Information Security Analyst Career Assessment
Protecting computers and data from attacks
Welcome
Information security analysts protect an organization's computers, networks, and data from hackers, scams, and mistakes.
This is one of the fastest-growing jobs in North Dakota. You will explore what the work is really like and whether it fits you.
This takes about 15 minutes.
What is a Information Security Analyst?
An information security analyst (also called a cybersecurity analyst) watches for attacks, finds weak spots, and puts protections in place. When something bad happens, they help stop it and clean it up.
The Reality: Attackers only have to be right once. You have to be right every time. It is a job that rewards careful, curious people who do not panic.
Your Responsibilities:
- Watch security alerts and investigate anything strange
- Find and fix weak spots before attackers do
- Respond to incidents like hacked accounts or ransomware
- Set up firewalls, antivirus, and other protections
- Teach staff how to spot scam emails (phishing)
- Check that the company follows security rules and laws
- Write reports about risks and incidents
- Keep up with new threats every day
You are part detective, part guard, and part teacher.
A Day in the Life
8:00 AM — Review overnight alerts. Most are false alarms. One looks real.
8:30 AM — Investigate: someone logged in to an employee account from another country. You lock the account and reset the password.
10:00 AM — Meet with the employee. Explain what happened and how to use multi-factor login.
11:00 AM — Run a scan to find computers missing security updates.
12:00 PM — Lunch and read the latest security news.
1:00 PM — Send a practice "fake scam" email to staff to test who clicks.
2:30 PM — Write up this morning's incident for leadership.
3:30 PM — Review a new vendor's security before the company signs a contract.
4:30 PM — Study for your next certification.
Detective work, writing, and constant learning.
Training in North Dakota
No state license is needed. Most employers want a bachelor's degree and some IT experience. Many analysts start in help desk or network jobs and move into security.
Training Pathways:
- Work your way up: Help desk or network job + Security+ certification, then move into a junior security role.
- Associate degree (2 years): Cybersecurity programs at ND colleges. Good start, especially with certifications.
- Bachelor's degree (4 years): The most common path. Some ND programs are fully online.
Where to Train in North Dakota:
- Bismarck State College (Bismarck) — Cybersecurity and Computer Networks AAS; Cybersecurity and Information Technology BAS; Security and Hacking and Offensive/Defensive Security certificates
- ND State College of Science (Wahpeton and Fargo) — Cybersecurity Specialist AAS
- Lake Region State College (Devils Lake) — Information Technology AAS, Cyber Security track
- Williston State College (Williston) — Information Technology AAS, Cyber Security option
- University of North Dakota (Grand Forks or online) — B.S. in Cybersecurity
- North Dakota State University (Fargo) — B.S. in Cybersecurity
Before You Start: High school diploma or GED. Strong computer skills. A clean background check is required. Some government jobs need a security clearance.
Tip: Start with financial aid, scholarships, and any help an employer offers — that is where the money starts. After that, ask a career counselor or Job Service North Dakota whether WIOA or other programs can help with what is left over, like training, exam fees, or a laptop. What can be paid for depends on the program and on your own situation, so ask before you sign up rather than after. Many IT certifications are also sold as low-cost online courses you can do at home.
Certification & Licensing
No license. Certifications are very important. Security job ads almost always list certifications.
Certifications Employers Look For:
- CompTIA Security+ — the standard first security certification; required for many government jobs
- CompTIA CySA+ — for security analysts who watch and respond to threats
- ISC2 Certified in Cybersecurity (CC) — beginner-level
- CISSP — advanced; requires 5 years of security work
The Exams: Security+ has up to 90 questions in 90 minutes, including hands-on style questions. CISSP is a 3-hour adaptive exam.
Cost: Security+ is about $400. CySA+ is about $400. CISSP is about $750. Prices change, so check before you buy.
Keeping It Current: Most security certifications must be renewed every 3 years with continuing education.
Salary & Job Outlook
North Dakota Information Security Analyst Pay (May 2025):
- Starting out (bottom 10–25%): $33.41–$41.79/hour ($69,480–$86,930/year)
- Middle (median — half earn more, half earn less): $51.70/hour ($107,540/year)
- Experienced (top 25–10%): $60.61–$67.00/hour ($126,060–$139,360/year)
What that means: This is one of the highest-paying jobs on the ND in-demand list. Most people reach it after some IT experience.
Jobs in North Dakota: About 330 people do this work in ND today. By 2034, that should be about 440 (about 31% growth). Expect about 30 job openings every year in ND from growth and people retiring or changing jobs. Across the U.S., the change is about 29% growth — much faster than average.
Outlook: Excellent. This is one of the fastest-growing jobs in ND and the U.S. It is a small field in ND, so openings are limited each year, but the number is climbing.
Who Hires in ND: State government and the ND National Guard, hospitals and health systems, banks and credit unions, insurance companies, energy and utility companies, universities, and security consulting firms. Many remote jobs exist.
Work Setting: Offices or remote. Some jobs are in a "security operations center" with 24/7 shifts. On-call for incidents is common.
Physical Demands: Light. Mostly desk and computer work. Long hours of screen time and focus.
Sources: U.S. Bureau of Labor Statistics, Occupational Employment and Wage Statistics, North Dakota, May 2025 (SOC 15-1212); North Dakota and U.S. long-term employment projections 2024–2034, via O*NET OnLine. Numbers are rounded.
Where This Leads
Path 1: Security Engineer — Build and design security systems.
Path 2: Penetration Tester ("Ethical Hacker") — Get paid to legally break into systems to find weak spots.
Path 3: Incident Responder / Forensics — Investigate attacks and gather evidence.
Path 4: Security Manager or CISO — Lead security for a whole organization.
Path 5: Compliance and Risk — Make sure companies follow security laws, like HIPAA for health care.
Path 6: Government and Military Cyber — Protect state and national systems.
The Real Talk
What's Great:
- Very high pay
- Very fast job growth
- Meaningful work protecting people's data
- Never boring; threats change every day
- Many remote options
- Skills are needed in every industry
What's Hard:
- Stressful during attacks
- You usually need IT experience first
- Constant learning; threats change weekly
- Can involve night shifts or on-call
- Lots of reading, writing, and reports
- Few true entry-level jobs in ND
- You may be blamed when something goes wrong
- Background check and trustworthiness are required
Be Honest: Are you curious and detail-focused? Can you stay calm when an attack is happening? Are you ready to keep learning for your whole career? Can you get IT experience first?