Key findings
- 1
The most common title words were Engineer or developer (55.5% of open security roles), Analyst (8.5%) and Manager (8.1%).
- 2
Of the title words, "CISO or chief security officer" carried the highest median advertised pay ($288k/yr) and "Analyst" the lowest ($147k/yr).
- 3
Counted once each, by the job their title names, principal or staff security engineer roles were the most posted (12.7% of open security roles); CISO or VP of security roles advertised the highest median ($300k/yr) and SOC analyst roles the lowest ($125k/yr).
- 4
44.0% of open security roles carry a senior, staff or principal title, advertising a median of $206k/yr against $180k/yr for roles with no level in the title; 3.1% have an early-career title (junior, associate, intern or graduate, with no higher level).
- 5
In the title itself, 3.7% say "remote", 0.8% "hybrid" or "on-site" and 0.3% "contract": most security postings leave the arrangement and the contract to the location and the description.
Figure 1
What security roles are called
Are security roles posted as engineers, analysts, consultants, architects or managers?
| Title word | Open roles | Share of open roles |
|---|---|---|
| Engineer or developer | 1,688 | 55.5% |
| Analyst | 257 | 8.5% |
| Manager | 247 | 8.1% |
| Consultant or advisor | 212 | 7.0% |
| Architect | 128 | 4.2% |
| Lead | 120 | 3.9% |
| Researcher | 118 | 3.9% |
| Director, head or VP | 106 | 3.5% |
| Penetration tester or red teamer | 87 | 2.9% |
| Specialist | 86 | 2.8% |
| Officer | 27 | 0.9% |
| CISO or chief security officer | 26 | 0.9% |
| Expert or SME | 22 | 0.7% |
| Threat hunter or incident responder | 21 | 0.7% |
| Administrator | 10 | 0.3% |
| Auditor or assessor | 5 | 0.2% |
Sample. 3,041 security roles open at the end of 14 Nov 2026, by the words in their titles; 95.7% use at least one of these words.
A title can use several words (a "Senior Security Engineering Manager" is an engineer and a manager) and counts for each.
Source. CyberJobs.cc Research, Cybersecurity Job Titles by the Numbers, live data.
Figure 2
Advertised pay by title word
Does it pay more to be called an architect than an engineer, or a manager than an analyst?
| Title word | Median a year | Typical pay |
|---|---|---|
| CISO or chief security officer | $288,000 | $256k to $380k |
| Director, head or VP | $261,000 | $225k to $400k |
| Manager | $218,000 | $172k to $358k |
| Architect | $208,000 | $188k to $300k |
| Engineer or developer | $205,000 | $175k to $340k |
| Lead | $197,000 | $173k to $310k |
| Researcher | $193,000 | $161k to $278k |
| Threat hunter or incident responder | $179,000 | $139k to $356k |
| Specialist | $176,000 | $131k to $296k |
| Penetration tester or red teamer | $175,000 | $133k to $320k |
| Consultant or advisor | $165,000 | $136k to $253k |
| Officer | $164,000 | $144k to $346k |
| Expert or SME | $156,000 | $150k to $292k |
| Analyst | $147,000 | $105k to $217k |
Sample. Security roles open on 14 Nov 2026 that publish pay; title words with at least 3 of them.
Source. CyberJobs.cc Research, Cybersecurity Job Titles by the Numbers, live data.
Figure 3
Security jobs by title
How many openings are there for each security job title, what do they advertise, and how many are remote?
| Job | Open roles | Share of open roles | Median a year | Remote |
|---|---|---|---|---|
| Principal or staff security engineer | 385 | 12.7% | $228,000 | 35.8% |
| Security engineer | 362 | 11.9% | $188,000 | 45.0% |
| Security manager | 259 | 8.5% | $219,000 | 43.2% |
| Application security engineer | 192 | 6.3% | $200,000 | 45.8% |
| GRC or compliance analyst | 179 | 5.9% | $169,000 | 38.5% |
| AI security engineer | 154 | 5.1% | $213,000 | 42.9% |
| Security architect | 121 | 4.0% | $208,000 | 47.1% |
| Security researcher | 100 | 3.3% | $167,000 | 33.0% |
| IAM engineer | 98 | 3.2% | $194,000 | 34.7% |
| SOC analyst | 95 | 3.1% | $125,000 | 45.3% |
| Penetration tester or red teamer | 94 | 3.1% | $204,000 | 48.9% |
| Cloud security engineer | 85 | 2.8% | $183,000 | 36.5% |
| Detection engineer | 79 | 2.6% | $195,000 | 35.4% |
| Security director | 67 | 2.2% | $261,000 | 47.8% |
| Security analyst | 54 | 1.8% | $135,000 | 40.7% |
| Incident responder | 51 | 1.7% | $170,000 | 60.8% |
| CISO or VP of Security | 42 | 1.4% | $300,000 | 54.8% |
| Threat intelligence analyst | 23 | 0.8% | $187,000 | 56.5% |
Sample. 3,041 security roles open at the end of 14 Nov 2026, by the words in their titles; 80.2% have a title that names one of these jobs.
Each role counts once, in the first job its title names in this order: leadership (CISO or VP, director, manager), architect, AI security, principal or staff, then the specialty jobs, then security engineer and security analyst. A Principal Detection Engineer is a principal or staff engineer; a Cloud Security Engineer is a cloud security engineer.
Median pay needs at least 3 roles publishing pay. Remote is a share of the roles whose posting says whether the work is remote.
Source. CyberJobs.cc Research, Cybersecurity Job Titles by the Numbers, live data.
Figure 4
Each employer's word for its security roles
Which title word does each employer use most for its security roles?
The other 646 rows, in the same order (every value of every row is in the report's data, sent by email):
Dragos, Crusoe, DigitalOcean, UltraViolet Cyber, IOActive, Kapres Technology, JustMarkets, Cato Networks, Flexport, Netcompany, CyberOne, Methods, Samsara, Pure Storage, Bitdefender, Myriad360, Verkada, CertiK, Artemis, EverAI, CENSUS, BJAK, Palantir, Affirm, Rocket Lab, Ripple, Rubrik, Higgsfield AI, Delinea, Plaid, Shield AI, WHOOP, Kraken, Gruve, knowmad mood, Sword Group, Starling Bank, Brex, Anaplan, Fastly, Brain Co., AvePoint, Harvey, 7AI, Tenable, Abnormal Security, Asana, Muon Space, Agoda, Apex, Superhuman, Backblaze, SOFTSWISS, Optiveum, Intuition Machines, Infosys Consulting, Braze, Coalition, Darktrace, Mistral AI, Bybit, OKX, Box, iCapital, Notion, Legora, 1Password, Armadin, Tanium, IonQ, JFrog, Obsidian Security, Neura Robotics, Ramp, Altruist, Dropbox, Harness, Cyberhaven, Gainsight, Abacus, MOXFIVE, Oneleet, SimSpace, Talan, Logicalis Spain, Mozilla, ClickHouse, IONOS, Klaviyo, AlphaSense, Aidoc, TENEX.AI, Recorded Future, Cohere, Firmus, Keeper Security, OPSWAT, Reddit, Robinhood, Saviynt, Appian, Checkout.com, depthfirst, Long View Systems, Reflection AI, Rogo, Coupa, SonicWall, TRM Labs, Vercel, Block, Trellix, Brillio, Proofpoint, Horizon3.ai, Second Front, Qualtrics, Nubank, 10a Labs, Avertium, Dataflow Security, Cape, Galaxy, Interrupt Labs, Arctiq, Packetlabs, Kalles Group, Aikido Security, European Dynamics, PlayStation (Sony Interactive Entertainment), Eye Security, Axonius, CloudSEK, JumpCloud, Motive, Endor Labs, Fivetran, Glean, Smartsheet, CLEAR, Decagon, Deliveroo, Docker, Ebury, Emergent, Figma, Figure AI, Garner Health, Gong, Sentry, Serval, Cohesity, Sierra, Tailscale, Thinking Machines Lab, Writer, Coalfire, InterSystems, Perplexity, Ridgeline, Mercor, Turing, NinjaOne, Thoropass, Instacart, Xsolla, Kodex, Fullscript, Alpaca, Rhymetec, VulnCheck, Plata, 3Cloud, Ontinue, Arancia, SafePaaS, Mirantis, team.blue, Scopely, Trail of Bits, Sezzle, Esri, Bugcrowd, BeyondTrust, Bloomreach, AEG, Skydio, Geotab, Hadrian, QuintoAndar, Carvana, Reltio, Bishop Fox, Gen Digital, Lovable, Menlo Security, HelloFresh, OpenLoop Health, Deploy, Pinterest, Humanoid, Starburst, Vanta, Addepar, Alloy, Apollo.io, Dashlane, Discord, Zeta Global, AppsFlyer, Beast Industries, DataDome, Cribl, fal, Forus, Headway, Instructure, Liftoff, Lila Sciences, Metropolis, NETGEAR, Payoneer, Rain, RELEX Solutions, Salesloft, Talkdesk, Vultr, Zipline, Keenfinity, Acronis, SailPoint, Sonar, Mimecast, micro1, AfterQuery, Nord Security, Zimperium, Black Duck, OpenZeppelin, Upstart, Magnet Forensics, Mysten Labs, N-iX, AIFT, iFood, LiteLLM, The Quality Group, nesto, Sectigo, Positron AI, Anovia, Netrix Global, Software Secured, DeepHealth, Plain Concepts, KnowBe4, Datadog, Vectra AI, Forward Financing, Axon, Ivalua, Neo4j, Scale AI, Semperis, Cyderes, Wrike, BitGo, ClickUp, Ensono, Charlie Health, ID.me, Intercom, Marqeta, Netcraft, Peregrine, Riskified, Solidgate, The New York Times, Tekion, Tide, Twilio, Gemini, Airbnb, Nozomi Networks, OneTrust, Ping Identity, Praetorian, SafeBreach, Snyk, Socket, WorkOS, Bitsight, Synack, Axis Communications, Truelogic, Canva, Glia, 6sense, Angi, Appspace, Assured, Axios, Chainalysis, Cogent Security, DDN, Engine, incident.io, Ethos, Kong, LaunchDarkly, mindsquare, Render, Riveron, GoDaddy, Secfix, SentiLink, Stedi, UpGuard, Paxos, Toast, Aledade, Monks, Offchain Labs, ElevenLabs, Halcyon, Thunes, AegisAI, Hightouch, Insurity, Pomelo Care, Zafran, vivenu, Air Apps, Finite State, BTSE, FAR.AI, Flodesk, Immersive, K Health, LemFi, Phantom, Pindrop, Quanata, Quisitive, Redgate, Safe Software, Squads, Trigger.dev, Turnkey, Olo, Valence, Valkai, Valon, Wealthsimple, Zeely, DuckDuckGo, Jane, KOHO, Job&Talent, Redcare Pharmacy, Sigma Software, Arista Networks, Accelerant, Colliers, Anaconda, NEC Software Solutions, Wavenet, Ditto, Septeo, Orbia, Protiviti, 1GLOBAL, Distribusion, Super.com, inovex, Shopware, Threatscape, zerohash, Phoenix Software, Intertek, payabl., emerchantpay, Stellar Cyber, Grafana Labs, commercetools, Pico, Adyen, Alan, Digital Asset, Xometry, ePlus, qlub, Celonis, PubMatic, Zania, Saronic Technologies, Druva, Lyft, Netskope, Bitwarden, Censys, Commvault, ConnectWise, Expel, Island, Opal Security, Salt Security, Semgrep, Socure, Sysdig, Apiiro, Cobalt, HackerOne, Lumos, Material Security, SpecterOps, SpyCloud, Tines, Transmit Security, Exclusive Networks, Anchorage Digital, Terac, Anyone AI, Monzo, G-P, Staffbase, Resend, Ada, Airship, Appier, ATOSS, Banyan Software, Beam, Blockstream, Canary Technologies, Deepgram, Federato, ExtraHop, First Due, Five9, Fleetio, Foley, FormativGroup, GWI, FINN, Google Fiber, HealthVerity, Hex, Inductive Automation, Latent Health, Linear, Mesh, Miovision, n8n, Octus, Owner, Filevine, OpenSesame, Pacvue, Partly, PathAI, Primer, Prompt Health, Redpanda, Rescale, Roboflow, Runway, Sardine, Synthesia, Brave, Buffer, Consensys, JetBrains, Supabase, Sword Health, Temporal, Thumbtack, TrellisWare Technologies, Turquoise Health, vCluster Labs, Virta Health, YipitData, Zapier, Zippy, Zocdoc, Fly.io, Jusbrasil, Luxor, Mapbox, MeridianLink, NuHarbor Security, Oddball, Quora, Webflow, VGS, Bounteous, Spotify, FireMon, Stand Together, Camunda, EDB, Ent, 360Learning, BioCatch, Gurobi, Istari Digital, Orca Security, Overflow, Workleap, BlackCloak, Airlock Digital, Allium, Docplanner, Form3, Abusix, AIOS, airSlate, Airtm, Aptible, Aptos Labs, Ardent, Arionkoder, Asymmetric Research, Auros, Bondora, Atmosera, CampusWorks, Carrot, Casa, Clariness, ControlPlane, Cracken, Crowell & Moring, Duna, Empirical, Eneba, ESO, Filigran, Flox, Frontline Wildfire Defense, Griffin, Helius, DiliTrust, Hinge Health, Included Health, Injective, Inspectiv, Kin Insurance, Lightning Labs, MARGO, Maze, Metabase, Morpho, Newxel, Orcrist Technologies, Oshi Health, People Data Labs, Pipe, Playlab, Pliancy, Prefect, Project Eleven, Reflow, Mama Money, Pennylane, Resilience, RFA, RootstockLabs, SEON, Shakepay, SkySlope, Smile Digital Health, Sprocket Security, Strata Information Group, Swapcard, Tala, Tonic.ai, Trolley, Warp, Robots & Pencils, toogeza, Upgrade, YGO, Zencoder, Blackpanda, Doxy.me, Euna Solutions, Unit4, CREALOGIX, CrucialLogics, Foundant, gaiia, Malwarebytes, OFX, Prowler, Ambit Iberia, FP Digital Business Solutions, Gcore, Kobalt.io, Qoria, Aztec Foundation, Billigence, bunny.net, Case IQ, DotWorld, ENSEK, Flare, Redflags, Statewise, Xplor, BibliU, Deciphex, FYUL, Leadtech, Physitrack, Technosylva, Youtrust, Uvation, A-Gas, Action1, Nexxa.AI, Yopeso, Aveniq, Base.com, Chartis, CloudLinux, ENJOY Gaming, Erbis, Exeon Analytics, Float, LITIT, Payter, Pliant, Readdle, Recare, Sporty Group, SpotMe, The Browser Company, The Mill Adventure, Signode, Spark Power, DISCO, Fuse Energy, Habitat Learn, Irth Solutions
Sample. 3,041 security roles open at the end of 14 Nov 2026, by the words in their titles.
Rows with fewer than 10.3 open roles are marked as a small sample and not ranked: below that the average of the rows weighs more than a row's own open roles (the weight fitted on the rows' own counts).
Source. CyberJobs.cc Research, Cybersecurity Job Titles by the Numbers, live data.
Figure 5
Level words in titles
How many security roles are senior, how many are pitched at the early career, and what does each level pay?
| Level | Open roles | Share of open roles | Median a year |
|---|---|---|---|
| Senior, staff or principal | 1,337 | 44.0% | $206,000 |
| Lead, manager, director or executive | 495 | 16.3% | $225,000 |
| Junior, entry or associate | 71 | 2.3% | $145,000 |
| Intern, apprentice or student | 44 | 1.4% | $56,200 |
| None of these words | 1,216 | 40.0% | $180,000 |
Sample. 3,041 security roles open at the end of 14 Nov 2026, by the words in their titles.
Median pay needs at least 3 roles publishing pay.
A title counts at every level it names (an "Associate Director" is an associate and a director); the early-career words include the first tier of a ladder (tier 1, L1, "Analyst I").
Source. CyberJobs.cc Research, Cybersecurity Job Titles by the Numbers, live data.
Figure 6
Work-arrangement and contract words in titles
How many security roles say remote, hybrid, contract or part-time in the title itself?
| Word | Open roles | Share of open roles | Median a year |
|---|---|---|---|
| Freelance | 4 | 0.1% | n/a |
| Contract | 10 | 0.3% | n/a |
| Part-timeSmall sample | 0 | 0.0% | n/a |
| Full-timeSmall sample | 0 | 0.0% | n/a |
| Remote | 114 | 3.7% | $187,000 |
| On-site or hybrid | 24 | 0.8% | $178,000 |
| None of these words | 2,890 | 95.0% | $201,000 |
Sample. 3,041 security roles open at the end of 14 Nov 2026, by the words in their titles.
Median pay needs at least 3 roles publishing pay.
Source. CyberJobs.cc Research, Cybersecurity Job Titles by the Numbers, live data.
For employers, recruiters and researchers
Buy the data behind this report
The figures above are a summary. Behind them are records we collect ourselves, every day:
3,462 roles tracked, each with its history
Every role on 696 job boards, read since 11 Nov 2026 (every hour since 11 Nov 2026): its pay and place, and the first and last day it was open.
3,347 apply clicks in 4 days
Which security roles people actually apply to, by specialty, pay and where the role is open. It happens on this site, so nobody else can count it.
fit checks of members against open roles
How the people looking for security jobs here measure up against real postings, and what they lack when they fall short: years, a tool, a certification, a clearance.
What you can buy
The records
The rows behind any figure, with their history, not only the totals.
A regular feed
The same figures every week or month, as files.
A custom cut or benchmark
Your countries, specialties or certifications, or your own company against the market.
Hiring for security and want to reach the people behind this data? (you make the hire).
Method and definitions
The public job boards of the employers this site tracks (Greenhouse, Ashby, Lever, Workday, SmartRecruiters and the other systems they post on), read every hour, keeping the postings whose title and description read as security work. Every figure is computed by one database query over the window shown, the same query for the live report and for every edition. Each figure states its sample beneath it.
- Coverage
- The employers whose public job boards CyberJobs.cc reads in full every hour, from 11 Nov 2026. Each figure states how many were read.
- Open role
- A role listed by a given day and still on its employer's board that day.
- Title word
- Read from titles as whole words; a title can count for several (a "Senior Security Engineering Manager" is a level, an engineer and a manager).
- Advertised pay
- The pay a posting publishes, on one scale: a year's pay in US dollars (the middle of a stated range; an hourly rate counts as 2,080 hours, a monthly one as 12 months). Pay in another currency is kept in that currency and left out of these medians. Counted once per distinct figure, as the job board counts it. Typical pay is the span from the 25th percentile of range midpoints to the 90th percentile of range tops, every figure taken as a full-time year (an hourly rate times 2,080 hours), stated from 3 distinct figures.
- Window
- Live: the last 28 complete days, in UTC. Edition: one calendar month, in UTC.
What this data cannot tell you
- Employers that hire without a public job board, or post only on LinkedIn or through recruiters, are not counted; government agencies and most staffing firms are not read.
- A listing is not a hire. Some employers keep a role open for months, and some post one listing per city or country.
- Titles differ by employer: the same work is a "Security Engineer" at one company and a "Detection Engineer" or "Analyst III" at the next.
How the job feeds are read and roles are classified: site methodology. How fresh, complete and consistent the data is, checked every day: data quality and coverage.
Editions
The live report covers the last 28 complete days and changes every day. Each complete month is also published as an edition, frozen two days after the month ends, so a figure you cite from an edition never moves.
- Live data (this page)Last 28 complete days, recomputed daily
Cite and reuse
Free to quote, chart and republish under CC BY 4.0 (creativecommons.org/licenses/by/4.0) with a link to this page. Live figures change daily: cite a monthly edition for numbers that will read the same later, or keep the access date.
Citation
CyberJobs.cc (2026). Cybersecurity Job Titles by the Numbers (live data, 11 Nov 2026 to 14 Nov 2026). https://cyberjobs.cc/research/cybersecurity-job-title-data (accessed 15 Nov 2026)
BibTeX
@misc{cyberjobscc_cybersecurity_job_title_data_live,
author = {{CyberJobs.cc}},
title = {Cybersecurity Job Titles by the Numbers (live data, 11 Nov 2026 to 14 Nov 2026)},
year = {2026},
howpublished = {\url{https://cyberjobs.cc/research/cybersecurity-job-title-data}},
note = {Accessed 15 Nov 2026},
}More research
- What Cybersecurity Jobs RequireWhat degrees, certifications, clearances, years of experience and tools do security job postings ask for?Read the report
- Cybersecurity Employers ComparedWhich employers list the most security roles, what do they pay, who may apply to them and what do they hire for?Read the report
- How Concentrated Cybersecurity Hiring IsIs security hiring spread across many employers or held by a few, overall and within each specialty?Read the report
- When Cybersecurity Jobs Are PostedOn which days and at what hours do employers post security roles, and how soon after posting does this site read them?Read the report
- Cybersecurity Salary TransparencyHow many security job postings publish pay, which specialties and employers publish it most, and how is advertised pay spread?Read the report
- What Raises Cybersecurity PayWithin the same specialty, how much more do roles with a senior title, a named certification, a clearance or remote work advertise?Read the report
- The Cybersecurity Salary ReportWhat do security roles pay, by specialty and by employer?Read the report