Skills
Cybersecurity skills in demand
The languages, clouds, tools and frameworks named in the security postings open right now, read every hour from the employers' careers systems. Each opens the roles asking for it and what they pay.
Most named first
Languages
| Skill | Postings | Middle pay |
|---|---|---|
| Python | 919 | $204k/yr |
| Go | 439 | $210k/yr |
| PowerShell | 180 | $172k/yr |
| Rust | 142 | $215k/yr |
Most named first
Cloud and infrastructure
| Skill | Postings | Middle pay |
|---|---|---|
| AWS | 716 | $204k/yr |
| Google Cloud | 506 | $204k/yr |
| Microsoft Azure | 474 | $194k/yr |
| Kubernetes | 460 | $216k/yr |
| Terraform | 247 | $205k/yr |
Most named first
Tools
| Skill | Postings | Middle pay |
|---|---|---|
| SIEM | 421 | $186k/yr |
| Splunk | 121 | $188k/yr |
| Active Directory and Entra ID | 118 | $184k/yr |
| Burp Suite | 85 | $199k/yr |
| Microsoft Sentinel | 27 | $194k/yr |
Most named first
Frameworks and regulations
| Skill | Postings | Middle pay |
|---|---|---|
| NIST frameworks | 351 | $187k/yr |
| ISO 27001 | 327 | $200k/yr |
| SOC 2 | 296 | $208k/yr |
| MITRE ATT&CK | 241 | $195k/yr |
| FedRAMP | 157 | $203k/yr |
| PCI DSS | 140 | $185k/yr |
| GDPR | 122 | $175k/yr |
| HIPAA | 82 | $200k/yr |
Most named first
Practices
| Skill | Postings | Middle pay |
|---|---|---|
| Vulnerability management | 319 | $210k/yr |
| Zero trust | 166 | $213k/yr |
| DevSecOps | 156 | $188k/yr |
Credentials are counted apart: certifications employers ask for. The jobs themselves: openings by job title.
Questions
Skills, counted from the postings
Which skill do cybersecurity postings ask for most?
Of the skills counted here, Python: 919 of the 2,047 open postings name it (44.9%). AWS follows with 716, then Google Cloud with 506.
Which skill comes with the highest salaries?
Kubernetes: the postings naming it state a middle of $216k/yr, against $206k/yr for every posting read. That is the pay of the roles that ask for it, which says as much about those roles as about the skill.
How is a skill counted?
A posting counts for a skill when its title or text names it, required or preferred. One correction applies to every skill alike: when every open posting of an employer names it, the words are that company describing itself (a vendor naming its own product, say), and its postings are left out of that skill.
Weekly roles email
Have new security roles emailed to you
One weekly email with every new security role we found and the salary each states. Free; leave whenever you like.
Only job openings, never promotions. Unsubscribing takes one click.