Home › Computer & Math › Information Security Analysts

How an information security analyst can use AI, task by task

O*NET 15-1212.00: Information Security AnalystsMedian pay $129,180/year (BLS, May 2025)11 tasksJob Zone 4: Considerable preparation

Plan, implement, upgrade, or monitor security measures for the protection of computer networks and information. Assess system vulnerabilities for security risks and propose and implement risk mitigation strategies. May ensure appropriate security controls are in place that will safeguard digital files and vital electronic infrastructure. May respond to computer security breaches and viruses.

Type your own title and every prompt on this page updates to match. Also called: Information Security Officer, Information Security Specialist, Information Systems Security Analyst, Information Systems Security Officer (ISSO), Information Technology Security Analyst (IT Security Analyst), Network Security Analyst, Security Analyst, Systems Analyst.

Where AI fits in this job

AI-ready 41%AI-assist 52%Stays human 7%

Share of the job's tasks, weighted by how important and how frequent each task is (O*NET ratings). 4 AI-ready, 6 AI-assist and 1 human-led tasks out of 11. This measures where AI can help, not whether the job will disappear.

Information & paperwork
Thinking & planning
People & communication
Leading & teaching
Hands-on & physical

Shape of the job: importance of each kind of work activity (O*NET, 1 to 5).

💪 Lean into these

Core tasks that stay human. These skills get more valuable as the routine work gets automated.

  1. Coordinate implementation of computer system plan with establishment personnel and outside vendors.Lead people · Monthly

AI can draft these 4

AI produces a usable first pass. You review it, fix it and own it.

Develop plans to safeguard computer files against accidental or unauthorized modification, destruction, or disclosure and to meet emergency data processing needs.

Weekly

AI writes the first draft from your notes; you check every fact.

Show prompt & steps

Give AI your rough notes, numbers or last version and it will turn them into a clean, well-structured first draft. You check every fact and figure before it goes anywhere.

Ready-to-use prompt

I work as an information security analyst. Part of my job is to develop plans to safeguard computer files against accidental or unauthorized modification, destruction, or disclosure and to meet emergency data processing needs.

Context: We use Microsoft SharePoint and Microsoft Word.
Area: [online transactions, health data]
Rules: [regulations, standards]

Draft a policy with controls and responsibilities. Use plain language and headings where they help, and mark anything you had to guess with [CHECK].

10-minute exercise: Security or privacy policy

Step 1Pick a real example: the next time you develop plans to safeguard computer files against accidental (this week).
Step 2Fill in [Area] and [Rules] with the real details, then run the prompt.
Step 3Check every fact, name and number against your source before it goes anywhere. Check it against the manufacturer's manual and your site procedure before you rely on it.

AI will happily make up numbers, names and dates. Every fact in the draft needs checking against your source.

Safety-critical: AI output is a starting point. Follow your site's procedures and the manufacturer's guidance.

Importance 4.4/5 · core task · O*NET work activity: Develop computer or information security policies or procedures..

Confer with users to discuss issues such as computer data access needs, security violations, and programming changes.

Weekly

AI walks through likely causes and fixes.

📊 Real AI use (Anthropic Economic Index, Apr 2026 to May 2026): AI completed the task directly in 76% of those conversations; the rest were back-and-forth with the person.

Show prompt & steps

Describe the symptoms and error messages and AI walks you through likely causes and step-by-step fixes, most likely first.

Ready-to-use prompt

I work as an information security analyst. Part of my job is to confer with users to discuss issues such as computer data access needs, security violations, and programming changes.

Context: We use Linux and UNIX; the work draws on telecommunications, computers and electronics and engineering and technology.
System: [application, telehealth]
Symptoms: [errors, logs]

List likely causes and tests. Rank causes from most to least likely with a quick test for each, and flag safety risks.

10-minute exercise: Application troubleshooting

Step 1Pick a real example: the next time you confer with users (this week).
Step 2Fill in [System] and [Symptoms] with the real details, then run the prompt.
Step 3Test the most likely cause first, and stop at anything it flags as a safety risk.

Never follow AI repair steps that bypass safety procedures, lockout/tagout or manufacturer guidance.

Importance 3.9/5 · core task · O*NET work activity: Troubleshoot issues with computer applications or systems.. Also involves: Collaborate with others to resolve information technology issues..

Monitor current reports of computer viruses to determine when to update virus protection systems.

Weekly

AI is a patient tutor for new rules and techniques.

Show prompt & steps

AI is a patient personal tutor. It explains new rules, techniques and technology at your level, quizzes you and builds a study plan.

Ready-to-use prompt

I work as an information security analyst. Part of my job is to monitor current reports of computer viruses to determine when to update virus protection systems.

Context: The work draws on telecommunications, computers and electronics and engineering and technology.
Industry: [describe]
Focus: [technology, best practices]

Summarize trends, what they mean for my role, and sources to follow. Use examples from my line of work, quiz me with 5 questions one at a time, and list trustworthy sources.

10-minute exercise: Industry trend briefing

Step 1Pick a real example: the next time you monitor current reports of computer viruses (this week).
Step 2Fill in [Industry] and [Focus] with the real details, then run the prompt.
Step 3Check one claim against an official or professional source.

AI's knowledge has a cutoff date. For new regulations and standards, always confirm against the official source.

Importance 4.2/5 · core task · O*NET work activity: Update knowledge about emerging industry or technology trends..

Document computer security and emergency measures policies, procedures, and tests.

Monthly

AI writes the first draft from your notes; you check every fact.

Show prompt & steps

Give AI your rough notes, numbers or last version and it will turn them into a clean, well-structured first draft. You check every fact and figure before it goes anywhere.

Ready-to-use prompt

I work as an information security analyst. Part of my job is to document computer security and emergency measures policies, procedures, and tests.

Context: We use Microsoft SharePoint and Microsoft Word.
Procedure: [security, installation]
Notes: [paste]

Draft a clear documented procedure. Use plain language and headings where they help, and mark anything you had to guess with [CHECK].

10-minute exercise: Procedure documentation

Step 1Pick a real example: the next time you document computer security and emergency measures policies, procedures.
Step 2Fill in [Procedure] and [Notes] with the real details, then run the prompt.
Step 3Check every fact, name and number against your source before it goes anywhere. Check it against the manufacturer's manual and your site procedure before you rely on it.

AI will happily make up numbers, names and dates. Every fact in the draft needs checking against your source.

Safety-critical: AI output is a starting point. Follow your site's procedures and the manufacturer's guidance.

Importance 3.9/5 · core task · O*NET work activity: Document operational procedures..

AI can help you prep these 6

AI speeds up the prep, drafting or thinking. The core of the task is still yours.

Modify computer security files to incorporate new software, correct errors, or change individual access status.

Weekly

AI drafts scripts and configs; design and security are yours.

📊 Real AI use (Anthropic Economic Index, Apr 2026 to May 2026): AI completed the task directly in 89% of those conversations; the rest were back-and-forth with the person.

Show prompt & steps

AI can draft configurations, scripts and test cases and explain unfamiliar systems. Architecture and security decisions need your expertise.

Ready-to-use prompt

I work as an information security analyst. Part of my job is to modify computer security files to incorporate new software, correct errors, or change individual access status.

Context: We use Microsoft Azure software and Microsoft PowerShell; the work draws on telecommunications, computers and electronics and engineering and technology.
System: [network, application]
Threat or change: [describe]

Propose security controls and configuration steps with tests. Propose the approach first, then the code with comments and tests, and point out security risks.

10-minute exercise: Security measure implementation

Step 1Pick a real example: the next time you modify computer security files (this week).
Step 2Fill in [System] and [Threat or change] with the real details, then run the prompt.
Step 3Test in staging and keep a rollback plan.

Don't paste secrets, passwords or proprietary code into tools your employer hasn't approved.

Importance 4.1/5 · core task · O*NET work activity: Implement security measures for computer or information systems..

Monitor use of data files and regulate access to safeguard information in computer files.

Weekly

AI suggests causes to test; the hands-on fix is yours.

Show prompt & steps

AI can suggest likely causes and a diagnostic order to try. Hands-on testing and the final fix are yours.

Ready-to-use prompt

I work as an information security analyst. Part of my job is to monitor use of data files and regulate access to safeguard information in computer files.

Context: We use Linux and UNIX; the work draws on telecommunications, computers and electronics and engineering and technology.
System: [files, servers, apps]
Log excerpt: [paste with personal data removed]

Identify suspicious events, likely explanations, and next checks or actions. Rank causes from most to least likely with a quick test for each, and flag safety risks.

10-minute exercise: Security log review

Step 1Take a recent log excerpt with personal data removed.
Step 2Fill in [System] and [Log excerpt] with the real details, then run the prompt.
Step 3Verify each finding in the original log before acting. Confirm the rules against the current official source.

Never follow AI repair steps that bypass safety procedures, lockout/tagout or manufacturer guidance.

Rules and regulations vary by place and change often. Confirm against the official source before relying on anything.

Importance 3.9/5 · core task · O*NET work activity: Monitor the security of digital information..

Review violations of computer security procedures and discuss procedures with violators to ensure violations are not repeated.

Monthly

AI drafts scripts and configs; design and security are yours.

Show prompt & steps

AI can draft configurations, scripts and test cases and explain unfamiliar systems. Architecture and security decisions need your expertise.

Ready-to-use prompt

I work as an information security analyst. Part of my job is to review violations of computer security procedures and discuss procedures with violators to ensure violations are not repeated.

Context: We use Microsoft Azure software and Microsoft PowerShell; the work draws on telecommunications, computers and electronics and engineering and technology.
System: [network, application]
Threat or change: [describe]

Propose security controls and configuration steps with tests. Propose the approach first, then the code with comments and tests, and point out security risks.

10-minute exercise: Security measure implementation

Step 1Pick a real example: the next time you review violations of computer security procedures.
Step 2Fill in [System] and [Threat or change] with the real details, then run the prompt.
Step 3Test in staging and keep a rollback plan.

Don't paste secrets, passwords or proprietary code into tools your employer hasn't approved.

Importance 4.0/5 · core task · O*NET work activity: Implement security measures for computer or information systems..

Perform risk assessments and execute tests of data processing system to ensure functioning of data processing activities and security measures.

Monthly

AI drafts scripts and configs; design and security are yours.

Show prompt & steps

AI can draft configurations, scripts and test cases and explain unfamiliar systems. Architecture and security decisions need your expertise.

Ready-to-use prompt

I work as an information security analyst. Part of my job is to perform risk assessments and execute tests of data processing system to ensure functioning of data processing activities and security measures.

Context: We use Microsoft Azure software and Microsoft PowerShell; the work draws on telecommunications, computers and electronics and engineering and technology.
System: [application, network, data processing]
Risks: [what could fail]

Write test cases covering function, performance and security, with expected results and scripts. Propose the approach first, then the code with comments and tests, and point out security risks.

10-minute exercise: System test plan

Step 1Pick a real example: the next time you perform risk assessments.
Step 2Fill in [System] and [Risks] with the real details, then run the prompt.
Step 3Run the tests yourself and read every line before you'd use it.

Don't paste secrets, passwords or proprietary code into tools your employer hasn't approved.

Importance 4.1/5 · core task · O*NET work activity: Test computer system operations to ensure proper functioning..

Train users and promote security awareness to ensure system security and to improve server and network efficiency.

Monthly

AI preps the materials; reading the room is you.

Show prompt & steps

AI preps the materials: lesson outlines, quizzes, examples, practice scenarios. Reading the room and coaching people is still you.

Ready-to-use prompt

I work as an information security analyst. Part of my job is to train users and promote security awareness to ensure system security and to improve server and network efficiency.

Context: We use Microsoft PowerPoint and Amazon Web Services AWS software; the work draws on telecommunications, computers and electronics and engineering and technology.
System: [describe]
Users: [describe]

Plan training with hands-on tasks and a cheat sheet. Include timings, a realistic practice scenario from my work, and a short check for understanding with answers.

10-minute exercise: Software training

Step 1Pick a real example: the next time you train users.
Step 2Fill in [System] and [Users] with the real details, then run the prompt.
Step 3Check users can complete a real task.

Check that every procedure in the material matches your workplace's actual standards.

Importance 3.8/5 · core task · O*NET work activity: Train others in computer interface or software use..

Encrypt data transmissions and erect firewalls to conceal confidential information as it is being transmitted and to keep out tainted digital transfers.

Weekly

AI drafts scripts and configs; design and security are yours.

Show prompt & steps

AI can draft configurations, scripts and test cases and explain unfamiliar systems. Architecture and security decisions need your expertise.

Ready-to-use prompt

I work as an information security analyst. Part of my job is to encrypt data transmissions and erect firewalls to conceal confidential information as it is being transmitted and to keep out tainted digital transfers.

Context: We use Microsoft Azure software and Microsoft PowerShell; the work draws on telecommunications, computers and electronics and engineering and technology.
System: [network, application]
Threat or change: [describe]

Propose security controls and configuration steps with tests. Propose the approach first, then the code with comments and tests, and point out security risks.

10-minute exercise: Security measure implementation

Step 1Pick a real example: the next time you encrypt data transmissions (this week).
Step 2Fill in [System] and [Threat or change] with the real details, then run the prompt.
Step 3Test in staging and keep a rollback plan. Check it against the manufacturer's manual and your site procedure before you rely on it.

Don't paste secrets, passwords or proprietary code into tools your employer hasn't approved.

Safety-critical: AI output is a starting point. Follow your site's procedures and the manufacturer's guidance.

Importance 4.2/5 · core task · O*NET work activity: Implement security measures for computer or information systems..

These stay human 1

They need your hands, your presence or your accountable judgment. Lean into them: they get more valuable as routine work is automated.

📏 Measured in this job (O*NET work context): Face-to-face discussions: once a week or more but not every day · Contact with others: contact with others most of the time · Impact of decisions: important results

Coordinate implementation of computer system plan with establishment personnel and outside vendors.

Monthly

Leading people runs on trust. AI can prep the paperwork around it.

Show prep prompt & steps

Where AI still helps: AI can prep the paperwork around leading: meeting agendas, feedback drafts, rotas, briefings and difficult-conversation rehearsals.

Prep prompt

I work as an information security analyst. Part of my job is to coordinate implementation of computer system plan with establishment personnel and outside vendors.

Context: The work draws on telecommunications, computers and electronics and engineering and technology.
Project: [describe]
Teams: [describe]

Plan coordination and decisions needed. Give me the key message in 2 sentences, how people might react, and how to respond to each.

10-minute exercise: Cross-team project coordination

Step 1Pick a real example: the next time you coordinate implementation of computer system plan. Leave out names and identifying details.
Step 2Fill in [Project] and [Teams] with the real details, then run the prompt.
Step 3Afterward, note one thing people responded to and one thing you'd change.

Importance 3.9/5 · core task · O*NET work activity: Coordinate project activities with other personnel or departments..

Get the full prompt pack for Information Security Analysts

Every task, prompt and 10-minute exercise on this page in one PDF, formatted to print or keep on your desktop. Free.

Where should we send your PDF?

Your Information Security Analysts prompt pack downloads straight away, and a copy goes to your inbox.

We'll also send occasional updates about this playbook. Unsubscribe anytime. Privacy

Your next moves

Skills to build

From O*NET's ratings of how important each skill is in this job, matched to which part of the work it supports.

Stays human Deepen these

They power the human-led work, which is the part of the job AI can't take over.

  • Persuasionimportance 2.6/5
    Used in: Guiding, Directing, and Motivating Subordinates
  • Negotiationimportance 2.6/5
    Used in: Guiding, Directing, and Motivating Subordinates

With AI Use these to work with AI

When AI does the first draft, these are the skills you use to brief it and check what comes back.

  • Reading Comprehensionimportance 4.0/5
    Used in: Working with Computers
  • Critical Thinkingimportance 3.9/5
    Used in: Working with Computers
  • Complex Problem Solvingimportance 3.8/5
    Used in: Working with Computers
  • Systems Analysisimportance 3.4/5
    Used in: Working with Computers

Where you could move

Related jobs from O*NET with the closest skill profile, favouring ones where more of the work stays human. No step down in preparation.

  • Computer Network Architects13% human-led · Same preparation · $134,050/yr · usually bachelor's degreeSkills to build: Programming, Technology Design, Mathematics
  • Penetration Testers0% human-led · Same preparation · $116,580/yrSkills to build: Programming, Systems Evaluation, Judgment and Decision Making
  • Computer and Information Systems Managers30% human-led · Same preparation · $175,140/yr · usually bachelor's degreeSkills to build: Management of Financial Resources, Social Perceptiveness, Operations Analysis

Getting into this job

Bachelor's degree is most common (53% of workers)

  • Certificate or some college 9%
  • Associate's 13%
  • Bachelor's 75%
  • Graduate degree 3%
  • On-the-job training: 3–6 months
  • Related experience: 4–6 years

What workers in this job report, from O*NET surveys (typical values).

Software in this job

In-demand tools from O*NET. Many now have AI built in, so check what yours can do before adding a new tool.

AJAXAmazon DynamoDBAmazon Elastic Compute Cloud EC2Amazon RedshiftAmazon Web Services AWS CloudFormationAmazon Web Services AWS softwareAnsible softwareApache CassandraApache HadoopApache HiveApache KafkaApache Maven