Information Security Analysts
Plan, implement, upgrade, or monitor security measures for the protection of computer networks and information. Assess system vulnerabilities for security risks and propose and implement risk mitigation strategies. May ensure appropriate security controls are in place that will safeguard digital files and vital electronic infrastructure. May respond to computer security breaches and viruses.
- O*NET-SOC code
15-1212.00 - Preparation Job Zone Four: Considerable Preparation Needed
Wages
| 10th | 25th | Median | 75th | 90th |
|---|---|---|---|---|
| $75,090 | $97,810 | $129,180 | $163,500 | $199,850 |
By state (50)
| State | Employment | Median annual | Location quotient |
|---|---|---|---|
| Alabama | 4,010 | $122,730 | 1.55 |
| Alaska | 300 | $114,990 | 0.75 |
| Arizona | 3,420 | $125,260 | 0.86 |
| Arkansas | 1,460 | $103,490 | 0.91 |
| California | 15,570 | $138,570 | 0.70 |
| Colorado | 5,700 | $135,220 | 1.62 |
| Connecticut | 1,170 | $130,570 | 0.56 |
| Delaware | 720 | $137,030 | 1.21 |
| District of Columbia | 1,510 | $135,090 | 1.76 |
| Florida | 14,220 | $124,860 | 1.17 |
| Georgia | 6,290 | $128,970 | 1.05 |
| Hawaii | 580 | $126,250 | 0.75 |
| Idaho | 840 | Not available | 0.80 |
| Illinois | 5,260 | $124,180 | 0.70 |
| Indiana | 2,260 | $101,420 | 0.58 |
| Iowa | 1,160 | $119,710 | 0.61 |
| Kansas | 1,830 | $100,620 | 1.04 |
| Kentucky | 1,680 | $103,630 | 0.69 |
| Louisiana | 720 | $92,990 | 0.30 |
| Maine | 400 | $101,730 | 0.51 |
| Maryland | 8,650 | $139,640 | 2.55 |
| Massachusetts | 6,100 | $136,550 | 1.37 |
| Michigan | 3,280 | $106,230 | 0.61 |
| Minnesota | 2,680 | $130,710 | 0.74 |
| Mississippi | 480 | $87,690 | 0.33 |
| Missouri | 3,260 | $103,440 | 0.91 |
| Montana | 380 | $81,950 | 0.60 |
| Nebraska | 1,210 | $92,550 | 0.97 |
| Nevada | 1,330 | $106,200 | 0.70 |
| New Hampshire | 590 | $124,000 | 0.70 |
| New Jersey | 4,860 | $134,820 | 0.92 |
| New Mexico | 2,470 | $130,070 | 2.32 |
| New York | 10,060 | $134,660 | 0.85 |
| North Carolina | 8,670 | $131,540 | 1.43 |
| North Dakota | 310 | $107,540 | 0.59 |
| Ohio | 6,010 | $110,480 | 0.88 |
| Oklahoma | 1,640 | $94,000 | 0.78 |
| Oregon | 2,250 | Not available | 0.93 |
| Pennsylvania | 4,660 | $117,770 | 0.63 |
| Rhode Island | 710 | $109,420 | 1.15 |
| South Carolina | 1,720 | $105,800 | 0.61 |
| South Dakota | 770 | $116,640 | 1.37 |
| Tennessee | 3,330 | $115,430 | 0.83 |
| Texas | 16,130 | $129,890 | 0.94 |
| Utah | 1,910 | $99,690 | 0.90 |
| Vermont | 220 | $109,750 | 0.59 |
| Virginia | 19,120 | $134,900 | 3.80 |
| Washington | 6,030 | $154,940 | 1.38 |
| Wisconsin | 2,130 | $101,550 | 0.59 |
| Wyoming | 140 | $98,710 | 0.39 |
Similar occupations
Similarity is our measure: the cosine of importance x level over all 120 O*NET skills, knowledge areas and abilities. It is not an O*NET finding. More.
Circles are the 20 most similar occupations, coloured by Job Zone. Lines join pairs where one is among the other's 10 most similar; darker lines are pairs O*NET also lists as related. Drag a circle to move it out of the way; select one to open it.
| # | Occupation | Job Zone | Similarity |
|---|---|---|---|
| 1 | Database Administrators | 4 | 0.981 |
| 2 | Computer Network Architects | 4 | 0.974 |
| 3 | Computer Systems Engineers/Architects | 3 | 0.973 |
| 4 | Penetration Testers | 4 | 0.973 |
| 5 | Computer Systems Analysts | 4 | 0.971 |
| 6 | Web Administrators | 4 | 0.970 |
| 7 | Information Security Engineers | 4 | 0.969 |
| 8 | Computer and Information Systems Managers | 4 | 0.968 |
| 9 | Digital Forensics Analysts | 4 | 0.968 |
| 10 | Software Quality Assurance Analysts and Testers | 4 | 0.964 |
One skill away
Among the 50 occupations most similar to Information Security Analysts, those at the same Job Zone or lower, where exactly one skill rated at least 3 in importance needs a level more than 0.75 points higher (on O*NET's 0-7 level scale). Our definition. Change the thresholds.
| Occupation | Skill to build | Level gap | Similarity |
|---|---|---|---|
| Penetration Testers | Programming | 1.87 | 0.973 |
| Information Security Engineers | Programming | 1.13 | 0.969 |
| Computer Network Support Specialists | Troubleshooting | 1.24 | 0.958 |
| Computer User Support Specialists | Troubleshooting | 1.00 | 0.952 |
| Logistics Analysts | Mathematics | 1.37 | 0.951 |
| Software Developers | Technology Design | 1.50 | 0.950 |
| Power Distributors and Dispatchers | Operation and Control | 2.24 | 0.947 |
| Intelligence Analysts | Reading Comprehension | 0.76 | 0.944 |
| Business Intelligence Analysts | Mathematics | 1.50 | 0.942 |
| Environmental Compliance Inspectors | Science | 1.63 | 0.935 |
Software to learn next
Software used by at least 3 of the 20 occupations most similar to Information Security Analysts, excluding software Information Security Analysts already lists and any you named. Ranked by how many of them use it, weighted by how much more common it is among them than across all occupations (lift). Our ranking.
| Software | Similar jobs using it | Lift |
|---|---|---|
| Microsoft ActiveX | 10 of 20 | 25.6x |
| Spring Boot | 9 of 20 | 29.7x |
| Quest Erwin Data Modeler | 10 of 20 | 19.2x |
| IBM Terraform | 8 of 20 | 36.9x |
| IBM InfoSphere DataStage | 10 of 20 | 17.8x |
| ServiceNow | 9 of 20 | 23.1x |
| Dynamic hypertext markup language DHTML | 10 of 20 | 16.5x |
| Transact-SQL | 9 of 20 | 21.9x |
| JUnit | 9 of 20 | 20.8x |
| IBM DB2 | 8 of 20 | 28.4x |
Skills
From O*NET data. Importance is rated 1 to 5 and level 0 to 7.
| Skill | Type | Importance | Level |
|---|---|---|---|
| Reading Comprehension | Essential skill | 4.00 | 4.12 |
| Critical Thinking | Essential skill | 3.88 | 4.12 |
| Active Listening | Essential skill | 3.75 | 3.88 |
| Complex Problem Solving | Transferable skill | 3.75 | 3.62 |
| Speaking | Essential skill | 3.62 | 3.75 |
| Writing | Essential skill | 3.50 | 3.75 |
| Monitoring | Essential skill | 3.38 | 3.88 |
| Judgment and Decision Making | Transferable skill | 3.38 | 3.62 |
| Systems Analysis | Transferable skill | 3.38 | 3.38 |
| Active Learning | Essential skill | 3.25 | 3.88 |
| Time Management | Transferable skill | 3.12 | 3.12 |
| Systems Evaluation | Transferable skill | 3.00 | 3.38 |
| Operations Monitoring | Transferable skill | 3.00 | 3.12 |
| Quality Control Analysis | Transferable skill | 3.00 | 3.12 |
| Coordination | Transferable skill | 3.00 | 3.00 |
| Instructing | Transferable skill | 2.88 | 3.12 |
| Learning Strategies | Essential skill | 2.88 | 3.12 |
| Management of Personnel Resources | Transferable skill | 2.88 | 2.88 |
| Service Orientation | Transferable skill | 2.88 | 2.75 |
| Social Perceptiveness | Transferable skill | 2.75 | 2.75 |
| Persuasion | Transferable skill | 2.62 | 2.88 |
| Negotiation | Transferable skill | 2.62 | 2.75 |
| Programming | Transferable skill | 2.62 | 2.25 |
| Operations Analysis | Transferable skill | 2.50 | 2.50 |
| Mathematics | Essential skill | 2.25 | 2.38 |
| Technology Design | Transferable skill | 2.12 | 2.12 |
| Troubleshooting | Transferable skill | 2.12 | 1.88 |
| Science | Essential skill | 1.88 | 1.62 |
| Management of Financial Resources | Transferable skill | 1.75 | 1.12 |
| Equipment Selection | Transferable skill | 1.75 | 1.00 |
| Management of Material Resources | Transferable skill | 1.75 | 1.00 |
| Operation and Control | Transferable skill | 1.75 | 0.88 |
| Equipment Maintenance | Transferable skill | 1.62 | 0.88 |
| Repairing | Transferable skill | 1.62 | 0.75 |
| Installation | Transferable skill | 1.50 | 0.50 |
Knowledge (33) and abilities (52)
| Name | Importance | Level |
|---|---|---|
| Computers and Electronics | 4.35 | 5.97 |
| English Language | 4.26 | 4.20 |
| Administration and Management | 3.68 | 3.79 |
| Telecommunications | 3.64 | 3.95 |
| Engineering and Technology | 3.64 | 3.88 |
| Customer and Personal Service | 3.42 | 4.14 |
| Public Safety and Security | 3.27 | 3.34 |
| Education and Training | 3.19 | 4.24 |
| Mathematics | 2.87 | 3.53 |
| Communications and Media | 2.80 | 2.61 |
| Law and Government | 2.70 | 2.82 |
| Administrative | 2.69 | 3.13 |
| Personnel and Human Resources | 2.44 | 3.02 |
| Production and Processing | 2.41 | 2.24 |
| Design | 2.40 | 2.76 |
| Economics and Accounting | 2.29 | 2.17 |
| Psychology | 2.09 | 2.44 |
| Sociology and Anthropology | 1.71 | 1.58 |
| Mechanical | 1.68 | 1.34 |
| Transportation | 1.61 | 0.86 |
| Geography | 1.59 | 1.25 |
| Sales and Marketing | 1.51 | 0.92 |
| Physics | 1.37 | 0.82 |
| Building and Construction | 1.34 | 1.03 |
| Foreign Language | 1.31 | not rated |
| Chemistry | 1.23 | not rated |
| Philosophy and Theology | 1.19 | not rated |
| History and Archeology | 1.13 | not rated |
| Therapy and Counseling | 1.10 | not rated |
| Medicine and Dentistry | 1.06 | not rated |
| Biology | 1.04 | not rated |
| Fine Arts | 1.02 | not rated |
| Food Production | 1.02 | not rated |
| Name | Importance | Level |
|---|---|---|
| Oral Comprehension | 4.00 | 4.25 |
| Deductive Reasoning | 4.00 | 4.12 |
| Inductive Reasoning | 4.00 | 4.12 |
| Problem Sensitivity | 4.00 | 4.12 |
| Written Comprehension | 4.00 | 4.12 |
| Written Expression | 3.88 | 4.00 |
| Information Ordering | 3.88 | 3.88 |
| Oral Expression | 3.75 | 4.12 |
| Near Vision | 3.75 | 3.88 |
| Category Flexibility | 3.50 | 3.62 |
| Flexibility of Closure | 3.38 | 3.50 |
| Speech Recognition | 3.38 | 3.12 |
| Speech Clarity | 3.38 | 3.00 |
| Selective Attention | 3.12 | 3.12 |
| Fluency of Ideas | 3.00 | 3.75 |
| Originality | 3.00 | 3.25 |
| Perceptual Speed | 3.00 | 3.00 |
| Speed of Closure | 2.88 | 3.00 |
| Visualization | 2.75 | 3.00 |
| Mathematical Reasoning | 2.75 | 2.88 |
| Time Sharing | 2.75 | 2.88 |
| Far Vision | 2.75 | 2.75 |
| Finger Dexterity | 2.38 | 2.12 |
| Memorization | 2.25 | 2.75 |
| Number Facility | 2.25 | 2.75 |
| Visual Color Discrimination | 2.12 | 1.88 |
| Arm-Hand Steadiness | 2.00 | 1.75 |
| Hearing Sensitivity | 1.88 | 1.75 |
| Manual Dexterity | 1.88 | 1.62 |
| Control Precision | 1.88 | 1.50 |
| Auditory Attention | 1.75 | 1.50 |
| Depth Perception | 1.75 | 0.75 |
| Trunk Strength | 1.62 | 1.00 |
| Extent Flexibility | 1.62 | 0.75 |
| Dynamic Strength | 1.38 | 0.50 |
| Wrist-Finger Speed | 1.38 | 0.38 |
| Response Orientation | 1.12 | not rated |
| Stamina | 1.12 | not rated |
| Dynamic Flexibility | 1.00 | not rated |
| Explosive Strength | 1.00 | not rated |
| Glare Sensitivity | 1.00 | not rated |
| Gross Body Coordination | 1.00 | not rated |
| Gross Body Equilibrium | 1.00 | not rated |
| Multilimb Coordination | 1.00 | not rated |
| Night Vision | 1.00 | not rated |
| Peripheral Vision | 1.00 | not rated |
| Rate Control | 1.00 | not rated |
| Reaction Time | 1.00 | not rated |
| Sound Localization | 1.00 | not rated |
| Spatial Orientation | 1.00 | not rated |
| Speed of Limb Movement | 1.00 | not rated |
| Static Strength | 1.00 | not rated |
Software used
Examples from O*NET data. "Hot" and "in demand" are O*NET flags for technologies often listed in job postings.
- Amazon Web Services AWS software in demand
- Linux in demand
- Microsoft Azure software in demand
- Microsoft Excel in demand
- Microsoft Office software in demand
- Microsoft PowerPoint in demand
- Microsoft PowerShell in demand
- Python in demand
- Splunk Enterprise in demand
- UNIX in demand
- Firewall software in demand
- MITRE ATT&CK software in demand
- Tenable Nessus in demand
- eMASS in demand
- AJAX hot
- Amazon DynamoDB hot
- Amazon Elastic Compute Cloud EC2 hot
- Amazon Redshift hot
- Amazon Web Services AWS CloudFormation hot
- Ansible software hot
- Apache Cassandra hot
- Apache Hadoop hot
- Apache Hive hot
- Apache Kafka hot
- Apache Maven hot
- Apache Spark hot
- Apache Subversion SVN hot
- Apache Tomcat hot
- Apple macOS hot
- Atlassian Confluence hot
All 245
- Atlassian JIRA hot
- Bash hot
- Border Gateway Protocol BGP hot
- C hot
- C# hot
- C++ hot
- Chef hot
- Django hot
- Docker hot
- ESRI ArcGIS software hot
- Eclipse IDE hot
- Elasticsearch hot
- Epic Systems hot
- Extensible markup language XML hot
- Git hot
- GitHub hot
- Go hot
- Google Angular hot
- Hypertext markup language HTML hot
- JavaScript hot
- JavaScript Object Notation JSON hot
- Microsoft .NET Framework hot
- Microsoft ASP.NET hot
- Microsoft Access hot
- Microsoft Active Directory hot
- Microsoft Active Server Pages ASP hot
- Microsoft Project hot
- Microsoft SQL Server hot
- Microsoft SQL Server Integration Services SSIS hot
- Microsoft SQL Server Reporting Services SSRS hot
- Microsoft SharePoint hot
- Microsoft Teams hot
- Microsoft Visio hot
- Microsoft Visual Basic hot
- Microsoft Visual Basic for Applications VBA hot
- Microsoft Visual Studio hot
- Microsoft Windows hot
- Microsoft Windows Server hot
- Microsoft Word hot
- MongoDB hot
- MySQL hot
- NoSQL hot
- Node.js hot
- Oracle Database hot
- Oracle Java hot
- Oracle PL/SQL hot
- Oracle PeopleSoft hot
- PHP hot
- Perl hot
- PostgreSQL hot
- Puppet hot
- Red Hat Enterprise Linux hot
- Red Hat OpenShift hot
- Ruby hot
- SAP software hot
- SAS hot
- Salesforce software hot
- Scala hot
- Selenium hot
- Shell script hot
- Spring Framework hot
- Structured query language SQL hot
- Swift hot
- Tableau hot
- Teradata Database hot
- The MathWorks MATLAB hot
- UNIX Shell hot
- 3M Post-it App
- Access management software
- AccessData FTK
- Active directory software
- Adobe ActionScript
- Advanced business application programming ABAP
- Amazon Simple Storage Service S3
- Anti-Trojan software
- Anti-phishing software
- Anti-spyware software
- Apache Ant
- Apache Groovy
- Apache HTTP Server
- Apache Pig
- Apache Solr
- Apache Struts
- ArcSight Enterprise Threat and Risk Management
- Atlassian Bamboo
- Automated audit trail analysis software
- Automated installation software
- Automated media tracking software
- Backup and archival software
- Berkeley Internet Domain Name BIND
- Blackboard software
- Blink
- Check Point Next Generation Secure Web Gateway
- Cisco Systems CiscoWorks
- Citrix cloud computing software
- Common business oriented language COBOL
- Computer forensic software
- Conformance and validation testing software
- Cryptographic key management software
- Customer information control system CICS
- Delphi Technology
- Diameter
- Domain name system DNS
- Drupal
- End-to-end encryption software
- Enterprise JavaBeans
- Ethereal
- Extensible hypertext markup language XHTML
- Geographic information system GIS software
- Google Sites
- Guidance Software EnCase Forensic
- HP Fortify
- HP WebInspect
- Hewlett Packard HP-UX
- Honeypot
- Human resource management software HRMS
- IBM Cognos Impromptu
- IBM Domino
- IBM Notes
- IBM Power Systems software
- IBM QRadar SIEM
- IBM Tivoli Access Management TAM
- IBM Tivoli Identity Management TIM
- IBM WebSphere
- ISS RealSecure
- Imperva SecureSphere
- Integrated development environment IDE software
- Integrity verification software
- Intrusion detection system IDS
- Intrusion prevention system IPS
- IpFilter
- IpTables
- Job control language JCL
- Juniper Networks NetScreen-Security Manager
- Kali Linux
- Keystroke monitoring software
- KornShell
- LAMP Stack
- LexisNexis
- Link encryption software
- McAfee
- McAfee VirusScan
- Metasploit
- Micro Focus OpenView
- MicroStrategy
- Microsoft Dynamics
- Microsoft Exchange
- Microsoft Hyper-V Server
- Microsoft Visual Basic Scripting Edition VBScript
- Nagios
- National Instruments LabVIEW
- Network and system vulnerability assessment software
- Network directory services software
- Network intrusion prevention systems NIPS
- Network security auditing software
- Network, hardware, and software auditing software
- Norton AntiVirus
- NortonLifeLock cybersecurity software
- Objective C
- Oracle Business Intelligence Enterprise Edition
- Oracle E-Business Suite Financials
- Oracle Fusion Applications
- Oracle Fusion Middleware
- Oracle Hyperion
- Oracle JD Edwards EnterpriseOne
- Oracle JDBC
- Oracle JavaServer Pages JSP
- Oracle Net Manager
- Oracle PeopleSoft Financials
- Oracle Solaris
- Oracle WebLogic Server
- Palo Alto Networks Next-Generation Security Platform
- Password cracker software
- Password management software
- Patch and update management software
- Penetration testing software
- Perforce Helix software
- Ping Identity
- Portswigger BurP Suite
- Program checksumming software
- Qlik Tech QlikView
- Qualys Cloud Platform
- Quest BigBrother
- Rapid7 Nexpose
- Red Hat WildFly
- Relational database management software
- Remote authentication dial-in user service RADIUS software
- Root kit detection software
- Ruby on Rails
- SAP Crystal Reports
- Secure internet filtering software
- Secure shell SSH software
- Security incident management software
- Security risk assessment software
- Smart card management software
- Sniffer Investigator
- Snort
- Stack smashing protection SSP software
- Supervisory control and data acquisition SCADA software
- Symantec Blue Coat Data Loss Prevention
- Symantec Endpoint Protection
- System and data disaster recovery software
- System testing software
- Tcpdump
- Trend Micro TippingPoint
- Ubuntu
- Unified modeling language UML
- VMware
- Veritas NetBackup
- Virtual private networking VPN software
- Virus scanning software
- Voice over internet protocol VoIP system software
- Websense Data Loss Prevention
- WinMerge
- Wireshark
Where it concentrates
Metro areas ranked by BLS location quotient: the occupation's share of the area's jobs divided by its share of all US jobs. Above 1 means more concentrated than the nation. Metros employing fewer than 100 are left out.
| Metro area | Employment | Location quotient | Median annual |
|---|---|---|---|
| Huntsville, AL | 1,840 | 5.63 | $130,330 |
| Washington-Arlington-Alexandria, DC-VA-MD-WV | 16,560 | 4.31 | $148,950 |
| Lexington Park, MD | 320 | 3.74 | $121,470 |
| Baltimore-Columbia-Towson, MD | 4,600 | 2.77 | $138,170 |
| Raleigh-Cary, NC | 2,510 | 2.75 | $143,640 |
| Colorado Springs, CO | 1,000 | 2.59 | $130,880 |
| Crestview-Fort Walton Beach-Destin, FL | 400 | 2.59 | $108,420 |
| Albuquerque, NM | 1,240 | 2.50 | $129,560 |
| Peoria, IL | 460 | 2.26 | $132,090 |
| Boulder, CO | 520 | 2.22 | $154,990 |