How much does a cybersecurity analyst make?
Answer: A typical cybersecurity analyst in the United States makes $129,180 a year (median, May 2025, US Bureau of Labor Statistics).
Line up 100 people; this is the one in the middle (median). about 191,000 people work in this job. Well above the US-wide typical pay ($50,980).
If 100 people had this job
Lowest at bottom-left, highest at top-rightHover over a person to see their yearly pay
Cybersecurity analyst pay in the United States (May 2025, median and spread)
| Lower earner (10th from bottom) | Typical person (median) | Higher earner (10th from top) | People in this job |
|---|---|---|---|
| $75,090 | $129,180 | $199,850 | about 191,000 |
| State | Typical person (median) | People in this job |
|---|---|---|
| Washington | $154,940 | about 6,000 |
| Maryland | $139,640 | about 9,000 |
| California | $138,570 | about 16,000 |
| Delaware | $137,030 | about 720 |
| Massachusetts | $136,550 | about 6,000 |
Why does pay differ?
In the U.S., pay can differ with experience, job-related certifications, specialized skills, and the employer’s industry and location. Some analysts work extra hours or stay on call, but those hours or personal fame are not shown as automatic pay boosters.
What if you lived in a different state?
Pay varies a lot by state in the USTop 5 and bottom 3 states, typical (median) yearly pay.
What does a cybersecurity analyst do?
Plan, implement, upgrade, or monitor security measures for the protection of computer networks and information. Assess system vulnerabilities for security risks and propose and implement risk mitigation strategies. May ensure appropriate security controls are in place that will safeguard digital files and vital electronic infrastructure. May respond to computer security breaches and viruses. Excludes “Computer Network Architects” (15-1241).
What's a typical day like?
They scan security alerts for strange activity or virus clues, investigate risks, and strengthen firewalls or data protections. They write reports and explain fixes to coworkers.
How to get this job
Most U.S. analysts earn a computing bachelor’s degree, then build related IT experience, often in network or systems administration. Employers may prefer certifications; some people enter through high-school training or registered apprenticeships.
Usually a bachelor's degree (preparation level 4 of 5)
Good for people who like keeping things organized and figuring things out.
Did you know?
Cybersecurity analysts help plan for disasters by keeping backup copies of data somewhere else—and they test the steps for restoring computer systems.
Similar jobs
Jobs using similar skills (O*NET)Earn more in the same field
Computer and Mathematical jobs that pay a bit moreSources and data
Source: US Bureau of Labor Statistics, OEWS May 2025 (bls.gov); descriptions and related jobs from O*NET 31.0. Figures as of May 2025, full-time yearly pay (hourly × 2,080 hours). bls.gov/oes · O*NET OnLine
Pages used for the text
- www.bls.gov/ooh/computer-and-information-technology/information-security-analyst
- www.onetonline.org/link/summary/15-1212.00
- niccs.cisa.gov/sites/default/files/documents/pdf/cybersecurity%20career%20paths%
Data: US BLS OEWS, May 2025 · 1 USD = 150 JPY