Skip to content
STRATUSWORKFORCE SCAN
Menu

Information Security Analysts

Plan, implement, upgrade, or monitor security measures for the protection of computer networks and information. Assess system vulnerabilities for security risks and propose and implement risk mitigation strategies. May ensure appropriate security controls are in place that will safeguard digital files and vital electronic infrastructure. May respond to computer security breaches and viruses.

190,650 people do this job in the US. $129,180 a year.

now
13%

of the working time. Estimate.

Kinds of work
  • 94%
  • 6%
  • 0%
49%

Measured, from Anthropic's usage data (2025). Counts help on part of a task.

Half the desk work within reach
September 2027

On the chosen pace and reliability. Estimate.

Share of the working time within reach, now to 2030

0%25%50%75%100%2027202820292030NowDesk work: 94% of the time
Chosen to Ceiling: the share
DateNow
NowEnd of 2030

What each choice means: , , , , . Every pace starts from .

At this date and pace, models finish tasks up to 4.4 h long four times in five.

How far this has come

With GPT-4, measured in March 2023, 0% of this job's working time was within reach at . With Claude 3.7 Sonnet, measured in February 2025, 0%. With Claude Mythos Preview (early), measured in April 2026, 9%. Today's estimate: 13%.

0%5%10%15%20%2023202420252026GPT-4, March 2023: 0% within reachGPT-4 Turbo (Nov 2023), November 2023: 0% within reachGPT-4o, May 2024: 0% within reachClaude 3.5 Sonnet (June 2024), June 2024: 0% within reacho1-preview, September 2024: 0% within reachClaude 3.5 Sonnet (Oct 2024), October 2024: 0% within reacho1, December 2024: 0% within reachClaude 3.7 Sonnet, February 2025: 0% within reacho3, April 2025: 0% within reachGPT-5, August 2025: 1% within reachGemini 3 Pro, November 2025: 2% within reachClaude Opus 4.5, November 2025: 2% within reachGPT-5.2, December 2025: 2% within reachClaude Opus 4.6, February 2026: 3% within reachClaude Mythos Preview (early), April 2026: 9% within reachToday (estimate), September 2026: 13% within reach
Each step is a new best model measured by METR, four in five; the dashed end is today's estimate. Point at a dot for the model.

A backcast: today's task data with the best model METR had measured by each date. It shows how fast the models have moved, not what anyone forecast at the time.

The tasks

Sorted by . 11 tasks from .

TaskKind
Develop plans to safeguard computer files against accidental or unauthorized modification, destruction, or disclosure and to meet emergency data processing needs.Done more than weekly by most who do it. 22%2.1 work days6.7 h to 4.2 work days0%Half by Jan 2028
Perform risk assessments and execute tests of data processing system to ensure functioning of data processing activities and security measures.Done more than yearly by most who do it. AI observed on this task.22%2.1 work days6.7 h to 1 work week1%Half by Feb 2028
Encrypt data transmissions and erect firewalls to conceal confidential information as it is being transmitted and to keep out tainted digital transfers.Done more than yearly by most who do it. 18%6.7 h3.3 h to 1.7 work days10%Half by Apr 2027
Coordinate implementation of computer system plan with establishment personnel and outside vendors.Done more than monthly by most who do it. AI observed on this task.11%1.3 work days3.3 h to 4.2 work days4%Half by Dec 2027
Document computer security and emergency measures policies, procedures, and tests.Done more than monthly by most who do it. AI observed on this task.7%6.7 h3.3 h to 3.1 work days10%Half by Jul 2027
Monitor use of data files and regulate access to safeguard information in computer files.Done daily by most who do it. AI observed on this task.6%1.7 h25 min to 4.2 h57%Half by now
Modify computer security files to incorporate new software, correct errors, or change individual access status.Done more than monthly by most who do it. AI observed on this task.4%1.3 h25 min to 3.3 h77%Half by now
Train users and promote security awareness to ensure system security and to improve server and network efficiency.Done more than yearly by most who do it. 4%3.3 h1.7 h to 1.7 work daysStays with people
Monitor current reports of computer viruses to determine when to update virus protection systems.Done daily by most who do it. 2%50 min17 min to 1.7 h96%Half by now
Confer with users to discuss issues such as computer data access needs, security violations, and programming changes.Done more than weekly by most who do it. 2%50 min25 min to 2.5 hStays with people
Review violations of computer security procedures and discuss procedures with violators to ensure violations are not repeated.Done more than monthly by most who do it. 1%1.3 h25 min to 3.3 h77%Half by now

Within reach, per task: the share of the task's time whose instances are short enough for a model to finish at the chosen date, pace and reliability. Half by: the date half of that time comes within reach.

Jobs that share skills with this one

From O*NET's related occupations. Within reach now and by the end of 2028, long-run pace, four in five.