Get updates delivered to you daily. Free and customizable.
Fortune
Infosec analyst jobs: Millions are needed—and they come with six-figure salaries
By Preston Fore,
1 day ago
Data has been effectively deemed a new currency. Across the world, we entrust hundreds of companies with our data, such as name, address, and banking information. However, with cyberattacks continuing to be on the rise, the global relies on skilled information security experts—who often hold training from a top cybersecurity bootcamp or cybersecurity advanced degree —to keep data safe from bad actors.
Unfortunately, there's bad news: There is currently a major shortage of cybersecurity professionals; between 3.5 and 4 million cybersecurity professionals are needed globally to properly protect the world’s data, according to estimates by Cybersecurity Ventures and ISC2 . But the good news is the industry is a prime area for individuals to find a long-lasting career—and with a high-paying salary.
Across the U.S., the proof is in the job postings. A simple search of platforms like LinkedIn will yield hundreds of open positions as cybersecurity or information security analysts—and at places other than just the top cybersecurity companies . Organizations with open positions at time of publication include Microsoft, TikTok, Deloitte, AT&T, NVIDIA, Coinbase, Rockstar Games, Marathon, Raytheon, and more. But the need is not unique to the private sector; universities, local governments, and federal agencies are also actively seeking security experts.
What does an information security analyst do?
Information security analysts develop and act on security measures designed to protect an entity’s computer networks and systems, according to the U.S. Bureau of Labor Statistics .
Individuals must be risk-focused, forward-looking, and detail-oriented in the protection data. Experts must be willing to engage in the most up-to-date proactive defensive strategies via firewalls and data encryption as well as be alert and reactive when a breach may have occurred.
Information security roles can take many other titles, including being an analyst, engineer, specialist, or architect in cybersecurity, data security, application security, and beyond.
How much can information security analysts make?
Information security analysts earn median annual pay of about $120,000, says the labor department. However, candidates should take this number with a grain of salt because salary can differ based on one’s experience, education, and location.
Glassdoor estimates that information security analysts earn salaries of about $111,000 (plus an additional $30,000 in additional pay, like bonuses).
Those holding advanced degrees or additional cybersecurity certifications are the ones who tend to have higher salaries due to their skillset.
5 high-paying information security analyst jobs
Organization
Role
Location
Background requirements
Salary range
Federal Reserve of St. Louis
Information security analyst
Missouri
Bachelor's in relevant field and 2-5 years of experience
$100,000–$113,000
Microsoft
Security analyst
Washington
Bachelor's or master's in relevant field, 1–2 years of experience in security, vulnerability and SQL/Kusto
$98,300–$193,200 (higher in SF & NYC)
MIT
Information security analyst
Massachusetts
Bachelor's and 5+ years in cybersecurity; preference for cyber certifications & scripting language experience
$115,000–$125,000
NVIDIA
Senior security analyst
California or remote
Bachelor's in relevant field and 2-5 years of experience
$156,000–$247,250
Visa
Cybersecurity analyst
California
Bachelor's in computer science and 2+ years of experience
$113,700–$176,200
5 high-paying information security analyst jobs
Note: Data is based on job postings from July 2024; these positions may have since expired or changed.
How can you become an information security analyst?
Individuals interested in the information security field with no experience can get started as soon as today. At a minimum, having a bachelor’s degree is the floor for most roles in tech; studying computer science, cybersecurity, or data science are good ideas seeking an information security career.
However, do keep in mind that it is not completely unheard of to have a career in cybersecurity without a degree ; bootcamps and certifications can provide the necessary skills to succeed for highly-motivated candidates. Some of the certifications explicitly mentioned by job postings analyzed by Fortune include:
Certificated Information Systems Security Professional ( CISSP ) by ISC2
Systems Security Certified Practitioner ( SSCP ) by ISC2
Certified Cloud Security Professional ( CSSP ) by ISC2
GIAC Information Security Fundamentals ( GISF ) by GIAC
The takeaway
Landing a job as an information security analyst can lead to a long career with a six-figure salary. Cyberattacks are experted to only get more pervasive and complex over the years (thanks in part to the rise of AI technology), so the need for those with the skills in network monitoring and incident response will only increase.
Because the industry is also competitive, those who value constant upskilling will likely see the most career progression. Continuing to learn via certifications and other education pathways will indicate to employers that you are not only invested in being the best cyber expert, but also that you are driven toward helping keep their data safe.
Frequently asked questions
What is the best major for an information security analyst?
The best major to become an information security analyst is cybersecurity or information security itself. Schools without explicit majors in those areas may have concentrations or specializations available within their computer science department.
Being an information security analyst can be a stressful job since one small error could open a door to a cyberattack. The job can also be stressful if you are on an incident response team. Ultimately, no cyber infrastructure is perfect, but being resilient in your work can help prevent vulnerabilities.
What is the best major for an information security analyst?
The best major to become an information security analyst is cybersecurity or information security itself. Schools without explicit majors in those areas may have concentrations or specializations available within their computer science department.
Information security analysts do not typically code on a daily basis, but having proficiency in languages like Python , Ruby, and SQL can only help your candidacy.
Is security analyst a stressful job?
Being an information security analyst can be a stressful job since one small error could open a door to a cyberattack. The job can also be stressful if you are on an incident response team. Ultimately, no cyber infrastructure is perfect, but being resilient in your work can help prevent vulnerabilities.
What is the best major for an information security analyst?
The best major to become an information security analyst is cybersecurity or information security itself. Schools without explicit majors in those areas may have concentrations or specializations available within their computer science department.
Get updates delivered to you daily. Free and customizable.
Welcome to NewsBreak, an open platform where diverse perspectives converge. Most of our content comes from established publications and journalists, as well as from our extensive network of tens of thousands of creators who contribute to our platform. We empower individuals to share insightful viewpoints through short posts and comments. It’s essential to note our commitment to transparency: our Terms of Use acknowledge that our services may not always be error-free, and our Community Standards emphasize our discretion in enforcing policies. We strive to foster a dynamic environment for free expression and robust discourse through safety guardrails of human and AI moderation. Join us in shaping the news narrative together.
Most Popular
Comments / 0