How much does cyber security pay? A comprehensive salary guide

Trends in cyber security salaries

Once you decide to enroll in a cyber security degree program, you'll probably want some sort of reassurance that when you graduate, you'll be able to not only find a job but earn a good salary. If you're sure cyber security is the right field for you to pursue, you can rest assured you've chosen a career path that not only promises a great job growth rate over the coming years but pays well too.

Comparitech's 2022 Cyber Security Salary & Employment Survey may help alleviate any concerns you may have, citing the following salary and job growth trends, starting in 2020:

• Average salary for cyber security jobs increased 5.29% from $107,580 in 2020 to $113,270 in 2022.
• The number of people working in cyber security increased 13.93% from 138,000 in 2020 to 157,220 in 2022.
• Employment per 1,000 people (the number of jobs in the given occupation per 1,000 jobs in the given area) increased 24.69% from 0.81 in 2020 to 1.01 in 2022.
• 10-year growth projection for cyber security roles increased 10.34%, from 29% in the period of 2018 through 2028, to 32% for the period 2020 through 2030.

What's the career ladder for cyber security positions?

The professional association, Information Systems Security Association (ISSA), has created a Cyber Security Career Lifecycle, which cycles through the stages of security careers, from those just starting out in the profession to those who are retiring. Each of these career cycles commands a different salary, further refined by role within the cycle.

Here are some of the titles you may hold within each—and keep in mind that title will determine salary, which will rise as you progress through the ranks, and is pulled from U.S. Bureau of Labor Statistics' and its subsidiary, O*NET's, database.

Entry-level cyber security salaries

Workers in this cycle have titles such as cyber security specialist, associate network security analyst, cyber crime analyst, IT auditor, incident and intrusion analyst and cyber security risk analyst. They represent workers who hold a two-year associate degree and are just entering the field of cyber security or moving over from IT roles such as application analyst, database administrator, systems administrator, network administrator or programmer.

---

Mid-level cyber security degree salaries

When you get to this stage, you'll probably have found an area of specialty that you enjoy working in and are able to command a larger salary. The titles here may include network security analyst, cryptographer, cyber security analyst, cyber security consultant, penetration and vulnerability tester, cyber security forensics analyst or application security engineer.

---

Senior-level cyber security salaries

At the highest end of the spectrum of roles in this cycle are the "senior" job titles such as senior network security engineer.

When you reach this level, you'll probably have been in the cyber security field for a good 10 years and hold a title such as principal application security engineer, cyber security manager, cyber security engineer, cloud security architect, cyber security architect and director of cyber security. Logically these careers comprise some of the highest paying jobs in cyber security. Take a look at senior roles and salaries:

---

Cyber security leader salaries

You'll need extensive security experience, director skills and the ability to integrate security systems into an organization as a leader or chief technical officer. Titles in this highest tier include Chief Information Security Officer (CISO) or Chief Cyber Security Architect. According to the BLS these titles' salaries would align with Chief Executive Officer and Information Systems Security Manager positions:

Diversity and factors that affect cyber security salary

The (ISC)² Cybersecurity Workforce Study reports that there were over 3.4 million unfilled cyber security job openings globally in 2022, despite the fact that the field grew significantly to 4.7 million workers, the highest number of global workers on record. Over 1.2 million of those workers were in the U.S., but despite adding more than 464,000 workers in the past year, the cyber security workforce job gap has grown more than twice as much as the workforce. This presents an unprecedented opportunity for minorities and women to enter the field and make their mark.

That said, there's also a pay gap in the cyber security workforce, with SC Media, A CyberRisk Alliance Resource, reporting that while women made up approximately 25% of the cyber security workforce in 2022, they also averaged $22,046 less than their male coworkers. (ISC)² broke down the diversity statistic further, saying that the cyber security workforce had the following age, race and gender divisions:

These statistics offer a hard look at a field that clearly has a need for more women, both white and of color. Only with an infusion of female talent can the pay gap close and become more equitable. The opportunity is certainly there for those inclined to take it. 

Where do cyber security salaries hit heights?

It makes sense that there are states and cities in the U.S. that have a higher percentage of cyber security jobs. Wherever there is a large population of tech companies and tech-related industry, it's likely there will be more jobs. But you may be able to find a great job in a mid-size city that has ecommerce, finance or banking, insurance, hospitals and healthcare facilities—or any industry that stores information and requires user data security.

Recently, Forbes did a study of cyber security salaries in U.S. metro areas and found—not surprisingly—that they are well worth the time, money and education it takes to enter the field. For those workers already in the IT sector and who hold a bachelor's degree, moving over to cyber security may be as basic as earning a professional industry certification. Before we delve into professional certification and career advancement, let's look at top states and their salaries for cyber security workers.

Top 10 states for cyber security careers and salaries

No matter if you already live in one of these states or if you plan to relocate there once you've earned your degree and start looking for a job, these are the top geographic areas that have generated interest from students and career advancers looking to enter or move into the field of cyber security. Take a look at the highest paying cities within each state and what you may be able to earn as a cyber security analyst according to BLS data:

Top metro areas for cyber security pay

The BLS lists the top metro areas for information security analyst roles nationwide along with the annual median salary that these professionals command:

Cities with the highest demand for cyber professionals

The BLS also tracks cities with the highest number of security analysts employed. This may give some insight into where there are industries needing cyber security analysts and other roles within the field:

What industries pay security analysts the most?

The BLS says information security professionals will earn the highest average annual salaries in these areas:

How does a cyber security degree salary compare to other tech roles?

If you still have concerns about the long-term security and salary for cyber security careers, compare cyber security salary for information security analyst with some of the most common roles in tech, according to Money magazine.

As of 2022, Money says these seven tech careers pay the best, with salaries from the U.S. Bureau of Labor Statistics. Of interest is the cyber security role, data security analyst, is the third highest paying job on the list—and these salaries are median. Depending upon where you live and the company you're employed by, you may be able to earn considerably more.

How do I increase my salary in cyber security?

Despite having a huge presence globally, the tech industry within a geographic area is somewhat like a town. People know each other and move from job to job in order to gain new skills and advance in their careers. If you're interested in earning a better salary, there are some ways to help yourself. Consider the following suggestions:

• Gain practical experience while still in school. If you're new to the field and are still finishing up your degree, gain some practical experience in your last year of school by looking for an internship at a tech company or financial institution in your area. Paid internships provide experience, give you a sense of real-life, day-to-day workload and flow, and most of all help you network and build your reputation as a trustworthy and dependable professional.
• Understand what's out there and the career ladder for the job you're interested in. The more you know, the better prepared you'll be to ask for what you want, especially in a market where there are more jobs than employees.
• Continue learning. Cyber security is a field that changes by the day, and you'll need to keep pace with its frequent advances and challenges. The best way to arm yourself for your battle against cyber crime is with professional certifications. These are usually organized around learning a specialized skill, and you'll be required to study and practice and then pass an exam to earn the credential. Most certifications take a few months to complete, can be taken online and may be paid for by your employer if it's a skill that will benefit and be implemented by the company.
• Learn some negotiation skills. The Society for Human Resource Management (SHRM) suggests five tips for HR professionals, but are applicable to all careers, to help you get the salary you want.
  • The first is know what your skills are worth. In the cyber security market, they're probably worth a lot since there are more jobs than workers. Do your research around your experience, education, location and professional certifications, if any, and be prepared to present your case rationally.
  • Second, define what you want. Have a number in mind and don't be afraid to mention vacation and benefits too.
  • Third, try to raise the initial offer. The SHRM says this strategy is most important for women, who rarely negotiate when it comes to salary.
  • Fourth, plan what you're going to say. Have a speech ready if the offer you're given is disappointing. Bring up your experience and unique skills then get out of your own way and let the company make the next move.
  • Last, be specific when it counts. Know what you want and state it, then be patient and wait for the response. If they really are interested in your skills, they'll respond.

Why choose cyber security as a career?

According to PricewaterhouseCoopers 2022 Global Economic Crime Survey, 46% of global organizations claim to have experienced cyber crime within the past 12 months. That's an astronomical figure, so with no sign of cyber crime decreasing, it's easy to see why cyber security as a career field is in demand by all companies and agencies in the private and public sectors, and there has seldom been a better time to invest in a cyber security education.

Forbes enforces this statistic, stating that already in 2023, though "Cyber security capabilities and awareness seem to be improving, unfortunately the threat and sophistication of cyber-attacks are matching that progress." Says Chuck Brooks in his Forbes article, "Cybersecurity Trends & Statistics for 2023: What You Need to Know," "The emerging digital ecosystem is treacherous. In our current digital environment, every company is now a reachable target, and every company, large or small, has operations, brand, reputation, and revenue pipelines that are potentially at risk from a breach."

While that sounds ominous, it does present an opportunity for those interested in joining the cyber security field. New avenues are opening up as tech evolves, and those intrigued by the idea of working in the cyber universe will need to be consistently on their toes and looking toward the next area that may become the focus of cyber criminals. Already artificial intelligence and machine learning—while presenting great strides for research and analytics—can also be used by hackers for advanced attacks. Says Brooks, "Deep fakes are already being deployed and bots are continuing to run rampant."

...those intrigued by the idea of working in the cyber universe will need to be consistently on their toes and looking toward the next area that may become the focus of cyber criminals.

"Small business, organizations—and especially healthcare institutions who cannot afford significant investments in defensive emerging cybersecurity tech such as AI—are the most vulnerable," writes Brooks, and "Extortion by hackers using ransomware and demanding payment by cryptocurrencies may become a more persistent and evolving threat." 

 Challenges aside, everything points to positive job growth—with salaries to match—for those looking to enter the cyber security workforce.

Get started finding cyber security programs today

With cyber crime growing daily and unfulfilled cyber security jobs available for those with the skills and perseverance to keep one step ahead of cyber criminals, you may have the advantage when it comes to careers in the field and salaries. But you may also have a better edge with the right education. There are steps to consider as you do your research:

• What area of cyber security do you want to work in? Do you want to be a proactive defense player such as an ethical hacker or penetration tester, or help put out the fires if your company is hacked as a cyber security analyst? Or do you want to deal with the aftermath of a breach and work with law enforcement as a cyber forensics analyst? Knowing where in the pipeline your interests lie is a big step to refining your future job title and education goals.
• How quickly do you want to get to work? An associate degree might get you in the door, but it could limit your advancement potential and you may need to earn more education or professional certifications later. The recruiting company Indeed says that "most employers prefer cyber security analyst candidates to have a bachelor's degree in computer science, information technology or a related field." TIP: Earning your bachelor's degree right off the bat may save time and money later.
• Apply for financial aid early. The FAFSA and most scholarship and work study programs have deadlines for applying, so make sure you know what they are.
• Do you have a long-term goal for what you need to earn? If you have a set salary in mind you can consider which careers in cyber security fall into that pay range.

You may need to take on entry-level roles to get started, but the potential for advancement is there if you're ambitious and willing to work hard. With such a promising job growth outlook and salaries to match, why not investigate cyber security degree programs? If you're interested in helping bring cyber criminals to bay and have an aptitude for problem-solving and technical finesse the field demands, there are accredited online and classroom programs waiting for you. You provide the smarts and perseverance, and we'll help you find the right program that can help you succeed.