Your Cybersecurity Salary Guide

Cybersecurity professionals ensure that an organization’s data, devices, and networks are safe from cyberattacks and cybercriminals. As data and digital technologies become integral to the daily operations of businesses worldwide, so too does the importance of cybersecurity professionals capable of ensuring their protection. 

Cybersecurity is a growing field. According to the US Bureau of Labor Statistics (BLS), the number of job openings for information security analysts—the jobs category under which cybersecurity falls—is projected to increase by 33 percent between 2023 and 2033 [1]. That’s significantly higher than the national average, which the BLS pinned at just 4 percent for all occupations in the country during that same period. 

In many cases, that high demand translates to higher-than-average wages. In this article, you’ll learn more about what you can expect to earn from five common cybersecurity jobs and common factors that can impact how much you’ll earn. At the end, you’ll find tips to improve your earning power and explore suggested courses to help you gain job-relevant skills today.

Did you know that nearly every US industry has seen an increase in AI-related job postings?

Learn to apply AI in your field productively and responsibly by enrolling in Google’s Cybersecurity Professional Certificate, recently updated to include practical AI training.

How much does cybersecurity pay?

Typically, cybersecurity jobs pay a higher-than-average salary. According to the US BLS, the median annual salary for all workers in the United States was $48,060 as of May 2023 [2]. By contrast, information security analysts earned a median annual salary of $120,360 during the same period, more than double that of the national median salary. 

As with other career paths, the amount you can expect to earn will vary depending on your role. At a glance, here’s the base pay you can expect to earn from five common cybersecurity jobs (other than information security analyst), according to Glassdoor: 

• Cybersecurity analyst: $102,743 [3]

• Cybersecurity engineer: $118,828 [4]

• Information security manager: $147,101 [5]

• Penetration tester: $112,433 [6]

• Cybersecurity specialist: $124,714 [7]

Your pay may also vary based on other factors, such as where you work, how much previous work experience you have, and the educational degrees you possess. Below, we break down how much you can expect to earn from each of the five jobs listed above based on your experience and geographic location. 

Cybersecurity entry-level salary

Entry-level cybersecurity positions can be found throughout the cybersecurity field. While you may be able to land some of the above jobs without any prior work experience, some employers might prefer applicants with some previous experience. If you’re just starting out, consider expanding your search to include incident responder ($58,673 per year), security administrator ($83,235 per year), and source code auditor ($83,107 per year) [8, 9, 10]. 

Cybersecurity earnings by experience 

One of the most common factors impacting how much you can expect to earn from a cybersecurity job (or any job for that matter) is your previous work experience. Typically, the more experience you have in a role, the more you can expect employers to pay you to perform that job for them. 

Here’s the base annual salary you can expect to earn for the aforementioned cybersecurity positions based on varying levels of work experience, according to Glassdoor: 

Cybersecurity earnings by location

Where you work can have a big impact on how much you earn. Typically, individuals working in locations with a higher cost of living, such as a densely populated city, will make more than those who work in places with a lower cost of living. At a glance, here’s the base annual salary you could expect to earn from the above positions in different locations throughout the US.

Note: All salary information is taken from Glassdoor as of January 2025. Base salary does not include additional pay, such as commission, bonuses, tips, and profit sharing. 

Tips to improve your salary as a cybersecurity professional

Your earning potential isn’t set in stone. In fact, there are many proactive steps you can take to increase your overall salary range. Here are some tips on what to do to increase your salary as a cybersecurity professional: 

1. Build your skills. 

The more expansive your skill set, the more likely an employer will be willing to pay you more. Consider taking online courses or attending training programs to expand both your technical skills, such as working with different operating systems or with cloud computing, and your workplace skills, like communication, teamwork, and leadership. 

2. Consider certification. 

Cybersecurity certification may help you improve your earning potential. According to the US BLS, workers with a certification in 2023 earned a median weekly wage of $1,463 compared to a median weekly wage of $1,024 for those without certification [11]. Some common cybersecurity certifications include CompTIA Security+ certification, Certified Ethical Hacker certification (CEH), and GIAC Certified Incident Handler (GCIH) certification. 

3. Think about a degree. 

Many cybersecurity positions require applicants to possess a bachelor’s degree in a related field, such as cybersecurity, computer science, or engineering. While it isn’t strictly necessary to have a degree to become a cybersecurity professional, in some cases, you may find that your lack of degree is holding you back from either being hired or promoted to a more senior position. If that’s the case, consider obtaining either an undergraduate or graduate degree to improve your earning potential and hireability. 

Boost your cybersecurity earnings with job-relevant skills on Coursera

As a cybersecurity professional, you’ll need to stay up-to-date on the latest technological and security developments. Learn new or hone your already existing job skills through Coursera today. 

In Google’s Cybersecurity Professional Certificate, you’ll learn how to protect networks, devices, people, and data from unauthorized access and cyberattacks, identify common cybersecurity risks, and gain hands-on experience with Python, Linux, and SQL.