The digital nature of the information age has changed how we store, communicate, and deliver countless bits of information — improving everyday life and business. However, it also increases the risk of data breach, a trend heading in the wrong direction as evidenced by the 15.1 billion records exposed in 2019, a 284% increase from 2018.
As a result, information and cybersecurity analysts are in high demand. These professionals are responsible for installing defense measures, tracking network activity, performing threat analysis, and conducting internal audits.
While the demand for these professionals continues to grow, so do the expectations for skills, education, and certifications. This creates an opportunity for job candidates to vary their skill sets and pursue a master’s degree — further driving salary and career growth.
Becoming a cybersecurity analyst can offer you a lively day-to-day experience — plus plentiful job opportunities and a competitive salary.
According to the U.S. Bureau of Labor Statistics (BLS), jobs for cybersecurity analysts (which includes information security analysts) are expected to grow 31% from 2019 to 2029. In May 2019, the median annual salary for the position was just under $100,000.
The career path offers:
Diverse work environments
Nearly every industry has undergone a digital revolution. As such, all types of businesses, public agencies, nonprofits, and other organizations are in the market for information security talent. If you're interested in the role of analyst, you can find work in:
- Financial institutions
- Health care
- Professional services
- Small businesses
- Computer systems or software design
- Federal, state, or local government
- Charitable foundations
Opportunity to work with leading technologies
There are a range of tactics that cybercriminals can use, from ransomware to social engineering and phishing. Because organizations face a variety of threats, information security analysts typically work hands-on with the latest solutions and tools to combat the constant risks.
For example, not only do cyber and information security analysts commonly manage firewalls and data encryption, but you would also work with artificial intelligence (AI), machine and deep learning, business intelligence analytics, and other advanced software.
Career specialization
Cybersecurity is a broad area of study that can be the starting point to other, more specialized jobs:
- Database administrator
- Computer programmer
- Information systems manager
- Application security designer
- Network architect
- Data scientist
Financial security
As mentioned above, the median annual salary for information security analysts was just under $100,000 in May 2019. However, professionals stand to earn more depending on various factors like their experience and job setting. For example, the top 10% of information security analysts earned more than $158,860.
Here’s a quick look at trends in this industry according to Burning Glass Technologies:
Blended skill set
Increasingly, analysts in cybersecurity are expected to have a mastery of various technical proficiencies, such as SQL and software development, as well as interpersonal skills. Employers look for soft skills such as collaboration, problem-solving, creativity, and oral and verbal communication.
Growing demand for certifications
Certifications are sought after and make you a more competitive job applicant. Consider becoming a Certified Information Systems Security Professional (CISSP) or Certified Information Systems Auditor (CISA).
Industries with the highest levels of employment are:
- Computer systems design and related services
- Management of companies and enterprises
- Credit intermediation and related activities
- Management, scientific, and technical consulting services
- Insurance carriers
The highest concentration of information security analysts are found in these industries:
- Monetary authorities/central banks
- Computer systems design and related services
- Data processing, hosting, and related services
- Telecommunications
- Management of companies and enterprises
Cybersecurity analyst jobs can be found across the country but are especially in demand in large metropolitan and multistate areas. The regions with the highest total employment of information security analysts are:
- Washington, D.C.-Arlington-Alexandria (which encompasses D.C., Virginia, Maryland)
- New York-Newark-New Jersey (New York, New Jersey)
- Dallas-Fort Worth-Arlington (Texas)
- Boston-Cambridge-Nashua (Massachusetts, New Hampshire)
- Atlanta-Sandy Springs-Roswell (Georgia)
- Baltimore-Columbia-Towson (MD)
- Charlotte-Concord-Gastonia (North Carolina)
- Phoenix-Mesa-Scottsdale (Arizona)
- Chicago-Naperville-Elgin (Illinois)
- Los Angeles-Long Beach-Anaheim (California)
In terms of concentration of information security analyst jobs, these places top the list:
- Virginia
- D.C.
- Maryland
- Delaware
- Colorado
Entry-level opportunities
The average annual salary for an entry-level information security analyst was $59,113 in July 2020. Entry-level salaries for related positions include:
- Database administrator - $55,132
- Information systems manager - $58,553
A master's degree is not required for many entry-level positions. But, earning a graduate degree can help you gain the type of diverse skill set and deep technical knowledge needed to advance your career.
Advanced career opportunities
According to PayScale, the average annual salary for a late career information security analyst in 2020 was $100,526, largely in line with the BLS median figure. You can earn much more depending on where and in which industry you work. The five highest-paying metro areas in 2019 were:
- San Jose-Sunnyvale-Santa Clara (CA) - $133,040
- New York-Newark-Jersey City (NY-NJ-PA) - $127,850
- San Francisco-Oakland-Hayward (CA) - $122,570
- Bridgeport-Stamford-Norwalk (CT) - $121,330
- Chambersburg-Waynesboro (PA) - $119,320
Advanced career opportunities are commonly found in:
The financial industry
Central banks, financial institutions, brokers, and other related services must comply to the industry’s high standards. Analysts are depended on to protect valuable customer information, prevent fraud, and ensure their employers are compliant with all regulations governing the privacy and security of financial information
Software and application development
The concept of "secure by design" means developing software and applications that are secure from the ground up. The practice has gained considerable acceptance amid a world of ever-increasing cyber risks. The skills and competencies of information and cybersecurity analysts are highly valued in such settings, meaning you could help build the new smart technology, mobile app, or infrastructure of the future from a security-first perspective.
Information security analysts need both hard and soft skills. Those interested in such careers should focus on building their competency in:
- Testing and auditing systems
- Analytical and critical thinking
- Network architecture
- Project management and stakeholder coordination
- Risk assessment and planning
The role of information security analyst is constantly evolving, evidenced by the increased demand for interpersonal skills. These professionals will be relied on for leadership and organizational relationships as much as they are for their technical know-how and expertise.
Digital proficiency
While soft skills are important, information security at its core is highly technical. This requires professionals in such careers to be proficient in a number of areas. The top requested skills, as measured by the job posting requirements, include:
Top Skill |
Demand |
|---|---|
| Machine Learning | 50.8% |
| Data Science | 43.5% |
| Information Security | 43% |
| Python | 38.7% |
| Linux | 22% |
| SQL | 22% |
| Software Development | 21% |
| Big Data | 19.7% |
| Artificial Intelligence | 19.5% |
Source: Burning Glass Technologies
Technical skills
Here are the top requested technical or specialized skills in job posts for forensic accountants:
- Data visualization
- Data analysis
- Data science
- Machine learning
Soft skills
The same research also found broad demand for interpersonal skills in information security analysts. As organizations increasingly look to break down internal silos and promote greater cross-team functionality, soft skills are listed in the following percentages of job postings:
- Communication: 42%
- Teamwork and collaboration: 39.7%
- Research: 29.2%
- Problem-solving: 19.6%
- Writing: 17.8%
- Planning: 16.8%
- Creativity: 15.7%
- Verbal/oral communication: 8.8%
- Organization: 8.7%
Top emerging skills
Get ahead of the curve. Start developing the skills more job postings are looking for:
Emerging Skill |
Projected Posting Growth (2018–2023) |
|---|---|
| Salesforce Lightning | 283% |
| Deep Learning | 238% |
| Threat Hunting | 237% |
| Microservice | 234% |
| Data Lakes/Reservoirs | 201% |
| Qlik | 190% |
| Cloud Foundry | 181% |
| Golang (Go Programming Language) | 181% |
| Alteryx | 170% |
Source: Burning Glass Technologies
Internships are crucial stepping stones early on in the information security analyst career path. These opportunities can help you gain practical experience and hone your skills in the real world. Consider applying for an information security internship with one of these organizations:
- FBI
- Mayo Clinic
- EY
- SAP
Joining a professional association can boost your career, allowing you to network with and learn from peers. Such opportunities are especially advantageous for career growth and development.
Consider joining one of these information security- and cybersecurity-focused groups if you want to find continuing education and industry connections:
- Information Systems Security Association (ISSA)
- ISACA
- The Institute of Internal Auditors (IIA)
A path to protect the digital world
Cyber information security analysts are vital to the operations of businesses and government. It’s a profession where it’s up to you to protect valuable information through developing security measures, testing processes, and identifying threats. Get started on your cybersecurity career path.
Find your path
Sources
- Risk Based Security — Number of Records Exposed in 2019 Hits 15.1 Billion
- U.S. Bureau of Labor Statistics
- Burning Glass Technologies
- PayScale
- Cyber Security Certifications and Skills: What Employers Want
- FBI Internships
- Mayo Clinic Internships
- EY Internships
- SAP Internships
- Information Systems Security Association (ISSA)
- ISACA
- The Institute of Internal Auditors (IIA)
Need help finding the right program?