Key findings
- 2
Governance, Risk & Compliance (GRC) roles published pay most often (48.9%), Security Operations & Incident Response roles least often (27.3%).
- 3
201 of the 696 employers with enough open roles to read on their own published pay on every security role and 351 on none; Thales published it on none of its 79 roles.
- 5
The widest published ranges were in Penetration Testing & Red Team (top 1.5x the bottom) and the narrowest in Security Leadership (1.31x).
Figure 1
How often security roles publish pay, by specialty
Which security specialties tell you the salary before you apply?
Sample. 3,041 security roles open on 14 Nov 2026; 1,237 publish pay.
A role publishes pay when its posting states a figure or a range in US dollars, as a salary or as a rate for an hour, week or month. A posting that states no figure, or states pay only in another currency, does not.
Rows with fewer than 56 open roles are marked as a small sample and not ranked: below that the average of the rows weighs more than a row's own open roles (the weight fitted on the rows' own counts).
Source. CyberJobs.cc Research, Cybersecurity Salary Transparency, live data.
Figure 2
How often security roles publish pay, by employer
Which employers put a salary range on their security postings, and which leave pay to the interviews?
Sample. 3,041 security roles open on 14 Nov 2026, at 696 employers.
No row with any open roles is a small sample: the rows differ so much that each reads on its own from its first.
Source. CyberJobs.cc Research, Cybersecurity Salary Transparency, live data.
Figure 3
How advertised security pay spreads across salary bands
What share of security roles that publish pay advertise six figures, and how many reach $300k a year?
| Advertised pay a year | Open roles | Share of roles publishing pay |
|---|---|---|
| Under $75k a year | 28 | 2.3% |
| $75k to $100k | 27 | 2.2% |
| $100k to $125k | 55 | 4.4% |
| $125k to $150k | 129 | 10.4% |
| $150k to $175k | 173 | 14.0% |
| $175k to $200k | 202 | 16.3% |
| $200k to $250k | 357 | 28.9% |
| $250k to $300k | 161 | 13.0% |
| $300k a year or more | 105 | 8.5% |
Sample. 1,237 security roles open on 14 Nov 2026 that publish pay.
Each role counts once, at the middle of its advertised range.
All figures are full-time yearly salaries in US dollars: an hourly, weekly or monthly rate in a posting is multiplied by 2,080, 52 or 12 (40 hours a week, 52 weeks a year).
Source. CyberJobs.cc Research, Cybersecurity Salary Transparency, live data.
Figure 4
How wide published salary ranges are, by specialty
When a security posting publishes a range, how far apart are its top and its bottom?
| Specialty | Top of range / bottom | Median width a year |
|---|---|---|
| Penetration Testing & Red Team | 1.50x | $60,000 |
| Cloud Security | 1.40x | $61,000 |
| Threat Intelligence & Security Research | 1.38x | $54,300 |
| Application & Product Security | 1.37x | $60,000 |
| Security Engineering | 1.37x | $65,400 |
| Security Operations & Incident Response | 1.34x | $49,300 |
| Governance, Risk & Compliance (GRC) | 1.33x | $49,000 |
| Identity & Access Management | 1.33x | $55,000 |
| Security Architecture & Consulting | 1.33x | $60,000 |
| Security Leadership | 1.31x | $69,800 |
Sample. Security roles open on 14 Nov 2026 that publish pay; medians over the roles that give a range (top above bottom).
A ratio of 1.50x means the top of a typical range is half as much again as its bottom: where an offer lands inside it depends on the candidate's experience and the interviews.
Medians need at least 3 roles giving a range.
Source. CyberJobs.cc Research, Cybersecurity Salary Transparency, live data.
Figure 5
Change in the advertised median over the window
Is advertised pay for security roles rising or falling?
| Specialty | Median a year on 11 Nov 2026 | Median a year on 14 Nov 2026 | Change |
|---|---|---|---|
| All specialtiesSmall sample | n/a | n/a | n/a |
Sample. Security roles publishing pay that were open at the start of 11 Nov 2026 and at the end of 14 Nov 2026, at the employers tracked throughout.
The median moves when the mix of open roles changes as much as when salaries change: it describes what is advertised, not a raise for anyone in a role.
Medians need at least 3 roles publishing pay at each end.
This site first read employers' boards on 11 Nov 2026, during the first day of this window, so no employer was tracked at its start and no change can be stated yet.
Source. CyberJobs.cc Research, Cybersecurity Salary Transparency, live data.
For employers, recruiters and researchers
Buy the data behind this report
The figures above are a summary. Behind them are records we collect ourselves, every day:
3,462 roles tracked, each with its history
Every role on 696 job boards, read since 11 Nov 2026 (every hour since 11 Nov 2026): its pay and place, and the first and last day it was open.
3,347 apply clicks in 4 days
Which security roles people actually apply to, by specialty, pay and where the role is open. It happens on this site, so nobody else can count it.
fit checks of members against open roles
How the people looking for security jobs here measure up against real postings, and what they lack when they fall short: years, a tool, a certification, a clearance.
What you can buy
The records
The rows behind any figure, with their history, not only the totals.
A regular feed
The same figures every week or month, as files.
A custom cut or benchmark
Your countries, specialties or certifications, or your own company against the market.
Hiring for security and want to reach the people behind this data? (you make the hire).
Method and definitions
The public job boards of the employers this site tracks (Greenhouse, Ashby, Lever, Workday, SmartRecruiters and the other systems they post on), read every hour, keeping the postings whose title and description read as security work. Every figure is computed by one database query over the window shown, the same query for the live report and for every edition. Each figure states its sample beneath it.
- Coverage
- The employers whose public job boards CyberJobs.cc reads in full every hour, from 11 Nov 2026. Each figure states how many were read.
- Open role
- A role listed by a given day and still on its employer's board that day.
- Advertised pay
- The pay a posting publishes, on one scale: a year's pay in US dollars (the middle of a stated range; an hourly rate counts as 2,080 hours, a monthly one as 12 months). Pay in another currency is kept in that currency and left out of these medians. Counted once per distinct figure, as the job board counts it. Typical pay is the span from the 25th percentile of range midpoints to the 90th percentile of range tops, every figure taken as a full-time year (an hourly rate times 2,080 hours), stated from 3 distinct figures.
- Range width
- The top of a published range over its bottom, for the roles that publish a range with two different ends.
- Specialty
- Each role is classified from its title and description into one of the 10 security specialties this site tracks (Security Operations & Incident Response, Security Engineering, Cloud Security, Application & Product Security, Identity & Access Management, Penetration Testing & Red Team, Threat Intelligence & Security Research, Governance, Risk & Compliance (GRC), Security Architecture & Consulting, Security Leadership). Every specialty links to its own page.
- Window
- Live: the last 28 complete days, in UTC. Edition: one calendar month, in UTC.
What this data cannot tell you
- Employers that hire without a public job board, or post only on LinkedIn or through recruiters, are not counted; government agencies and most staffing firms are not read.
- A listing is not a hire. Some employers keep a role open for months, and some post one listing per city or country.
- A published range is what the employer advertises for the role, not what anyone in it is paid: bonuses, equity and the level the offer lands on are not in it.
- Pay-transparency laws (in several US states, and coming in the EU) decide where pay is published, so the share stating pay leans towards the places that require it.
How the job feeds are read and roles are classified: site methodology. How fresh, complete and consistent the data is, checked every day: data quality and coverage.
Editions
The live report covers the last 28 complete days and changes every day. Each complete month is also published as an edition, frozen two days after the month ends, so a figure you cite from an edition never moves.
- Live data (this page)Last 28 complete days, recomputed daily
Cite and reuse
Free to quote, chart and republish under CC BY 4.0 (creativecommons.org/licenses/by/4.0) with a link to this page. Live figures change daily: cite a monthly edition for numbers that will read the same later, or keep the access date.
Citation
CyberJobs.cc (2026). Cybersecurity Salary Transparency (live data, 11 Nov 2026 to 14 Nov 2026). https://cyberjobs.cc/research/cybersecurity-salary-transparency (accessed 15 Nov 2026)
BibTeX
@misc{cyberjobscc_cybersecurity_salary_transparency_live,
author = {{CyberJobs.cc}},
title = {Cybersecurity Salary Transparency (live data, 11 Nov 2026 to 14 Nov 2026)},
year = {2026},
howpublished = {\url{https://cyberjobs.cc/research/cybersecurity-salary-transparency}},
note = {Accessed 15 Nov 2026},
}More research
- Where Cybersecurity Jobs Are OpenWhich countries can apply to open security roles, how many are open to applicants anywhere, and how many does a resident of each country have?Read the report
- What Raises Cybersecurity PayWithin the same specialty, how much more do roles with a senior title, a named certification, a clearance or remote work advertise?Read the report
- Remote and On-Site Cybersecurity JobsHow many security roles are remote, how many on-site or hybrid, where are the on-site ones and do they pay differently?Read the report
- How Cybersecurity Jobs Are PaidDo security postings quote a salary or an hourly rate, in which currency, as a range or a single figure, on what contract, with what bonus?Read the report
- Cybersecurity Employers ComparedWhich employers list the most security roles, what do they pay, who may apply to them and what do they hire for?Read the report
- How Concentrated Cybersecurity Hiring IsIs security hiring spread across many employers or held by a few, overall and within each specialty?Read the report
- The Cybersecurity Salary ReportWhat do security roles pay, by specialty and by employer?Read the report