SalaryCalculations

Information Security Analysts Salary

Computer and Mathematical Occupations · 191K employed in the U.S.

Median annual

$129,180

Median hourly

$62

Average annual

$132,510

Typical range

$75,090–$199,850

Pay distribution

10th to 90th percentile, with the median marked.

10th$75,090
25th$97,810
Median$129,180
75th$163,500
90th$199,850

What this role pays

The median annual salary for Information Security Analysts is $129,180 as of May 2025, based on the U.S. Bureau of Labor Statistics Occupational Employment and Wage Statistics (OEWS) survey. That works out to about $62 an hour at a full-time schedule.

Plan, implement, upgrade, or monitor security measures for the protection of computer networks and information. Assess system vulnerabilities for security risks and propose and implement risk mitigation strategies.

Most earn between $75,090 and $199,850 a year. There are roughly 191K people employed as information security analysts in the United States. Use the state and metro pages below to see how pay changes by location, and the calculator to convert any hourly or annual figure.

Salary calculator

Convert your pay and see where it lands for Information Security Analysts.

Hourly
$62.11
Daily
$497
Weekly
$2,484
Bi-weekly
$4,968
Monthly
$10,765
Annual
$129,180

$129,180 a year is around the 50th percentile for Information Security Analystss. The median is $129,180.

Highest-paying states

Median annual wage by state.

Top-paying metro areas

Median annual wage by metro area.

  • 1San Jose-Sunnyvale-Santa Clara, CA$176,120
  • 2San Francisco-Oakland-Fremont, CA$162,310
  • 3Seattle-Tacoma-Bellevue, WA$161,780
  • 4Boulder, CO$154,990
  • 5Asheville, NC$149,350
  • 6Washington-Arlington-Alexandria, DC-VA-MD-WV$148,950
  • 7Wilmington, NC$145,170
  • 8Raleigh-Cary, NC$143,640
  • 9New York-Newark-Jersey City, NY-NJ$140,470
  • 10Baltimore-Columbia-Towson, MD$138,170
  • 11Vallejo, CA$137,160
  • 12Denver-Aurora-Centennial, CO$136,670

Related job titles

Employers advertise Information Security Analysts roles under these titles.

Related occupations

What a Information Security Analysts does

  • Develop plans to safeguard computer files against accidental or unauthorized modification, destruction, or disclosure and to meet emergency data processing needs.
  • Monitor current reports of computer viruses to determine when to update virus protection systems.
  • Encrypt data transmissions and erect firewalls to conceal confidential information as it is being transmitted and to keep out tainted digital transfers.
  • Perform risk assessments and execute tests of data processing system to ensure functioning of data processing activities and security measures.
  • Modify computer security files to incorporate new software, correct errors, or change individual access status.
  • Review violations of computer security procedures and discuss procedures with violators to ensure violations are not repeated.
  • Document computer security and emergency measures policies, procedures, and tests.
  • Confer with users to discuss issues such as computer data access needs, security violations, and programming changes.

Frequently asked questions

How much does a Information Security Analysts make?
The median annual wage for Information Security Analysts is $129,180 ($62 per hour). Pay ranges from about $75,090 at the 10th percentile to $199,850 at the 90th percentile.
What is the average salary for a Information Security Analysts?
The average (mean) annual salary is $132,510, which is higher than the median because a small number of high earners pull the average up.
Which state pays Information Security Analystss the most?
Washington has the highest median annual wage for this occupation at $154,940.
Is Information Security Analysts a growing occupation?
BLS employment data for May 2025 counts about 191K people in this occupation. Projected growth is published separately in the BLS Employment Projections program.
What does a Information Security Analysts do?
Develop plans to safeguard computer files against accidental or unauthorized modification, destruction, or disclosure and to meet emergency data processing needs.; Monitor current reports of computer viruses to determine when to update virus protection systems.; Encrypt data transmissions and erect firewalls to conceal confidential information as it is being transmitted and to keep out tainted digital transfers..