Career-PathGPS
← All education and training
Career

Information Security Analysts

Typical education: Bachelor's degreeModerate pressure Bright Outlook

What they do

Plan, implement, upgrade, or monitor security measures for the protection of computer networks and information. Assess system vulnerabilities for security risks and propose and implement risk mitigation strategies. May ensure appropriate security controls are in place that will safeguard digital files and vital electronic infrastructure. May respond to computer security breaches and viruses.

Kinds of work

  • Conventional: Organizing information, following clear procedures and working with data and details.
  • Investigative: Science, research, figuring out how things work and solving complex problems.
  • Realistic: Hands-on work with tools, machines, plants or animals, often outdoors.

Moderate pressure: How much pressure workers in this job report: deadlines, conflict, dealing with upset people, the cost of mistakes, responsibility for others' safety, competition and long hours. It varies a lot from one employer to the next. Source: U.S. Department of Labor worker surveys.

Pay, tasks and more

Salary

United States $129,180 Median per year · $62.11/hr Most earn $75,090–$199,850

BLS Occupational Employment and Wage Statistics, 2025.

What you might do

  • Document computer security and emergency measures policies, procedures, and tests.
  • Monitor current reports of computer viruses to determine when to update virus protection systems.
  • Confer with users to discuss issues such as computer data access needs, security violations, and programming changes.
  • Encrypt data transmissions and erect firewalls to conceal confidential information as it is being transmitted and to keep out tainted digital transfers.
  • Perform risk assessments and execute tests of data processing system to ensure functioning of data processing activities and security measures.
  • Develop plans to safeguard computer files against accidental or unauthorized modification, destruction, or disclosure and to meet emergency data processing needs.

Job outlook

Bright Outlook Rapid Growth

United States
21% more jobs by 2035, much faster than average · about 14,100 openings a year

Openings include new jobs and jobs left by workers who retire or change careers. Projections: U.S. Bureau of Labor Statistics. "Bright Outlook": U.S. Department of Labor.

Where they work

  • Computer systems design and related services22.1%
  • Management of companies and enterprises9.3%
  • Credit intermediation and related activities7.9%
  • Management, scientific, and technical consulting services6.4%
  • Engineering services3.8%

Share of all workers in this career. Source: U.S. Bureau of Labor Statistics, National Employment Matrix.

Often remoteExperience before this job: 4 to 6 years

Career path

How people usually get into this career, from school to their first job and beyond.

Typical education: Bachelor's degreeExperience before this job: 4 to 6 years

Information Security Analyst is not usually an entry-level job. Most people earn a bachelor's degree, then spend several years in other IT roles, often about 4 to 6 years, before moving into security work.

  1. Bachelor's degree in computer science, information technology, or cybersecurity

    4 years

    You learn how networks, operating systems, and software work, which is the foundation every security analyst needs.

  2. Computer Network Support Specialist

    2-3 years

    You troubleshoot networks and fix technical problems for users, which teaches you how real systems break and how to keep them running.

  3. Network and Computer Systems Administrator

    2-3 years

    You manage servers, firewalls, and user accounts, and you begin handling security settings and access controls.

  4. Information Security Analyst

    Ongoing career

    You plan and monitor security measures, test for weaknesses, and respond to breaches to protect an organization's data and systems.

Where it can lead

  1. Penetration Tester

    2-4 years of experience first

    You specialize in testing systems by trying to break into them the way attackers would, which is a hands-on move that builds deep technical skill.

  2. Information Security Engineer

    4-6 years of experience first

    You design, build, and maintain security systems and tools, moving from watching for threats to engineering the defenses themselves.

What you can do now

Ideas for high school and college students.

In high school

  • Take computer science and math classesProgramming and math give you the logic skills that security work depends on.
  • Join a coding, robotics, or cybersecurity clubTeamwork on real projects helps you learn faster and shows colleges you are serious about tech.
  • Try capture-the-flag style competitionsThese puzzles teach basic hacking and defense skills in a safe, legal setting, and many schools and local groups host them.
  • Get a starter job in tech support or retail electronicsHelping people fix their devices builds customer skills and real troubleshooting experience.
  • Build your own home network or computerSetting up routers, servers, or a virtual machine lab teaches you how systems connect and where they can fail.

In college

  • Choose a major in computer science, IT, or cybersecurityA degree in one of these fields is the most common route into security work.
  • Take networking and operating systems coursesThese classes cover how data moves and how systems are configured, which security analysts use every day.
  • Work at a campus IT help deskIt gives you paid, real-world troubleshooting experience and a reference for your future resume.
  • Apply for internships in IT or securityInternships help you see what the job is like and often lead to full-time offers.
  • Join a security club or competition teamWorking with peers on security challenges builds skills and connections in the field.

Tips for getting started

  • Get hands-on experience early. Help desk, IT support, and home-lab projects count for a lot in security hiring, often as much as the degree itself.
  • Consider a certification such as CompTIA Security+ once you have some IT experience. It shows employers you know core security concepts.
  • Build a habit of learning outside class, like practicing on capture-the-flag style challenges or reading security news, because the field changes quickly.

Related jobs that often lead here

Education, experience and related careers: U.S. Department of Labor. The step-by-step path, where it can lead and what you can do now were written by AI as typical examples; many people take other ways.

College majors that lead here

Majors: U.S. Department of Education and BLS (CIP–SOC crosswalk). Earnings and debt: College Scorecard, typical across U.S. colleges.

Related careers