Work · Tech & AI Careers

Information Security Analyst AI Risk: What AI Can Change, What It Cannot Replace

AI helps both defenders and attackers. Security remains durable when the worker can investigate incidents, judge risk, protect systems, and respond under pressure.

Career durability score

84 / 100

Durable / strong path

Compare careers

Durable because attackers also use AI

AI task exposure
Medium to High
Robotics exposure
Low
Human moat
High
BLS median pay, May 2024
$124,910
BLS growth, 2024–2034
+29%

The full report

The real question is not whether AI exists. The real question is whether this career still pays back after AI, robotics, wages, training, and demand are included. Open the sections that matter to your decision.

What AI can do — and what it cannot fully replace

What AI can do

  • Summarize logs
  • Draft detection rules
  • Explain vulnerabilities
  • Automate routine triage

What AI cannot fully replace

  • Incident command
  • Risk judgment
  • System ownership
  • Trustworthy escalation and containment
Observed AI adoption
High
Entry-level risk
Medium
Upside with AI
High
Best upgrade moves and training notes

Best upgrade moves

  • Build home labs and incident writeups
  • Learn cloud, identity, network, and application security
  • Use AI for triage but verify evidence

Training and entry notes

Education path: Bachelor degree common; security certifications, labs, and operations experience matter

Typical annual openings: 17,000

Entry-level risk is medium. The safer move is to build proof of judgment, accountability, and AI-supervision skill early.

Who should consider this career — and who should be careful

Who should consider it

  • IT workers, developers, and analysts who like adversarial problem solving
  • People comfortable with continuous learning

Who should be careful

  • People expecting a certificate alone to unlock the field
  • People who dislike on-call pressure or ambiguity
Day-to-day reality and the path to get there

Day-to-day reality

  • The job is a bundle of tasks, not one replaceable activity: communication, judgment, documentation, tools, exceptions, and accountability all matter.
  • AI pressure usually starts with drafts, summaries, search, scheduling, reporting, and routine analysis before it reaches the whole job.
  • The real work quality comes from knowing which output is wrong, incomplete, risky, or inappropriate for the local situation.

Path to get there

  1. Start by getting close to the real task environment before paying for a credential: shadow, interview workers, review job postings, and compare local wages.
  2. Choose training that creates proof: license, portfolio, supervised hours, shipped work, measurable results, or employer-recognized experience.
  3. Move from beginner tasks toward judgment, customer trust, compliance, physical-world accountability, management, or technical specialization.
Career pivots and AI strategy

Career pivots

  • From routine office work: move toward operations, analytics, compliance, customer escalation, healthcare administration, or field coordination.
  • From physical work: add estimating, supervision, inspections, controls, safety, dispatch, or business ownership.
  • From tech or analysis: add domain expertise, security, product judgment, data ownership, or management responsibility.

AI strategy

  • Use AI for first drafts, checklists, summaries, and practice, then build the habit of verifying sources, assumptions, numbers, and edge cases.
  • Learn the tools used in the occupation, not just generic prompting. The advantage comes from pairing AI with domain judgment.
  • Document before-and-after examples showing how you used AI to improve speed, quality, safety, cost, or customer outcomes.
Proof to build and questions to verify locally

Proof to build

  • A small portfolio of real work samples, case notes, estimates, audits, projects, or process improvements.
  • Evidence that you can communicate tradeoffs to a customer, patient, manager, client, or stakeholder.
  • A clear next credential or role target with payback math attached.

Questions to verify locally

  • What do local employers actually pay for entry-level, mid-level, and experienced workers in this role?
  • Which tasks are already automated at employers near you, and which tasks still require a human on the hook?
  • What credential, license, apprenticeship, portfolio, or referral is actually required to get hired?
Before you pay for training

This career may still be worth it, but do not decide from a school ad or a social media post. Check the numbers and the local job reality first.

  • Local wages
  • Total training cost
  • Time to qualify
  • License or certification rules
  • Completion risk
  • Local employer demand
  • AI exposure
  • Robotics exposure
  • First-job reality
  • Upgrade path
Sources and assumptions

This page combines public labor-market data, task-exposure research, O*NET occupational framing, and robotics adoption signals. Local wages, employer adoption, licensing, and training outcomes can change the decision.

Source and assumption card

This page uses public career and labor-market information, occupational task patterns, AI exposure research, robotics/automation signals, and Kefiw editorial assumptions.

Career data can vary by state, employer, union status, specialty, experience, and local demand.

Before making a decision, verify:

  • Local wages
  • Current job postings
  • Licensing rules
  • Training cost
  • Credential requirements
  • Employer demand
  • First-year pay
  • Completion and placement outcomes

Work trust and methodology

Kefiw Work pages are decision support, not guarantees. Use the methodology, sources, score explanation, glossary, and advertising disclosure to understand how the advice is built.