Information Security Analysts

Plan, implement, upgrade, or monitor security measures for the protection of computer networks and information. Assess system vulnerabilities for security risks and propose and implement risk mitigation strategies. May ensure appropriate security controls are in place that will safeguard digital files and vital electronic infrastructure. May respond to computer security breaches and viruses.

Also called: Information Security Officer, Information Security Specialist, Information Systems Security Analyst, Information Systems Security Officer (ISSO), Information Technology Security Analyst (IT Security Analyst), Network Security Analyst, Security Analyst, Systems Analyst, AI Security Specialist (Artificial Intelligence Security Specialist), All-Source Analyst, Application Security Analyst, Applications Security Analyst, Automatic Data Processing Systems Security Specialist (ADP Systems Security), Blue Team Member, Certified Information Systems Security Professional (CISSP), Cloud Security Architect, Cloud Security Engineer, Computer Security Coordinator, Computer Security Information Specialist, Computer Security Specialist, Computer Systems Security Analyst, Counterespionage Analyst, Cryptological Technician, Cryptologist, Cyber Defense Analyst, Cyber Defense Forensics Analyst, Cyber Incident Responder, Cyber Information Security Analyst, Cyber Intel Planner, Cyber Intelligence Specialist, Cyber Operations Planner (Cyber Ops Planner), Cyber Operations Specialist, Cyber Operator, Cyber Policy and Strategy Planner, Cyber Security Analyst, Cyber Security Specialist, Cyber Security Support Technician, Cybersecurity All-Source Analyst, Cybersecurity Analyst, Cybersecurity Engineer, Cybersecurity Exploitation Analyst, Cybersecurity Incident Response Analyst, Cybersecurity Multi-Disciplined Language Analyst, Cybersecurity Partner Integration Planner, Cybersecurity Specialist, Cybersecurity Target Developer, Cybersecurity Target Network Analyst, Cybersecurity Threat Analyst, Cybersecurity Warning Analyst, Data Security Analyst, Database Security Expert, Exploitation Analyst, Incident Responder, Incident Response Analyst, Incident Response Manager, Industrial Internet of Things Security Specialist (IIoT Security Specialist), Information Assurance Analyst, Information Security Analyst, Information Systems Security Specialist, Information Technology Analyst (IT Analyst), Information Technology Consultant (IT Consultant), Information Technology Security Architect (IT Security Architect), International Affairs Specialist, Internet of Things Security Specialist (IoT Security Specialist), Internet Security Specialist, Intrusion Detection Analyst, IT Auditor (Information Technology Auditor), IT Risk Specialist (Information Technology Risk Specialist), Mission Assessment Specialist, Network Security Officer, Network Security Systems Analyst, Red Team Member, Security Auditor, Security Consultant, Security Control Assessor, Security Operations Analyst, Security Operations Center Analyst (SOC Analyst), Security Specialist, Source Code Auditor, Supervisory Control and Data Acquisition Security Analyst (SCADA Security Analyst), Systems Security Analyst, Systems Security Specialist, Technology Analyst, Threat Hunter, Threat Monitoring Analyst, Virus Technician, Warning Analyst

This is a career information profile, not an advertised job opening.

What the worker does

Develop plans to safeguard computer files against accidental or unauthorized modification, destruction, or disclosure and to meet emergency data processing needs.
Monitor current reports of computer viruses to determine when to update virus protection systems.
Encrypt data transmissions and erect firewalls to conceal confidential information as it is being transmitted and to keep out tainted digital transfers.
Perform risk assessments and execute tests of data processing system to ensure functioning of data processing activities and security measures.
Modify computer security files to incorporate new software, correct errors, or change individual access status.
Review violations of computer security procedures and discuss procedures with violators to ensure violations are not repeated.
Document computer security and emergency measures policies, procedures, and tests.
Confer with users to discuss issues such as computer data access needs, security violations, and programming changes.
Monitor use of data files and regulate access to safeguard information in computer files.
Coordinate implementation of computer system plan with establishment personnel and outside vendors.

Skills, machines and equipment

Reading Comprehension
Critical Thinking
Active Listening
Complex Problem Solving
Speaking
Writing
Monitoring
Judgment and Decision Making
Systems Analysis
Active Learning
Time Management
Coordination

Education and training

Most frequently reported education in the O*NET survey: Bachelor's Degree (52.64% of responses). This is survey context, not a universal hiring requirement. Most of these occupations require a four-year bachelor's degree, but some do not.

O*NET Job Zone 4: Employees in these occupations usually need several years of work-related experience, on-the-job training, and/or vocational training. A considerable amount of work-related skill, knowledge, or experience is needed for these occupations. For example, an accountant must complete four years of college and work for several years in accounting to be considered qualified. This is broad occupational preparation context; confirm the requirements for a specific employer or apprenticeship.

Apprenticeships

Ask an employer or registered apprenticeship sponsor about current programs, eligibility, training and pay. A career profile does not confirm that a program is available.

Salary reference

97,810–163,500 USD per year · United States · 2025. Source: BLS OEWS via O*NET · 25th–75th percentiles · SOC 15-1212.

Occupational-group wage references are not guaranteed pay for this specialty or an employer's offer.

Career advancement

Develop reliable production, safety, quality, and equipment skills; explore additional processes, senior specialist, or team-lead responsibilities relevant to your workplace.
Ask employers which demonstrated skills, education, or credentials are needed for the next role. Related careers are exploration options, not automatic promotions.

How Do I Get This Job?

Review the skills and responsibilities above.
Most frequently reported education in the O*NET survey: Bachelor's Degree (52.64% of responses). This is survey context, not a universal hiring requirement. Most of these occupations require a four-year bachelor's degree, but some do not.
O*NET Job Zone 4: Employees in these occupations usually need several years of work-related experience, on-the-job training, and/or vocational training. A considerable amount of work-related skill, knowledge, or experience is needed for these occupations. For example, an accountant must complete four years of college and work for several years in accounting to be considered qualified. This is broad occupational preparation context; confirm the requirements for a specific employer or apprenticeship.
Compare real openings and confirm requirements directly with the employer.

View available jobs — availability is not guaranteed; sample listings are not real openings.

Related career information

Sources and limitations

O*NET® 31.0 Database, U.S. Department of Labor, Employment and Training Administration, under CC BY 4.0. ShopFloor adapted occupational grouping, selected manufacturing-relevant occupations, and retained seven legacy guide titles. Specialties and alternative titles are grouped under O*NET occupations; these occupations can also occur outside manufacturing. Source: https://www.onetcenter.org/database.html. No wage, vacancy, certification, or video data is implied. ShopFloor advancement suggestions are general editorial guidance, not O*NET findings or guaranteed career progression. BLS wage ranges, when available, are national 25th–75th percentiles for the source occupational grouping, across industries; they are not local, apprentice, entry-level, or specialty-specific offers.

Information Security Analysts