the self-employed, owners and partners in unincorporated firms, nonproduction bonuses and the cost of benefits[11]. About 190,650 people held these jobs in May 2025[12].
Pay by state and city
Washington had the highest median wage at $154,940, followed by Maryland at $139,640, California at $138,570, Delaware at $137,030 and Massachusetts at $136,550[13].
The most jobs were in Virginia (19,120), Texas (16,130), California (15,570), Florida (14,220) and New York (10,060)[14].
Among metro areas with at least 100 jobs, San Jose-Sunnyvale-Santa Clara, CA had the highest median at $176,120, followed by San Francisco-Oakland-Fremont, CA at $162,310 and Seattle-Tacoma-Bellevue, WA at $161,780[15]. The metro area with the most jobs was Washington-Arlington-Alexandria, DC-VA-MD-WV at 16,560, with a median of $148,950[16]. New York-Newark-Jersey City, NY-NJ had 11,330 jobs and a median of $140,470[16].
Show median pay in 47 states and DC
| State | Median per year | Jobs |
|---|---|---|
| Washington[13] | $154,940 | 6,030 |
| Maryland | $139,640 | 8,650 |
| California | $138,570 | 15,570 |
| Delaware | $137,030 | 720 |
| Massachusetts | $136,550 | 6,100 |
| Colorado | $135,220 | 5,700 |
| District of Columbia | $135,090 | 1,510 |
| Virginia | $134,900 | 19,120 |
| New Jersey | $134,820 | 4,860 |
| New York | $134,660 | 10,060 |
| North Carolina | $131,540 | 8,670 |
| Minnesota | $130,710 | 2,680 |
| Connecticut | $130,570 | 1,170 |
| New Mexico | $130,070 | 2,470 |
| Texas | $129,890 | 16,130 |
| Georgia | $128,970 | 6,290 |
| Hawaii | $126,250 | 580 |
| Arizona | $125,260 | 3,420 |
| Florida | $124,860 | 14,220 |
| Illinois | $124,180 | 5,260 |
| New Hampshire | $124,000 | 590 |
| Alabama | $122,730 | 4,010 |
| Iowa | $119,710 | 1,160 |
| Pennsylvania | $117,770 | 4,660 |
| South Dakota | $116,640 | 770 |
| Tennessee | $115,430 | 3,330 |
| Alaska | $114,990 | 300 |
| Ohio | $110,480 | 6,010 |
| Vermont | $109,750 | 220 |
| Rhode Island | $109,420 | 710 |
| North Dakota | $107,540 | 310 |
| Michigan | $106,230 | 3,280 |
| Nevada | $106,200 | 1,330 |
| South Carolina | $105,800 | 1,720 |
| Kentucky | $103,630 | 1,680 |
| Arkansas | $103,490 | 1,460 |
| Missouri | $103,440 | 3,260 |
| Maine | $101,730 | 400 |
| Wisconsin | $101,550 | 2,130 |
| Indiana | $101,420 | 2,260 |
| Kansas | $100,620 | 1,830 |
| Utah | $99,690 | 1,910 |
| Wyoming | $98,710 | 140 |
| Oklahoma | $94,000 | 1,640 |
| Louisiana | $92,990 | 720 |
| Nebraska | $92,550 | 1,210 |
| Mississippi | $87,690 | 480 |
| Montana | $81,950 | 380 |
How to become an information security analyst
BLS lists a bachelor's degree as the typical education, with less than 5 years of related work experience and no typical on-the-job training[7].
- First: earn a degree. Analysts typically need a bachelor's degree in a computer-related subject, or in a field such as engineering or math[17]. Some workers enter with a high school diploma plus relevant industry training and certifications[17].
- Next: gain related experience. Analysts may need experience in a related job. Many have worked in an IT department, often in network and systems administration[18].
- Then: consider certification. Employers may prefer to hire analysts with professional certification[19]. Some certifications suit entry-level workers and others suit experienced ones. Specialized areas such as systems auditing also have certifications[20].
In an ONET survey of 26 workers, 53% said a bachelor's degree is required and 23% said a post-baccalaureate certificate[21]. ONET places the job in Job Zone Four, which means considerable preparation is needed[22].
With experience, analysts may lead a team, become an expert in one area of security, or move up to chief security officer or another computer and information systems manager role[23].
What information security analysts do
O*NET describes the job as planning, implementing, upgrading or monitoring security measures that protect computer networks and information[24]. Analysts also assess weak points and propose ways to reduce risk[24]. Typical tasks include:
- Making plans to protect computer files from accidental or unauthorized changes, loss or disclosure[25].
- Following reports of computer viruses to decide when to update protection[25].
- Encrypting data in transit and setting up firewalls[25].
- Running risk assessments and testing systems to confirm security measures work[25].
- Updating security files to add new software, fix errors or change who has access[25].
- Reviewing security violations and talking with the people involved[25].
- Writing down security and emergency policies, procedures and tests[25].
BLS names analytical, communication, creative, detail-oriented and problem-solving skills as important[26][27][28][29][30]. Sample job titles include security analyst, network security analyst and information security specialist[31].
Where they work
Analysts often work as part of an IT team that can include network administrators and systems analysts[32]. Most have full-time jobs, and some put in more than 40 hours a week[33]. They sometimes have to be on call outside normal business hours in an emergency[33]. Computer systems design and related services was the largest employer, with 22% of jobs in 2025[34]. Only 0.2% were self-employed in 2025[35].
Job outlook
BLS projects employment to grow 21% from 2025 to 2035, from about 192,900 to 233,400 jobs, a gain of 40,600[2]. Growth for all occupations is projected at 3.5%[3]. So this job is expected to grow much faster than the all-occupation rate.
BLS projects about 14,100 openings a year on average[6]. Openings include new jobs, and also jobs that come up when people retire or switch occupations[6]. Each year, 1.6% of workers leave the labor force and 3.1% move to a different occupation[36].
BLS gives one factor behind the growth: firms are expanding their IT security staff and capabilities in response to growing cyberattack threats aimed at sensitive or financial data. This is offset slightly by efficiencies from automated and artificial intelligence (AI) tools that improve security[37].
The projection counts include self-employed workers, so they differ from the wage and salary count in the pay data[2][12].
Is it a good fit?
The pay is high compared with all occupations, with a median of $129,180 against $50,980[1][5]. Growth of 21% is far above the 3.5% for all occupations, with about 14,100 openings a year[2][3][6]. The way in typically takes a bachelor's degree and some related experience[7]. The job may suit people who like careful, analytical work and can handle occasional on-call duty outside business hours[26][29][33].
Frequently asked questions
- How much does an information security analyst make a year?
- The median was $129,180 a year in May 2025 and the mean was $132,510[1][8].
- How much does an information security analyst make an hour?
- The median was $62.11 an hour and the mean was $63.71[1][8].
- What degree do you need to be an information security analyst?
- A bachelor's degree is the typical entry education, with less than 5 years of related experience[7]. It is typically in computer and information technology or a related field[17].
- Is information security analyst a job in demand?
- Employment is projected to grow 21% from 2025 to 2035, against 3.5% for all occupations, with about 14,100 openings a year[2][3][6].
- What is the highest paying state for information security analysts?
- Washington had the highest median wage at $154,940, then Maryland at $139,640[13].
Facts and sources
- BLS OEWS, May 2025: the median wage for Information Security Analysts in the US was $129,180 per year and $62.11 per hour. Half of workers earned more and half earned less. BLS OEWS, May 2025
- BLS Employment Projections: employment of Information Security Analysts is projected to grow 21% from 2025 to 2035, from about 192,900 to 233,400 jobs (a change of +40,600). These counts include self-employed workers. BLS Employment Projections
- BLS Employment Projections: employment in all occupations is projected to grow 3.5% from 2025 to 2035. BLS Employment Projections
- BLS OEWS, May 2025, annual wage percentiles for Information Security Analysts: 10th percentile $75,090, 25th percentile $97,810, 75th percentile $163,500, 90th percentile $199,850. The 10th percentile means 10% of workers earned less. BLS OEWS, May 2025
- BLS OEWS, May 2025: the median annual wage for all occupations in the US was $50,980. BLS OEWS, May 2025
- BLS Employment Projections: about 14,100 openings for Information Security Analysts are projected each year, on average, from 2025 to 2035. Openings include jobs that open when workers retire or move to other occupations, not only new jobs. BLS Employment Projections
- BLS Employment Projections, typical path into Information Security Analysts: education needed for entry: Bachelor's degree; work experience in a related occupation: Less than 5 years; typical on-the-job training: None. BLS Employment Projections
- BLS OEWS, May 2025: the mean (average) wage for Information Security Analysts was $132,510 per year and $63.71 per hour. BLS OEWS, May 2025
- BLS OEWS, May 2025, hourly wage percentiles for Information Security Analysts: 10th percentile $36.10, 25th percentile $47.03, 75th percentile $78.61, 90th percentile $96.08. BLS OEWS, May 2025
- BLS OEWS FAQ: a percentile wage is a boundary. The median (50th percentile) separates the highest-paid 50% from the lowest-paid 50% of workers in the occupation. OEWS publishes percentile wages, not a starting salary. BLS OEWS, May 2025
- BLS OEWS FAQ: OEWS covers part-time and full-time workers paid a wage or salary. It does not cover the self-employed, owners and partners in unincorporated firms, household workers or unpaid family workers. OEWS wages do not include nonproduction bonuses or employer costs of benefits such as health insurance or retirement contributions. BLS OEWS, May 2025
- BLS OEWS, May 2025: about 190,650 people were employed as Information Security Analysts in the US (wage and salary jobs, not counting self-employed workers). BLS OEWS, May 2025
- Median annual wage for Information Security Analysts in every state with published data, May 2025 (table on this page). BLS OEWS, May 2025
- BLS OEWS, May 2025, states with the most Information Security Analysts jobs: Virginia 19,120; Texas 16,130; California 15,570; Florida 14,220; New York 10,060. BLS OEWS, May 2025
- BLS OEWS, May 2025, metro areas with the highest median annual wage for Information Security Analysts (areas with at least 100 jobs): San Jose-Sunnyvale-Santa Clara, CA $176,120; San Francisco-Oakland-Fremont, CA $162,310; Seattle-Tacoma-Bellevue, WA $161,780; Boulder, CO $154,990; Asheville, NC $149,350; Washington-Arlington-Alexandria, DC-VA-MD-WV $148,950; Wilmington, NC $145,170; Raleigh-Cary, NC $143,640. BLS OEWS, May 2025
- BLS OEWS, May 2025, metro areas with the most Information Security Analysts jobs: Washington-Arlington-Alexandria, DC-VA-MD-WV 16,560 (median $148,950); New York-Newark-Jersey City, NY-NJ 11,330 (median $140,470); Dallas-Fort Worth-Arlington, TX 7,080 (median $133,610); Boston-Cambridge-Newton, MA-NH 5,220 (median $136,550); Los Angeles-Long Beach-Anaheim, CA 4,820 (median $129,630); Seattle-Tacoma-Bellevue, WA 4,700 (median $161,780). BLS OEWS, May 2025
- Occupational Outlook Handbook, How to Become One: Education. BLS Occupational Outlook Handbook
- Occupational Outlook Handbook, How to Become One: Work Experience in a Related Occupation. BLS Occupational Outlook Handbook
- Occupational Outlook Handbook, How to Become One. BLS Occupational Outlook Handbook
- Occupational Outlook Handbook, How to Become One: Licenses, Certifications, and Registrations. BLS Occupational Outlook Handbook
- O*NET 15-1212.00 survey of workers (26 respondents), education level they say is required: Bachelor's Degree 53%, Post-Baccalaureate Certificate 23%, Associate's Degree or other 2-year degree 13%, Post-Secondary Certificate 7% (levels under 5% not listed). O*NET OnLine
- O*NET 15-1212.00: Job Zone Four: Considerable Preparation Needed. A considerable amount of work-related skill, knowledge, or experience is needed for these occupations. For example, an accountant must complete four years of college and work for several years in accounting to be considered qualified. O*NET OnLine
- Occupational Outlook Handbook, How to Become One: Advancement. BLS Occupational Outlook Handbook
- O*NET description of Information Security Analysts. O*NET OnLine
- O*NET task list for Information Security Analysts. O*NET OnLine
- Occupational Outlook Handbook, How to Become One: Important Qualities. BLS Occupational Outlook Handbook
- Occupational Outlook Handbook, How to Become One: Important Qualities. BLS Occupational Outlook Handbook
- Occupational Outlook Handbook, How to Become One: Important Qualities. BLS Occupational Outlook Handbook
- Occupational Outlook Handbook, How to Become One: Important Qualities. BLS Occupational Outlook Handbook
- Occupational Outlook Handbook, How to Become One: Important Qualities. BLS Occupational Outlook Handbook
- O*NET 15-1212.00 sample job titles reported by workers: Information Security Officer, Information Security Specialist, Information Systems Security Analyst, Information Systems Security Officer (ISSO), Information Technology Security Analyst (IT Security Analyst), Network Security Analyst, Security Analyst, Systems Analyst. O*NET OnLine
- Occupational Outlook Handbook, Work Environment. BLS Occupational Outlook Handbook
- Occupational Outlook Handbook, Work Environment: Work Schedules. BLS Occupational Outlook Handbook
- BLS Occupational Outlook Handbook, largest employers of information security analysts in 2025: Computer systems design and related services 22%. BLS Occupational Outlook Handbook
- BLS Employment Projections: 0.2% of Information Security Analysts were self-employed in 2025. BLS Employment Projections
- BLS Employment Projections, 2025-35 annual average for Information Security Analysts: 1.6% of workers leave the labor force each year and 3.1% move to a different occupation. BLS Employment Projections
- BLS Employment Projections, factor affecting employment of Information Security Analysts: Demand change, productivity change - share increases as firms increase their IT security staffs and capabilities as a response to increasing threats of cyberattacks aimed at sensitive or financial data, offset slightly by efficiencies gained through increased use of automated and artificial intelligence (AI) technologies to improve security measures. BLS Employment Projections
- Related occupations (O*NET) with BLS pay, growth and entry education. O*NET OnLine
This page includes information from the O*NET 31.0 Database by the U.S. Department of Labor, Employment and Training Administration (USDOL/ETA). Used under the CC BY 4.0 license. O*NET® is a trademark of USDOL/ETA. CareerFacts has modified all or some of this information. USDOL/ETA has not approved, endorsed, or tested these modifications.