Network Administrator
Design, run and secure the networks and servers organizations depend on.
- $99,130
- 1–4 years
Technology career
Cybersecurity Analyst
Also called: Information Security Analyst · SOC Analyst · Security Analyst · Cyber Defense Analyst
What cybersecurity analysts do, what they earn, how long training takes and how to get started, with official BLS pay data and practical, job-level detail.
What does a cybersecurity analyst do?
Cybersecurity analysts protect an organization’s networks, systems and data by monitoring for threats, investigating alerts, responding to incidents, finding vulnerabilities and strengthening defenses. The median pay is $129,180 per year (BLS, May 2025), most people train for about 1–4 years, and employment is projected to grow +21.0% from 2025–35.
Pay data: BLS OEWS, May 2025 · Outlook: BLS 2025–35 · Checked October 15, 2026
- Median pay$129,180$62.11/hour · May 2025
- Job growth+21.0%2025–35, much faster than average
- Openings per year14,100Average, 2025–35
- Typical entry educationBachelor's degreeBLS classification
- Time to train1–4 yearsTypical program length
- U.S. jobs192,900Employment, 2025
What cybersecurity analysts do
Cybersecurity analysts work in security operations centers (SOCs), IT departments, consulting firms and government agencies. They watch security tools for suspicious activity, investigate phishing and malware, coordinate incident response, run vulnerability scans, harden systems and train employees to recognize threats.
BLS lists a bachelor’s degree plus some related work experience as typical. Many analysts start in IT support or networking first. Certifications such as CompTIA Security+ are common entry points, and the field has some of the highest pay and fastest growth of any career we profile.
Typical duties
- Monitor security alerts from SIEM and EDR tools
- Investigate suspicious activity, phishing and malware
- Respond to and document security incidents
- Run vulnerability scans and track remediation
- Configure and maintain security controls
- Analyze threat intelligence
- Train employees and help write security policies
Work environment and schedule
Analysts work in offices, SOCs or remotely, at computers most of the day. Some SOCs operate 24/7. Incidents can create high-pressure situations.
Schedule: Usually full-time; SOC roles may involve shifts, nights, weekends or on-call duty during incidents.
A day in the life
- Review overnight SIEM alerts and the open-incident board in the SOC.
- Investigate a phishing report: analyze headers and links and block the sender domain.
- Triage an EDR alert on a laptop, isolate the device and collect evidence.
- Review this week’s vulnerability scan and prioritize critical patches with IT.
See a full day in the life of a cybersecurity analyst →
Cybersecurity Analyst salary
Half of cybersecurity analysts earned more than $129,180 and half earned less in May 2025. Pay ranged from about $75,090 for the lowest 10% to $199,850 for the top 10%.
Full cybersecurity analyst pay scale and hourly rates →
How to become a cybersecurity analyst
- Learn IT fundamentals
- Get IT experience
- Earn Security+
- Practice hands-on
- Specialize
BLS lists a bachelor’s degree in computer science, cybersecurity or a related field as typical, plus less than five years of related experience. Many analysts start in IT support or networking and use certifications to move into security.
Step-by-step guide to becoming a cybersecurity analyst →
Skills and tools
Technical skills
- Security monitoring and SIEM
- Incident response
- Networking and operating systems
- Vulnerability management
- Threat analysis
People skills
- Analytical thinking
- Calm under pressure
- Clear writing and reporting
- Curiosity
All cybersecurity analyst skills and tools →
Pros and cons
Pros
- Very high pay and much faster than average growth
- Meaningful work protecting organizations and people
- Constant learning and variety
- Remote opportunities
Cons
- High-pressure incidents
- Shift work in some SOCs
- Fast-changing threats require constant study
- Entry-level roles often expect IT experience
Certifications and licenses
- CompTIA Security+: The most common entry-level security certification.
- CompTIA CySA+: Cybersecurity Analyst certification focused on detection and response.
- CISSP (ISC2): An advanced certification requiring several years of experience.
- GIAC certifications: Hands-on certifications such as GSEC and GCIH.
Career path
- SOC Analyst (Tier 1): Monitor and triage alerts.
- Security Analyst or Incident Responder: Investigate and lead incident response.
- Security Engineer or Threat Hunter: Build defenses and hunt advanced threats.
- Security Manager or CISO: Lead security programs.
Learn the job before day one
Our Cybersecurity Analyst training (12 hours, $109.99) covers the role, 15+ key terms, step-by-step procedures such as triage a reported phishing email and prioritize vulnerability scan results, safety and how to land your first job.
Related careers
IT Support Specialist
Help people solve computer, account and network problems: the classic way into IT.
- $61,860
- 3–6 months
Web Developer
Build fast, accessible websites and web applications people love to use.
- $92,650
- 6 months to 4 years
Occupational Safety Specialist
Find workplace hazards, train workers and keep companies compliant with OSHA.
- $90,150
- 2–4 years
Compare: Cybersecurity Analyst vs. Network Administrator · Cybersecurity Analyst vs. IT Support Specialist · Cybersecurity Analyst vs. Web Developer · Cybersecurity Analyst vs. Safety Specialist
Cybersecurity Analyst FAQ
Can you become a cybersecurity analyst without a degree?
Yes, some do, especially with IT experience and certifications such as Security+ and CySA+, though many employers prefer a degree.
How do I get into cybersecurity?
Most people start with IT support or networking, earn Security+, build home-lab skills and then apply for SOC analyst roles.
Is cybersecurity growing?
Yes. BLS projects 21.0% growth for information security analysts from 2025 to 2035: much faster than average.
How much does a cybersecurity analyst make?
The median annual wage for cybersecurity analysts was $129,180 ($62.11 per hour) in May 2025, according to the U.S. Bureau of Labor Statistics. The lowest 10% earned less than $75,090 and the highest 10% earned more than $199,850.
How long does it take to become a cybersecurity analyst?
Most people need about 1–4 years of training. BLS lists a bachelor’s degree in computer science, cybersecurity or a related field as typical, plus less than five years of related experience. Many analysts start in IT support or networking and use certifications to move into security.
Do you need a degree to be a cybersecurity analyst?
Often, but not always. BLS lists a bachelor’s degree as typical, but many analysts get in through IT support experience and certifications such as CompTIA Security+ and CySA+.
More cybersecurity analyst questions →
Sources
- U.S. Bureau of Labor Statistics, BLS Occupational Employment and Wage Statistics (OEWS), May 2025, SOC 15-1212 (Information security analysts).
- U.S. Bureau of Labor Statistics, BLS Employment Projections, Table 1.2 (2025–35).
- O*NET OnLine summary for Information security analysts (U.S. Department of Labor).
- BLS Occupational Outlook Handbook.
Reviewed by the Career Education Institute Curriculum Team. Pay figures are national estimates; local pay varies. See our editorial policy.