Prevents, detects, and responds to threats; sets security policy.
High demand. Large, steady volume of postings across industries. A realistic target for an active job search.
Common titles for this role at each level. Companies vary; see Role titles decoded.
| Level | Typical titles |
|---|---|
| Entry | Junior / Associate Security Analyst / Engineer · Security Analyst / Engineer I |
| Mid | Security Analyst / Engineer · Security Analyst / Engineer II |
| Senior | Senior Security Analyst / Engineer · Lead Security Analyst / Engineer |
| Expert (IC track) | Staff / Principal Security Analyst / Engineer |
| Management track | Manager, Information Security → Director of Information Security → VP |
Set your current role on the home page to see how to get here from where you are.
Searching for: Security Analyst · anywhere in the US · change
Opens the job board's own search; results and counts are theirs.
Sources:
Mapped to BLS 15-1212. 'Analyst' titles (SOC, GRC) sit near the Glassdoor $124K figure; 'engineer' titles near $175K; public sector lower.
Bachelor's in CS or related is typical per BLS, but BLS also notes entry with a high school diploma plus industry training and certifications; certs carry unusual weight in this field.
| Exam fee | $349 |
| Training | self-study $0-200; CertMaster bundles more |
| Renewal | valid 3 years; 50 CEUs or CertMaster CE |
| Typical total | $350-700 |
DoD 8140 baseline and the standard entry gate for analyst roles; BLS notes employers prefer certified hires.
| Exam fee | $749 |
| Training | self-study $50-200; bootcamps $2,000+ |
| Renewal | annual maintenance fee + CPE credits |
| Typical total | $800-3,000 |
A current senior posting said 'do not apply' without CISM, CISSP, or CISA; standard for senior and leadership security roles.
| Exam fee | not published |
| Training | self-study $0-300 |
| Renewal | 3-year CE cycle |
| Typical total | pricing on request |
Intermediate SOC-analyst cert (detect, analyze, respond); appears in government and defense-contractor analyst postings.
| Exam fee | not published |
| Training | official course from $1,699 (on-demand) to $2,499 (live); $100 eligibility application if self-study |
| Renewal | CPE-based (EC-Council policy) |
| Typical total | $1,300-2,600 |
DoD 8140-approved and widely listed on government/contractor postings; less respected by practitioners than OSCP.
| Exam fee | $1,699 |
| Training | Course + exam bundle $1,749 (90 days); Learn One $2,749/yr |
| Renewal | OSCP+ expires in 3 years; OSCP does not |
| Typical total | $1,750-2,750 |
The hands-on 24-hour exam that penetration-testing and offensive-security roles treat as the real credential.
| Exam fee | not published |
| Training | SANS SEC401 course (pricing on request) |
| Renewal | CPE-based every 4 years |
| Typical total | pricing on request |
GIAC certs (GSEC, GCIH, GCIA) were listed as preferred on the current security engineer posting; DoD 8140 approved.
CISSP annual maintenance fee and CPE totals are not published on the ISC2 pages cited. CySA+, CEH exam voucher, and GIAC exam prices are not displayed on vendor pages (null). Security+ fee is the figure shown on CompTIA's page when reviewed. Free community labs (TryHackMe, Hack The Box) are omitted.
Figures are US, from the sources listed, and change often; verify before deciding.