Information Security Analysts
Plan, implement, upgrade, or monitor security measures for the protection of computer networks and information. Assess system vulnerabilities for security risks and propose and implement risk mitigation strategies. May ensure appropriate security controls are in place that will safeguard digital files and vital electronic infrastructure. May respond to computer security breaches and viruses.
BLS SOC 15-1212 · O*NET-SOC 15-1212.00 · BLS 2025–2035 · O*NET 31.0
Median annual wage, 2025
$129,180
Projected change, 2025–2035
21%
2025–2035 annual average openings
14,100
AI exposure
Very high
Editorial analysis
AI gives defenders better tools and attackers better tools too
Few occupations experience AI from both directions as clearly as information security. Security teams can use AI to summarize alerts, investigate suspicious behavior, search logs, explain unfamiliar code, prioritize vulnerabilities, and draft incident reports. At the same time, attackers can use similar technology to improve phishing messages, automate reconnaissance, analyze stolen information, and adapt malicious techniques.
That means AI is unlikely to make cybersecurity quiet. It may make it faster.
The analyst increasingly supervises machines watching machines
- Large volumes of alerts can be summarized and prioritized automatically.
- Security investigations may begin with an AI-generated timeline instead of hours of manual log review.
- New AI applications introduce their own risks involving data leakage, permissions, model manipulation, and autonomous actions.
- Attackers can also automate portions of their work, increasing the speed at which defenders must respond.
Security analysts will still need deep technical understanding because automated conclusions can be wrong at exactly the moment accuracy matters most. The strongest professionals will know how networks, identities, cloud platforms, applications, and AI systems interact. Instead of disappearing, the role may broaden: security teams increasingly have to protect not only computers and data, but also the AI systems being trusted to act on them.
Labor-market picture
Two measures, different questions
These measures offer two different ways to understand the occupation: BLS projections show how national employment may change over time, while relative AI exposure highlights where tasks may intersect with AI-related capabilities. Read them with the work profile and your local context to decide what deserves closer investigation.
Employment
- Employment, 2025
- 192,900 jobs
- Projected employment, 2035
- 233,400 jobs
- Projected change, 2025–2035
- 40,600 jobs (21%)
Relative AI exposure
BLS category: Very high. This is a relative task-exposure classification, not a forecast of employment change, automation, wages, or worker replacement.
Relative AI exposure · Very high
Work profile
Representative tasks
These task statements come from O*NET 31.0. They are source facts, not labels assigned by the AI exposure measure.
- Develop plans to safeguard computer files against accidental or unauthorized modification, destruction, or disclosure and to meet emergency data processing needs.
- Monitor current reports of computer viruses to determine when to update virus protection systems.
- Encrypt data transmissions and erect firewalls to conceal confidential information as it is being transmitted and to keep out tainted digital transfers.
- Perform risk assessments and execute tests of data processing system to ensure functioning of data processing activities and security measures.
- Modify computer security files to incorporate new software, correct errors, or change individual access status.
- Review violations of computer security procedures and discuss procedures with violators to ensure violations are not repeated.
Skills that matter
Skills in the source profile
Importance uses O*NET's 1–5 scale. Level uses its 0–7 scale. Select a skill to see its source definition and reported values.
Technology and tools
These technology records come from O*NET and show software or tools reported in the occupation profile. They describe work context, not a required checklist for every employer.
- Word processing software
- Access software
- Network monitoring software
- Internet directory services software
- Development environment software
- Object or component oriented development software
- Web platform development software
- Data base management system software
Preparation
- Typical entry education
- Bachelor's degree
- Related experience
- Less than 5 years
- On-the-job training
- None
Ask JobShift
Ask Dr. Morgan Reed about this evidence
Morgan is the JobShift Atlas analyst powered by AI. Answers draw from the evidence on this page and explain what it can tell you.
Prepare for a direction
Turn occupation research into a next action
Next action
Prepare your resume for this direction
Opens a partner resource for your next step on resumekicker.com. Your JobShift search and selections are not shared with external sites.
Next action
Explore related cybersecurity analyst interview questions
Opens a closely related role resource on interviewkicker.com. Your JobShift search and selections are not shared with external sites.
Next action
Explore independent work as one option
Opens a partner resource for your next step on www.ideatomarketai.com. Your JobShift search and selections are not shared with external sites.
Source provenance
Labor-market and exposure facts: bls-ep-2025-35. Work profile: onet-31.0. Verify release details on the Sources page.