Absolutely, let’s break it down. For cybersecurity roles in the US, entry-level positions like a Security Analyst typically start around $70,000 to $95,000 per year. Mid-level roles, such as a Security Engineer or Incident Responder, usually fall between $100,000 and $140,000. Senior roles, including Security Architect or Lead Engineer, can reach $150,000 to $200,000, while executive positions like CISO (Chief Information Security Officer) often exceed $250,000, not including bonuses or equity.
Your actual pay depends heavily on a few key factors. Experience and certifications are huge—someone with a CISSP (Certified Information Systems Security Professional) or a top-tier SANS certification will command a significant premium. Location is also critical: salaries in San Francisco, New York, or Washington D.C. are often 20-30% higher than the national average to account for cost of living. Industry matters too: finance and tech companies typically pay more than education or government, though government roles often offer better job security and pensions.
To give you a clearer picture, here’s a snapshot of average base salaries for common roles in the US as of 2026:
| Role | Typical Experience | Average Base Salary (USD) |
|---|
| Cybersecurity Analyst | 1-3 years | $75,000 - $95,000 |
| Penetration Tester | 2-5 years | $100,000 - $130,000 |
| Security Engineer | 3-7 years | $110,000 - $145,000 |
| Security Architect | 7-10+ years | $150,000 - $190,000 |
| CISO | 10-15+ years | $230,000 - $350,000+ |
Beyond base salary, most companies offer bonuses (10-20% of base), stock options, and strong benefits packages. The field is growing fast, so keeping your skills current is the best way to push your earnings higher.
