Data has been effectively deemed a new currency. Across the world, we entrust hundreds of companies with our data, such as name, address, and banking information. However, with cyberattacks continuing to be on the rise, the global relies on skilled information security experts—who often hold training from a top cybersecurity bootcamp or cybersecurity advanced degree—to keep data safe from bad actors.
Unfortunately, there's bad news: There is currently a major shortage of cybersecurity professionals; between 3.5 and 4 million cybersecurity professionals are needed globally to properly protect the world’s data, according to estimates by Cybersecurity Ventures and ISC2. But the good news is the industry is a prime area for individuals to find a long-lasting career—and with a high-paying salary.
Across the U.S., the proof is in the job postings. A simple search of platforms like LinkedIn will yield hundreds of open positions as cybersecurity or information security analysts—and at places other than just the top cybersecurity companies. Organizations with open positions at time of publication include Microsoft, TikTok, Deloitte, AT&T, NVIDIA, Coinbase, Rockstar Games, Marathon, Raytheon, and more. But the need is not unique to the private sector; universities, local governments, and federal agencies are also actively seeking security experts.
What does an information security analyst do?
Information security analysts develop and act on security measures designed to protect an entity’s computer networks and systems, according to the U.S. Bureau of Labor Statistics.
Individuals must be risk-focused, forward-looking, and detail-oriented in the protection data. Experts must be willing to engage in the most up-to-date proactive defensive strategies via firewalls and data encryption as well as be alert and reactive when a breach may have occurred.
Information security roles can take many other titles, including being an analyst, engineer, specialist, or architect in cybersecurity, data security, application security, and beyond.
How much can information security analysts make?
Information security analysts earn median annual pay of about $120,000, says the labor department. However, candidates should take this number with a grain of salt because salary can differ based on one’s experience, education, and location.
Glassdoor estimates that information security analysts earn salaries of about $111,000 (plus an additional $30,000 in additional pay, like bonuses).
Those holding advanced degrees or additional cybersecurity certifications are the ones who tend to have higher salaries due to their skillset.
5 high-paying information security analyst jobs
Note: Data is based on job postings from July 2024; these positions may have since expired or changed.
How can you become an information security analyst?
Individuals interested in the information security field with no experience can get started as soon as today. At a minimum, having a bachelor’s degree is the floor for most roles in tech; studying computer science, cybersecurity, or data science are good ideas seeking an information security career.
However, do keep in mind that it is not completely unheard of to have a career in cybersecurity without a degree; bootcamps and certifications can provide the necessary skills to succeed for highly-motivated candidates. Some of the certifications explicitly mentioned by job postings analyzed by Fortune include:
- Certificated Information Systems Security Professional (CISSP) by ISC2
- Systems Security Certified Practitioner (SSCP) by ISC2
- Certified Cloud Security Professional (CSSP) by ISC2
- Security+ by CompTIA
- GIAC Information Security Fundamentals (GISF) by GIAC
The takeaway
Landing a job as an information security analyst can lead to a long career with a six-figure salary. Cyberattacks are experted to only get more pervasive and complex over the years (thanks in part to the rise of AI technology), so the need for those with the skills in network monitoring and incident response will only increase.
Because the industry is also competitive, those who value constant upskilling will likely see the most career progression. Continuing to learn via certifications and other education pathways will indicate to employers that you are not only invested in being the best cyber expert, but also that you are driven toward helping keep their data safe.
Frequently asked questions
What is the best major for an information security analyst?
The best major to become an information security analyst is cybersecurity or information security itself. Schools without explicit majors in those areas may have concentrations or specializations available within their computer science department.
Check out all of Fortune’s rankings of degree programs, and learn more about specific career paths.
Is security analyst a stressful job?
Being an information security analyst can be a stressful job since one small error could open a door to a cyberattack. The job can also be stressful if you are on an incident response team. Ultimately, no cyber infrastructure is perfect, but being resilient in your work can help prevent vulnerabilities.
What is the best major for an information security analyst?
The best major to become an information security analyst is cybersecurity or information security itself. Schools without explicit majors in those areas may have concentrations or specializations available within their computer science department.
Check out all of Fortune’s rankings of degree programs, and learn more about specific career paths.
Does an information security analyst do coding?
Information security analysts do not typically code on a daily basis, but having proficiency in languages like Python, Ruby, and SQL can only help your candidacy.
Is security analyst a stressful job?
Being an information security analyst can be a stressful job since one small error could open a door to a cyberattack. The job can also be stressful if you are on an incident response team. Ultimately, no cyber infrastructure is perfect, but being resilient in your work can help prevent vulnerabilities.
What is the best major for an information security analyst?
The best major to become an information security analyst is cybersecurity or information security itself. Schools without explicit majors in those areas may have concentrations or specializations available within their computer science department.
Check out all of Fortune’s rankings of degree programs, and learn more about specific career paths.
