What Is Cyber Security Salary

If you're asking what is cyber security salary in the United States, a useful starting range is about $92,402 to $164,532 per year. That range is broad because “cybersecurity” covers several jobs, from analyst work to engineering, management, and executive security leadership.

Other reported figures land in different places:

• $127,730 per year, or $61.41 per hour, for cybersecurity and information security analysts
• $61,861 to $162,740 per year for cybersecurity analyst pay on another salary page
• $110,000 to $165,000 in base pay for mid-to-senior cybersecurity engineers
• $150,000 to $185,000 in base pay for cybersecurity engineers with CISSP certification
• $168,000 in average total pay in one California result, with a range of $127,000 to $226,000
• $138,104 per year, or about $66 per hour, in another 2026 salary result, with top earners reaching $252,731 at the 90th percentile

Those numbers aren't necessarily in conflict. They measure different jobs, locations, pay types, and points in the salary distribution. The real trick is learning what each figure is actually measuring.

Cybersecurity salary in the U.S.: the short answer

For a broad U.S. estimate, reported cybersecurity pay ranges from roughly $92,000 to $165,000 per year. An analyst-focused figure puts average annual pay at $127,730.

That doesn't mean every person entering the field will earn $127,730. It also doesn't mean every experienced engineer will earn $165,000. These figures are market snapshots, not promises.

Before comparing numbers, check four details:

1. Job title: An analyst, engineer, manager, and CISO-level leader won't usually have the same pay.
2. Experience: Senior roles tend to pay more than early-career roles.
3. Location: A salary reported in California may not match one in Kansas or another lower-cost market.
4. Pay measure: Base salary, total pay, average pay, and a percentile figure are different things.

For example, $138,104 at the average and $252,731 at the 90th percentile describe two different points in the same pay picture. The second number represents people near the higher end of that reported group. It isn't a normal salary target for every cybersecurity worker.

Salary ranges by cybersecurity job title

A salary range becomes much easier to understand once you attach it to a role.

Cybersecurity analysts

Analysts watch systems, review alerts, investigate possible incidents, and help reduce security risks. The available figures show a wide spread for this job title:

• One report lists cybersecurity analyst pay from $61,861 to $162,740 per year.
• Another figure, tied to cybersecurity and information security analysts, gives an average of $127,730 per year or $61.41 per hour.

The gap between the lower and upper ends can reflect experience, employer type, location, job scope, and differences in how salary data was collected.

A person with an entry-level analyst title and limited experience should not treat the $162,740 figure as a likely starting point. That upper number may include more experienced workers, higher-paying locations, or roles with broader responsibilities.

Cybersecurity engineers

Engineering jobs often focus more on building, testing, and maintaining security systems. The reported 2026 guide places mid-to-senior cybersecurity engineers at about $110,000 to $165,000 in base pay.

The same guide reports $150,000 to $185,000 in base pay for cybersecurity engineers with a CISSP certification. CISSP is a widely recognized security certification. Still, the certification alone doesn't guarantee a particular salary. The number also depends on the engineer's experience, employer, location, and actual duties.

Notice that these figures are labeled base pay. That is not automatically the same as total compensation. A job offer may include other forms of pay, but the supplied figures don't give enough detail to calculate those extras.

Information security managers

Managers sit above many individual contributor roles. They may guide security teams, set priorities, manage budgets, and report risks to business leaders.

The available research mentions information security managers as part of the broader salary picture, but it does not provide a reliable manager-specific salary range. That means it would be misleading to assign a precise number here.

The practical takeaway is simple: don't use an analyst average as though it were a manager salary. The titles may sit in the same career family, but the work and pay level can be different.

CISO-level work

A CISO, or chief information security officer, is a senior security leader. The role may involve company-wide security decisions, risk reporting, leadership, and oversight of security programs.

The supplied figures refer to senior leadership as part of the wider cybersecurity pay discussion, but they don't provide a verified CISO-specific average or range. So a precise CISO salary estimate would go beyond the available evidence.

When you see a very high cybersecurity salary online, check whether it describes a senior executive, a highly experienced engineer, or a top percentile. It may not describe the typical analyst or early-career worker.

What cybersecurity analysts typically earn

The analyst numbers are easier to interpret when you keep the measures separate.

The $127,730 figure is an average annual salary for cybersecurity and information security analysts. Its stated hourly equivalent is $61.41.

The other analyst salary page gives a range of $61,861 to $162,740. That range is not an average. It shows a lower and upper point in the reported salary data.

Those two figures answer different questions:

• Average: What does the middle of the reported group look like when all salaries are combined?
• Range: How far apart are the lower and higher reported salaries?
• Percentile: Where does a person sit compared with others in the same salary data?

This is why copying one number into a career plan can create the wrong expectation. The average may include people at several experience levels. The range may cover different locations and employers. A percentile figure may describe only the higher end of the market.

For an analyst comparing job offers, the title alone isn't enough. Read the job description. “Analyst” can describe basic alert monitoring in one company and complex incident response in another.

How experience changes cybersecurity pay

Experience usually changes both your responsibilities and the level of jobs you can target. But the supplied salary information does not provide a consistent table showing exact pay at one year, three years, or five years.

That matters for searches such as cyber security salary after 5 years. There isn't one verified five-year number in the available research. You shouldn't take the top of a broad range and label it “the five-year salary.”

A more honest way to read the figures is to connect them to role level:

• The lower part of a broad analyst range may include workers with less experience or narrower duties.
• The middle of the range may line up with established analyst roles, depending on the market.
• Engineering figures of $110,000 to $165,000 in base pay are specifically described as mid-to-senior roles.
• The $150,000 to $185,000 engineering range is tied to engineers with CISSP certification, not to all cybersecurity workers.
• A 90th-percentile figure of $252,731 represents the high end of one reported salary group. It isn't a standard five-year benchmark.

Experience also matters because a job title can change. Someone may begin in an analyst position and later move into engineering, management, or another specialty. That change can affect pay more than simply counting years in the field.

Hourly and monthly salary equivalents

People often search what is cyber security salary per hour or what is cyber security salary per month because annual salary can feel hard to picture.

The clearest stated hourly figures are:

• $61.41 per hour for the reported $127,730 analyst average
• About $66 per hour for the reported $138,104 average

The yearly and hourly figures may not match perfectly when converted by hand because salary pages can use different assumptions about working hours or rounding.

For a rough monthly view, divide annual pay by 12:

These are gross amounts before taxes, insurance, retirement contributions, and other deductions.

The California figure also needs careful labeling. It reports $168,000 in average total pay, with a stated range of $127,000 to $226,000. Since it is total pay rather than clearly stated base salary, don't compare it directly with the $110,000-to-$165,000 base-pay range as though both measures were identical.

How location affects cybersecurity salary

Location can shift pay quite a bit. Employers in expensive areas may offer higher salaries, while employers in lower-cost areas may offer less. Hiring demand and the kinds of companies located nearby also matter.

The clearest location-specific figure in the supplied research is from California:

• Average total pay: $168,000
• Reported range: $127,000 to $226,000

That does not mean every California cybersecurity job pays within those exact figures. It only describes that particular salary result and its stated measure.

Readers searching cyber security salary near Kansas should be careful with national or California numbers. The available research does not provide a verified Kansas-specific average or a reliable Wichita salary range. So it would be wrong to present $168,000 as a Kansas expectation.

Instead, compare a local job's:

• Title and seniority
• Base salary
• Total pay, if listed
• Required experience
• Required certifications
• Employer type and work location

A remote job can also complicate the comparison. Some employers set pay by the company's location. Others adjust pay based on where the employee lives. The supplied figures do not establish one rule, so check the employer's offer rather than assuming.

Entry-level cybersecurity salary and career progression

The phrase cyber security salary entry level sounds like it should have one clean answer. The available data doesn't support that.

The supplied research gives broad ranges and averages, but no consistent entry-level salary table. The lower end of the analyst range—$61,861—should not automatically be labeled as the standard starting salary. It may include some early-career roles, but the figure itself does not prove that.

For a first job, look at the complete offer instead of judging it against a senior figure:

• Is the role truly entry level?
• Does it involve monitoring, support, investigations, or engineering?
• What experience does the employer request?
• Is the pay listed as base salary or total pay?
• Is the job tied to an expensive city or a lower-cost area?

The same caution applies after five years. A worker who remains in an analyst role may see a different salary path from someone who moves into engineering or management. The available figures support that role level matters, but they don't provide enough information to promise a particular five-year result.

Is cybersecurity a high-paying career?

The available salary figures support calling cybersecurity a potentially high-paying career, especially in established analyst, engineering, management, and senior roles.

The reported $127,730 analyst average, the $110,000-to-$165,000 mid-to-senior engineering range, and the higher figures for some locations and percentiles all show substantial reported pay.

Still, “high paying” doesn't mean every job pays that way. A broad field can contain lower-paid entry roles and much higher-paid specialist or leadership roles at the same time.

The research also doesn't answer whether cybersecurity is stressful or difficult to study. Salary figures can't prove either point. Workload depends on the employer, the team, the role, and the type of security work. The supplied information also doesn't establish whether cybersecurity is a two-year degree or how hard a particular training route may be.

So treat those as separate questions. Don't infer job stress, education length, or study difficulty from a salary chart.

What to consider beyond the salary number

A salary figure is useful, but it leaves out several things that can change the value of a job.

First, identify the pay type. Base pay is different from total pay. An average is different from a range. A 90th-percentile number describes the higher end, not the normal result for everyone.

Next, compare the job itself. A $100,000 analyst job and a $100,000 engineer job may require different skills and carry different responsibilities. The title is only the label on the box.

Location matters too. A California total-pay figure should not be treated as a Kansas estimate. And a national analyst average should not be used as an entry-level guarantee.

Before choosing training or a career path, compare the exact role you want and the place where you plan to work against the ranges above. That simple check will tell you far more than a single impressive cybersecurity salary number.