Most “cybersecurity salary” articles give you one number and call it a day. That number is usually wrong for whatever role you’re actually considering, and it almost never reflects the swing between entry-level and senior pay.
The reality is that cybersecurity is one of the widest-paying fields in tech. A first-year SOC analyst and a senior cloud security engineer might both call themselves “cybersecurity professionals,” and there’s a $90,000 gap between their paychecks. The Bureau of Labor Statistics reports a $124,910 median for information security analysts (BLS OEWS 2024), but that single figure hides ten different career paths underneath.
This is the honest breakdown. Pay by specific role, by experience level, by certification, and by city. We pulled from BLS, Glassdoor, Payscale, and 2026 hiring board data so you can see what your target role actually pays.
Table of contents
- Cybersecurity salary at a glance
- Salary by cybersecurity role
- How experience changes the number
- What certifications add to your salary
- Where cybersecurity pays the most
- Remote vs on-site pay
- How to grow your salary fastest
- Start your cybersecurity career with Coding Temple
- FAQs about cybersecurity pay
Cybersecurity salary at a glance
The headline numbers, with sources: BLS reports a $124,910 median annual wage for information security analysts (May 2024 OEWS). The (ISC)² Cybersecurity Workforce Study 2024 reports an average compensation of $147,138 across all cybersecurity roles in the US. Entry-level cybersecurity jobs cluster in the $65,000 to $85,000 range. Senior roles routinely clear $180,000.
The big takeaway: the field pays well at every level, and pay scales fast. A career changer entering at $72,000 typically reaches the $120,000 range within four to six years if they pick up a relevant cert and switch roles once or twice along the way.
Salary by cybersecurity role
Cybersecurity isn’t one job. It’s a family of roles, each with its own pay band. Here’s how the most common ones stack up in 2026.
How experience changes the number
Years of experience matters more in cybersecurity than in most fields. Pay tends to roughly double between year one and year five for analysts who keep moving roles and stacking certs.
What certifications add to your salary
Certifications absolutely move the number. The size of the bump depends on which cert and how senior you already are.
For entry-level analysts, Security+ tends to add roughly $5,000 to $8,000 over a no-cert baseline, mostly because it gets you past resume filters that wouldn’t otherwise read your application. CySA+ adds another $5,000 on top once you’re past Tier 1.
The senior-tier certs are where the numbers get interesting. CISSP holders earn an average of $156,000 (ISC)² 2024 survey data, vs $124,000 for non-CISSP infosec analysts. OSCP (offensive security) is the gold standard for pen testing roles and tends to add $15,000 to $25,000 to a pen tester salary. CISM and CISA hit hardest for governance and audit roles.
One caveat: certifications matter most early. After year five or six, your portfolio and references matter more than the letters after your name. Don’t stockpile certs as a substitute for getting hands-on experience.
Where cybersecurity pays the most
The biggest cybersecurity salaries cluster in five metros: San Francisco, Washington DC, New York, Seattle, and Boston. The DC market is especially strong because of the volume of federal contractor work, much of which requires clearances and pays a premium for them.
That said, location matters less in cybersecurity than it used to. The post-2022 shift to remote work pulled a lot of senior roles out of those metros. A senior cloud security engineer in Austin or Raleigh today often makes within 5% of a peer in San Francisco, with a much lower cost of living.
Federal contractor work in the DC corridor remains in a category of its own. Cleared roles (TS/SCI in particular) routinely add $20,000 to $40,000 in pay over equivalent uncleared positions, because the supply of cleared talent is so constrained.
Remote vs on-site pay
Remote cybersecurity roles in 2026 pay roughly equivalent to on-site equivalents at the same company tier. The catch: remote roles tend to skew toward larger employers and more senior levels. Entry-level fully-remote SOC roles exist but are competitive. Hybrid (two to three days in office) is the most common arrangement for mid-level cyber jobs right now.
Some employers still pay locality-adjusted (lower pay if you live in a low-cost metro). Others pay flat. Always ask in the screen call. The difference between locality-adjusted and flat-rate at a major employer can be $15,000 to $25,000 on the same role.
How to grow your salary fastest
The fastest path to a six-figure cybersecurity salary is sequential and predictable. Land any cybersecurity role with a recognized cert. Spend 18 to 24 months getting good at the work. Pick one specialization (cloud security, pen testing, detection engineering) and build proof you can do it. Switch employers.
That last step is the one most people skip. Internal promotions in cybersecurity tend to lag market rates. Career-changers who switch employers every two to three years see materially higher career-long earnings than those who stay loyal.
Building a specialization matters more than picking up another general cert. Pen testing pays a 20% premium over general analyst work. Cloud security pays 25 to 30%. AppSec pays similarly. Pick the one you find most interesting and double down.
Start your cybersecurity career with Coding Temple
If you’re trying to get into cybersecurity, the salary numbers above are real. The question is how fast you can get there. Our cybersecurity bootcamp compresses the timeline to roughly 24 weeks of focused training, hands-on labs, and Security+ prep, with career services to help you land that first role.
Most career changers we work with land their first cybersecurity job in the $65,000 to $85,000 range, then climb fast. Apply to Coding Temple or talk to admissions to see if it’s the right fit.
FAQs about cybersecurity pay
What’s the highest-paying cybersecurity job?
Chief Information Security Officer (CISO) is the top of the pay band, with median compensation around $237,000 in 2026 (Glassdoor). It’s a 10-to-15-year role, not an entry point. Below CISO, security architects and senior cloud security engineers are the highest-paying individual contributor roles.
Can you make six figures in cybersecurity without a degree?
Yes. Most senior cybersecurity roles screen on certifications and demonstrable experience, not formal education. Career changers without degrees regularly reach $120,000 plus within five years if they specialize. See our breakdown of how to get into cybersecurity without a degree.
How much does an entry-level cybersecurity job pay?
Entry-level pay clusters in the $65,000 to $85,000 range nationally for roles like Tier 1 SOC analyst, junior security analyst, and IT security specialist. Cleared government positions and major-metro roles trend toward the higher end.
Is cybersecurity pay growing?
Yes. (ISC)² reports a 4.1% year-over-year increase in average cybersecurity compensation between 2023 and 2024. The hiring gap (~4.8M unfilled roles globally) keeps wage pressure on employers.
Which certification pays the most?
CISSP carries the largest single-cert bump for senior roles, with holders earning an average of $156,000 vs $124,000 for non-CISSP analysts. For specialists, OSCP (pen testing) and CCSP (cloud security) drive the biggest premiums in their respective tracks.
Do cybersecurity bootcamp grads earn less than CS degree holders?
For the same role, starting salaries are typically within 5% of each other. The bigger differentiator is which role you land first and how quickly you climb. See cybersecurity certifications for beginners for the cert path that maximizes your starting offer.