The salary of an Information Security Analyst I in the United States varies depending on several factors, including experience, location, education level, marketing trend and company sizes.
As of April 01, 2025, the average hourly pay of Information Security Analyst I in the United States is $37. While Salary.com is seeing that Information Security Analyst I salary in the US can go up to $43 or down to $30, but most earn between $33 and $40. Salary.com shows the average base salary (core compensation), as well as the average total cash compensation for the job of Information Security Analyst I in the United States.
| Annual Salary |
Monthly Pay |
Weekly Pay |
Hourly Wage |
|
| 75th Percentile | $40 | $3 | $1 | $0 |
| Average | $37 | $3 | $1 | $0 |
| 25th Percentile | $33 | $3 | $1 | $0 |
As of April 01, 2025, Salary.com is seeing that an entry-level Information Security Analyst I with under 1 year experience makes about $76,884. With less than 2 years of experience, a mid-level Information Security Analyst I makes around $77,695. After 2-4 years, the Information Security Analyst I pay rises to about $79,145. Those senior Information Security Analyst I with 5-8 years of experience earn roughly $79,435, and those Information Security Analyst I having 8 years or more experience is expected to earn about $79,628 on average.
| Levels | Salary |
|---|---|
| Entry Level Information Security Analyst I | $76,884 |
| Intermediate Level Information Security Analyst I | $77,695 |
| Senior Level Information Security Analyst I | $79,145 |
| Specialist Level Information Security Analyst I | $79,435 |
| Expert Level Information Security Analyst I | $79,628 |
| Entry Level | 1% |
| Mid Level | 0% |
| Senior Level | 2% |
| Top Level | 2% |
| Experienced | 3% |
Salaries in the United States can vary significantly from state to state due to a multitude of factors, including cost of living, local economic conditions, and industry presence.
For example, as of April 01, 2025, the average yearly salary of Information Security Analyst I is $85,485 in California and in Massachusetts, the average annual salary goes to $84,345. While in New Jersey, an Information Security Analyst I earns $84,004 per year.
What Am I Worth?
Salaries in the United States can vary significantly from city to city due to a multitude of factors, including cost of living, local economic conditions, and industry presence.
For example, as of April 01, 2025, the average yearly salary of Information Security Analyst I in San Francisco, CA is $96,792 and in New York, NY, the average annual salary goes to $89,817. While an Information Security Analyst I earns $86,438 per year in Boston, MA.
For those exploring the changing dynamics of Information Security Analyst I salaries, Salary.com offers detailed insights through our Job Trending in CA Labor Market analysis. As of April 01, 2025, our research highlights a notable shift in Information Security Analyst I compensation over the past six years. For instance, the median salary has moved from $79,008 in 2023 to about $79,716 in 2024 (for a comprehensive analysis of Information Security Analyst I salary trends, click here). It's crucial to consider several elements, including geographical location, experience level, industry demand, and economic development, as they play a significant role in influencing salary variations.
Salary.com job board provides millions of Information Security Analyst I information for you to search for. Click on search button below to see Information Security Analyst I job openings or enter a new job title here.
Here are companies hiring for Information Security Analyst I and their salaries, click below for more details.
| Core Compensation | ||||
| Core Compensation | Median | % of Total | ||
| Base Salary | $77,502 | 70.3% | ||
| Bonus | $0 | 0.0% | ||
| Value of Benefits | ||||
| Core Compensation | Median | % of Total | ||
| Social Security | $5,929 | 5.4% | ||
| 401K/403B | $3,255 | 3.0% | ||
| Disability | $1,550 | 1.4% | ||
| Healthcare | $8,352 | 7.6% | ||
| Pension | $4,185 | 3.8% | ||
| Time Off | $9,539 | 8.6% | ||
| Total Compensation | $110,312 | 100% | ||
Responsible for ensuring the security of the organization's systems and information assets. Develops and implements security systems, guidelines, and strategies. Protects against unauthorized access, use, disclosure, disruption, modification, and/or destruction. Conducts audits and risk assessments. Evaluates internal operations and controls and makes recommendations based on the findings. Migrates non-compliant environments to compliant environments. Ensures compliance with data protection guidelines and applicable laws. Typically requires a bachelor's degree. Typically reports to a manager. Work is closely managed. Works on projects/matters of limited complexity in a support role. Typically requires 0-2 years of related experience.
Specify the abilities and skills that a person needs in order to carry out the specified job duties. Each competency has five to ten behavioral assertions that can be observed, each with a corresponding performance level (from one to five) that is required for a particular job.
Analysis: Analysis is the process of considering something carefully or using statistical methods in order to understand it or explain it.
Computer Science: Computer science is the study of computation, automation, and information. Computer science spans theoretical disciplines (such as algorithms, theory of computation, information theory, and automation) to practical disciplines.
Risk Assessment: Broadly speaking, a risk assessment is the combined effort of: identifying and analyzing potential (future) events that may negatively impact individuals, assets, and/or the environment (i.e. risk analysis); and making judgments "on the tolerability of the risk on the basis of a risk analysis" while considering influencing factors (i.e. risk evaluation).Put in simpler terms, a risk assessment analyzes what can go wrong, how likely it is to happen, what the potential consequences are, and how tolerable the identified risk is. As part of this process, the resulting determination of risk may be expressed in a quantitative or qualitative fashion. The risk assessment is an inherent part of an overall risk management strategy, which attempts to, after a risk assessment, "introduce control measures to eliminate or reduce" any potential risk-related consequences.
