Skip to content

Skills

Cybersecurity skills in demand

The languages, clouds, tools and frameworks named in the security postings open right now, read every hour from the employers' careers systems. Each opens the roles asking for it and what they pay.

Postings read 12 Nov 2026, 12:07 UTC

Most named first

Languages

Languages named in open security postings
SkillPostingsMiddle pay
Python919$204k/yr
Go439$210k/yr
PowerShell180$172k/yr
Rust142$215k/yr

Most named first

Cloud and infrastructure

Cloud and infrastructure named in open security postings
SkillPostingsMiddle pay
AWS716$204k/yr
Google Cloud506$204k/yr
Microsoft Azure474$194k/yr
Kubernetes460$216k/yr
Terraform247$205k/yr

Most named first

Tools

Tools named in open security postings
SkillPostingsMiddle pay
SIEM421$186k/yr
Splunk121$188k/yr
Active Directory and Entra ID118$184k/yr
Burp Suite85$199k/yr
Microsoft Sentinel27$194k/yr

Most named first

Frameworks and regulations

Frameworks and regulations named in open security postings
SkillPostingsMiddle pay
NIST frameworks351$187k/yr
ISO 27001327$200k/yr
SOC 2296$208k/yr
MITRE ATT&CK241$195k/yr
FedRAMP157$203k/yr
PCI DSS140$185k/yr
GDPR122$175k/yr
HIPAA82$200k/yr

Most named first

Practices

Practices named in open security postings
SkillPostingsMiddle pay
Vulnerability management319$210k/yr
Zero trust166$213k/yr
DevSecOps156$188k/yr

Credentials are counted apart: certifications employers ask for. The jobs themselves: openings by job title.

Questions

Skills, counted from the postings

Which skill do cybersecurity postings ask for most?

Of the skills counted here, Python: 919 of the 2,047 open postings name it (44.9%). AWS follows with 716, then Google Cloud with 506.

Which skill comes with the highest salaries?

Kubernetes: the postings naming it state a middle of $216k/yr, against $206k/yr for every posting read. That is the pay of the roles that ask for it, which says as much about those roles as about the skill.

How is a skill counted?

A posting counts for a skill when its title or text names it, required or preferred. One correction applies to every skill alike: when every open posting of an employer names it, the words are that company describing itself (a vendor naming its own product, say), and its postings are left out of that skill.

Weekly roles email

Have new security roles emailed to you

One weekly email with every new security role we found and the salary each states. Free; leave whenever you like.

Only job openings, never promotions. Unsubscribing takes one click.