$Who Earns What

How much does a cybersecurity analyst make?

US Information Security Analysts

Answer: A typical cybersecurity analyst in the United States makes $129,180 a year (median, May 2025, US Bureau of Labor Statistics).

Yearly pay of a typical person doing this job in the US
$129,180

Line up 100 people; this is the one in the middle (median). about 191,000 people work in this job. Well above the US-wide typical pay ($50,980).

Lower earner
$75,090
10th from the bottom of 100
Typical person
$129,180
Right in the middle (median)
Higher earner
$199,850
10th from the top of 100

If 100 people had this job

Lowest at bottom-left, highest at top-right

Hover over a person to see their yearly pay

49 of 100
not many

Cybersecurity analyst pay in the United States (May 2025, median and spread)

Cybersecurity analyst pay in the United States (May 2025, median and spread) — Data: US BLS OEWS, May 2025
Lower earner (10th from bottom)Typical person (median)Higher earner (10th from top)People in this job
$75,090$129,180$199,850about 191,000
States where cybersecurity analysts earn the most (median, May 2025)
StateTypical person (median)People in this job
Washington$154,940about 6,000
Maryland$139,640about 9,000
California$138,570about 16,000
Delaware$137,030about 720
Massachusetts$136,550about 6,000

Why does pay differ?

In the U.S., pay can differ with experience, job-related certifications, specialized skills, and the employer’s industry and location. Some analysts work extra hours or stay on call, but those hours or personal fame are not shown as automatic pay boosters.

What if you lived in a different state?

Pay varies a lot by state in the US
Whole US$129,180
Washington$154,940
Maryland$139,640
California$138,570
Delaware$137,030
Massachusetts$136,550
Oklahoma$94,000
Louisiana$92,990
Nebraska$92,550

Top 5 and bottom 3 states, typical (median) yearly pay.

What does a cybersecurity analyst do?

Plan, implement, upgrade, or monitor security measures for the protection of computer networks and information. Assess system vulnerabilities for security risks and propose and implement risk mitigation strategies. May ensure appropriate security controls are in place that will safeguard digital files and vital electronic infrastructure. May respond to computer security breaches and viruses. Excludes “Computer Network Architects” (15-1241).

What's a typical day like?

They scan security alerts for strange activity or virus clues, investigate risks, and strengthen firewalls or data protections. They write reports and explain fixes to coworkers.

How to get this job

Most U.S. analysts earn a computing bachelor’s degree, then build related IT experience, often in network or systems administration. Employers may prefer certifications; some people enter through high-school training or registered apprenticeships.

Usually a bachelor's degree (preparation level 4 of 5)

Good for people who like keeping things organized and figuring things out.

Did you know?

Cybersecurity analysts help plan for disasters by keeping backup copies of data somewhere else—and they test the steps for restoring computer systems.

Similar jobs

Jobs using similar skills (O*NET)

Earn more in the same field

Computer and Mathematical jobs that pay a bit more

Sources and data

Source: US Bureau of Labor Statistics, OEWS May 2025 (bls.gov); descriptions and related jobs from O*NET 31.0. Figures as of May 2025, full-time yearly pay (hourly × 2,080 hours). bls.gov/oes · O*NET OnLine

Pages used for the text

Data: US BLS OEWS, May 2025 · 1 USD = 150 JPY