Win· Before you ask
How much do information security analysts make?
- Median
- $129,180/year
- Mean
- $132,510/year
Not one number. Five.
What information security analysts in the U.S. earn, from low to high.
Best-paying cities.
The same job pays more in some places.
- 1San Jose, CA$176k
- 2Seattle, WA$162k
- 3Denver, CO$137k
- 4Austin, TX$134k
- 5Atlanta, GA$131k
- 6Phoenix, AZ$130k
- 7Chicago, IL$125k
- 8Miami, FL$125k
- 9Kansas City, MO$104k
- 10Pittsburgh, PA$104k
Thinking of moving?
Put two places side by side for this job.
Three ways to use it.
Information Security Analysts wage guide
Use the published range, job count, place pattern, and survey limits as separate facts. The guide stays tied to SOC 15-1212 and the May 2025 BLS release.
What the national Information Security Analysts median says
The May 2025 BLS OEWS estimate puts the U.S. median for Information Security Analysts at $129,180 per year. Median means the middle. Half of the wage values used for this estimate fall below that point. Half fall above it. The median is not one worker's pay. It is not a job offer. It is one clear mark for the middle of a broad national pay range.
BLS also lists 190,650 wage and salary jobs for Information Security Analysts. That count covers jobs in the survey's scope. It does not count open job ads. It also leaves out people who work for themselves. The wage and job counts share the same May 2025 reference point, so they can be read together without mixing time periods.
The Information Security Analysts mean of $132,510 per year is 2.6% above the $129,180 median on the same published median. Mean means BLS adds the wage values and divides the total by the number of jobs behind the estimate. A gap between mean and median shows that the shape is not even. It does not explain the cause of the gap.
The fields that make SOC 15-1212 its own page
BLS names this record Information Security Analysts and gives it SOC 15-1212. The two-part code is the stable key for this page. A role with a close name keeps a different code, wage row, job count, and area pattern. WageScope never joins two SOC records because their words sound alike.
For SOC 15-1212, the U.S. row reports 190,650 wage and salary jobs. Its annual median is $129,180 per year. Its matching mean is $132,510 per year. These facts come from one national row and one May 2025 release.
SOC 15-1212 appears in 51 state or territory rows. It also has 262 metro rows and 70 nonmetro rows. A missing local row stays missing. We do not fill it with U.S. data or data for a similar job code.
- SOC 15-1212 10th percentile: $75,090 per year.
- SOC 15-1212 25th percentile: $97,810 per year.
- SOC 15-1212 median: $129,180 per year.
- SOC 15-1212 75th percentile: $163,500 per year.
- SOC 15-1212 90th percentile: $199,850 per year.
- SOC 15-1212 employment RSE: 2%. Mean-wage RSE: 0.6%.
- SOC 15-1212 has no national suppression mark in the fields shown on this page.
Read the Information Security Analysts wage ladder from low to high
The 10th percentile is $75,090 per year. The 25th percentile is $97,810 per year. The median is $129,180 per year. The 75th percentile is $163,500 per year. The 90th percentile is $199,850 per year. Each point marks a place in the same national wage spread.
A percentile is a rank point. It is not a career step. For example, the 10th percentile means 10% of wage values are at or below that mark. It does not mean a new worker starts there. The 90th percentile means 90% are at or below that mark. It does not mean a worker can reach it after a set number of years.
The middle half runs from $97,810 to $163,500 per year. That span is $65,690. The full 10th-to-90th span is $124,760. These spans show why one median cannot stand in for every Information Security Analysts job.
What the gaps around the Information Security Analysts median show
The median is 72.0% above the 10th percentile. The 90th percentile is 54.7% above the median. The two sides do not have to match. A wider upper side can pull the mean up. A wider lower side can pull it down. The data shows the shape, but not the reason for that shape.
The 25th-to-median step is $31,370 per year. The median-to-75th step is $34,320 per year. These two steps give a closer look at the middle half. They are often more useful than a single top-to-bottom gap because they keep the center in view.
Use this ladder as a fact check when you read a job post. A posted range can sit below, near, or above these BLS marks. That does not make the post wrong. A job may differ by place, hours, level, field, employer, or work rules. Keep the posted range tied to that listing. Keep the BLS range tied to the whole occupation.
Metro areas with the highest published Information Security Analysts medians
WageScope found 246 metro rows with the same published annual median for Information Security Analysts. It sorts only those rows. It does not fill a blank row. It does not turn a blank into zero. The first six rows below have the highest published medians in this release. The list is a wage rank, not a rank of places to live or work.
The first row is San Jose-Sunnyvale-Santa Clara, CA, at $176,120 per year. The middle metro row by published pay is Waterloo-Cedar Falls, IA, at $106,350 per year. That middle metro mark gives one more check on how far the top rows sit from a common place in the set.
These are nominal wages. Nominal means the dollar amount shown in the source. This list does not adjust for local price levels. It also does not tell us how many openings an area has now. Use a local page to see price-level context when an exact BEA row exists. Use the separate job block to inspect current employer-title matches.
- 1. San Jose-Sunnyvale-Santa Clara, CA has a Information Security Analysts median of $176,120 per year, or $46,940 above the U.S. Information Security Analysts median. BLS lists 2,280 jobs there, against 190,650 across the U.S. The local location quotient is 1.64.
- 2. San Francisco-Oakland-Fremont, CA has a Information Security Analysts median of $162,310 per year, or $33,130 above the U.S. Information Security Analysts median. BLS lists 3,730 jobs there, against 190,650 across the U.S. The local location quotient is 1.28.
- 3. Seattle-Tacoma-Bellevue, WA has a Information Security Analysts median of $161,780 per year, or $32,600 above the U.S. Information Security Analysts median. BLS lists 4,700 jobs there, against 190,650 across the U.S. The local location quotient is 1.84.
- 4. Boulder, CO has a Information Security Analysts median of $154,990 per year, or $25,810 above the U.S. Information Security Analysts median. BLS lists 520 jobs there, against 190,650 across the U.S. The local location quotient is 2.22.
- 5. Asheville, NC has a Information Security Analysts median of $149,350 per year, or $20,170 above the U.S. Information Security Analysts median. BLS lists 200 jobs there, against 190,650 across the U.S. The local location quotient is 0.9.
- 6. Washington-Arlington-Alexandria, DC-VA-MD-WV has a Information Security Analysts median of $148,950 per year, or $19,770 above the U.S. Information Security Analysts median. BLS lists 16,560 jobs there, against 190,650 across the U.S. The local location quotient is 4.31.
Metro areas with the largest Information Security Analysts job estimates
A large wage can appear in a small job market. A large job market can have a lower wage. That is why WageScope keeps pay and job count in separate views. The six rows below have the largest published employment estimates for Information Security Analysts among metro rows in this release. Employment means the number of wage and salary jobs in scope. It does not mean open roles.
Washington-Arlington-Alexandria, DC-VA-MD-WV has the largest listed metro estimate in this set, at 16,560 jobs. Its median is $148,950 per year. Compare that with San Jose-Sunnyvale-Santa Clara, CA, which leads the published median list. The leaders may match, or they may not. Each list answers a different question.
Job count can help you see the scale of a local labor market. It cannot show churn, new hiring, job quality, remote work, or the chance that one person will get hired. Current listings add a second view, but they are a dated sample of posts. WageScope never turns the listing count into a demand score.
- 1. Washington-Arlington-Alexandria, DC-VA-MD-WV has 16,560 estimated Information Security Analysts jobs. That is 8.7% of the U.S. estimate of 190,650 jobs. Its median is $148,950 per year, or $19,770 above the U.S. Information Security Analysts median. Its location quotient is 4.31.
- 2. New York-Newark-Jersey City, NY-NJ has 11,330 estimated Information Security Analysts jobs. That is 5.9% of the U.S. estimate of 190,650 jobs. Its median is $140,470 per year, or $11,290 above the U.S. Information Security Analysts median. Its location quotient is 0.97.
- 3. Dallas-Fort Worth-Arlington, TX has 7,080 estimated Information Security Analysts jobs. That is 3.7% of the U.S. estimate of 190,650 jobs. Its median is $133,610 per year, or $4,430 above the U.S. Information Security Analysts median. Its location quotient is 1.43.
- 4. Boston-Cambridge-Newton, MA-NH has 5,220 estimated Information Security Analysts jobs. That is 2.7% of the U.S. estimate of 190,650 jobs. Its median is $136,550 per year, or $7,370 above the U.S. Information Security Analysts median. Its location quotient is 1.57.
- 5. Los Angeles-Long Beach-Anaheim, CA has 4,820 estimated Information Security Analysts jobs. That is 2.5% of the U.S. estimate of 190,650 jobs. Its median is $129,630 per year, or $450 above the U.S. Information Security Analysts median. Its location quotient is 0.63.
- 6. Seattle-Tacoma-Bellevue, WA has 4,700 estimated Information Security Analysts jobs. That is 2.5% of the U.S. estimate of 190,650 jobs. Its median is $161,780 per year, or $32,600 above the U.S. Information Security Analysts median. Its location quotient is 1.84.
Where Information Security Analysts has a larger share of local jobs
Location quotient is a share check. A value of 1 means the role has the same share of local jobs as it has across the nation. A value above 1 means the local share is larger. A value below 1 means the local share is smaller. It is not a count. It is not a wage. It does not say that a place is growing.
Huntsville, AL has the highest published location quotient in this bounded metro set, at 5.63. The same row lists 1,840 jobs and a median of $130,330 per year. Reading all three values keeps a high share from being mistaken for a large market or high pay.
A small area can have a high location quotient because the role makes up a large part of a small local job base. A large area can have many workers and a lower quotient. Use the quotient to ask where the role is common in the mix. Use employment to ask how many jobs BLS estimated. Use the wage fields to ask what the published pay range looks like.
- 1. Huntsville, AL has a Information Security Analysts location quotient of 5.63. BLS lists 1,840 jobs and a median of $130,330 per year, or $1,150 above the U.S. Information Security Analysts median. The U.S. job estimate is 190,650.
- 2. Washington-Arlington-Alexandria, DC-VA-MD-WV has a Information Security Analysts location quotient of 4.31. BLS lists 16,560 jobs and a median of $148,950 per year, or $19,770 above the U.S. Information Security Analysts median. The U.S. job estimate is 190,650.
- 3. Lexington Park, MD has a Information Security Analysts location quotient of 3.74. BLS lists 320 jobs and a median of $121,470 per year, or $7,710 below the U.S. Information Security Analysts median. The U.S. job estimate is 190,650.
- 4. Baltimore-Columbia-Towson, MD has a Information Security Analysts location quotient of 2.77. BLS lists 4,600 jobs and a median of $138,170 per year, or $8,990 above the U.S. Information Security Analysts median. The U.S. job estimate is 190,650.
- 5. Raleigh-Cary, NC has a Information Security Analysts location quotient of 2.75. BLS lists 2,510 jobs and a median of $143,640 per year, or $14,460 above the U.S. Information Security Analysts median. The U.S. job estimate is 190,650.
- 6. Colorado Springs, CO has a Information Security Analysts location quotient of 2.59. BLS lists 1,000 jobs and a median of $130,880 per year, or $1,700 above the U.S. Information Security Analysts median. The U.S. job estimate is 190,650.
How Information Security Analysts sits in Computer and Mathematical
Information Security Analysts is SOC 15-1212. BLS places it in the Computer and Mathematical major group. Among 21 detailed roles in that group with a published annual median, Information Security Analysts ranks 6 of 21 by median. This is a pay rank inside one source family. It is not a rank of skill, value, status, or career fit.
The closest same-family medians help set a fair peer frame. They do not claim that the work is the same. Official SOC titles can cover different tasks and settings. WageScope uses the family only because BLS publishes that link. It does not infer a career move, a skill match, or a hiring path from the wage gap.
Use these peer rows to spot whether the $129,180 median sits near many family roles or far from them. Then open a role's own page before using its number. Each role has a different code, job count, wage spread, and place pattern. One family label does not erase those facts.
- 1. Actuaries, SOC 15-2011, has a U.S. median of $130,000 per year. Its gap from Information Security Analysts is $820 per year.
- 2. Mathematicians, SOC 15-2021, has a U.S. median of $126,710 per year. Its gap from Information Security Analysts is $2,470 per year.
- 3. Computer Network Architects, SOC 15-1241, has a U.S. median of $134,050 per year. Its gap from Information Security Analysts is $4,870 per year.
- 4. Software Developers, SOC 15-1252, has a U.S. median of $135,980 per year. Its gap from Information Security Analysts is $6,800 per year.
- 5. Data Scientists, SOC 15-2051, has a U.S. median of $120,230 per year. Its gap from Information Security Analysts is $8,950 per year.
- 6. Database Architects, SOC 15-1243, has a U.S. median of $139,500 per year. Its gap from Information Security Analysts is $10,320 per year.
How much care to use with the Information Security Analysts estimate
The relative standard error for the job count is 2%. For the mean wage it is 0.6%. This measure, called RSE, shows survey precision. A smaller RSE often means less uncertainty from the sample. It does not tell you whether one person's pay is right or wrong.
The employment RSE applies to the 190,650 job estimate. The mean-wage RSE applies to the published mean of $132,510 per year. These fields do not give a matching RSE for the median or each percentile. WageScope shows the fields BLS published and does not move one RSE to another measure.
Survey values can change when BLS changes its methods, sample, models, or source year. That is why we show May 2025 on this page. Before we use a new release, we check its files, rows, and pages. A changed number is only a correction if the source calls it one.
A simple way to compare Information Security Analysts across places
First, compare the same wage metric. Use annual with annual or hourly with hourly. Next, check the source date. Keep May 2025 BLS rows together. Then read employment and location quotient beside pay. This stops a high median from standing in for market size or local share. Last, add BEA price-level context only when the exact place has an approved row.
A state, metro, and nonmetro area are not the same kind of map. Do not rank them in one list without saying so. WageScope groups like with like. It also keeps a national row as a broad bench mark. A local page can show the local row, its state row when that link is exact, and the U.S. row without blending them.
If a value is blank, keep it blank. If BLS marks a top code, read it as a lower bound. Do not fill a blank from a nearby place. Do not turn a wage gap into a claim about taxes, hours, benefits, work rules, or a household budget. Those facts are not in the OEWS row.
Move from Information Security Analysts wage data to one real listing
The job block on this page uses a strict employer-title match for Information Security Analysts. It may show fewer rows than the full MeritLog job search. That is on purpose. A false negative is safer here than a job card for a different role. Each card keeps its employer, place, source, and seen date. The cards do not change the BLS wage data.
Open one listing and read its own pay, work place, level, and needs. Compare its posted range with the BLS spread only as context. A posted range is set by an employer for one role. The BLS range is a survey view across many jobs. Neither source proves that a person is fit for the work.
When you tailor a résumé, use work facts you can back up. Do not turn $129,180 into a skill or result. Do not copy a BLS job count into your work history. MeritLog can help shape confirmed experience for a chosen listing. The wage page stays public and read only. It does not save a job or create a résumé on page load.
What this Information Security Analysts page does not claim
This page does not say what one Information Security Analysts worker earns. It does not promise that a job pays the median. It does not state a starting wage. It does not explain why the mean and median differ. It does not add benefits, tips, stock, bonus pay, taxes, or work hours unless BLS includes them in the published wage measure.
The page does not count people who work for themselves. It does not turn 190,650 into current openings. It does not read private MeritLog jobs or Career Memory. MeritLog does not use the page to build a private career profile. While public analytics are on, GA4, Ahrefs, and Meta may get this page's URL. Use Your Privacy Choices or Global Privacy Control to turn that off. The page does not send its text to a model.
The best use is narrow and clear. Read the May 2025 BLS wage range. Check how the role changes by place. Add the separate 2024 BEA price level when an exact row exists. Inspect a dated employer-title match. Then make a résumé choice from facts you have confirmed. Keep each source tied to the question it can answer.