How Much Does a Cyber Security Person Make

If you’re trying to figure out how much does a cyber security person make, you’ll usually see a mix of numbers—averages, medians, and ranges. The good news is you don’t have to guess. There are figures for the U.S., for hourly pay, for specific job types, and for places like New York City and California.

Use it like a pay calculator for yourself: start with the overall numbers, then narrow it by role and location, and finally use those same ranges to answer the common questions—good money, high-paid jobs, $200,000, and whether a 2-year degree is enough.

Average cybersecurity pay in the U.S. (annual and hourly figures shown in the results)

Here are the broad U.S. numbers to start with.

• Average U.S. cyber security salary: $92,402 to $164,532 per year
• Information security analysts (median annual wage): $129,180 per year
• Cybersecurity analyst (average annual salary): $127,730 per year (also shown as $61.41 per hour)

So if you’re just trying to orient yourself, a realistic “ballpark” is: low six figures to high six figures, depending on the exact role and seniority.

If you know your target hourly rate, $61.41/hour lines up with one of the analyst figures shown.

Cybersecurity pay by role: information security analysts, cybersecurity engineers, penetration testers

Different cybersecurity job titles can land in different pay bands. Based on the role figures shown, here’s how they compare.

Information security analysts

• Median annual wage: $129,180
• Another cited figure shows an average analyst salary of $127,730 per year (about $61.41/hour)

If you like investigating systems, tracking risks, and helping protect organizations, this role is often the baseline people compare other jobs to.

Cybersecurity engineers

For engineers, the pay shown increases as you move toward mid-to-senior levels.

• Cybersecurity engineers (base, mid-to-senior in 2026): roughly $110K–$165K
• CISSP-holders (pushing higher): $150K–$185K

The results also include:

• Cybersecurity engineer: $159,000

That $159,000 figure sits within the broader engineer range shown.

Penetration testers

Penetration testers look for weaknesses by testing defenses in a controlled way.

• Penetration tester: $154,000 (as shown in the results)

If you’re comparing yourself across roles, “engineer vs tester vs analyst” affects more than day-to-day work—it affects the pay range you’re using as your anchor.

Cybersecurity salary ranges by experience level (entry-level vs after 5 years—based on what the results imply)

The snippets here don’t provide a clean “entry level = X, after 5 years = Y” table. But they do show enough to suggest how pay changes with experience:

• The U.S. average range is $92,402 to $164,532 per year.
• Engineers are described as mid-to-senior with an approximate $110K–$165K base, and CISSP holders are shown pushing $150K–$185K.

A practical way to use this without overstating what the data proves:

• Entry-level targets: aim closer to the lower end of the general U.S. range (around ~$92K). For an analyst-type lane, use the analyst average/median numbers (~$127K–$129K) as a starting point.
• After ~5 years (experienced track): look toward the mid-band described for engineers ($110K–$165K base). Higher credential stacks like CISSP are shown at $150K–$185K.

In plain English: the numbers in these results suggest pay rises as you move into roles with more responsibility and/or more credentialed profiles.

Cybersecurity pay by location: New York City and California examples

Location matters a lot in cybersecurity pay. The results include clear examples.

New York City

• $69.94/hour
• $145,465 per year (average cyber security salary in NYC, as shown)

In short, the NYC average is higher than the U.S. range’s low end, and it falls around the upper-middle of the overall bands shown.

California

California shows the widest spread toward higher earnings.

• Range: $127,000 to $226,000 per year
• Average total pay: $168,000

If you’re planning a pay target and you’re open to location, California is the clearest signal here that higher ceilings are possible, since the range reaches $226,000.

Highest-paid cybersecurity jobs and what the salary ranges suggest

The results don’t list “top 10 jobs” with rankings. They do, however, show which lanes can reach higher pay.

• California shows a range that reaches $226,000 per year ($127K–$226K), and average total pay is $168K.
• CISSP-holders are shown in an engineer context at $150K–$185K.
• The higher figures for specific roles include:
• Cybersecurity engineer: $159,000
• Penetration tester: $154,000
• Information security analyst median: $129,180 (median, not necessarily the top of the field)

What the numbers suggest:

• In this data, the highest pay shows up when you combine location with seniority and/or credentialed roles (California plus CISSP-style credentials, or roles that land in the engineer/tester bands).
• Analyst pay is strong too (median $129,180), but other tracks and/or locations in the results reach higher ceilings.

Do people in cyber security make good money? (answering the PAA question with the SERP numbers)

Yes—based on the figures shown here.

Using the numbers directly:

• U.S. average cyber security pay range: $92,402 to $164,532 per year
• Information security analyst median: $129,180 per year
• Cybersecurity analyst average: $127,730 per year (about $61.41/hour)
• NYC average: $145,465 per year (or $69.94/hour)
• California range: $127,000 to $226,000 per year, with average total pay $168,000

These figures are higher than many entry-level jobs in general. Even the low end of the U.S. range still looks solid. If your question is “Is this a good-paying field?”, the salary numbers in these results point to yes.

Is cyber security a high paid job? (tie back to the ranges and median wage shown)

If we treat “high paid” as pay that lands well into the top salary bands shown in these results, cybersecurity fits the label here.

Why:

• The analyst median wage is $129,180.
• The U.S. average range goes up to $164,532.
• NYC and California examples are even higher on average, with California’s top range reaching $226,000.

So even if you end up in a role like information security analyst, the median figure shown ($129,180) points to strong earning potential. In the engineer/tester lanes, the results point even higher.

Is cyber security a 2 year degree? (answer using only what’s supported by the SERP snippets)

The data you provided here focuses on pay numbers by role, experience hints, and locations. It does not say whether a 2-year degree is enough to get hired or become qualified.

So the safest, evidence-based answer from these results is:

• The salary snippets don’t confirm education requirements. They show what people make, not what credential (degree length, certifications, etc.) is required to reach those pay levels.

If you’re deciding between education paths, you’ll need additional information beyond what’s included in these pay-focused snippets.

Can I make $200,000 a year in cyber security? (what the stated ranges indicate)

This is a common question, so here’s the answer using only what’s stated in your results.

• In California, cybersecurity specialists are shown with an average total pay of $168,000, and a range of $127,000 to $226,000.
• In another set of results, CISSP-holders (in an engineer context) are shown at $150K–$185K.

What that means:

• $200,000 is not shown as typical pay, because the engineer/CISSP range tops out at $185K in the numbers you have.
• But $200,000 looks possible in certain California scenarios, because the California range goes up to $226,000.

So if your goal is $200,000, the best-supported path from these numbers is: look at the California range and aim for the higher end of the role/seniority/credential mix that gets you into that upper band.

FAQ: quick answers people keep asking

“How much does a cyber security person make per hour?”

One analyst figure shown is $61.41/hour, and NYC is $69.94/hour.

“How much does a cyber security person make in California?”

The range shown is $127,000 to $226,000 per year, with average total pay at $168,000.

“What’s an entry level cyber security salary?”

Your snippets don’t give one single “entry level” number. A useful starting point is the overall U.S. average range ($92,402 to $164,532) plus the analyst numbers shown (median $129,180, average $127,730).

“Cyber security salary after 5 years?”

No exact “after 5 years” number is provided. But the ranges tied to mid-to-senior engineers (~$110K–$165K) and CISSP-holders ($150K–$185K) match what you’d expect after building skills and moving up.

How to use these numbers (so you can estimate your own target)

Here’s a straightforward way to use what you have:

1. Pick your role lane

• Analyst: anchor around $127K–$129K (average/median figures shown)
• Engineer: anchor around $110K–$165K base, and higher if CISSP-style ($150K–$185K)
• Pen tester: look at $154,000

1. Pick your location

• NYC: $145,465/year (or $69.94/hour)
• California: $127,000–$226,000 (avg total $168,000)

1. Use the high-pay question to choose where to aim

• If you’re chasing $200,000, your numbers support it mainly because California reaches $226,000.

Once you match your role + location to the ranges above, you can decide what pay level to aim for next instead of guessing. You’ll also know whether your target is “low end,” “typical,” or “upper range” based on the figures in this guide.