Investigate an incoming alert
When an alert comes in, sift network or user-account activity for suspicious patterns and record what happened.
Career profile
Information Security Analyst
Information security analysts harden company networks and data, probing weak spots and suspicious activity.
Expect to dig into stubborn technical problems and make calls that change how coworkers use live systems.
A day in the life
Rank what the checks find
Run vulnerability or risk checks, study the results, and rank which gaps to handle first.
Tighten encryption and access rules
Adjust encryption, firewalls, access rules or other safeguards, then check that systems still work as intended.
Test a recovery plan
Draft and test recovery steps so the company can bring key systems back after an incident.
Walk coworkers through your findings
Turn technical results into reports, advice or training that managers and coworkers can understand and use.
Quick facts
Bachelor’s degree typical
United States
$129,180 median
United States · May 2025
21% projected growth
United States · 2025–2035
Quick orientation
Preparation, pay & outlook
Preparation
Bachelor’s degree typicalBLS lists a bachelor’s degree as typical entry-level education and says related work experience is commonly needed.
Pay
$129,180 medianNational median annual wage for the occupation; this is not a starting salary.
Outlook
21% projected growthBLS projects 2025–2035 growth and about 14,100 openings per year on average from growth and replacement needs.
Fit, tradeoffs & changing tools
You might like this if…
- You like tracing small clues until a technical problem makes sense.
- You can follow procedures carefully without treating them as unquestionable.
- You are willing to keep learning as systems and attack methods change.
- You can explain a risk clearly to someone who is not a security specialist.
Things to weigh
- Security incidents may put you on call outside normal hours.
- Some analysts work more than 40 hours, especially when systems need urgent attention.
- Accuracy and documentation matter: a missed detail or poorly judged change can affect an entire organization.
Where AI may help
Security tools can collect alerts, scan for vulnerabilities, enforce configured controls, and organize evidence for review.
What people still lead
Analysts still judge what is risky, choose a response, balance security with business needs, and explain decisions to other people.
What we can’t predict yet
AI is changing systems that need protection and the tools used to defend them. How far employers will automate individual analyst tasks or change staffing remains uncertain.
Pay in context
Earnings
BLS national figures describe workers across the occupation, not the offer a new analyst should expect.
National midpoint
The median annual wage was $129,180: half of workers earned more and half earned less. The median hourly wage was $62.11.
Observed wage spread
The lowest-paid 10 percent earned under $75,090 annually, while the highest-paid 10 percent earned over $199,850. These cutoffs are not entry and senior career stages.
Getting started
Bachelor’s degree plus relevant experience
Often a four-year degree followed by, or combined with, related IT experience.
- What the route involves
- Study computer or information technology, engineering, math, or a related field and build experience working with computer systems and networks.
- What it can lead to
- Matches the education and experience profile BLS says employers typically seek for analyst roles.
- What to check
- A degree does not guarantee entry, and employers may prefer particular certifications or experience.
Move from a related IT role
Paid
- What the route involves
- Work in an IT department—often in network or systems administration—and learn how systems, access, updates, and failures are handled.
- What it can lead to
- Builds the related work experience that many analyst employers consider necessary or useful.
- What to check
- This is a common route, not a guaranteed promotion; required experience differs across employers.
Apprenti cybersecurity apprenticeship
Two to five months of full-time technical training, followed by one year of full-time paid on-the-job training.
- What the route involves
- Study networks, security, risk, and intrusion detection, then practice threat monitoring, vulnerability assessment, incident response, and access control with an employer.
- What it can lead to
- Builds occupation-aligned experience; successful completion may lead to permanent hire, but the employer is not required to retain graduates.
- What to check
- No degree or prior technical experience is required. Applicants must score at least 80 on Apprenti’s assessment; interviews happen only when a hiring partner has an opening matching the applicant’s occupation and location.
A bachelor’s degree is the usual route, but employers also draw on related IT experience and some occupation-aligned apprenticeships.
After entry
Career paths
This starts where the entry routes leave off: early work, growing capability, and advancement or specialization.
Get established
Learn the organization’s systems and procedures, handle alerts with team guidance, document incidents, and apply approved controls carefully.
Develop capability
Take on broader vulnerability testing, access-control work, recovery planning, security reporting, and recommendations to technical and nontechnical coworkers.
Lead or specialize
Lead an analyst team, become an expert in a security area, or work toward chief security officer or another information systems management role.
Where you can work
In-house security team
Protect one organization’s systems and work closely with its IT staff and users. Emergencies may create after-hours on-call work.
- Office
- On call
Systems design or consulting firm
Work may be organized around client systems and projects, with coordination across departments and outside vendors.
- Office
FDIC-supervised bank
Major incidents come with a regulatory clock: the bank must notify the FDIC as soon as possible and no later than 36 hours after determining that a qualifying notification incident occurred.
- Office
Try it
See whether the job clicks before you commit to the path.
On an account you own, review one ordinary sign-in alert. List the evidence that shows whether the activity was yours, then write a five-step response checklist for a suspicious alert. Notice whether you enjoy sorting evidence and making the instructions precise.
Stay safe: Use only accounts and devices you own or have explicit permission to inspect. Do not scan, probe, or test school, workplace, public, or another person’s systems.
Sources
- U.S. Bureau of Labor Statistics. Occupational Outlook Handbook: Information Security Analysts. Accessed 2026-09-16.
- O*NET OnLine. 15-1212.00 — Information Security Analysts. Accessed 2026-09-16.
- Apprenti. Cybersecurity Analyst. Accessed 2026-09-16.
- Apprenti. Career Seeker. Accessed 2026-09-16.
- Federal Deposit Insurance Corporation. Computer-Security Incident Notification Final Rule. Accessed 2026-09-16.