Cybersecurity Analyst (Information Security Analyst)
IT/Cyber · $124,910 median · 12–104 weeks training · Structurally WPE-eligible
How we know this
The wage and outlook figures are verified against the U.S. Bureau of Labor Statistics. We show our sources so you can check every number yourself.
Honest tradeoffs
entry level market tightening
The cybersecurity entry-level job market tightened materially through 2024-2026. Many listings for "entry-level" positions actually require 2-3 years experience plus certifications, creating a known 'experience paradox' for new entrants. Apprenticeship and internship pathways are now the most reliable break-in routes.
ai displacement at entry level
Tier-1 SOC analyst work is being significantly augmented or partially displaced by AI tools over a 5-10 year horizon. Career-path planning matters more than in physical trades.
Wages
Earnings by career stage
range · estimatedResearched estimates by experience level, setting, and region — see the full breakdown below. The BLS median is the one figure verified directly against bls.gov.
Pay by stage & setting
- Entry-level SOC analyst (post-cert, no experience) $58-78K at managed security service providers
- Junior cyber analyst at mid-size company $75-105K
- Experienced security analyst $105-145K
- Senior analyst / security engineer $130-180K
- Staff/principal security engineer $170-235K at major tech
- CISO (Chief Information Security Officer) at established company $200-450K+. Specialty premium for cloud security (AWS/Azure/GCP), application security, incident response, penetration testing, and governance/risk/compliance. Government cyber positions (DoD, intel community) often require security clearance — TS/SCI clearance adds $15-30K premium and opens highest-paying contractor positions. Geographic variation is significant but increasingly compressed due to remote work normalization.
Workforce Pell eligibility
This path's typical training duration fits under the federal Workforce Pell 599-hour cap. State approval status varies — check the Workforce Pell tracker.
Open the Workforce Pell tracker →Training
That's a wide span on purpose: you can start working after a short pre-apprenticeship or entry course, while the longer figure reflects a full apprenticeship. The career ladder below breaks the journey into steps.
Ways in
Paid, on-the-job training combined with classroom hours — you get a wage from day one instead of paying tuition.
Common sponsors: Apprenti (apprenticareers.org), CompTIA Apprenticeships for Tech (CAT), individual employer programs (Microsoft Apprentice, AWS reStart→Apprentice, IBM SkillsBuild)
An associate degree or certificate — usually the fastest accredited credential, far cheaper than a four-year school, and often Workforce Pell–eligible.
Credentials you'll earnwith typical prep time
CompTIA Security+ (SY0-701 current exam)
CompTIA
Entry-level baseline cyber cert. Required for DoD 8570 Approved Baseline IAT II compliance, which makes it effectively mandatory for federal cyber roles.
Source ↗ISC2 CC (Certified in Cybersecurity)
ISC2 (International Information System Security Certification Consortium)
Entry-level alternative or supplement to Security+. ISC2 has been actively promoting at low cost as on-ramp to CISSP later.
Source ↗Cost vs. payoff
Cost vs. payoff
- Training cost
- $800–$18,000
- Time to start earning
- ~12 weeks
- Pays for itself in
- about 7 weeks
- Typical debt
- ~$30,000
- Time to start earning
- ~4 years
- Pays for itself in
- varies widely
We're not anti-college — for many careers a degree is the right call. But the honest gap is real: this path starts paying while a 4-year student is still accumulating cost. Degree figures are a national reference (average borrower debt ~$29–38K; sources vary), not a guarantee for any specific school or major.
Getting started — your first moves
- 1
Find an apprenticeship
Apply to a registered apprenticeship — you earn a paycheck from day one while you train, instead of paying tuition.
- 2
Earn your first credential
Study for and pass the CompTIA Security+ (SY0-701 current exam).
- 3
Get hired and grow
Land an entry role and start building experience — pay climbs as you move up the career ladder above.
See it where you live
The figures above are national. Pay and programs vary a lot by state — pick yours and we'll send you straight to the official local data, no guessing.
Career ladder
SOC Analyst / Security Analyst (entry)
Entry$75,000Entry tier; managed security service providers (MSSPs) and government cyber positions hire heavily
Training: CompTIA Security+ or CySA+ + portfolio + Apprenti/Microsoft LEAP or direct hire at MSSP
Senior Security Analyst
Year 3$105,000Significant wage jump; clear specialty paths (cloud security, app sec, incident response)
Training: CISSP or CCSP + 3-5 years experience + cloud security specialty (AWS, Azure, GCP)
Security Engineer / Architect
Year 6$150,000Senior IC tier; specialty paths (app sec, cloud sec architect, GRC, incident response)
Training: Cloud security specialty depth + system design + leadership
Principal Security Engineer / CISO
Year 10$220,000Ceiling tier; CISO at established company $250-450K+; government clearance significant premium
Training: Specialized depth + leadership development + executive presence
State licensure
No state-specific licensure requirements documented in corpus.
Data limitations
- • BLS OEWS May 2025 per-occupation detail tables not yet pushed; May 2024 used
- • Per-MSA cyber wage tables not yet populated
- • Apprenti per-metro cohort calendars not verified
- • DoD 8140 transition impact on cert requirements not fully cataloged
Not sure Cybersecurity Analyst (Information Security Analyst) is the one?
Answer five quick questions to see the paths that fit you best.