How much does a cybersecurity analyst make?
a year · about $62 an hour
A typical cybersecurity analyst in the United States makes $129,180 a year, about $62 an hour, about 2.5× a typical US worker (median, May 2025, US Bureau of Labor Statistics).
What do they do?
They scan security alerts for strange activity or virus clues, investigate risks, and strengthen firewalls or data protections. They write reports and explain fixes to coworkers.
Did you know? Cybersecurity analysts help plan for disasters by keeping backup copies of data somewhere else—and they test the steps for restoring computer systems.
Is that a lot?
Compared with jobs you knowIf 100 people had this job
Most earn between $75,090 and $199,850How do you become one?
Most U.S. analysts earn a computing bachelor’s degree, then build related IT experience, often in network or systems administration. Employers may prefer certifications; some people enter through high-school training or registered apprenticeships.
School needed: Usually a bachelor's degree
Good for people who like keeping things organized and figuring things out
Why does pay differ?
In the U.S., pay can differ with experience, job-related certifications, specialized skills, and the employer’s industry and location. Some analysts work extra hours or stay on call, but those hours or personal fame are not shown as automatic pay boosters.
Where does it pay most?
Highest in Washington ($154,940), lowest in Nebraska ($92,550).
See every state
Top 5 and bottom 3 states, typical (median) yearly pay.
Jobs like this
Data table and sources
| Lower earner (10th from bottom) | Typical person (median) | Higher earner (10th from top) | People in this job |
|---|---|---|---|
| $75,090 | $129,180 | $199,850 | about 191,000 |
| State | Typical person (median) | People in this job |
|---|---|---|
| Washington | $154,940 | about 6,000 |
| Maryland | $139,640 | about 9,000 |
| California | $138,570 | about 16,000 |
| Delaware | $137,030 | about 720 |
| Massachusetts | $136,550 | about 6,000 |
Official definition: Plan, implement, upgrade, or monitor security measures for the protection of computer networks and information. Assess system vulnerabilities for security risks and propose and implement risk mitigation strategies. May ensure appropriate security controls are in place that will safeguard digital files and vital electronic infrastructure. May respond to computer security breaches and viruses. Excludes “Computer Network Architects” (15-1241).
Source: US Bureau of Labor Statistics, OEWS May 2025 (bls.gov); descriptions and related jobs from O*NET 31.0. Figures as of May 2025, full-time yearly pay (hourly × 2,080 hours). bls.gov/oes · O*NET OnLine
Pages used for the text
- www.bls.gov/ooh/computer-and-information-technology/information-security-analyst
- www.onetonline.org/link/summary/15-1212.00
- niccs.cisa.gov/sites/default/files/documents/pdf/cybersecurity%20career%20paths%
Data: US BLS OEWS, May 2025 · 1 USD = 150 JPY