Information Security Analysts
Information security analysts protect computer networks and data by identifying vulnerabilities, assessing security risks, and implementing protective measures. They work in IT departments across industries—government agencies, financial institutions, healthcare organizations, and technology companies—evaluating systems and developing strategies to prevent unauthorized access and data breaches.
Four short assessments and your background, scored against information security analysts and 13,000 other careers — with the reasons. Free.
A day in the work
A typical week involves reviewing security logs and system access reports, conducting vulnerability assessments on networks and applications, and documenting findings. Analysts may test security controls, collaborate with IT teams to patch vulnerabilities, update security policies, and prepare reports on risks and mitigation strategies. They also respond to security incidents when they occur, investigating unauthorized access or suspicious activity.
Who this work suits
Holland code CIR. Conventional work is organized, detail-oriented work with clear procedures. Aptly’s interest assessment scores you on the same six scales.
You tend to enjoy structured problem-solving and following established procedures (conventional interests) while also investigating complex technical issues systematically (investigative interests). You're detail-oriented, analytical, and comfortable diving deep into system data to uncover problems and develop logical solutions.
What it takes
Preparation: Considerable preparation (most need a bachelor’s degree and several years of experience). Most people in this occupation hold a bachelor’s degree.
Skills that matter most
Knowledge areas
Who is hiring
Pay by state
| State | 25th pct | Median | 75th pct | Employed |
|---|---|---|---|---|
| Washington | $123,590 | $154,940 | $178,890 | 6,030 |
| Maryland | $106,790 | $139,640 | $183,260 | 8,650 |
| California | $101,840 | $138,570 | $177,890 | 15,570 |
| Delaware | $106,290 | $137,030 | $166,300 | 720 |
| Massachusetts | $107,540 | $136,550 | $176,450 | 6,100 |
| Colorado | $108,150 | $135,220 | $169,310 | 5,700 |
| District of Columbia | $113,420 | $135,090 | $171,940 | 1,510 |
| Virginia | $103,980 | $134,900 | $169,970 | 19,120 |
| New Jersey | $104,110 | $134,820 | $171,240 | 4,860 |
| New York | $102,930 | $134,660 | $173,920 | 10,060 |
| North Carolina | $100,620 | $131,540 | $154,770 | 8,670 |
| Minnesota | $103,190 | $130,710 | $158,270 | 2,680 |
All 50 states, D.C. and Puerto Rico
Certifications people in this field hold
- GIAC Information Security Fundamentals (GISF) — Global Information Assurance Certification
- EC Council Certified Chief Information Security Officer (CCISO) — EC-Council
- Associate of International Information Systems Security Certification Consortium ((ISC)2) — International Information Systems Security Certification Consortium, Inc.
- GIAC Information Security Professional (GISP) — Global Information Assurance Certification
- GIAC Mobile Device Security Analyst (GMOB) — Global Information Assurance Certification
- Certified Information Systems Security Professional (CISSP) — International Information Systems Security Certification Consortium, Inc.
Training
Aptly members see WIOA-approved programs, colleges and certificates near them, with completion and earnings data, on every Path plan.
Job titles in this occupation
and 41 more
Related occupations
Four short assessments and your background, scored against information security analysts and 13,000 other careers — with the reasons. Free.
O*NET-SOC 15-1212.00 · O*NET OnLine. Pay: BLS OEWS May 2025, annual, U.S. Employment counts are national.