BLS OEWS, May 2025

Cybersecurity analyst salary in the US

What cybersecurity analysts are paid in the US, from the 10th to the 90th percentile, with how your own pay compares. Figures from the BLS OEWS release dated May 2025.

Median annual pay

$129,180

Middle half earn

$97,810 to $163,500

People in this job, US

190,650

Pay check

Am I underpaid?

$

Stays in your browser. No account needed.

Information Security Analysts, national, annual pay, May 2025

10th percentile
$75,090
25th percentile
$97,810
Median
$129,180
75th percentile
$163,500
90th percentile
$199,850

BLS calls this Information Security Analysts.

Source: BLS OEWS, May 2025, SOC 15-1212. Percentiles across everyone employed in the occupation, not experience levels.

At a glance

What cybersecurity analysts earn across the US

  • The highest-paying large metros are San Jose, CA ($176,120), San Francisco, CA ($162,310), Seattle, WA ($161,780).
  • At the other end are San Juan, PR ($62,490), Oklahoma City, OK ($82,490), Grand Rapids, MI ($95,660): the top metro's median is 182% higher than the lowest.
  • 21 of the 48 metros listed below pay a median above the national figure.
  • About 190,650 people are employed in this occupation across the US.
  • Pay varies widely within the job: the 90th percentile earns 2.7 times the 10th.

Worked from BLS OEWS, May 2025. Not adjusted for the cost of living.

By metro

Cybersecurity analyst pay by metro

Median annual pay in the largest US metros where BLS published figures for this occupation, highest first, May 2025.

Medians from BLS OEWS, May 2025.

Skills

What employers look for in a cybersecurity analyst

The skills our cybersecurity analyst resume example leads with, written for US employers.

  • SIEM analysis
  • Splunk
  • Incident response
  • Threat hunting
  • MITRE ATT&CK
  • Vulnerability management
  • Endpoint detection and response
  • Phishing analysis
  • Log correlation
  • Network traffic analysis

See the full cybersecurity analyst resume example, with bullets and keywords.

Negotiating

Using these numbers

Below $97,810 puts you in the bottom quarter for cybersecurity analysts in the US. That is worth raising, with evidence of what you deliver.

The median, $129,180, is the middle of the market, not a ceiling. An offer at or near it is a fair starting point to negotiate from.

Asking for $163,500 or more puts you in the top quarter, so it needs a reason an employer will accept: a wider scope, a competing offer, or a skill that is hard to hire for.

Percentiles are not experience levels. They describe everyone doing the job, so a senior hire can sit at the median of a market full of senior people.

About the numbers

What these figures are

The US Bureau of Labor Statistics surveys employers for its Occupational Employment and Wage Statistics, and these figures are from the release dated May 2025. They cover wage and salary workers in Information Security Analysts, a category that is often broader than a single job title. Self-employed people are not included.

They are base pay: bonuses, equity and overtime are not included, and they are not adjusted for the cost of living.

Questions

Questions about cybersecurity analyst pay in the US

Know your number? Now get the offer.

Get a free resume score in seconds, read straight from your file.

Check my resume freeCybersecurity analyst resume example