Information Security Analysts

Information TechnologyO*NET 15-1212.00United States

Plan, implement, upgrade, or monitor security measures for the protection of computer networks and information. Assess system vulnerabilities for security risks and propose and implement risk mitigation strategies.

COMING SOON See related ASU learning

Median annual earnings: $128,744
Projected change: +27%
Typical education: Bachelor's degree
Employment: 207.94K jobs

Explore this career by location

Compare nationwide estimates with state or county job-market data.

Showing United States

State

County

Loading available locations…

Build the skills

ASU learning related to this career

These courses and certificates are connected through catalog career relationships and Lightcast skill tags.

The work

What information security analysts do

Tasks reported for this occupation, ordered by how often they come up in the role.

Develop plans to safeguard computer files against accidental or unauthorized modification, destruction, or disclosure and to meet emergency data processing needs.
Monitor current reports of computer viruses to determine when to update virus protection systems.
Encrypt data transmissions and erect firewalls to conceal confidential information as it is being transmitted and to keep out tainted digital transfers.
Modify computer security files to incorporate new software, correct errors, or change individual access status.
Perform risk assessments and execute tests of data processing system to ensure functioning of data processing activities and security measures.
Review violations of computer security procedures and discuss procedures with violators to ensure violations are not repeated.
Confer with users to discuss issues such as computer data access needs, security violations, and programming changes.
Document computer security and emergency measures policies, procedures, and tests.
Coordinate implementation of computer system plan with establishment personnel and outside vendors.
Monitor use of data files and regulate access to safeguard information in computer files.
Train users and promote security awareness to ensure system security and to improve server and network efficiency.

Pay and outlook

What the job pays and where it is heading

Annual earnings range

Reported earnings by percentile, United States

10th percentile: $74,747
25th percentile: $97,404
50th percentile: $128,744
75th percentile: $163,398
90th percentile: $200,633

The gold marker shows the median. Half earn more than $128,744 and half earn less.

Employment outlook

2025 to 2035 projection

+27%much faster than average

2025207,938 jobs

2035 projected264,097 jobs

56,159 more positions over the decade, before replacement hiring.

Preparation

Education levels

What people currently working in the career hold. These are not entry requirements.

Bachelor's degree: 75.2%
Associate degree: 12.9%
Certificate: 7.2%
Master's or Professional degree: 2.8%
Some college: 2%

Skills

Skills employers ask for

Technical skills appearing most often in job postings for this occupation.

Cyber Security
Incident Response
Computer Science
Auditing
Security Information And Event Management (SIEM)
Cyber Threat Intelligence
Vulnerability Management
Security Controls
Risk Analysis
Information Systems
Automation
Digital Forensics
Endpoint Detection And Response
Risk Management
Security Policies
Triage
Workflow Management
Governance
Firewall
Scripting

How the work gets done

Core competencies

Broad capabilities associated with strong performance in this occupation.

Reading Comprehension: Understanding written sentences and paragraphs in work-related documents.
Critical Thinking: Using logic and reasoning to identify the strengths and weaknesses of alternative solutions, conclusions, or approaches to problems.
Active Listening: Giving full attention to what other people are saying, taking time to understand the points being made, asking questions as appropriate, and not interrupting at inappropriate times.
Complex Problem Solving: Identifying complex problems and reviewing related information to develop and evaluate options and implement solutions.
Speaking: Talking to others to convey information effectively.
Writing: Communicating effectively in writing as appropriate for the needs of the audience.
Monitoring: Monitoring/Assessing performance of yourself, other individuals, or organizations to make improvements or take corrective action.
Judgment and Decision Making: Considering the relative costs and benefits of potential actions to choose the most appropriate one.
Systems Analysis: Determining how a system should work and how changes in conditions, operations, and the environment will affect outcomes.
Active Learning: Understanding the implications of new information for both current and future problem-solving and decision-making.
Time Management: Managing one's own time and the time of others.
Systems Evaluation: Identifying measures or indicators of system performance and the actions needed to improve or correct performance, relative to the goals of the system.
Quality Control Analysis: Conducting tests and inspections of products, services, or processes to evaluate quality or performance.
Operations Monitoring: Watching gauges, dials, or other indicators to make sure a machine is working properly.
Coordination: Adjusting actions in relation to others' actions.
Instructing: Teaching others how to do something.
Learning Strategies: Selecting and using training/instructional methods and procedures appropriate for the situation when learning or teaching new things.
Management of Personnel Resources: Motivating, developing, and directing people as they work, identifying the best people for the job.
Service Orientation: Actively looking for ways to help people.
Social Perceptiveness: Being aware of others' reactions and understanding why they react as they do.

In the market

Job titles and employers

Recent job postings in United States

Common job titles

01Cybersecurity Analysts2,077 postings
02Information Security Analysts1,676 postings
03Information Systems Security Officers1,024 postings
04Cybersecurity Specialists687 postings
05IT Auditors557 postings
06Incident Response Managers440 postings
07Incident Response Analysts437 postings
08Security Operations Analysts383 postings
09Information Security Specialists376 postings
10Security Analysts320 postings
11Cyber Threat Analysts288 postings
12Incident Response Consultants226 postings
13Information Security Compliance Analysts193 postings
14Information Assurance Engineers191 postings
15Cybersecurity Incident Response Analysts170 postings
16Information Security Officers170 postings
17Security Governance Managers169 postings
18Incident Managers163 postings
19IT Information Security Specialists160 postings
20Cyber Defense Analysts156 postings

Top employers

01KPMG327 postings
02Accenture284 postings
03GovCIO278 postings
04Trinnex258 postings
05Zurich Insurance217 postings
06GAF Materials Corporation198 postings
07Leidos191 postings
08General Dynamics183 postings
09Teradata Operations170 postings
10Peraton155 postings
11Intermountain Health153 postings
12Robert Half149 postings
13TEKsystems144 postings
14L3Harris Technologies124 postings
15Cayuse Holdings123 postings
16CrowdStrike123 postings
17Maximus121 postings
18Motorola Solutions105 postings
19Booz Allen Hamilton102 postings
20Deloitte101 postings

Keep looking

Blockchain Engineers

Median pay: $113,638
Employment outlook: +11.4%

Computer and Information Research Scientists

Median pay: $140,296
Employment outlook: +20%

Computer and Information Systems Managers

Median pay: $174,134
Employment outlook: +17.3%

Computer Hardware Engineers

Median pay: $160,653
Employment outlook: +9.4%