Cybersecurity Salary in 2026: The $115K Median Nobody Talks About
Cybersecurity professionals earn a median of $115,000 in 2026 — with 28% YoY demand growth. BLS data by specialisation, city, and experience level.
Cybersecurity is one of the most under-discussed high-pay careers in tech. While software engineering dominates career conversations, security professionals earn comparable salaries with lower supply competition and stronger job security.
Cybersecurity Salary 2026 — Distribution
| Level | Annual Salary |
|---|---|
| Entry Level (Security Analyst I) | $65,000 |
| Mid Level (Security Analyst II) | $89,000 |
| Median | $115,000 |
| P75 | $152,000 |
| Senior / Architect | $172,000 |
| CISO / VP Security | $224,000 |
Cybersecurity Roles and Pay
| Role | 2026 Median | Growth |
|---|---|---|
| Penetration Tester | $118,000 | +31% |
| Security Engineer | $128,000 | +28% |
| Cloud Security Architect | $148,000 | +34% |
| Security Analyst | $94,000 | +26% |
| Incident Response | $103,000 | +28% |
| GRC Analyst | $88,000 | +22% |
| CISO (enterprise) | $224,000 | +18% |
Top Cities for Cybersecurity Jobs
| City | Median | Notes |
|---|---|---|
| Washington, DC | $148,000 | Federal/defence concentration |
| San Francisco, CA | $163,000 | Tech company security teams |
| New York, NY | $141,000 | Financial sector security |
| Austin, TX | $124,000 | Growing tech hub |
| Seattle, WA | $138,000 | Cloud provider security |
Washington DC's massive government and defence contractor presence makes it unique in cybersecurity — federal security clearance holders earn 20–30% above private sector equivalents.
Most Valuable Certifications (and Their Pay Premium)
| Certification | Premium | Time to Obtain |
|---|---|---|
| CISSP | +$22,000 | 6–12 months (5 yrs exp. required) |
| OSCP | +$18,000 | 3–6 months |
| AWS Security Specialty | +$15,000 | 2–4 months |
| CISM | +$14,000 | 4–8 months |
| CEH | +$8,000 | 2–3 months |
| Security+ | +$5,000 | 1–2 months |
CISSP holders see the largest pay premium but require 5 years of prior experience. For entry-level candidates, Security+ + a home lab is the fastest path to the first role.
Why Cybersecurity Pay Keeps Rising
Three structural drivers are pushing cybersecurity salaries up regardless of tech market conditions:
- Regulatory mandates — GDPR, HIPAA, SOX, and SEC cybersecurity disclosure rules require companies to have security infrastructure regardless of economic cycles
- Ransomware economics — the average ransomware attack costs $4.5M. Preventing one attack pays for a security team for years
- Supply-demand gap — ISC2 estimates a global cybersecurity workforce shortage of 4 million people in 2026
Frequently Asked Questions
What is the average cybersecurity salary in 2026? The BLS median is $115,000/year. Cloud security architects and CISOs earn significantly more ($148K and $224K respectively).
Is cybersecurity a good career in 2026? Yes — 28% demand growth, nearly impossible to outsource, and structural regulatory demand ensure long-term job stability. It is arguably the most recession-proof high-pay tech career.
Can you get into cybersecurity without a CS degree? Yes. CompTIA Security+, home lab experience, and a portfolio of CTF (Capture the Flag) challenges are accepted by many employers as equivalent to a degree. 41% of current security professionals did not start with a CS background.
Source: BLS OEWS 2024, ISC2 Cybersecurity Workforce Study 2024.
Find Your Market Salary
Use our free salary calculator to see if you're being paid fairly for your role and city.
Calculate My Salary