Quick answer: Cybersecurity is one of the fastest-growing and best-paid careers in technology. In the US, information security analysts earned a median salary of $129,180 in May 2025, and the Bureau of Labor Statistics projects 21% job growth from 2025 to 2035, with about 14,100 openings every year. Most roles ask for a bachelor’s degree in computer science or a related field, and many employers prefer candidates with recognised security certifications. Pay is highest in information services, IT consulting and finance.
Every company that stores data, takes payments or runs online services needs people who can defend it. Attacks such as ransomware, phishing and cloud misconfigurations have made security a board-level concern, and regulations in many countries now require organisations to manage cyber risk. That combination keeps demand high worldwide, from the US and UK to India, the Gulf and Singapore, and many roles can be done remotely.
Cybersecurity Careers at a Glance (United States)
| Median pay (May 2025) | $129,180 per year / $62.11 per hour |
| Jobs (2025) | 192,900 |
| Projected jobs (2035) | 233,400 (+40,600) |
| Growth (2025–35) | 21%, much faster than average |
| Openings per year | About 14,100 |
| Typical education | Bachelor’s degree (computer science, engineering, maths or similar) |
| Experience | Related work experience of less than 5 years is typical |
Salary by Industry (US, May 2025)
| Industry | Median annual pay |
|---|---|
| Information | $138,650 |
| Computer systems design and related services | $132,410 |
| Finance and insurance | $130,630 |
| Management of companies and enterprises | $128,950 |
| Management, scientific and technical consulting | $125,420 |
Common Cybersecurity Roles
- SOC analyst: monitors alerts, investigates incidents and escalates threats. The most common entry point.
- Security engineer: designs and runs security tools such as firewalls, endpoint protection and identity systems.
- Cloud security engineer: secures AWS, Azure and Google Cloud environments. One of the fastest-growing specialisations.
- Penetration tester: legally attacks systems to find weaknesses before criminals do.
- GRC analyst: handles governance, risk and compliance against frameworks and regulations. A good route for people from audit, legal or business backgrounds.
- Incident responder and threat hunter: leads investigations and proactively searches for attackers.
Certifications Employers Recognise
The BLS notes that many employers prefer candidates with information security certifications. Commonly requested credentials include:
- Entry level: CompTIA Security+, ISC2 Certified in Cybersecurity (CC)
- Intermediate: CompTIA CySA+, cloud provider security certifications (AWS, Microsoft, Google)
- Advanced: ISC2 CISSP, ISACA CISM, CISA (for audit), OSCP (for penetration testing)
Check each certification body’s current requirements, as some advanced credentials require several years of paid experience.
A Realistic Path Into Cybersecurity
- Learn the foundations: networking, operating systems (Linux and Windows), and basic scripting in Python or PowerShell.
- Get an entry-level certification such as Security+ or ISC2 CC.
- Build hands-on proof: home labs, capture-the-flag competitions and documented projects on GitHub.
- Start close to security if needed: IT support, network administration and cloud operations are common stepping stones.
- Move into a SOC or junior security role, then specialise in cloud, offensive security or GRC.
The Fine Print
- Entry-level roles are competitive. Many vacancies ask for some experience, which is why IT stepping-stone roles help.
- On-call work is common in incident response and SOC roles, including nights and weekends.
- Beware of bootcamps promising guaranteed jobs. Evaluate outcomes carefully before paying.
- Continuous learning is required. Threats and tools change constantly.
Is Cybersecurity Worth It?
Yes, for people who enjoy problem-solving and keep learning. Growth of 21% over the decade, salaries well above most professions, and remote-friendly roles make it one of the strongest career bets in technology. Cloud security and GRC are particularly good routes in 2026, because almost every organisation is moving to the cloud and facing new compliance obligations.
Frequently Asked Questions
How much does a cybersecurity analyst earn?
In the US, information security analysts earned a median of $129,180 in May 2025.
Is cybersecurity a growing field?
Yes. The BLS projects 21% growth from 2025 to 2035, with about 14,100 openings a year.
Do I need a degree for cybersecurity?
Most employers prefer a bachelor’s degree in computer science or a related field, but certifications and hands-on experience are also highly valued.
Which certification should I get first?
CompTIA Security+ and ISC2 Certified in Cybersecurity are common starting points.
Can cybersecurity jobs be remote?
Many can, especially in cloud security, GRC and some SOC roles, though some employers require on-site work for sensitive systems.
Official source: US Bureau of Labor Statistics, Occupational Outlook Handbook: Information Security Analysts, at bls.gov. This site is not affiliated with any certification body or employer and never charges any fee for job information.