The average cybersecurity salary in the United States depends on your job title, experience, location, and technical skills. According to the US Bureau of Labor Statistics (BLS), information security analysts earned a median annual salary of $129,180 in May 2025, equal to approximately $10,765 per month before taxes. However, cybersecurity includes several careers, and their salaries can be quite different.
Someone starting as a security operations center (SOC) analyst may earn less than an experienced security engineer or security architect. Understanding these differences can help you choose a career path that matches your interests and financial goals.
What Is the Average Cyber Security Salary in the USA?
The BLS reports a median annual wage of $129,180 for information security analysts. This is an official occupational statistic, not a universal average for every cybersecurity professional.
The lowest 10% of information security analysts earned less than $75,090 annually, while the highest 10% earned more than $199,850 in May 2025.
Here is how the median salary translates into different pay periods:
| Pay period | Approximate earnings |
| Yearly | $129,180 |
| Monthly | $10,765 |
| Weekly | $2,484 |
| Hourly | $62.11 |
These figures are gross earnings before federal and state taxes, insurance, retirement contributions, and other deductions. Actual paychecks will be lower.
It is also important to understand that median and average salaries are different measurements. The median represents the middle point in a salary distribution, while an average can be influenced by exceptionally high or low salaries.
Entry-Level Cyber Security Salary
An entry-level cybersecurity professional usually earns less than someone with several years of industry experience. However, starting pay depends on the employer, location, technical knowledge, and responsibilities of the position.
For example, the US Department of Homeland Security’s 2025 Cybersecurity Service career guide listed a typical starting salary of $67,200 to $87,000 for its entry-level track.
Common beginner positions include:
- SOC Analyst: Monitors security alerts and investigates suspicious activity.
- Junior Security Analyst: Helps identify vulnerabilities and protect company systems.
- IT Security Technician: Supports security tools, access controls, and system maintenance.
- Junior Penetration Tester: Assists with authorized security testing.
A person with networking knowledge, basic scripting skills, and practical lab experience may be better prepared for these positions.
Cybersecurity Salary by Job Title
Different cybersecurity positions have different responsibilities, and this affects how much employers are willing to pay.
The following figures are illustrative US median total-pay estimates reported by Glassdoor through Coursera in April 2026. They include additional compensation, so they should not be directly compared with BLS base occupational wages.
| Cybersecurity job | Median annual total pay |
| IT Auditor | $109,000 |
| Information Security Analyst | $137,000 |
| Penetration Tester | $154,000 |
| Security Engineer | $170,000 |
| Ethical Hacker | $172,000 |
| Digital Forensic Examiner | $184,000 |
| Security Architect | $229,000 |
Source: Coursera’s cybersecurity salary guide, using Glassdoor data.
1. Cybersecurity Analyst
Cybersecurity analysts monitor computer networks, investigate suspicious activity, and help prevent unauthorized access. They often work with firewalls, endpoint protection tools, and security monitoring platforms.
This is a common career path for people entering the cybersecurity industry.
2. Penetration Tester
Penetration testers perform authorized security tests to identify weaknesses in applications, networks, and systems. Their work requires knowledge of operating systems, networking, scripting, and ethical hacking methods.
3. Cybersecurity Engineer
Security engineers build and maintain systems that protect business infrastructure. They may work with cloud security, identity management, network protection, and automated security tools.
4. Security Architect
Security architects plan how an organization’s technology should be protected. They design security systems, review risks, and help businesses make decisions about infrastructure and data protection.
Cyber Security Salary by Experience
Experience can have a major impact on cybersecurity earnings. Employees who have handled real security incidents, managed complex systems, or led security projects may qualify for more senior positions.
A general career progression looks like this:
| Experience | Typical career stage |
| 0-2 years | Junior analyst or SOC analyst |
| 3-5 years | Security analyst or security engineer |
| 6-9 years | Senior analyst or security specialist |
| 10+ years | Security architect, manager, or director |
These are career stages, not guaranteed salary bands. Actual earnings depend on the role, employer, and market.
For example, a professional who begins in a SOC position may eventually move into incident response, threat intelligence, or security engineering. Each move can bring different responsibilities and compensation.
Highest-Paying Cybersecurity States in the USA
Location can make a noticeable difference in cybersecurity compensation. States with major technology companies, government contractors, financial institutions, and large enterprise employers often have strong demand for security professionals.
According to May 2025 BLS state wage data summarized by The Uptime Report, some of the highest-paying locations for information security analysts include:
- Washington: $154,940 median annual pay.
- Maryland: $139,640.
- California: $138,570.
- Delaware: $137,030.
- Massachusetts: $136,550.
These numbers are state-level occupational estimates, not guaranteed salaries for every cybersecurity job.
Remember to consider housing, transportation, taxes, and other living expenses. A job paying $140,000 in an expensive city may leave less disposable income than a lower-paying position in a more affordable area.
What Factors Affect Cybersecurity Salaries?
Several factors determine how much a cybersecurity professional can earn.
1. Technical Skills
Employers look for practical skills in networking, Linux, cloud platforms, incident response, vulnerability management, and security monitoring.
Experience using tools such as SIEM platforms, endpoint detection systems, and penetration-testing software can also help candidates qualify for specialized positions.
2. Education and Certifications
A bachelor’s degree in computer science, information technology, or a related field can help candidates meet employer requirements.
Certifications such as CompTIA Security+, CISSP, and Certified Ethical Hacker may support career development. However, earning a certification does not automatically guarantee a higher salary. Employers also consider practical experience and job responsibilities.
3. Industry and Employer
Financial institutions, technology companies, government contractors, and consulting firms can offer different compensation packages.
The BLS reported that information security analysts working in the information industry had a median annual wage of $138,650 in May 2025, compared with $130,630 in finance and insurance.
How Can You Increase Your Cybersecurity Salary?
If you want to earn more in cybersecurity, focus on developing skills that employers need and gaining experience with real systems.
Start by learning networking fundamentals, operating systems, and basic programming. Then choose an area such as cloud security, penetration testing, incident response, or security engineering.
You can improve your career prospects by:
- Building practical projects and documenting your work.
- Practicing in legal cybersecurity labs.
- Learning Python, Linux, and networking.
- Preparing for relevant industry certifications.
- Applying for internships and junior security positions.
- Developing communication and problem-solving skills.
Once you have professional experience, look for opportunities to take on more complex security responsibilities. Moving into a specialized or leadership position may increase your earning potential.
Is Cybersecurity a Good Career for Salary Growth?
Cybersecurity can be a strong career option for people who enjoy technology, problem-solving, and protecting digital systems.
The BLS projects employment for information security analysts to grow by 21% between 2025 and 2035, much faster than the projected 3% growth for all occupations. It also estimates approximately 14,100 openings each year over that period.
However, a high national median does not mean every beginner will immediately earn six figures. Building technical skills, gaining experience, and choosing an appropriate specialty take time.
People who enjoy continuous learning may find cybersecurity a rewarding long-term profession. Before choosing a career path, compare entry-level opportunities, education requirements, and the type of work involved.
