If you’re working toward a career in cybersecurity, one career path you may be interested in is cybersecurity analyst. These information security specialists protect networks, computer systems, and data. A cybersecurity analyst uses security tools such as firewalls and encryption programs, monitors and investigates security incidents, assesses cybersecurity risks, and fixes vulnerabilities. To learn more about this type of job and how to pursue this career path, keep reading below.
What Is a Cybersecurity Analyst?
A cybersecurity analyst protects an organization’s networks, data, and computer systems from malicious attacks, malware, unauthorized access, and security breaches. Cybersecurity analysts train to identify threats and vulnerabilities, understand how malicious hackers plan attacks, and safeguard systems and networks. Their work can include building and maintaining firewalls and information security systems, monitoring and analyzing network activity, fixing vulnerabilities, using encryption tools, and enforcing network security protocols.
What Does a Cybersecurity Analyst Do?
Cybersecurity analysts may have several responsibilities, including:
- Monitoring and detection. Watching network traffic and activity, monitoring for events and incidents, analyzing system logs, and using SIEM tools to detect suspicious activity.
- Incident investigation and response. Investigating how a breach occurred and determining how to respond to current incidents.
- Vulnerability management. Running security scans, looking for vulnerabilities, analyzing breaches, and upgrading or updating software to address potential vulnerabilities.
- Security defense configuration. Installing, configuring, and maintaining security tools, firewalls, encryption programs, password protection, antivirus software, and intrusion detection systems.
- Reporting and compliance. Documenting security incidents and events, writing detailed reports, and supporting education and enforcement of security best practices.
- Risk assessment and penetration testing. Conducting periodic penetration tests, vulnerability scans, risk assessments, and research into potential threats.
- Best practices education. Developing security best practices, teaching employees, and reinforcing security protocols throughout the organization.
Interested in enrolling at Campus?
Our admissions advisors can answer your questions.
A Day in the Life of a Cybersecurity Analyst
Cybersecurity analysts may have many activities and responsibilities in their day-to-day schedules. Here are a few things they may do:
- Familiarize themselves with the network. Every organization has a different network and server setup, information system architecture, and mix of connected devices.
- Review overnight alerts. Security monitoring tools generate numerous alerts. Analysts determine which reflect normal activity, which are false positives, and which indicate potential threats.
- Investigate suspicious activity. Analysts investigate unusual events through activity logs, network traffic, and endpoint data to determine whether a response is needed.
- Research new threats. Malicious attacks constantly evolve, so analysts need to stay up to date with current threats and exploits.
- Assess vulnerabilities. As new vulnerabilities are discovered, they must be evaluated and prioritized. The cybersecurity team works to address vulnerabilities and reduce the risk of future breaches.
- Document incidents. Thorough documentation helps the team address vulnerabilities and update security protocols to make networks and systems more secure.
- Conduct peer reviews. Cybersecurity analysts may evaluate the work of other information security team members to help the team operate effectively.
- Attend team meetings. An information security analyst can learn about an organization’s technological setup by attending meetings, taking notes, and asking questions.
- Collaborate with other teams. The cybersecurity team works with leadership, human resources, IT, legal and compliance, operations, and other internal departments to support company goals and keep data and systems secure.
Salary and Projected Job Growth
The U.S. Bureau of Labor Statistics (BLS) reports data for the occupation Information Security Analysts, rather than a separate “Cybersecurity Analyst” category. In May 2025, the national median annual wage was $129,180, and the median hourly wage was $62.11. These occupational medians are not starting salaries or earnings outcomes for Campus graduates.
BLS reports 192,900 information security analyst jobs in 2025 and projects employment to grow 21% from 2025 to 2035, much faster than the average for all occupations. The projected net increase is 40,600 jobs. That employment increase is separate from openings created when workers leave the occupation.
BLS separately projects about 14,100 openings per year, on average, over the decade. This annual openings figure includes opportunities from employment growth and the need to replace workers who change occupations or leave the labor force.
BLS identifies a bachelor’s degree as the typical education for entry. Relevant fields include computer and information technology, engineering, and mathematics. Related work experience is also typical; individual employers set their requirements.
| Metric | Value |
|---|---|
| May 2025 national median annual wage | $129,180 |
| May 2025 national median hourly wage | $62.11 |
| Typical entry-level education | Bachelor’s degree |
| Work experience in a related occupation | Less than 5 years |
| Typical on-the-job training | None (BLS classification) |
| Number of jobs nationally, 2025 | 192,900 |
| Projected employment growth, 2025–2035 | 21% (much faster than average) |
| Projected net employment increase, 2025–2035 | 40,600 jobs |
| Projected annual openings, 2025–2035 | About 14,100 per year, on average |
The BLS “None” on-the-job-training classification is separate from education and experience requirements; it does not mean employers never provide training.
Sources: BLS occupational profile; projections and worker characteristics; OOH definitions.
What Skills Do You Need as a Cybersecurity Analyst?
Working as a cybersecurity analyst requires specialized skills and knowledge. Useful skills include:
- IT knowledge. Understanding the fundamentals of information technology and cybersecurity, while staying up to date with changing technology and best practices.
- Intrusion detection. Using intrusion detection tools, network monitoring, event log analysis, and SIEM tools to identify potential security breaches.
- Network security. Understanding how networks operate, identifying potential threats, maintaining firewalls, and helping keep networks secure.
- Endpoint management. Securing connected devices and endpoints and safeguarding them against potential vulnerabilities.
- Critical thinking. Detecting and addressing vulnerabilities, analyzing logs, investigating incidents, and evaluating penetration-test findings.
- Communication. Reporting findings and communicating with team members about security incidents and best practices.
- Attention to detail. Noticing even small changes in networks and information systems.
- Calm demeanor. Staying focused during cyberattacks to help identify and address issues, contain breaches, and minimize damage.
How to Become a Cybersecurity Analyst
Whether you’re starting career training for the first time or switching into information security, the following steps can help you pursue a career as a cybersecurity analyst.
1. Get Training and Learn Cybersecurity Skills
The first step is building a solid foundation in information technology and cybersecurity. Whether you choose a degree, a bootcamp, or certification courses, cybersecurity professionals need to understand how networks, hardware, software, data, cloud environments, and security work together to protect an organization’s computer systems. Some learners may choose to enroll in a cybersecurity degree program, like the one offered by Campus.
2. Pursue a Cybersecurity Degree and Pass Certification Exams
Credentials such as a cybersecurity degree and industry certifications can demonstrate your knowledge and skills to employers. They may be prerequisites for some positions or part of the criteria hiring managers use to evaluate candidates. Pursuing these credentials can help you prepare for entry-level opportunities in network security and information technology. Requirements vary by employer and role.
3. Apply for Entry-Level Cybersecurity Positions
Once you have credentials that demonstrate cybersecurity training, such as industry certifications or a degree, you can begin applying for entry-level positions in information security and IT that match your qualifications. Real-world experience, together with continuing education, can help you pursue career advancement.
4. Continuing Education and Work Experience
BLS describes a bachelor’s degree in computing or a related field, together with relevant experience, as the typical preparation for information security analysts. Many two-year cybersecurity programs offer credits that may qualify for transfer to another school; the receiving institution makes the final decision on which credits it accepts and how they apply.
Many cybersecurity professionals also continue to study for advanced industry certifications, some of which are intended for professionals with hands-on experience. With a combination of continuing education and field experience, candidates may qualify for a cybersecurity analyst position. Check each employer’s education, experience, and other requirements. Completing a training program, certification exam, or degree does not guarantee a job offer or specific position.
Pursue a Cybersecurity Degree with Campus.edu
If you’re interested in pursuing a cybersecurity career, Campus offers an online Associate of Science in Cybersecurity that teaches information technology and networking fundamentals with a focused study of cybersecurity. The 96-quarter-credit program is designed for completion over eight quarters in two years, with live, interactive instruction. Applied work and a capstone address security challenges, professional communication, and responsible use of AI and automation. Actual completion time may vary.
The program helps prepare students for industry certification exams and provides education for pursuing entry-level opportunities in information security. Completing the program does not guarantee a job offer or employment. Employers set their own requirements for education, work experience, and job responsibilities.
Financial aid is available to those who qualify.
Disclaimer
This article provides general educational information, not a promise of admission, completion, certification, employment, salary, or career advancement. Completing Campus coursework does not automatically confer or guarantee third-party certifications. Finishing a degree program does not guarantee employment, a job offer, or a specific compensation package.
Hiring criteria vary by employer, job market, and position. Check job listings for specific employer requirements.
Financial aid for Campus educational programs is available to those who qualify. Eligibility and awards depend on applicable requirements, program, enrollment, prior aid history, and funding; Campus does not guarantee aid eligibility, award amounts, or loan approval.
Sources
U.S. Bureau of Labor Statistics — Information Security Analysts
U.S. Bureau of Labor Statistics — Occupational Projections and Worker Characteristics
U.S. Bureau of Labor Statistics — Occupational Information Included in the OOH