Information security analysts salary
| Measure | Annual | Hourly |
|---|---|---|
| 10th percentile | $75,090 | $36.10 |
| Median (50th percentile) | $129,180 | $62.11 |
| Mean (average) | $132,510 | $63.71 |
| 90th percentile | $199,850 | $96.08 |
These wages describe everyone employed in the occupation, from new entrants to experienced workers. They are not starting salaries and not earnings of graduates from any particular program. Verified data
Information security analysts pay by state and metro area
Table: median wage and employment for all 51 states and territories
| State | Median | 10th pct | 90th pct | Employment | Location quotient |
|---|---|---|---|---|---|
| Alabama | $122,730 | $66,090 | $170,690 | 4,010 | 1.55 |
| Alaska | $114,990 | $75,770 | $149,270 | 300 | 0.75 |
| Arizona | $125,260 | $78,330 | $176,390 | 3,420 | 0.86 |
| Arkansas | $103,490 | $59,410 | $140,900 | 1,460 | 0.91 |
| California | $138,570 | $66,070 | $221,000 | 15,570 | 0.7 |
| Colorado | $135,220 | $87,560 | $208,650 | 5,700 | 1.62 |
| Connecticut | $130,570 | $79,780 | $175,590 | 1,170 | 0.56 |
| Delaware | $137,030 | $82,500 | $184,990 | 720 | 1.21 |
| District of Columbia | $135,090 | $86,280 | $189,510 | 1,510 | 1.76 |
| Florida | $124,860 | $75,410 | $174,600 | 14,220 | 1.17 |
| Georgia | $128,970 | $77,060 | $178,650 | 6,290 | 1.05 |
| Hawaii | $126,250 | $76,390 | $172,780 | 580 | 0.75 |
| Idaho | Data unavailable | 840 | 0.8 | ||
| Illinois | $124,180 | $78,760 | $172,830 | 5,260 | 0.7 |
| Indiana | $101,420 | $60,450 | $163,370 | 2,260 | 0.58 |
| Iowa | $119,710 | $71,550 | $169,620 | 1,160 | 0.61 |
| Kansas | $100,620 | $63,730 | $155,490 | 1,830 | 1.04 |
| Kentucky | $103,630 | $64,650 | $157,810 | 1,680 | 0.69 |
| Louisiana | $92,990 | $66,660 | $139,190 | 720 | 0.3 |
| Maine | $101,730 | $63,210 | $181,020 | 400 | 0.51 |
| Maryland | $139,640 | $79,130 | $216,570 | 8,650 | 2.55 |
| Massachusetts | $136,550 | $85,790 | $226,190 | 6,100 | 1.37 |
| Michigan | $106,230 | $64,150 | $165,730 | 3,280 | 0.61 |
| Minnesota | $130,710 | $83,140 | $169,750 | 2,680 | 0.74 |
| Mississippi | $87,690 | $51,170 | $138,900 | 480 | 0.33 |
| Missouri | $103,440 | $60,700 | $161,430 | 3,260 | 0.91 |
| Montana | $81,950 | $57,000 | $158,220 | 380 | 0.6 |
| Nebraska | $92,550 | $66,630 | $147,150 | 1,210 | 0.97 |
| Nevada | $106,200 | $57,160 | $178,990 | 1,330 | 0.7 |
| New Hampshire | $124,000 | $61,940 | $187,820 | 590 | 0.7 |
| New Jersey | $134,820 | $86,860 | $204,220 | 4,860 | 0.92 |
| New Mexico | $130,070 | $99,100 | $199,990 | 2,470 | 2.32 |
| New York | $134,660 | $83,110 | $216,220 | 10,060 | 0.85 |
| North Carolina | $131,540 | $77,150 | $173,670 | 8,670 | 1.43 |
| North Dakota | $107,540 | $69,480 | $139,360 | 310 | 0.59 |
| Ohio | $110,480 | $68,070 | $171,450 | 6,010 | 0.88 |
| Oklahoma | $94,000 | $56,050 | $158,320 | 1,640 | 0.78 |
| Oregon | Data unavailable | 2,250 | 0.93 | ||
| Pennsylvania | $117,770 | $67,840 | $170,870 | 4,660 | 0.63 |
| Puerto Rico | $63,740 | $37,620 | $100,900 | 500 | 0.43 |
| Rhode Island | $109,420 | $74,880 | $170,180 | 710 | 1.15 |
| South Carolina | $105,800 | $66,410 | $166,530 | 1,720 | 0.61 |
| South Dakota | $116,640 | $71,610 | $161,700 | 770 | 1.37 |
| Tennessee | $115,430 | $63,870 | $250,590 | 3,330 | 0.83 |
| Texas | $129,890 | $77,990 | $178,550 | 16,130 | 0.94 |
| Utah | $99,690 | $48,630 | $168,830 | 1,910 | 0.9 |
| Vermont | $109,750 | $74,840 | $179,130 | 220 | 0.59 |
| Virginia | $134,900 | $81,410 | $205,750 | 19,120 | 3.8 |
| Washington | $154,940 | $96,730 | $211,720 | 6,030 | 1.38 |
| Wisconsin | $101,550 | $62,110 | $162,260 | 2,130 | 0.59 |
| Wyoming | $98,710 | $75,580 | $198,230 | 140 | 0.39 |
A location quotient above 1 means the occupation is more concentrated in that state than in the nation overall.
Metro areas with the most jobs
Highest paying metro areas
Job outlook for information security analysts
- Average annual openings, 2025 to 2035: 14,100. Openings include new jobs plus replacement needs when workers retire or leave the occupation. Official projection
- Share of workers who are self-employed (2025): 0.2%.
- Read the official BLS Occupational Outlook Handbook profile.
These are official BLS projections. ConnectPrep does not alter them or present its own forecasts as official statistics.
Education and training for information security analysts
- Typical entry education
- Bachelor's degree
- Related work experience
- Less than 5 years
- On-the-job training
- None
- O*NET Job Zone
- Job Zone Four: Considerable Preparation Needed
Highest education of people working in this occupation
O*NET describes this preparation level as: Most of these occupations require a four-year bachelor's degree, but some do not.
Degrees and programs that lead to this career
Programs officially mapped to this occupation in the NCES and BLS CIP to SOC crosswalk. A mapping means the program commonly prepares students for the occupation, not that every graduate works in it. Official crosswalk
- Information Technology CIP 11.0103
- Computer Science CIP 11.0701
- Computer Systems Networking and Telecommunications CIP 11.0901
- Network and System Administration/Administrator CIP 11.1001
- System, Networking, and LAN/WAN Management/Manager CIP 11.1002
- Computer and Information Systems Security/Auditing/Information Assurance CIP 11.1003
- Information Technology Project Management CIP 11.1005
- Cyber/Computer Forensics and Counterterrorism CIP 43.0403
- Healthcare Information Privacy Assurance and Security CIP 51.0723
Licenses and certifications
Certified Information Systems Security Professional
ISC2
CompTIA Security+
CompTIA
Requirements for regulated professions are set by each state. Always confirm with the state regulator.
Skills, knowledge, and daily work
Most important skills
Most important knowledge areas
Typical tasks
- Develop plans to safeguard computer files against accidental or unauthorized modification, destruction, or disclosure and to meet emergency data processing needs.
- Monitor current reports of computer viruses to determine when to update virus protection systems.
- Encrypt data transmissions and erect firewalls to conceal confidential information as it is being transmitted and to keep out tainted digital transfers.
- Perform risk assessments and execute tests of data processing system to ensure functioning of data processing activities and security measures.
- Modify computer security files to incorporate new software, correct errors, or change individual access status.
- Review violations of computer security procedures and discuss procedures with violators to ensure violations are not repeated.
- Document computer security and emergency measures policies, procedures, and tests.
- Confer with users to discuss issues such as computer data access needs, security violations, and programming changes.
Technology skills
- Amazon Web Services AWS software (in demand)
- Linux (in demand)
- Microsoft Azure software (in demand)
- Microsoft Excel (in demand)
- Microsoft Office software (in demand)
- Microsoft PowerPoint (in demand)
- Microsoft PowerShell (in demand)
- Python (in demand)
- Splunk Enterprise (in demand)
- UNIX (in demand)
- Firewall software (in demand)
- MITRE ATT&CK software (in demand)
- Tenable Nessus (in demand)
- eMASS (in demand)
- AJAX (hot technology)
- Amazon DynamoDB (hot technology)
Transferable skills for career changers: Complex Problem Solving, Judgment and Decision Making, Systems Analysis, Time Management, Coordination, Operations Monitoring.
Common job titles: Information Security Officer, Information Security Specialist, Information Systems Security Analyst, Information Systems Security Officer (ISSO), Information Technology Security Analyst (IT Security Analyst), Network Security Analyst, Security Analyst, Systems Analyst.
Is it worth it? Model the cost of getting there
Use the ROI calculator to compare the cost of the education this career usually requires against staying on your current path. It starts from the official wage distribution above, and you can change every assumption.
Frequently asked questions
How much do information security analysts make?
The national median annual wage for information security analysts was $129,180 in May 2025, according to the BLS Occupational Employment and Wage Statistics program. The lowest paid 10 percent earned less than $75,090 and the highest paid 10 percent earned more than $199,850. These figures cover all workers in the occupation, not only new entrants.
What education do information security analysts need?
BLS lists bachelor's degree as the typical education needed to enter this occupation, with less than 5 years of related work experience and none on-the-job training typically needed to become competent.
Is information security analysts a growing career?
BLS projects employment of information security analysts to change +21.0% from 2025 to 2035, compared with +3.5% for all occupations. About 14,100 openings are projected each year on average, including openings from workers who retire or change occupations.
Which states pay information security analysts the most?
By median annual wage in May 2025, the highest paying states were Washington ($154,940), Maryland ($139,640), California ($138,570). Pay differences partly reflect differences in living costs.