A junior SOC analyst, cloud security architect, penetration tester, and CISO may all work in cybersecurity while earning very different salaries.

Average Cybersecurity Salary

The U.S. Bureau of Labor Statistics reports that information security analysts earned a median annual wage of $129,180 in May 2025.

Employment is also projected to grow by 21% between 2025 and 2035, much faster than the 3% average projected across all occupations. (Bureau of Labor Statistics)

This BLS figure provides a useful benchmark, but beginners should not assume they will immediately earn the occupation-wide median.

Entry-level compensation is generally lower, while specialized engineering, architecture, consulting, and leadership roles may exceed it.

Entry-Level Cybersecurity Salary

Common early-career jobs include:

These ranges are planning estimates, not guaranteed compensation.

Beginners with previous IT, networking, development, audit, military, cloud, or systems-administration experience may qualify for higher-level positions faster.

Cybersecurity Analyst Salary

Cybersecurity analysts may monitor threats, investigate incidents, assess vulnerabilities, manage security controls, and support risk-management programs.

An illustrative U.S. range is:

$65,000–$110,000+

More experienced analysts or those working in high-paying industries can earn above this range.

The broader BLS information-security analyst category had a median salary of $129,180 in 2025. (Bureau of Labor Statistics)

SOC Analyst Salary

A Security Operations Center analyst investigates security alerts and monitors systems.

Typical planning ranges:

Junior SOC Analyst: $50K–$80K+
SOC Analyst: $60K–$100K+
Senior SOC Analyst: $85K–$130K+
SOC Lead/Manager: $105K–$160K+

Advanced skills in SIEM, endpoint detection, cloud security, threat hunting, and incident response can support career progression.

Penetration Tester Salary

Penetration testers perform authorized security assessments.

Illustrative ranges:

Junior Pentester: $65K–$100K+
Penetration Tester: $80K–$140K+
Senior Pentester: $110K–$165K+
Offensive Security Lead: $130K–$190K+

Compensation can rise with specialized experience in application security, cloud testing, consulting, or red-team operations.

Security Engineer Salary

Security engineers design and implement security systems.

Illustrative range:

$95K–$155K+

Senior security engineers may earn considerably more, particularly in technology, financial services, cloud computing, and large enterprise environments.

Cloud Security Engineer Salary

Cloud security combines high-demand knowledge in:

• Cloud infrastructure
• IAM
• Networking
• Security engineering
• Automation
• Monitoring

Illustrative U.S. ranges:

Cloud Security Analyst: $85K–$125K+
Cloud Security Engineer: $105K–$175K+
Senior Cloud Security Engineer: $130K–$195K+
Cloud Security Architect: $145K–$210K+

Cloud security certifications and substantial AWS, Azure, or Google Cloud experience can strengthen a candidate’s profile.

Application Security Engineer Salary

Application-security engineers secure software-development environments and applications.

Illustrative ranges:

AppSec Analyst: $80K–$115K+
Application Security Engineer: $105K–$175K+
Senior AppSec Engineer: $130K–$195K+
AppSec Architect: $145K–$210K+

Programming, DevSecOps, secure software development, and cloud knowledge are especially useful.

GRC Salary

Governance, Risk and Compliance offers a less coding-intensive cybersecurity pathway.

Illustrative ranges:

Junior GRC Analyst: $55K–$90K+
GRC Analyst: $70K–$115K+
GRC Consultant: $90K–$145K+
GRC Manager: $110K–$165K+
Security Risk Director: $140K–$210K+

Strong knowledge of NIST, ISO 27001, risk assessment, audit, and compliance can improve advancement opportunities.

Security Architect Salary

Security architecture is generally a senior career stage.

Illustrative U.S. range:

$130K–$200K+

For comparison, BLS reports that computer network architects had a median annual wage of $134,050 in May 2025, with the highest 10% earning more than $202,680. (Bureau of Labor Statistics)

Security architects normally need significant technical and business experience.

Cybersecurity Manager Salary

Security managers combine technical expertise with:

• Team leadership
• Risk management
• Budgeting
• Strategy
• Incident management
• Stakeholder communication

Illustrative range:

$120K–$190K+

Director-level positions can move significantly higher.

CISO Salary

The Chief Information Security Officer is typically one of the highest-level cybersecurity executives.

Compensation varies enormously based on:

• Company size
• Industry
• Geography
• Equity
• Bonuses
• Responsibilities

Broad base-salary planning ranges may start around $160K–$250K+, while total compensation at large companies can exceed this significantly.

CISO should be viewed as a long-term executive destination, not an entry-level cybersecurity role.

Cybersecurity Certifications and Salary

Certifications do not automatically create salary increases, but they can support career advancement when paired with experience.

ISC2 reported in July 2026 that holders of its certifications in its survey data had global median salaries ranging from $95,200 for SSCP to $134,500 for CGRC, while CISSP respondents reported a global median of $127,000. These are self-reported global figures and should not be interpreted as guaranteed certification premiums. (ISC2)

What Determines Cybersecurity Salary?

Major factors include:

Experience

Professionals with proven responsibility usually command more than beginners.

Specialization

Cloud security, application security, architecture, engineering, and leadership can command strong compensation.

Industry

Finance, technology, consulting, defense, and large enterprises may pay differently from education, nonprofit, or smaller organizations.

Location

Salary levels vary substantially between countries and U.S. metropolitan areas.

Certifications

Relevant professional certifications can strengthen career positioning but do not substitute for real capability.

Security Clearance

Certain government and defense positions may value active security clearances.

Communication and Leadership

At senior levels, being able to translate security into business risk becomes increasingly important.

How to Increase Your Cybersecurity Earning Potential

A practical progression is:

Build foundations → specialize → gain experience → earn relevant certifications → develop advanced skills → take ownership → move into engineering/architecture/leadership.

Do not chase salary alone. Skills with strong market value typically create better long-term leverage.

FAQs

Is cybersecurity a high-paying career?

It can be. BLS reports a $129,180 median for information security analysts in 2025, substantially above the median for all occupations. (Bureau of Labor Statistics)

Can beginners earn six figures?

Some do, particularly with relevant prior experience or high-cost-market employers, but it should not be treated as a typical guaranteed starting salary.

Which cybersecurity jobs pay the most?

Architecture, cloud security, application security, engineering, management, consulting, and executive security leadership can offer high compensation.

Does a certification increase salary?

Potentially, when it enables progression into higher-value responsibilities. Certification alone does not guarantee more pay.

The post Cybersecurity Salary Guide first appeared on CyberWork.