Information Security Analysts
Plan, implement, upgrade, or monitor security measures for the protection of computer networks and information. Assess system vulnerabilities for security risks and propose and implement risk mitigation strategies. May ensure appropriate security controls are in place that will safeguard digital files and vital electronic infrastructure. May respond to computer security breaches and viruses.
- US jobs
- 190,650
- Median wage
- $129,180 a year
- Job family
- Security
Can agents do the work of information security analysts?
We read the evidence for the whole job family, Security: Nearly all tasks (up from Not yet 12 months earlier)
Agents complete 90% or more of the tasks (or projects) on two direct benchmarks from independent institutions.
Evidence: Cybench, 100% of tasks completed; CyberGym, 99.2% of tasks completed.
35% of this occupation's work, by O*NET work activities, is measured by a direct benchmark.
- 26%Implement security measures for computer or information systemsMeasured
- 11%Develop operational or technical procedures or standardsNot measured
- 10%Maintain operational recordsNot measured
- 9%Train others to use equipment or productsNot measured
- 9%Test performance of computer or information systemsMeasured
- 9%Maintain current knowledge in area of expertiseNot measured
- 9%Monitor operation of computer or information technologiesNot measured
- 8%Direct organizational operations, activities, or proceduresNot measured
Benchmarks for this occupation
These benchmarks name this occupation in their job mapping.
Direct evidence
Work benchmarks mapped primary to this family. They set the step when they report how many tasks agents complete.
- 22Claude Mythos Preview (early checkpoint) · 13 Apr 2026Strong
- ARTEMIS live penetration test (agents vs. professionals)by Stanford University, Carnegie Mellon University and Gray Swan AI95.2ARTEMIS A2 (ensemble supervisor, Claude Sonnet 4 sub-agents) · 10 Dec 2025Strong
Benchmarks for the job family
These cover work in security, not always this occupation's tasks.
Direct evidence
Work benchmarks mapped primary to this family. They set the step when they report how many tasks agents complete.
Also relevant
These benchmarks cover part of this family's work, or have no result yet. They do not set its step.
- 64.8%Claude Code + Opus 5.5 (max) · 6 Oct 2026Strong
Context only
These benchmarks span many occupations, or they test how agents behave. They give context but do not set the step.
Typical tasks
From O*NET 31.0. Core tasks first. Few of these tasks have a benchmark today.
- Develop plans to safeguard computer files against accidental or unauthorized modification, destruction, or disclosure and to meet emergency data processing needs.
- Monitor current reports of computer viruses to determine when to update virus protection systems.
- Encrypt data transmissions and erect firewalls to conceal confidential information as it is being transmitted and to keep out tainted digital transfers.
- Perform risk assessments and execute tests of data processing system to ensure functioning of data processing activities and security measures.
- Modify computer security files to incorporate new software, correct errors, or change individual access status.
- Review violations of computer security procedures and discuss procedures with violators to ensure violations are not repeated.
- Document computer security and emergency measures policies, procedures, and tests.
- Confer with users to discuss issues such as computer data access needs, security violations, and programming changes.
- Monitor use of data files and regulate access to safeguard information in computer files.
- Coordinate implementation of computer system plan with establishment personnel and outside vendors.
- Train users and promote security awareness to ensure system security and to improve server and network efficiency.
Other job titles for this occupation (80)
Information Security Officer · Information Security Specialist · Information Systems Security Analyst · Information Systems Security Officer (ISSO) · Information Technology Security Analyst (IT Security Analyst) · Network Security Analyst · Security Analyst · Systems Analyst · AI Security Specialist (Artificial Intelligence Security Specialist) · All-Source Analyst · Application Security Analyst · Applications Security Analyst · Automatic Data Processing Systems Security Specialist (ADP Systems Security) · Blue Team Member · Certified Information Systems Security Professional (CISSP) · Cloud Security Architect · Cloud Security Engineer · Computer Security Coordinator · Computer Security Information Specialist · Computer Security Specialist · Computer Systems Security Analyst · Counterespionage Analyst · Cryptological Technician · Cryptologist · Cyber Defense Analyst · Cyber Defense Forensics Analyst · Cyber Incident Responder · Cyber Information Security Analyst · Cyber Intel Planner · Cyber Intelligence Specialist · Cyber Operations Planner (Cyber Ops Planner) · Cyber Operations Specialist · Cyber Operator · Cyber Policy and Strategy Planner · Cyber Security Analyst · Cyber Security Specialist · Cyber Security Support Technician · Cybersecurity All-Source Analyst · Cybersecurity Analyst · Cybersecurity Engineer · Cybersecurity Exploitation Analyst · Cybersecurity Incident Response Analyst · Cybersecurity Multi-Disciplined Language Analyst · Cybersecurity Partner Integration Planner · Cybersecurity Specialist · Cybersecurity Target Developer · Cybersecurity Target Network Analyst · Cybersecurity Threat Analyst · Cybersecurity Warning Analyst · Data Security Analyst · Database Security Expert · Exploitation Analyst · Incident Responder · Incident Response Analyst · Incident Response Manager · Industrial Internet of Things Security Specialist (IIoT Security Specialist) · Information Assurance Analyst · Information Security Analyst · Information Systems Security Specialist · Information Technology Analyst (IT Analyst) · Information Technology Consultant (IT Consultant) · Information Technology Security Architect (IT Security Architect) · International Affairs Specialist · Internet of Things Security Specialist (IoT Security Specialist) · Internet Security Specialist · Intrusion Detection Analyst · IT Auditor (Information Technology Auditor) · IT Risk Specialist (Information Technology Risk Specialist) · Mission Assessment Specialist · Network Security Officer · Network Security Systems Analyst · Red Team Member · Security Auditor · Security Consultant · Security Control Assessor · Security Operations Analyst · Security Operations Center Analyst (SOC Analyst) · Security Specialist · Source Code Auditor · Supervisory Control and Data Acquisition Security Analyst (SCADA Security Analyst)