Will AI replace cybersecurity analysts?
No, and demand is rising, but the entry-level work is changing fast. Cybersecurity analysts score 52.5/100 on the AI Resistance Index (AI-Vulnerable). AI already triages alerts, summarises incidents and drafts reports. What protects the job is that attackers adapt, decisions about risk need someone accountable, and AI itself creates new systems to defend. BLS projects much faster than average growth.
Higher is safer. Scored on six structural dimensions, weighted as shown below.
How the score breaks down
Each dimension is rated 1 (AI holds every advantage) to 5 (strong structural protection). A rating's contribution is (rating − 1) ÷ 4 × weight, so a 1 contributes nothing and a 5 contributes the full weight.
| Dimension | Weight | Rating | Points |
|---|---|---|---|
| Automation Replaceability | 25% | 3 / 5 | 12.5 |
| Regulatory & Liability Friction | 20% | 4 / 5 | 15 |
| Human Judgment Density | 15% | 4 / 5 | 11.25 |
| Physical-World Coupling | 15% | 2 / 5 | 3.75 |
| Trust & Relationship Lock-In | 15% | 3 / 5 | 7.5 |
| AI Capital Intensity | 10% | 2 / 5 | 2.5 |
| Total | 100% | 52.5 |
Points are exact; the scoring engine rounds the total to one decimal.
Why each dimension scores the way it does
Rated 3. A large share of an analyst's time goes to monitoring alerts, triaging them, looking up indicators and writing reports, and security tools increasingly automate exactly those steps. Investigating a real breach, working out how an attacker got in and deciding what to shut down are far harder to automate. The job splits roughly between exposed routine work and durable investigation.
Rated 4. Organisations face breach-notification laws, industry rules for payment, health and financial data, and contracts that demand named people responsible for security. When something goes wrong, regulators, customers and courts ask who decided what. That accountability keeps humans in charge of security decisions, though no licence is required to work as an analyst, which keeps this short of 5.
Rated 4. Security is adversarial: attackers change tactics when defences change, which is the kind of shifting context where AI systems are weakest. Analysts weigh incomplete evidence, decide whether to wake people in the middle of the night, and balance protection against keeping the business running. Those are judgment calls with consequences, not pattern matches.
Rated 2. Most security work happens on networks and screens, and much of it can be done remotely. Some roles involve the physical security of data centres, on-site incident response or protecting industrial and operational technology, which keeps this above the minimum, but the typical analyst job is not tied to a place.
Rated 3. Companies want security people who know their systems, their history of incidents and their leadership, and that knowledge builds over years. Many organisations also outsource monitoring to managed security providers, where the relationship is with the firm rather than with an individual analyst, which limits this dimension.
Rated 2. Security AI that does an analyst's work is built mostly by large vendors with huge volumes of threat data and the resources to retrain models as attacks change, which favours incumbents over small entrants. But organisations buy those tools rather than build them, and they are widely available, so the capital barrier only modestly protects the analyst.
Which security tasks AI takes first
BLS lists the core duties of information security analysts. Sorted by exposure:
Most exposed to AI
- Monitoring networks and triaging alerts
- Checking systems for known vulnerabilities
- Writing reports on metrics, attempted attacks and breaches
- Researching the latest security trends
Most durable
- Investigating breaches and deciding how to contain them
- Setting security standards and weighing risk against business needs
- Recommending security changes to leadership and answering for them
- Securing new technology, including AI systems themselves
The labor market today
| Median annual pay (May 2025) | $129,180 |
| Jobs (2025) | 192,900 |
| Projected change, 2025–35 | 21% (much faster than average) |
| Openings per year, on average | ≈14,100 |
| Typical entry-level education | Bachelor's degree |
BLS projects employment of information security analysts to grow 21% from 2025 to 2035, much faster than average, with about 14,100 openings a year. It says increased use of AI and the rise of e-commerce have increased the need for enhanced security, contributing to that growth.
So AI cuts both ways here. It automates the alert handling that used to fill junior analysts' days, while expanding what needs defending. The strongest demand is for people who can investigate, decide and explain risk, not for people who only watch dashboards.
How to raise your resistance
- Get past alert triage. Incident response, threat hunting and forensics are investigative work that AI supports but does not own. Build those skills early rather than staying in queue work.
- Learn to secure AI. Models, data pipelines and AI agents create new attack surfaces. BLS ties part of the field's growth to AI use, and specialists in securing it are on the right side of that trend.
- Pair security with a regulated domain. Healthcare, finance, defence and industrial systems have specific rules and risks. Combining security with domain knowledge makes you the accountable expert.
- Communicate risk to leaders. Turning technical findings into business decisions is what moves an analyst into the role that owns the risk.
This score rates the occupation as a whole. Your exposure depends on what you actually do all day. The free Job Safety score asks about your specific role and day-to-day work, then rates your role on the same six dimensions in about a minute.
Score my job — freeOwn a business in this field? See how IT managed services providers (MSPs) score: 45.0/100
Questions people ask
Will AI replace cybersecurity analysts?
No. AI is automating routine monitoring and triage, but BLS projects 21% employment growth from 2025 to 2035, partly because AI use itself increases the need for security. The job is shifting toward investigation, judgment and securing new technology.
Is entry-level cybersecurity at risk?
Entry-level work built on watching alerts and writing routine reports is the most exposed part of the field. Newcomers should aim for hands-on investigation, cloud and identity security, or a specialty, rather than staying in a monitoring queue.
Is cybersecurity still a good career?
Yes. The median pay was $129,180 in May 2025, and BLS expects about 14,100 openings a year. It scores higher than most desk jobs in the index because the work is adversarial and accountable.
Compare with
Sources and method
Ratings are Dawnstar Exploration's structural assessment using the six-dimension AI Resistance Index framework; labor-market figures are quoted from the sources above as published. This page describes an occupation, not any individual.