What does a cybersecurity analyst do? Duties, pay, education and outlook

A cybersecurity analyst protects an organization's computer networks and systems by monitoring for breaches, investigating them and fixing weaknesses. The US Bureau of Labor Statistics (BLS) files this work under information security analysts and reports a median pay of $129,180 per year (May 2025). A bachelor's degree is typical.

BLS publishes this work under the occupation name information security analysts. "Cybersecurity analyst" is a common job title for the same work, so this guide uses the BLS and O*NET data for that occupation.

At a glance

Figures are from the BLS Occupational Outlook Handbook as it read on 31 October 2026. Wage data are from May 2025 and projections cover 2025 to 2035.

What does a cybersecurity analyst do?

BLS describes information security analysts as the people who protect an organization's networks and systems. Their work includes:

• Monitoring networks for security breaches and investigating them when they happen.
• Using security software such as firewalls and data encryption.
• Checking systems for weaknesses.
• Researching emerging security threats and how attackers operate.
• Writing reports on attacks and breaches and recommending improvements to management.
• Setting security standards and helping staff adopt new security tools.
• Helping build and test disaster recovery plans.

Because attackers keep changing their methods, the job involves constant learning. Titles vary by employer: security analyst, SOC analyst and cybersecurity analyst often describe overlapping work.

Work environment

Many analysts work in IT departments alongside network administrators and computer systems analysts. BLS lists the largest employers as computer systems design firms, finance and insurance companies, corporate management offices, the information sector and consulting firms. Most analysts work full time, some work more than 40 hours a week, and some must be on call outside normal hours for emergencies.

Education, training and licensing

BLS says a bachelor's degree in computer and information technology or a related field, such as engineering or math, is typical. Some workers enter with a high school diploma plus relevant training and certifications. Many analysts first work in IT, often as network and computer systems administrators, and BLS lists less than 5 years of related experience for the occupation.

There is no license in the BLS profile, but BLS notes that many employers prefer certified candidates. Entry-level and advanced certifications exist, along with specialized ones such as systems auditing. Check job postings for the certifications that employers in your target industry name, then choose based on that evidence. With experience, analysts can move into chief security officer or other computer management roles, lead teams, or specialize in a security area.

Skills that matter

BLS lists analytical skills, communication skills (explaining risks to technical and nontechnical audiences), creativity, attention to detail and problem-solving as the important qualities. O*NET highlights reading comprehension, critical thinking, active listening and speaking among the skills for this occupation. For a resume, that translates to showing how you found a problem, what you changed and how you explained it to someone who was not technical.

How much does a cybersecurity analyst make?

BLS reports a median annual wage of $129,180 per year (May 2025), which is $62.11 per hour. Half of workers earned more and half earned less. The lowest 10 percent earned less than $75,090, and the highest 10 percent earned more than $199,850. By industry, BLS reports the highest median in the information sector at $138,650, and the lowest among the listed top industries in management, scientific and technical consulting at $125,420.

Read the full pay tab on the BLS Occupational Outlook Handbook and look up your own state or metro area in the BLS Occupational Employment and Wage Statistics. For how to read these numbers, see how to research pay.

Job outlook

BLS projects employment to grow 21 percent from 2025 to 2035, much faster than the average for all occupations, which is about 40,600 additional jobs. About 14,100 openings are projected each year, mostly from workers who transfer to other occupations or leave the workforce, such as through retirement. BLS attributes demand to rising cyberattacks, businesses securing new technologies, and growth in AI use and e-commerce.

How to get hired as a cybersecurity analyst

1. Start with an IT foundation. Help desk, network or systems administration roles are a common route in.
2. Build visible proof: labs, a home network you secured, incident write-ups or open-source contributions. Describe the problem, the action and the result.
3. Add a certification that your target employers list, once you have the experience it expects.
4. Match your resume to the posting's wording. Our ATS resume guide shows how.
5. If you are moving from another field, read career change resume.
6. Prepare for scenario questions in interview prep, then search jobs on LiveRec.

Related occupations

Computer Network Architects; Computer Systems Analysts; Network and Computer Systems Administrators; Computer and Information Systems Managers.

Frequently asked questions

Is a cybersecurity analyst the same as an information security analyst?

They describe the same kind of work. BLS uses the name information security analysts, and employers often post the job as cybersecurity analyst or security analyst.

Do you need a degree to be a cybersecurity analyst?

BLS lists a bachelor's degree as typical, in computer and information technology or a related field. Some workers enter with a high school diploma plus relevant training and certifications.

Are certifications required?

BLS lists no license, but says many employers prefer certified candidates. Read your target postings to see which certifications they name.

How much do cybersecurity analysts make?

BLS reports a median annual wage of $129,180 per year (May 2025) for information security analysts. The lowest 10 percent earned less than $75,090 and the highest 10 percent earned more than $199,850.

Is cybersecurity a growing field?

BLS projects 21 percent growth from 2025 to 2035, much faster than average, with about 14,100 openings per year.

Related guides

• Financial Analyst: Duties, Pay, Education, Outlook

Sources

• U.S. Bureau of Labor Statistics, Occupational Outlook Handbook: https://www.bls.gov/ooh/computer-and-information-technology/information-security-analysts.htm (accessed 31 October 2026)
• BLS pay tab: https://www.bls.gov/ooh/computer-and-information-technology/information-security-analysts.htm#tab-5 (accessed 31 October 2026)
• BLS Occupational Employment and Wage Statistics: https://www.bls.gov/oes/ (accessed 31 October 2026)
• O*NET OnLine, 15-1212.00: https://www.onetonline.org/link/summary/15-1212.00 (accessed 31 October 2026)

This is general information, not legal, tax or immigration advice. Rules change and your situation may differ. Consult a licensed attorney or qualified adviser.