Average Information Security Analyst Salary in United States for 2026

How much does an information security analyst make in United States?

A typical information security analyst working in United States brings home around 9,308 USD a month before tax. Entry-level pay starts near 58,100 USD, and the top of the ladder reaches roughly 171,300 USD for the most experienced and specialised people in the role.

The wide gap between low end and top end reflects how much pay can vary inside the same job title. A junior information security analyst working at a small local employer earns very different money from a senior at a multinational. Skills, employer, city and years in the seat all push the number around. For a cross-country comparison, see the information security analyst salary in Palau or British Indian Ocean Territory, both of which pay in the same currency.

How information security analyst pay ranges in United States

A good way to think about salary in United States is to look at the distribution rather than the headline average. Half of all information security analysts in United States earn less than 109,700 USD a year, and the other half earn more. That middle number is the median, and it is usually more useful than the average for answering "is my pay normal here".

Looking at the quartiles fills in the picture. A quarter of earners take home less than 73,700 USD (the 25th percentile), and a quarter clear 138,700 USD (the 75th percentile). The middle 50% of information security analysts sit somewhere inside that band, which is where the typical reader of this page probably lives.

The very lowest reported salaries sit around 58,100 USD. The highest stretch to 171,300 USD, though only a small fraction of earners ever reach that level. If you are deciding whether your own offer or current pay is reasonable, work out which of those four bands you would fall into and use that as your reference point.

Information security analyst pay by experience in United States

Years of experience is the single biggest lever on pay for an information security analyst in United States, ahead of education and almost any other single factor. The longer you have been in the role, the more your employer can trust you to handle complexity, mentor others and act independently, all of which command higher pay. The chart below shows how the typical information security analyst salary changes as you move through the career ladder.

The single largest jump on the ladder is from 2 - 5 Years to 5 - 10 Years, where pay rises by about 36%. That is the point at which a information security analyst typically goes from "competent in the role" to "the person other people in the team learn from", and the market pays well for that step.

Information security analyst pay by education in United States

Education sits alongside experience as one of the biggest factors driving information security analyst pay in United States. Higher qualifications consistently pull higher salaries, but the size of the gap tends to be smallest at junior levels and widens as people move up. Two people in the same role with the same years of experience but different degrees can end up earning very different money once they reach mid-career.

Below is the average information security analyst salary in United States broken down by the highest level of education a worker has completed.

Information security analyst gender pay gap in United States

The gender pay gap is a stubborn feature of almost every labour market, and United States is no exception. Male information security analysts in United States earn an average of 116,400 USD a year, while female information security analysts earn around 109,000 USD. That works out to a 7% gap in favour of men, even when comparing people doing the same work.

A pay gap of this size has a real long-term cost. Over a typical thirty-year career it can add up to several years of pay, and it compounds through pensions, retirement contributions and bonus-linked stock. Some of the gap is explained by women being more likely to work part-time, take career breaks, or be steered toward lower-paying specialisations. Some of it is straightforward unequal pay for the same job, which is harder to defend.

Pay raises for an information security analyst in United States

Most countries hand out at least some kind of pay raise every year, typically when an employee's contract is reviewed or as a cost-of-living adjustment to keep wages roughly in step with inflation. The rhythm and size of those raises varies hugely between industries.

A typical worker doing this role in United States sees a raise of about 13% every 16 months, which works out to roughly 10% on an annual basis. That figure is the typical underlying rate; in years where inflation runs high you can usually expect a bit more, and in flat-economy years a bit less.

Across all jobs in United States, the national average raise is around 8% every 16 months.

By industry

Industries with the highest pay raises in United States:

By experience level

Experienced workers tend to see larger raises. Retaining a senior is cheaper than replacing them, so employers fight harder for them.

Information security analyst bonus rates in United States

Bonuses are the other half of total compensation, and they vary a lot between jobs and industries. Some roles are paid almost entirely in base salary; others lean heavily on bonus structures tied to revenue, project completion or company performance. Whether a job pays a bonus, how big it is, and how often it lands all factor into whether the headline salary is actually a good offer.

Which careers pay bonuses in United States

Revenue-facing roles tend to pay the biggest bonuses. Operational and support roles tend toward smaller, more predictable ones.

Information security analyst: public vs private sector pay

Public-sector pay in United States is about 6% more than private-sector pay for similar work. The private sector typically offers stronger upside and bigger bonuses; the public sector typically offers better benefits and stability.

Information security analyst salary by city and region in United States

Information security analyst pay is not even across United States. The chart below shows the highest-paying cities and regions in the dataset, followed by the full location table.

Similar jobs to an information security analyst

Other jobs in the same category as an information security analyst in United States.

Information Security Analyst in United States: FAQs