Information Security Analyst

What it pays in the U.S.

Plan, implement, upgrade, or monitor security measures for the protection of computer networks and information. Assess system vulnerabilities for security risks and propose and implement risk mitigation strategies. May ensure appropriate security controls are in place that will safeguard digital files and vital electronic infrastructure. May respond to computer security breaches and viruses.

Wage figures are 2025 survey data for United States, shown nationally because no state figure was reported. They describe what people in this job earn now, not what any one person will be offered.

What the work actually is

• Document computer security and emergency measures policies, procedures, and tests.
• Monitor current reports of computer viruses to determine when to update virus protection systems.
• Encrypt data transmissions and erect firewalls to conceal confidential information as it is being transmitted and to keep out tainted digital transfers.
• Confer with users to discuss issues such as computer data access needs, security violations, and programming changes.
• Perform risk assessments and execute tests of data processing system to ensure functioning of data processing activities and security measures.
• Modify computer security files to incorporate new software, correct errors, or change individual access status.

Read the full Occupational Outlook Handbook entry from the Bureau of Labor Statistics.

Licensing, by state

Licensing is set by each state, so there is no national answer. Choose a state above to see which licenses it requires for this career, or look one up with the CareerOneStop License Finder.

Certifications employers recognize

These are national certifications, issued by industry bodies rather than a state. Most are optional, but they are how you prove skill to an employer.

• Administration of Symantec Cloud Workload Protection - R1

  Broadcom Inc. · Product/Equipment

• Microsoft 365 Certified: Security Administrator Associate

  Microsoft Corporation · Product/Equipment

• Cisco Meraki Solutions Specialist

  Cisco Systems, Inc. · Product/Equipment

• FITSP-Designer

  Federal IT Security Institute · Advanced

• Certified SOC Analyst

  EC-Council · Core

• Certified Cloud Security Engineer

  EC-Council · Product/Equipment

• Certified Information Privacy Professional/United States

  International Association of Privacy Professionals · Product/Equipment

• CertNexus Cyber Secure Coder

  CertNexus · Core

• GIAC Security Operations Manager

  Global Information Assurance Certification · Core

• Certified Security Principles

  Mile2 · Core

• Certified Security Awareness 2

  Mile2 · Core

• Certified Cybersecurity Framework Officer

  Mile2 · Core

Apprenticeships, by state

Registered apprenticeships pay you while you train. Each state runs its own registration office, which is where to start when you want to find an open program.

Choose a state above to see the offices that register apprenticeships there.

Search open programs directly at apprenticeship.gov.