What it pays
Government survey numbers — not estimates, not ads.
Half of all Information Security Analysts in the U.S. earn more than $129,180 a year — the middle 80% land between $75,090 and $199,850. About 190,650 people in the U.S. do this work. Figures are for the U.S. occupation group “Information Security Analysts”. (U.S. Bureau of Labor Statistics survey, published 2025.) In India, Professionals earn about ₹38,298 a month on average — around ₹4.6 lakh a year (government PLFS survey via ILOSTAT, occupation-family figure).
$129,180typical pay / year
190,650people in this work
$199,850+top 10% earn
₹4.6 lakha year in India (family avg)
Think you get this job?Six quick questions on how it really works — with a hint and the reason behind every answer.
Test yourself →The work, task by task
These are the real jobs-to-be-done, not a wish list. Each task shows where we found it, and the prompt underneath is written for that exact task.
Protecting1
Implement security measures to protect data
+Deploy host hardening, file integrity monitoring, and role-based access for the analytics cluster that holds…
Implement security measures to protect data
+Deploy host hardening, file integrity monitoring, and role-based access for the analytics cluster that holds client financial feeds, document the implemented controls and rollout schedule for sign-off by the SOC manager by Monday.
The tools that do the workAmazon Elastic Compute Cloud EC2Ansiblejob descriptionsO*NETWikipedia
Pasted it? Good. When the reply comes back, push once: ask it to sharpen the weakest part. — Did this prompt help?
Analysing5
Monitor networks for security breaches
+Set up continuous network monitoring for the corporate and trading subnet, create alert rules for lateral…
Monitor networks for security breaches
+Set up continuous network monitoring for the corporate and trading subnet, create alert rules for lateral movement and exfiltration, tune false positives using last quarter's incident logs, and hand over runbook to on-call by Tuesday.
The tools that do the workApache Kafkajob descriptionsWikipedia
Pasted it? Good. When the reply comes back, push once: ask it to sharpen the weakest part. — Did this prompt help?
Design and implement security policies
+Draft enforceable security policies for remote access, third-party data handling, and privileged accounts…
Design and implement security policies
+Draft enforceable security policies for remote access, third-party data handling, and privileged accounts tied to our risk register, circulate to legal and the head of trading for comments, and finalize by next Friday.
The tools that do the workApache Hadoopjob descriptionsWikipedia
Pasted it? Good. When the reply comes back, push once: ask it to sharpen the weakest part. — Did this prompt help?
Conduct security assessments and audits
+Run a full security assessment of the market data pipeline, perform vulnerability scans and a controls gap…
Conduct security assessments and audits
+Run a full security assessment of the market data pipeline, perform vulnerability scans and a controls gap analysis, produce an executive summary with prioritized findings and costed fixes for the CTO within ten business days.
The tools that do the workAmazon RedshiftO*NETWikipedia
Pasted it? Good. When the reply comes back, push once: ask it to sharpen the weakest part. — Did this prompt help?
Ensure compliance with relevant laws and standards
+Review the current services and data flows, map applicable national and sectoral laws plus ISO standards to…
Ensure compliance with relevant laws and standards
+Review the current services and data flows, map applicable national and sectoral laws plus ISO standards to each processing activity, flag gaps with citations, and produce a one-page remediation plan and deadline for the compliance lead by Friday.
The tools that do the workApache Hivejob descriptionsWikipedia
Pasted it? Good. When the reply comes back, push once: ask it to sharpen the weakest part. — Did this prompt help?
Train staff on security awareness and best practices
+Prepare a 60-minute security awareness session for trading desk and back office staff covering phishing,…
Train staff on security awareness and best practices
+Prepare a 60-minute security awareness session for trading desk and back office staff covering phishing, credential hygiene, and data handling rules, include three real examples from last quarter and a one-page quiz to run next Tuesday morning.
The tools that do the workApache HadoopO*NETWikipedia
Pasted it? Good. When the reply comes back, push once: ask it to sharpen the weakest part. — Did this prompt help?
The daily work14
Analyse financial risk
+Run a financial risk analysis on the quarterly trading book: pull positions and prices from the last 90 days,…
Analyse financial risk
+Run a financial risk analysis on the quarterly trading book: pull positions and prices from the last 90 days, compute VaR and stress scenarios by sector, flag exposures above 5% of NAV, and produce a one-page briefing for the risk committee by Thursday.
Pasted it? Good. When the reply comes back, push once: ask it to sharpen the weakest part. — Did this prompt help?
Stock market
+Produce a concise market note on the top five equities by volume: gather price, volume and news for the last…
Stock market
+Produce a concise market note on the top five equities by volume: gather price, volume and news for the last 30 days, calculate momentum and relative strength, highlight drivers and tradeable signals, and deliver a one-page memo to the desk before market open Monday.
Pasted it? Good. When the reply comes back, push once: ask it to sharpen the weakest part. — Did this prompt help?
Monitor current reports of computer viruses to determine when to update virus protection systems.
+Monitor current virus incident reports, flag any new signatures or outbreak clusters affecting trading…
Monitor current reports of computer viruses to determine when to update virus protection systems.
+Monitor current virus incident reports, flag any new signatures or outbreak clusters affecting trading terminals, recommend immediate signature rollout when confirmed, and prepare a one-page briefing for IT ops and the finance desk by 1400 today.
The tools that do the workApache KafkaO*NET
Pasted it? Good. When the reply comes back, push once: ask it to sharpen the weakest part. — Did this prompt help?
Coordinate implementation of computer system plan with establishment personnel and outside vendors.
+Coordinate the system upgrade plan with the facility manager, the vendor lead at SecureNet, and our network…
Coordinate implementation of computer system plan with establishment personnel and outside vendors.
+Coordinate the system upgrade plan with the facility manager, the vendor lead at SecureNet, and our network team so rollout windows, resource owners, and rollback steps are agreed, then circulate the signed timeline and contact list by Wednesday morning.
The tools that do the workAnsibleO*NET
Pasted it? Good. When the reply comes back, push once: ask it to sharpen the weakest part. — Did this prompt help?
Research latest IT security trends
+Survey the last two weeks of security advisories, threat intelligence feeds, and vendor bulletins, summarise…
Research latest IT security trends
+Survey the last two weeks of security advisories, threat intelligence feeds, and vendor bulletins, summarise three emerging attack techniques relevant to our trading systems, and send the memo with sources to the CISO and quant leads by EOD Friday.
The tools that do the workApache Hivejob descriptions
Pasted it? Good. When the reply comes back, push once: ask it to sharpen the weakest part. — Did this prompt help?
Manage vulnerabilities and system hardening
+Run a review of current host configurations, list the top five exploitable weaknesses and proposed hardening…
Manage vulnerabilities and system hardening
+Run a review of current host configurations, list the top five exploitable weaknesses and proposed hardening steps with estimated downtime, then hand the remediation plan to the server team and security engineer for scheduling next week.
The tools that do the workApache Hadoopjob descriptions
Pasted it? Good. When the reply comes back, push once: ask it to sharpen the weakest part. — Did this prompt help?
Help users install and learn security products
+Prepare a short how-to and troubleshooting sheet for the desktop security suite, schedule two one-hour…
Help users install and learn security products
+Prepare a short how-to and troubleshooting sheet for the desktop security suite, schedule two one-hour training sessions for traders and support on Thursday and Friday, and collect three common user issues to update the FAQ.
The tools that do the workAJAXjob descriptions
Pasted it? Good. When the reply comes back, push once: ask it to sharpen the weakest part. — Did this prompt help?
Collaborate with technical and business teams
+Set up a joint working session with the head of network engineering, the business analytics lead, and the…
Collaborate with technical and business teams
+Set up a joint working session with the head of network engineering, the business analytics lead, and the incident response manager to align priorities, assign owners for the next sprint, and produce a single action list to review on Monday.
The tools that do the workApache Cassandrajob descriptions
Pasted it? Good. When the reply comes back, push once: ask it to sharpen the weakest part. — Did this prompt help?
Reduce the probability of data breaches
+Reduce the chance of a data breach by mapping where client financial feeds and personal IDs are stored,…
Reduce the probability of data breaches
+Reduce the chance of a data breach by mapping where client financial feeds and personal IDs are stored, prioritise encrypting the three highest-risk repositories, schedule quarterly audits with IT and legal, and report residual risk to Maria by next Tuesday.
The tools that do the workAmazon Web Services AWSWikipedia
Pasted it? Good. When the reply comes back, push once: ask it to sharpen the weakest part. — Did this prompt help?
Develop and enforce password policies
+Draft and circulate a company password policy that forces 12-character passphrases, mandatory 2FA for trading…
Develop and enforce password policies
+Draft and circulate a company password policy that forces 12-character passphrases, mandatory 2FA for trading and reporting systems, 90-day rotation for shared accounts, and an exceptions process to David in HR by Friday for enforcement and roll-out.
The tools that do the workAnsibleWikipedia
Pasted it? Good. When the reply comes back, push once: ask it to sharpen the weakest part. — Did this prompt help?
Develop incident response plans
+Create an incident response plan that defines roles for detection, containment and legal notification,…
Develop incident response plans
+Create an incident response plan that defines roles for detection, containment and legal notification, templates for trading-data breach disclosures, escalation to CEO within two hours, and a 72-hour post-incident review scheduled with Compliance.
The tools that do the workApache KafkaWikipedia
Pasted it? Good. When the reply comes back, push once: ask it to sharpen the weakest part. — Did this prompt help?
Perform research activities to gather and analyse financial, legal and economic information
+Gather and analyse the last five years of market, regulatory and case-law data for the North Sea energy…
Perform research activities to gather and analyse financial, legal and economic information
+Gather and analyse the last five years of market, regulatory and case-law data for the North Sea energy sector, extract material financial indicators, produce a risk brief with sources and confidence levels, and send to the research lead by Monday.
The tools that do the workApache HadoopESCO
Pasted it? Good. When the reply comes back, push once: ask it to sharpen the weakest part. — Did this prompt help?
Interpret data on the price, stability and future investment trends in a certain economic area
+Analyse pricing, volatility and capital inflows for mid-cap renewable firms in Iberia, calculate stability…
Interpret data on the price, stability and future investment trends in a certain economic area
+Analyse pricing, volatility and capital inflows for mid-cap renewable firms in Iberia, calculate stability scores and three scenario forecasts, highlight two investment windows, and deliver a one-page summary to Javier and the portfolio team on Thursday.
The tools that do the workAmazon RedshiftESCO
Pasted it? Good. When the reply comes back, push once: ask it to sharpen the weakest part. — Did this prompt help?
Make recommendations and forecasts to business clients
+Prepare client recommendations with three forecasted outcomes, cost-benefit of each option,…
Make recommendations and forecasts to business clients
+Prepare client recommendations with three forecasted outcomes, cost-benefit of each option, probability-weighted returns, and tailored action steps for retail and institutional clients, then present to Priya and the sales desk next Wednesday.
The tools that do the workApache HiveESCO
Pasted it? Good. When the reply comes back, push once: ask it to sharpen the weakest part. — Did this prompt help?
Says who?
These are the pages we read to build this. Open any of them and check us.
The logs, files & records this job keeps
Shared with other careers — the same record means something different in each.
Related careers
Same family of work — each with its own tasks and prompts.
The LLOS Work Atlas is the world's largest evidenced task library — a map of human work, with a ready prompt behind every task. 1,774 careers · every task named by the sources that witnessed it — O*NET, ESCO, real job descriptions, Wikipedia — and the deepest tasks by several at once. And it is honest about limits: where AI cannot help, the map says so.
The rest of the map
Same library, five ways in.
Copyright © LLOS.ai · 2026 — original pedagogy, voice, and design — all rights reserved.
Built on public evidence: O*NET®, ESCO, Wikipedia, U.S. Bureau of Labor Statistics, ILOSTAT. All sources & licenses
Built on public evidence: O*NET®, ESCO, Wikipedia, U.S. Bureau of Labor Statistics, ILOSTAT. All sources & licenses