JobShiftAtlas
Source-backed profile

Information Security Analysts

Plan, implement, upgrade, or monitor security measures for the protection of computer networks and information. Assess system vulnerabilities for security risks and propose and implement risk mitigation strategies. May ensure appropriate security controls are in place that will safeguard digital files and vital electronic infrastructure. May respond to computer security breaches and viruses.

BLS SOC 15-1212 · O*NET-SOC 15-1212.00 · BLS 2025–2035 · O*NET 31.0

Median annual wage, 2025

$129,180

Projected change, 2025–2035

21%

2025–2035 annual average openings

14,100

AI exposure

Very high

Editorial analysis

AI gives defenders better tools and attackers better tools too

Few occupations experience AI from both directions as clearly as information security. Security teams can use AI to summarize alerts, investigate suspicious behavior, search logs, explain unfamiliar code, prioritize vulnerabilities, and draft incident reports. At the same time, attackers can use similar technology to improve phishing messages, automate reconnaissance, analyze stolen information, and adapt malicious techniques.

That means AI is unlikely to make cybersecurity quiet. It may make it faster.

The analyst increasingly supervises machines watching machines

  • Large volumes of alerts can be summarized and prioritized automatically.
  • Security investigations may begin with an AI-generated timeline instead of hours of manual log review.
  • New AI applications introduce their own risks involving data leakage, permissions, model manipulation, and autonomous actions.
  • Attackers can also automate portions of their work, increasing the speed at which defenders must respond.

Security analysts will still need deep technical understanding because automated conclusions can be wrong at exactly the moment accuracy matters most. The strongest professionals will know how networks, identities, cloud platforms, applications, and AI systems interact. Instead of disappearing, the role may broaden: security teams increasingly have to protect not only computers and data, but also the AI systems being trusted to act on them.

Labor-market picture

Two measures, different questions

These measures offer two different ways to understand the occupation: BLS projections show how national employment may change over time, while relative AI exposure highlights where tasks may intersect with AI-related capabilities. Read them with the work profile and your local context to decide what deserves closer investigation.

Employment

Employment, 2025
192,900 jobs
Projected employment, 2035
233,400 jobs
Projected change, 20252035
40,600 jobs (21%)

Relative AI exposure

BLS category: Very high. This is a relative task-exposure classification, not a forecast of employment change, automation, wages, or worker replacement.

Relative AI exposure · Very high

Work profile

Representative tasks

These task statements come from O*NET 31.0. They are source facts, not labels assigned by the AI exposure measure.

  • Develop plans to safeguard computer files against accidental or unauthorized modification, destruction, or disclosure and to meet emergency data processing needs.
  • Monitor current reports of computer viruses to determine when to update virus protection systems.
  • Encrypt data transmissions and erect firewalls to conceal confidential information as it is being transmitted and to keep out tainted digital transfers.
  • Perform risk assessments and execute tests of data processing system to ensure functioning of data processing activities and security measures.
  • Modify computer security files to incorporate new software, correct errors, or change individual access status.
  • Review violations of computer security procedures and discuss procedures with violators to ensure violations are not repeated.

Skills that matter

Skills in the source profile

Importance uses O*NET's 1–5 scale. Level uses its 0–7 scale. Select a skill to see its source definition and reported values.

Technology and tools

These technology records come from O*NET and show software or tools reported in the occupation profile. They describe work context, not a required checklist for every employer.

  • Word processing software
  • Access software
  • Network monitoring software
  • Internet directory services software
  • Development environment software
  • Object or component oriented development software
  • Web platform development software
  • Data base management system software

Preparation

Typical entry education
Bachelor's degree
Related experience
Less than 5 years
On-the-job training
None

Ask JobShift

Ask Dr. Morgan Reed about this evidence

Morgan is the JobShift Atlas analyst powered by AI. Answers draw from the evidence on this page and explain what it can tell you.

Source provenance

Labor-market and exposure facts: bls-ep-2025-35. Work profile: onet-31.0. Verify release details on the Sources page.