For role-by-role compensation benchmarking and career income strategy, see the Profession Salary Guides hub.
For conversion formulas, overtime scenarios, and annual-pay planning, see the Hourly to Annual hub.
Cybersecurity analysts in the US earn $112,000 on average — with massive demand driving salaries higher each year. The field has 3.4 million unfilled positions globally and 32% projected growth, making it one of the most in-demand and financially rewarding career paths in tech.
Unlike software engineering where you compete with millions of graduates, cybersecurity has a genuine talent shortage that keeps salaries high and job security strong.
What Cybersecurity Analysts Actually Do
“Cybersecurity analyst” is a broad title covering many different functions. Understanding what you’d actually do daily matters for both salary expectations and job fit:
| Role | What You Actually Do | Stress Level |
|---|---|---|
| SOC Analyst | Monitor alerts, triage incidents, escalate threats 24/7 | High (shift work) |
| Security Engineer | Build/configure security tools, automate defenses | Moderate |
| Penetration Tester | Hack systems legally to find vulnerabilities | Variable (deadlines) |
| Incident Response | Investigate breaches, contain damage, recover systems | Very High (crisis) |
| Threat Intelligence | Research attackers, predict threats, brief leadership | Moderate |
| Cloud Security | Secure AWS/Azure/GCP environments, IAM, compliance | Moderate |
| Application Security | Review code, secure SDLC, work with developers | Moderate |
| GRC (Governance, Risk, Compliance) | Policies, audits, frameworks, documentation | Low-Moderate |
| Security Architect | Design security systems, strategy, standards | Low (but high responsibility) |
The SOC analyst trap: Many people enter cybersecurity through SOC (Security Operations Center) analyst roles. These pay $65,000-$90,000, involve shift work, and have high burnout due to alert fatigue. The job is monitoring dashboards 8-12 hours hoping nothing blows up. Plan to use SOC experience as a stepping stone, not a career.
The pentesting myth: Penetration testing is highly competitive because it sounds exciting. Reality: lots of report writing, repetitive testing methodologies, and stress around engagement deadlines. Still great work if you love the technical puzzle.
Hidden gem roles: GRC (compliance) pays $100,000-$140,000 with lower stress and better hours than most security roles. It’s less technical but valued by companies facing regulatory requirements.
Average Cybersecurity Analyst Salary in 2026
| Metric | Amount |
|---|---|
| Average cybersecurity salary | $112,000 |
| Median cybersecurity salary | $105,000 |
| Entry level (0-2 years) | $75,000 |
| Mid-level (3-5 years) | $100,000-$120,000 |
| Senior (5-8 years) | $130,000-$160,000 |
| Principal/Staff | $160,000-$200,000 |
| Top 10% earn | $165,000+ |
| Hourly rate (average) | $53.85 |
Cybersecurity Salary by Role
| Role | Average Salary |
|---|---|
| Security Analyst | $95,000 |
| Security Engineer | $125,000 |
| SOC Analyst | $85,000 |
| Penetration Tester | $118,000 |
| Security Architect | $155,000 |
| CISO | $225,000-$400,000 |
| Incident Response | $115,000 |
| Threat Intelligence | $120,000 |
| Cloud Security Engineer | $145,000 |
| Application Security | $140,000 |
| GRC Analyst | $100,000 |
Cybersecurity Salary by Experience
| Experience Level | Average Salary | Typical Title |
|---|---|---|
| 0-1 years | $72,000 | Junior Security Analyst |
| 1-3 years | $90,000 | Security Analyst |
| 3-5 years | $115,000 | Senior Analyst/Engineer |
| 5-8 years | $140,000 | Senior Security Engineer |
| 8-12 years | $165,000 | Principal/Staff Engineer |
| 12+ years | $185,000+ | Security Architect/Director |
| CISO | $225,000+ | Chief Information Security Officer |
Cybersecurity Salary by Certification
| Certification | Average Salary | Premium |
|---|---|---|
| CISSP | $137,000 | +20-25% |
| CISM | $130,000 | +15-20% |
| CISA | $120,000 | +10-15% |
| CEH | $105,000 | +8-12% |
| CompTIA Security+ | $88,000 | +5-10% |
| AWS Security Specialty | $145,000 | +15-20% |
| OSCP | $130,000 | +15-20% |
| GIAC (various) | $125,000 | +12-18% |
Certification Stacking
| Certification Stack | Average Salary |
|---|---|
| Security+ only | $80,000 |
| Security+ + CEH | $95,000 |
| Security+ + CEH + CISSP | $130,000 |
| CISSP + Cloud certs | $150,000 |
Cybersecurity Salary by Industry
| Industry | Average Salary | Notes |
|---|---|---|
| Big Tech | $150,000-$250,000 | Highest total comp |
| Finance/Banking | $135,000-$175,000 | Strong demand |
| Defense contractors | $120,000-$160,000 | Clearance bonus |
| Consulting (Big 4) | $110,000-$150,000 | Travel required |
| Healthcare | $105,000-$140,000 | HIPAA compliance |
| Government | $90,000-$140,000 | Clearance valuable |
| Retail/E-commerce | $100,000-$135,000 | PCI compliance |
| Insurance | $105,000-$140,000 | Growing field |
| Energy/Utilities | $110,000-$145,000 | Critical infrastructure |
| Startups | $100,000-$140,000 | + equity |
Cybersecurity Salary by Location
| Metro Area | Average Salary | Cost-Adjusted | vs. National |
|---|---|---|---|
| San Francisco | $155,000 | $102,000 | +38% |
| Seattle | $145,000 | $111,000 | +29% |
| New York City | $140,000 | $98,000 | +25% |
| Washington DC | $138,000 | $110,000 | +23% |
| Boston | $135,000 | $102,000 | +21% |
| Los Angeles | $130,000 | $94,000 | +16% |
| Austin | $120,000 | $108,000 | +7% |
| Denver | $118,000 | $103,000 | +5% |
| Chicago | $115,000 | $107,000 | +3% |
| Remote | $125,000 | Varies | +12% |
Fully Remote Cybersecurity Work:
| Remote Scenario | Typical Salary | Cost-of-Living Adjustment |
|---|---|---|
| Big Tech, remote from LCOL | $130,000-$150,000 | Sometimes reduced 5-15% |
| Non-tech company, remote | $100,000-$125,000 | Usually no adjustment |
| Consulting, remote | $110,000-$140,000 | No adjustment |
| Government contractor, remote | $90,000-$130,000 | Location-based scale |
Geographic arbitrage is real: a remote security engineer earning $140,000 while living in a $1,500/month apartment in Indianapolis has far more purchasing power than the same salary in San Francisco at $3,500/month.
Security Clearance Premium
| Clearance Level | Salary Premium | DC-Area Total Salary |
|---|---|---|
| Secret | +$10,000-$15,000 | $110,000-$135,000 |
| Top Secret | +$15,000-$25,000 | $125,000-$155,000 |
| TS/SCI | +$25,000-$40,000 | $145,000-$180,000 |
| TS/SCI with Poly | +$40,000-$60,000 | $165,000-$220,000 |
DC-area cleared cybersecurity roles often pay $150,000-$200,000+ for mid-career professionals. The clearance itself is valuable and portable across defense contractors.
Getting cleared: You can’t buy a clearance — an employer sponsors you. Defense contractors (Lockheed, Raytheon, Northrop, Booz Allen) are the primary path. The process takes 3-12+ months and requires clean background.
Top Companies for Cybersecurity Salaries
| Company | Salary Range | Total Compensation |
|---|---|---|
| $150,000-$220,000 | $220,000-$350,000 | |
| Meta | $155,000-$230,000 | $230,000-$380,000 |
| Microsoft | $140,000-$200,000 | $190,000-$320,000 |
| Amazon | $135,000-$190,000 | $180,000-$280,000 |
| Apple | $145,000-$210,000 | $200,000-$330,000 |
| Netflix | $180,000-$250,000 | $200,000-$350,000 |
| Palo Alto Networks | $140,000-$200,000 | $180,000-$280,000 |
| CrowdStrike | $135,000-$190,000 | $170,000-$270,000 |
Cybersecurity Salary After Taxes
| Gross Salary | Federal Tax | FICA | State Tax (avg) | Take-Home |
|---|---|---|---|---|
| $85,000 | $11,900 | $6,503 | $3,400 | $63,197 |
| $112,000 | $18,600 | $8,568 | $4,480 | $80,352 |
| $145,000 | $27,500 | $10,878 | $5,800 | $100,822 |
| $180,000 | $37,200 | $11,933 | $7,200 | $123,667 |
How to Increase Cybersecurity Salary
- Get CISSP certified — 20-25% salary premium
- Obtain security clearance — $25K-$60K premium
- Move to Big Tech — 50-100% higher total comp
- Specialize in cloud security — High demand skill
- Target DC area — Clearance + government contracts
- Pursue CISO path — $225K-$400K+ potential
- Build red team/pentesting skills — Premium specialty
Cybersecurity Career Path
| Level | Years | Salary Range |
|---|---|---|
| SOC Analyst / Junior | 0-2 | $65,000-$85,000 |
| Security Analyst | 2-4 | $85,000-$110,000 |
| Senior Security Analyst | 4-6 | $110,000-$135,000 |
| Security Engineer | 4-7 | $120,000-$155,000 |
| Senior Security Engineer | 6-10 | $145,000-$180,000 |
| Security Architect | 8-12 | $160,000-$200,000 |
| Security Director | 10-15 | $175,000-$225,000 |
| CISO | 15+ | $225,000-$400,000+ |
Job Outlook for Cybersecurity
| Metric | Data |
|---|---|
| Projected growth (2022-2032) | 32% (much faster than average) |
| Unfilled positions | 3.4 million globally |
| Demand drivers | Cyber attacks, regulations, cloud adoption |
| Hot areas | Cloud security, zero trust, AI/ML security |
Education for Cybersecurity
| Path | Cost | Time | Best For |
|---|---|---|---|
| Self-taught + certifications | $1,000-$5,000 | 1-2 years | Career changers with discipline |
| CompTIA pathway | $1,500-$3,000 | 6-12 months | Budget-conscious starters |
| Bootcamp | $10,000-$20,000 | 3-6 months | Fast career change |
| Bachelor’s degree | $40,000-$150,000 | 4 years | Young people, some employers |
| Master’s (cybersecurity) | $30,000-$80,000 | 2 years | Management track, teaching |
| Military/intelligence | Paid | 4+ years | Clearance + experience |
Certifications often matter more than degrees for career advancement. Many hiring managers prioritize CISSP + practical experience over a master’s degree.
Recommended certification progression:
| Stage | Certifications | Career Level |
|---|---|---|
| Foundation | CompTIA Security+, Network+ | Entry-level analyst |
| Intermediate | CEH, CySA+, GSEC | Security analyst |
| Advanced | CISSP, AWS/Azure Security | Senior engineer |
| Expert | OSCP, CISM, GIAC specialties | Principal/architect |
Build a home lab: Nothing beats hands-on experience. A basic lab costs $0-$500:
- Deploy vulnerable virtual machines (DVWA, Metasploitable)
- Set up SIEM (Security Onion, Splunk free)
- Practice attack/defense scenarios
- Document projects for interviews
Cybersecurity After-Tax Take-Home Pay
| Gross Salary | Federal Tax | FICA | State Tax (avg) | Take-Home | Monthly |
|---|---|---|---|---|---|
| $75,000 | $9,200 | $5,738 | $3,000 | $57,062 | $4,755 |
| $95,000 | $13,500 | $7,268 | $3,800 | $70,432 | $5,869 |
| $112,000 | $18,600 | $8,568 | $4,480 | $80,352 | $6,696 |
| $135,000 | $24,800 | $10,328 | $5,400 | $94,472 | $7,873 |
| $155,000 | $30,500 | $11,858 | $6,200 | $106,442 | $8,870 |
| $180,000 | $37,200 | $11,933 | $7,200 | $123,667 | $10,306 |
| $220,000 | $49,000 | $11,933 | $8,800 | $150,267 | $12,522 |
Note: Big Tech compensation often includes RSUs (stock), which vest over 4 years. A $180,000 base + $200,000 RSU package = $230,000 annual comp, but RSU taxes are complex and depend on stock price.
Is Cybersecurity a Good Career?
Advantages of a Cybersecurity Career
| Advantage | Details |
|---|---|
| High salaries | $112,000 average, $150,000-$250,000 at senior levels |
| Exceptional job growth | 32% projected growth, 3.4M unfilled positions globally |
| Job security | Demand far exceeds supply, layoff-resistant field |
| Multiple entry points | Self-taught, bootcamp, degree, career change all viable |
| Remote work common | Many roles fully remote or hybrid |
| Clear career progression | Defined path from analyst to architect to CISO |
| Multiple specializations | Pentesting, cloud security, GRC, threat intel, etc. |
| Meaningful work | Protecting organizations from real attacks |
| Continuous learning | Field evolves constantly, never boring |
| Portable skills | Every industry needs security |
Disadvantages of a Cybersecurity Career
| Challenge | Details |
|---|---|
| High stress (some roles) | Incident response means crisis management under pressure |
| On-call responsibilities | SOC analysts often work nights/weekends/holidays |
| Alert fatigue | Monitoring dashboards for threats is mentally exhausting |
| Blame during breaches | Security teams often scapegoated when attacks succeed |
| Constant learning required | Must continuously update skills or become obsolete |
| Difficult entry level | Many “entry” jobs want 2-3 years experience already |
| Certification treadmill | CEUs, recertification, new certs add ongoing costs |
| Imposter syndrome common | Field is vast, always more to learn |
| Regulatory complexity | HIPAA, PCI, SOX, GDPR rules constantly changing |
| SOC burnout | Many entry-level SOC roles have high turnover |
Who Should Work in Cybersecurity?
Good Fit For
| Type | Why Cybersecurity Works |
|---|---|
| Curious problem-solvers | Security is detective work finding how attacks succeed |
| Career changers from IT | Network admins, sysadmins have transferable skills |
| Self-motivated learners | Field rewards continuous education |
| Detail-oriented people | Security mistakes come from overlooking details |
| People wanting remote work | Many roles fully remote, especially post-pandemic |
| Military veterans | Security clearance + discipline valued highly |
| IT professionals seeking higher pay | Security consistently pays more than general IT |
| People wanting job security | Demand exceeds supply by millions of workers |
Poor Fit For
| Type | Why Cybersecurity May Not Work |
|---|---|
| Non-technical people | Even GRC roles need technical understanding |
| Those seeking 9-to-5 only | Many roles have on-call, incident response needs |
| People who dislike constant learning | Skills become obsolete in 2-3 years |
| High anxiety individuals | Incident response is crisis management |
| Those who need immediate visible impact | Security work is often invisible until something fails |
| People who hate documentation | Reports, policies, compliance docs are constant |
| Those unwilling to start lower | SOC analyst grind is often necessary stepping stone |
| People needing creative expression | Most work is following frameworks and procedures |
Building Wealth in Cybersecurity
At $75,000/year (entry-level analyst):
| Category | Monthly | Annual |
|---|---|---|
| After-tax take-home | $4,755 | $57,062 |
| 401k (10%) | $625 | $7,500 |
| Remaining | $4,130 | $49,562 |
| Housing | $1,500 | $18,000 |
| Living expenses | $1,500 | $18,000 |
| Available for savings | $1,130 | $13,562 |
Can build emergency fund, pay off debt, start retirement savings. Not wealthy, but comfortable with room to grow.
At $125,000/year (mid-career, remote):
| Category | Monthly | Annual |
|---|---|---|
| After-tax take-home | $7,500 | $90,000 |
| 401k (15%) | $1,562 | $18,750 |
| Remaining | $5,938 | $71,250 |
| Housing | $2,000 | $24,000 |
| Living expenses | $1,800 | $21,600 |
| Available for savings | $2,138 | $25,650 |
This is comfortable anywhere in the US. Remote + LCOL area = accelerated wealth building. Max retirement accounts, build taxable brokerage, own home possible.
At $180,000/year (senior + Big Tech/clearance):
| Category | Monthly | Annual |
|---|---|---|
| After-tax take-home | $10,306 | $123,667 |
| 401k (max) | $1,917 | $23,000 |
| Remaining | $8,389 | $100,667 |
| Housing | $2,500 | $30,000 |
| Living expenses | $2,000 | $24,000 |
| Available for savings | $3,889 | $46,667 |
Plus RSU vesting if Big Tech ($30,000-$80,000+/year additional). This income level enables aggressive wealth building — max all retirement accounts, taxable investing, potential real estate.
15-Year Wealth Trajectory:
| Career Path | Year 5 Net Worth | Year 10 Net Worth | Year 15 Net Worth |
|---|---|---|---|
| Stay entry-level SOC | $80,000 | $200,000 | $400,000 |
| Progress to senior engineer | $150,000 | $450,000 | $900,000 |
| Big Tech or cleared DC | $250,000 | $750,000 | $1,500,000+ |
| CISO track | $200,000 | $600,000 | $1,400,000+ |
Cybersecurity offers a realistic path to millionaire status by mid-career if you advance and save consistently.
The Bottom Line: Is Cybersecurity Worth It?
For most people interested in tech careers, yes — cybersecurity is an excellent choice.
| Question | Answer |
|---|---|
| Is $112,000 average good? | Yes, significantly above US median ($56,000) |
| Is job security strong? | Exceptional — 3.4 million unfilled positions |
| Can you break in without a degree? | Yes, certifications + experience work |
| Is Big Tech pay achievable? | Yes, $180,000-$250,000+ at senior levels |
| Is the work stressful? | Depends on role — SOC high, GRC lower |
| Should you start as SOC analyst? | Maybe, but plan exit strategy within 2-3 years |
Key takeaways:
-
$112,000 average masks huge variation — entry SOC analysts earn $65,000, Big Tech senior engineers earn $250,000+. Your actual earnings depend on role, location, and certifications.
-
CISSP is the single most valuable certification — 20-25% salary premium, required for many senior roles. Don’t pursue it too early (needs 5 years experience), but plan for it.
-
Security clearance changes the game if you’re eligible — TS/SCI adds $40,000-$60,000 to DC-area salaries, and the clearance itself is valuable across employers.
-
SOC analyst is a stepping stone, not a career — Use it for 1-3 years to gain experience, then specialize in engineering, cloud security, or pentesting for better pay and work-life balance.
-
Remote work is realistic and common — Unlike many tech roles facing return-to-office pressure, security roles often stay remote because the work doesn’t require physical presence.
-
Certifications beat degrees for most hiring — A self-taught candidate with CISSP, AWS Security, and a home lab portfolio often beats a master’s degree holder with no certs.
-
Burnout is real in certain roles — Be strategic about which specialty you pursue. GRC and security architecture offer high pay with lower stress than incident response.
For someone willing to continuously learn, comfortable with technical work, and seeking job security with high income potential, cybersecurity is one of the best career choices available today.
Related Salaries
- How Much Do Software Engineers Make?
- How Much Do Data Scientists Make?
- How Much Do Cloud Architects Make?
Data sources: Bureau of Labor Statistics, Glassdoor, Levels.fyi, CyberSeek, (ISC)² Cybersecurity Workforce Study. Updated March 2026.
Sources
- U.S. Bureau of Labor Statistics. “Occupational Employment and Wage Statistics, May 2024.” bls.gov/oes
- U.S. Bureau of Economic Analysis. “National Income and Product Accounts.” bea.gov/data
- U.S. Department of Labor. “Wages and the Fair Labor Standards Act.” dol.gov/agencies/whd/flsa
- Social Security Administration. “Benefits and Eligibility Information.” ssa.gov/benefits
The content on Wealthvieu is for informational purposes only and should not be considered financial, tax, or investment advice. Consult a qualified professional before making financial decisions. Full disclaimer · Editorial policy