Key findings

1
Of the 1,382 open security roles that quote a pay figure, 96.3% quote an annual salary; 44 by the hour and 5 by the month, and 2 give a figure with no unit.
Figure 1
2
89.5% of security roles quoting a figure quote US dollars; the 145 others (AUD, CAD, CNY, EUR, GBP, INR, PLN and SGD) quote by the year (141), by the hour (2) and with no unit (2).
Figure 2
3
94.7% of security roles quoting a figure give a range, 4.5% a single figure and 0.8% only a ceiling ('up to'), the last at Crusoe.
Figure 3
4
47.1% of open security roles carry an employment type; of those, 96.9% are full-time or a direct hire and 2.5% contract or freelance, while SpaceX states none on its 62 roles.
Figure 4
5
18.4% of the 3,037 security roles with a full description offer a bonus beside the salary and 38.5% equity, stock options or RSUs; 12.2% offer both, and 8 name a sign-on bonus.
Figure 6

Figure 1

How security pay is quoted

Do security postings quote an annual salary, an hourly rate or a monthly figure?

Pay quoted	Open roles	Share of roles quoting a figure	Employers
Annual salary	1,331	96.3%	370
By the hour	44	3.2%	19
By the month	5	0.4%	3
A figure with no unit	2	0.1%	1
No pay stated	1,659	n/a	456

Sample. 3,041 security roles open at the end of 14 Nov 2026; 1,382 quote a pay figure in their compensation text.

Read from the compensation text each posting publishes. The unit is the first one the text names ('per year', '/hr', 'per month'); a text with a figure and no unit ('$185,000') counts as a figure with no unit.

Whatever the unit, the board compares pay on one scale, a full-time year. How often roles publish pay, and how it spreads across salary bands, is in the salary transparency report.

Source. CyberJobs.cc Research, How Cybersecurity Jobs Are Paid, live data.

Figure 2

The currency pay is quoted in

Is security pay quoted in US dollars, and which roles quote another currency?

Currency	Roles quoting it	Share of roles quoting a figure	Units quoted	Employers
US dollar (USD)	1,237	89.5%	by the year (1,190), by the hour (42), by the month (5)	345
Canadian dollar (CAD)	95	6.9%	by the year (94), by the hour (1)	51
Euro (EUR)	27	2.0%	by the year (27)	13
Pound sterling (GBP)	8	0.6%	by the year (8)	7
Australian dollar (AUD)	6	0.4%	by the year (6)	3
Singapore dollar (SGD)	5	0.4%	by the year (3), with no unit (2)	3
Indian rupee (INR)	2	0.1%	by the year (2)	1
Chinese yuan (CNY)	1	0.1%	by the year (1)	1
Polish zloty (PLN)	1	0.1%	by the hour (1)	1

Sample. 1,382 security roles open at the end of 14 Nov 2026 that quote a pay figure.

A '$' is read as US dollars: the board writes another country's dollar with its code ('CAD 144,000-198,000 per year'), and a code is read as written. Figures in other currencies are never converted or counted as US dollar pay.

Source. CyberJobs.cc Research, How Cybersecurity Jobs Are Paid, live data.

Figure 3

Range, single figure or 'up to', by employer

Which employers publish a salary range, which a single figure and which only a ceiling?

Employer	Range	Single figure	Up to	From	Quoted by the hour	Open roles
All employers	94.7%	4.5%	0.8%	0.0%	3.2%	3,041
Palo Alto Networks	100.0%	0.0%	0.0%	0.0%	0.0%	102
Thales	100.0%	0.0%	0.0%	0.0%	0.0%	79
SpaceX	100.0%	0.0%	0.0%	0.0%	0.0%	62
CrowdStrike	100.0%	0.0%	0.0%	0.0%	0.0%	50
Coupang	33.3%	66.7%	0.0%	0.0%	0.0%	46
GuidePoint Security	0.0%	100.0%	0.0%	0.0%	100.0%	42
Anthropic	100.0%	0.0%	0.0%	0.0%	0.0%	37
OpenAI	100.0%	0.0%	0.0%	0.0%	0.0%	37
Capco	100.0%	0.0%	0.0%	0.0%	0.0%	33
Zscaler	100.0%	0.0%	0.0%	0.0%	0.0%	31
Anduril Industries	100.0%	0.0%	0.0%	0.0%	0.0%	30
Arctic Wolf	100.0%	0.0%	0.0%	0.0%	0.0%	28
SentinelOne	100.0%	0.0%	0.0%	0.0%	0.0%	28
Databricks	100.0%	0.0%	0.0%	0.0%	0.0%	23
Okta	100.0%	0.0%	0.0%	0.0%	0.0%	22
Sophos	100.0%	0.0%	0.0%	0.0%	0.0%	22
AHEAD	100.0%	0.0%	0.0%	0.0%	0.0%	21
Cloudflare	100.0%	0.0%	0.0%	0.0%	0.0%	21
Elastic	100.0%	0.0%	0.0%	0.0%	0.0%	21
Check Point	100.0%	0.0%	0.0%	0.0%	0.0%	20
CoreWeave	100.0%	0.0%	0.0%	0.0%	0.0%	19
Qualys	100.0%	0.0%	0.0%	0.0%	0.0%	19
Roblox	100.0%	0.0%	0.0%	0.0%	0.0%	19
Tevora	15.8%	84.2%	0.0%	0.0%	84.2%	19
Trend Micro	100.0%	0.0%	0.0%	0.0%	0.0%	17
xAI	100.0%	0.0%	0.0%	0.0%	0.0%	16
Snowflake	100.0%	0.0%	0.0%	0.0%	0.0%	15
Stripe	100.0%	0.0%	0.0%	0.0%	0.0%	15
Airwallex	100.0%	0.0%	0.0%	0.0%	0.0%	14
Two Six Technologies	100.0%	0.0%	0.0%	0.0%	0.0%	14
Applied Intuition	100.0%	0.0%	0.0%	0.0%	0.0%	13
Chainguard	100.0%	0.0%	0.0%	0.0%	0.0%	13
Huntress	100.0%	0.0%	0.0%	0.0%	0.0%	13
MongoDB	100.0%	0.0%	0.0%	0.0%	0.0%	13
Veeam	100.0%	0.0%	0.0%	0.0%	0.0%	13
Nscale	100.0%	0.0%	0.0%	0.0%	0.0%	12
Coinbase	63.6%	36.4%	0.0%	0.0%	0.0%	11
Crusoe	0.0%	0.0%	100.0%	0.0%	0.0%	11
DigitalOcean	100.0%	0.0%	0.0%	0.0%	0.0%	11
DoorDash	100.0%	0.0%	0.0%	0.0%	0.0%	11
Dragos	0.0%	100.0%	0.0%	0.0%	0.0%	11
GitLab	100.0%	0.0%	0.0%	0.0%	0.0%	11
Illumio	81.8%	18.2%	0.0%	0.0%	18.2%	11
IOActive	100.0%	0.0%	0.0%	0.0%	0.0%	11
Trace3	100.0%	0.0%	0.0%	0.0%	0.0%	11
UltraViolet Cyber	100.0%	0.0%	0.0%	0.0%	0.0%	11
Wiz	100.0%	0.0%	0.0%	0.0%	0.0%	11
Flexport	100.0%	0.0%	0.0%	0.0%	0.0%	10
Artemis	100.0%	0.0%	0.0%	0.0%	0.0%	9

The other 333 rows, in the same order (every value of every row is in the report's data, sent by email):

CertiK, EverAI, Myriad360, Pure Storage, Samsara, Verkada, Affirm, Delinea, Gruve, Higgsfield AI, Kraken, Palantir, Plaid, Ripple, Rocket Lab, Rubrik, Shield AI, WHOOP, 7AI, Abnormal Security, Agoda, Anaplan, Apex, Asana, AvePoint, Backblaze, Brain Co., Brex, Fastly, Harvey, Muon Space, Superhuman, Tenable, 1Password, Altruist, Box, Braze, Coalition, Cyberhaven, Darktrace, Dropbox, Harness, iCapital, Legora, MOXFIVE, Notion, Obsidian Security, Oneleet, Ramp, SimSpace, Tanium, 10a Labs, AlphaSense, Appian, Block, Brillio, Cape, Cohere, Galaxy, Horizon3.ai, Kalles Group, Klaviyo, Long View Systems, Mozilla, Packetlabs, Proofpoint, Qualtrics, Recorded Future, Reddit, Robinhood, Rogo, Second Front, TRM Labs, Vercel, 3Cloud, CLEAR, Coalfire, Cohesity, Decagon, Docker, Figma, Figure AI, Fivetran, Fullscript, Garner Health, Glean, Gong, Instacart, InterSystems, Kodex, Mercor, Motive, NinjaOne, Perplexity, PlayStation (Sony Interactive Entertainment), Ridgeline, Scopely, Sentry, Serval, Sierra, Smartsheet, Tailscale, Thinking Machines Lab, Thoropass, Trail of Bits, VulnCheck, Writer, Acronis, Addepar, AEG, AfterQuery, Alloy, Anovia, Apollo.io, Beast Industries, Black Duck, Bugcrowd, Cribl, DeepHealth, Deploy, Discord, Esri, fal, Forus, Gen Digital, Geotab, Hadrian, Headway, Humanoid, Instructure, Liftoff, Lila Sciences, LiteLLM, Menlo Security, Metropolis, micro1, Mimecast, Mysten Labs, NETGEAR, Pinterest, Positron AI, Rain, Reltio, SailPoint, Sezzle, Skydio, Starburst, Upstart, Vanta, Vultr, Zeta Global, Zipline, 6sense, Air Apps, Airbnb, Anaconda, Angi, Arista Networks, Assured, Axios, Axon, BitGo, Bitsight, Chainalysis, Charlie Health, ClickUp, Cogent Security, Datadog, DDN, DuckDuckGo, Engine, Ethos, FAR.AI, Flodesk, Forward Financing, Gemini, GoDaddy, Halcyon, Hightouch, ID.me, incident.io, Insurity, Intercom, Ivalua, Jane, K Health, KnowBe4, KOHO, Kong, LaunchDarkly, Paxos, Peregrine, Phantom, Pindrop, Ping Identity, Pomelo Care, Quanata, Redgate, Render, Riveron, Safe Software, Scale AI, SentiLink, Snyk, Socket, Squads, Stellar Cyber, Super.com, Synack, The New York Times, Toast, Twilio, Valkai, Valon, Vectra AI, Wealthsimple, WorkOS, Adyen, AIOS, Airship, Alan, Anyone AI, Aptible, Banner Bank, Banyan Software, Beam, BioCatch, Bitwarden, Buffer, Camunda, Carrot, Casa, Censys, Chartis, Cobalt, Crowell & Moring, Deepgram, Digital Asset, Eneba, ePlus, Expel, ExtraHop, Federato, FINN, First Due, Flox, Fly.io, Foley, FormativGroup, Frontline Wildfire Defense, gaiia, Google Fiber, HackerOne, HealthVerity, Hex, Hinge Health, Included Health, Inductive Automation, Irth Solutions, Istari Digital, Kin Insurance, Kobalt.io, Latent Health, Linear, Lumos, Lyft, Malwarebytes, Mapbox, MARGO, Material Security, Maze, MeridianLink, Metabase, Miovision, Morpho, NuHarbor Security, Oddball, Opal Security, OpenSesame, Orca Security, Oshi Health, Overflow, Owner, Pacvue, PathAI, People Data Labs, Pipe, Playlab, Pliancy, Prefect, Prompt Health, Quora, Redpanda, Rescale, Resend, Resilience, Roboflow, Robots & Pencils, Runway, Sardine, Semgrep, Shakepay, SkySlope, Smile Digital Health, Socure, Spark Power, SpecterOps, Spotify, SpyCloud, Stand Together, Strata Information Group, Sword Health, Synthesia, Sysdig, Temporal, Terac, The Browser Company, Thumbtack, TrellisWare Technologies, Trolley, Turquoise Health, Upgrade, vCluster Labs, VGS, Virta Health, Warp, Webflow, Workleap, Xometry, YipitData, Zania, Zapier, Zocdoc

Sample. 1,382 security roles open at the end of 14 Nov 2026 that quote a pay figure, by the employer that lists them; shares are of each employer's roles quoting a figure.

Range: two different figures ('$150,000 to $190,000 per year'). Single figure: one ('$175,000 per year', or a range whose ends are equal). Up to: only a ceiling ('up to $220,000'), so what most hires are offered is not stated. From: only a floor ('$140,000+').

Employers whose roles quote no figure are left out of the rows and counted in 'All employers'.

No row with any roles quoting a figure is a small sample: the rows differ so much that each reads on its own from its first.

Source. CyberJobs.cc Research, How Cybersecurity Jobs Are Paid, live data.

Figure 4

The employment types job boards state

Are security roles offered as full-time employment, contract work or part-time work?

Employment type stated	Open roles	Share of open roles	Share of roles stating a type	Employers stating it (listings)
Contract	36	1.2%	2.5%	Turing (4), AfterQuery (3), Arancia (3), Intuition Machines (3)
Hourly	1	0.0%	0.1%	Mercor (1)
Part-time	8	0.3%	0.6%	Mercor (3), Arctic Wolf (2), Avertium (1), Netcompany (1)
Full-time	1,355	44.6%	94.6%	Palo Alto Networks (101), Thales (78), Inetum (61), CrowdStrike (50)
Direct hire (employment)	32	1.1%	2.2%	Integrity360 (17), Brillio (5), Long View Systems (5), Job&Talent (2)
Not stated	1,609	52.9%	n/a	SpaceX (62), Coupang (46), GuidePoint Security (42), Anthropic (37)

Sample. 3,041 security roles open at the end of 14 Nov 2026; 1,432 carry an employment type in their board's own field.

Read from the employment-type field each board publishes, normalised: 'FullTime', 'Full Time' and 'Full-time employee' are full-time, 'Contractor' and 'Fixed-term contract' are contract. A field naming no employment type ('Remote') counts as not stated.

An AI expert network's board (Mercor) states hourly, part-time or full-time as a commitment, not a contract form; full-time can be a full-time contract or employment. What the descriptions say about contract or employment is in the requirements report.

Source. CyberJobs.cc Research, How Cybersecurity Jobs Are Paid, live data.

Figure 5

Employment type by employer

Which employers hire security staff on contract, and which state full-time employment?

Employer	Main type stated	Its share of roles stating a type	Roles stating a type	All types stated	Open roles
Palo Alto Networks	Full-time	100.0%	99.0%	Full-time (101)	102
Thales	Full-time	98.7%	100.0%	Full-time (78), Part-time (1)	79
SpaceX	Not stated	n/a	0.0%	n/a	62
Inetum	Full-time	100.0%	100.0%	Full-time (61)	61
CrowdStrike	Full-time	100.0%	100.0%	Full-time (50)	50
Coupang	Not stated	n/a	0.0%	n/a	46
GuidePoint Security	Not stated	n/a	0.0%	n/a	42
Anthropic	Not stated	n/a	0.0%	n/a	37
OpenAI	Full-time	100.0%	100.0%	Full-time (37)	37
Capco	Not stated	n/a	0.0%	n/a	33
Zscaler	Not stated	n/a	0.0%	n/a	31
Anduril Industries	Not stated	n/a	0.0%	n/a	30
Arctic Wolf	Full-time	92.9%	100.0%	Full-time (26), Part-time (2)	28
SentinelOne	Not stated	n/a	0.0%	n/a	28
Databricks	Not stated	n/a	0.0%	n/a	23
Okta	Not stated	n/a	0.0%	n/a	22
Sophos	Full-time	100.0%	100.0%	Full-time (22)	22
AHEAD	Full-time	100.0%	76.2%	Full-time (16)	21
Cloudflare	Not stated	n/a	0.0%	n/a	21
Elastic	Not stated	n/a	0.0%	n/a	21
Check Point	Full-time	100.0%	100.0%	Full-time (20)	20
Nebius	Not stated	n/a	0.0%	n/a	20
CoreWeave	Not stated	n/a	0.0%	n/a	19
Integrity360	Direct hire (employment)	89.5%	100.0%	Direct hire (employment) (17), Full-time (2)	19
Qualys	Full-time	100.0%	100.0%	Full-time (19)	19
Roblox	Not stated	n/a	0.0%	n/a	19
Tevora	Full-time	100.0%	15.8%	Full-time (3)	19
Advens	Full-time	87.5%	94.1%	Full-time (14), Contract (2)	17
Trend Micro	Full-time	100.0%	82.4%	Full-time (14)	17
xAI	Not stated	n/a	0.0%	n/a	16
Snowflake	Full-time	100.0%	100.0%	Full-time (15)	15
Stripe	Not stated	n/a	0.0%	n/a	15
Airwallex	Full-time	100.0%	100.0%	Full-time (14)	14
Two Six Technologies	Not stated	n/a	0.0%	n/a	14
Applied Intuition	Full-time	100.0%	100.0%	Full-time (13)	13
Chainguard	Not stated	n/a	0.0%	n/a	13
Huntress	Not stated	n/a	0.0%	n/a	13
MongoDB	Not stated	n/a	0.0%	n/a	13
Scalian	Full-time	100.0%	100.0%	Full-time (13)	13
Veeam	Not stated	n/a	0.0%	n/a	13
ESET	Full-time	100.0%	100.0%	Full-time (12)	12
Nscale	Not stated	n/a	0.0%	n/a	12
Workstreet	Not stated	n/a	0.0%	n/a	12
Canonical	Not stated	n/a	0.0%	n/a	11
Coinbase	Not stated	n/a	0.0%	n/a	11
Crusoe	Full-time	100.0%	100.0%	Full-time (11)	11
DigitalOcean	Not stated	n/a	0.0%	n/a	11
DoorDash	Not stated	n/a	0.0%	n/a	11
Dragos	Not stated	n/a	0.0%	n/a	11
GitLab	Not stated	n/a	0.0%	n/a	11

The other 646 rows, in the same order (every value of every row is in the report's data, sent by email):

Illumio, IOActive, JustMarkets, Kapres Technology, Trace3, UltraViolet Cyber, Wiz, Cato Networks, CyberOne, Flexport, Methods, Netcompany, Artemis, Bitdefender, CENSUS, CertiK, EverAI, Myriad360, Pure Storage, Samsara, Verkada, Affirm, BJAK, Delinea, Gruve, Higgsfield AI, knowmad mood, Kraken, Palantir, Plaid, Ripple, Rocket Lab, Rubrik, Shield AI, Starling Bank, Sword Group, WHOOP, 7AI, Abnormal Security, Agoda, Anaplan, Apex, Asana, AvePoint, Backblaze, Brain Co., Brex, Fastly, Harvey, Infosys Consulting, Intuition Machines, Muon Space, Optiveum, SOFTSWISS, Superhuman, Tenable, 1Password, Abacus, Altruist, Armadin, Box, Braze, Bybit, Coalition, Cyberhaven, Darktrace, Dropbox, Gainsight, Harness, iCapital, IonQ, JFrog, Legora, Logicalis Spain, Mistral AI, MOXFIVE, Neura Robotics, Notion, Obsidian Security, OKX, Oneleet, Ramp, SimSpace, Talan, Tanium, 10a Labs, Aidoc, Aikido Security, AlphaSense, Appian, Arctiq, Avertium, Block, Brillio, Cape, Checkout.com, ClickHouse, Cohere, Coupa, Dataflow Security, depthfirst, European Dynamics, Firmus, Galaxy, Horizon3.ai, Interrupt Labs, IONOS, Kalles Group, Keeper Security, Klaviyo, Long View Systems, Mozilla, Nubank, OPSWAT, Packetlabs, Proofpoint, Qualtrics, Recorded Future, Reddit, Reflection AI, Robinhood, Rogo, Saviynt, Second Front, SonicWall, TENEX.AI, Trellix, TRM Labs, Vercel, 3Cloud, Alpaca, Arancia, Axonius, CLEAR, CloudSEK, Coalfire, Cohesity, Decagon, Deliveroo, Docker, Ebury, Emergent, Endor Labs, Eye Security, Figma, Figure AI, Fivetran, Fullscript, Garner Health, Glean, Gong, Instacart, InterSystems, JumpCloud, Kodex, Mercor, Mirantis, Motive, NinjaOne, Ontinue, Perplexity, Plata, PlayStation (Sony Interactive Entertainment), Rhymetec, Ridgeline, SafePaaS, Scopely, Sentry, Serval, Sierra, Smartsheet, Tailscale, team.blue, Thinking Machines Lab, Thoropass, Trail of Bits, Turing, VulnCheck, Writer, Xsolla, Acronis, Addepar, AEG, AfterQuery, AIFT, Alloy, Anovia, Apollo.io, AppsFlyer, Beast Industries, BeyondTrust, Bishop Fox, Black Duck, Bloomreach, Bugcrowd, Carvana, Cribl, Dashlane, DataDome, DeepHealth, Deploy, Discord, Esri, fal, Forus, Gen Digital, Geotab, Hadrian, Headway, HelloFresh, Humanoid, iFood, Instructure, Keenfinity, Liftoff, Lila Sciences, LiteLLM, Lovable, Magnet Forensics, Menlo Security, Metropolis, micro1, Mimecast, Mysten Labs, N-iX, nesto, NETGEAR, Netrix Global, Nord Security, OpenLoop Health, OpenZeppelin, Payoneer, Pinterest, Plain Concepts, Positron AI, QuintoAndar, Rain, RELEX Solutions, Reltio, SailPoint, Salesloft, Sectigo, Sezzle, Skydio, Software Secured, Sonar, Starburst, Talkdesk, The Quality Group, Upstart, Vanta, Vultr, Zeta Global, Zimperium, Zipline, 1GLOBAL, 6sense, Accelerant, AegisAI, Air Apps, Airbnb, Aledade, Anaconda, Angi, Appspace, Arista Networks, Assured, Axios, Axis Communications, Axon, BitGo, Bitsight, BTSE, Canva, Chainalysis, Charlie Health, ClickUp, Cogent Security, Colliers, Cyderes, Datadog, DDN, Distribusion, Ditto, DuckDuckGo, ElevenLabs, emerchantpay, Engine, Ensono, Ethos, FAR.AI, Finite State, Flodesk, Forward Financing, Gemini, Glia, GoDaddy, Halcyon, Hightouch, ID.me, Immersive, incident.io, inovex, Insurity, Intercom, Intertek, Ivalua, Jane, Job&Talent, K Health, KnowBe4, KOHO, Kong, LaunchDarkly, LemFi, Marqeta, mindsquare, Monks, NEC Software Solutions, Neo4j, Netcraft, Nozomi Networks, Offchain Labs, Olo, OneTrust, Orbia, Paxos, payabl., Peregrine, Phantom, Phoenix Software, Pindrop, Ping Identity, Pomelo Care, Praetorian, Protiviti, Quanata, Quisitive, Redcare Pharmacy, Redgate, Render, Riskified, Riveron, Safe Software, SafeBreach, Scale AI, Secfix, Semperis, SentiLink, Septeo, Shopware, Sigma Software, Snyk, Socket, Solidgate, Squads, Stedi, Stellar Cyber, Super.com, Synack, Tekion, The New York Times, Threatscape, Thunes, Tide, Toast, Trigger.dev, Truelogic, Turnkey, Twilio, UpGuard, Valence, Valkai, Valon, Vectra AI, vivenu, Wavenet, Wealthsimple, WorkOS, Wrike, Zafran, Zeely, zerohash, 360Learning, A-Gas, Abusix, Action1, Ada, Adyen, AIOS, Airlock Digital, Airship, airSlate, Airtm, Alan, Allium, Ambit Iberia, Anchorage Digital, Anyone AI, Apiiro, Appier, Aptible, Aptos Labs, Ardent, Arionkoder, Asymmetric Research, Atmosera, ATOSS, Auros, Aveniq, Aztec Foundation, Banner Bank, Banyan Software, Base.com, Beam, BibliU, Billigence, BioCatch, Bitwarden, BlackCloak, Blackpanda, Blockstream, Bondora, Bounteous, Brave, Buffer, bunny.net, CampusWorks, Camunda, Canary Technologies, Carrot, Casa, Case IQ, Celonis, Censys, Chartis, Clariness, CloudLinux, Cobalt, commercetools, Commvault, ConnectWise, Consensys, ControlPlane, Cracken, CREALOGIX, Crowell & Moring, CrucialLogics, Deciphex, Deepgram, Digital Asset, DiliTrust, DISCO, Docplanner, DotWorld, Doxy.me, Druva, Duna, EDB, Empirical, Eneba, ENJOY Gaming, ENSEK, Ent, ePlus, Erbis, ESO, Euna Solutions, Exclusive Networks, Exeon Analytics, Expel, ExtraHop, Federato, Filevine, Filigran, FINN, FireMon, First Due, Five9, Flare, Fleetio, Float, Flox, Fly.io, Foley, Form3, FormativGroup, Foundant, FP Digital Business Solutions, Frontline Wildfire Defense, Fuse Energy, FYUL, G-P, gaiia, Gcore, Google Fiber, Grafana Labs, Griffin, Gurobi, GWI, Habitat Learn, HackerOne, HealthVerity, Helius, Hex, Hinge Health, Included Health, Inductive Automation, Injective, Inspectiv, Irth Solutions, Island, Istari Digital, JetBrains, Jusbrasil, Kin Insurance, Kobalt.io, Latent Health, Leadtech, Lightning Labs, Linear, LITIT, Lumos, Luxor, Lyft, Malwarebytes, Mama Money, Mapbox, MARGO, Material Security, Maze, MeridianLink, Mesh, Metabase, Miovision, Monzo, Morpho, n8n, Netskope, Newxel, Nexxa.AI, NuHarbor Security, Octus, Oddball, OFX, Opal Security, OpenSesame, Orca Security, Orcrist Technologies, Oshi Health, Overflow, Owner, Pacvue, Partly, PathAI, Payter, Pennylane, People Data Labs, Physitrack, Pico, Pipe, Playlab, Pliancy, Pliant, Prefect, Primer, Project Eleven, Prompt Health, Prowler, PubMatic, qlub, Qoria, Quora, Readdle, Recare, Redflags, Redpanda, Reflow, Rescale, Resend, Resilience, RFA, Roboflow, Robots & Pencils, RootstockLabs, Runway, Salt Security, Sardine, Saronic Technologies, Semgrep, SEON, Shakepay, Signode, SkySlope, Smile Digital Health, Socure, Spark Power, SpecterOps, Sporty Group, Spotify, SpotMe, Sprocket Security, SpyCloud, Staffbase, Stand Together, Statewise, Strata Information Group, Supabase, Swapcard, Sword Health, Synthesia, Sysdig, Tala, Technosylva, Temporal, Terac, The Browser Company, The Mill Adventure, Thumbtack, Tines, Tonic.ai, toogeza, Transmit Security, TrellisWare Technologies, Trolley, Turquoise Health, Unit4, Upgrade, Uvation, vCluster Labs, VGS, Virta Health, Warp, Webflow, Workleap, Xometry, Xplor, YGO, YipitData, Yopeso, Youtrust, Zania, Zapier, Zencoder, Zippy, Zocdoc

Sample. 3,041 security roles open at the end of 14 Nov 2026, by the employer that lists them (listings, not hires).

An employer whose board has no employment-type field shows 'Not stated' for every role, whatever its descriptions say.

No row with any open roles is a small sample: the rows differ so much that each reads on its own from its first.

Source. CyberJobs.cc Research, How Cybersecurity Jobs Are Paid, live data.

Figure 6

Bonuses, equity and other extras of pay

How many security postings offer a bonus or equity on top of the salary?

Term stated	Roles stating it	Share of roles read	Employers
A bonus (any)	558	18.4%	140
An annual, performance or incentive bonus	550	18.1%	138
A sign-on bonus	8	0.3%	2
Equity, stock options or RSUs	1,170	38.5%	287
Both a bonus and equity	369	12.2%	91
An 'up to' pay figure	82	2.7%	20

Sample. 3,037 security roles open on 14 Nov 2026 whose full description this site reads, at 696 employers, 99.9% of all open roles.

A bonus counts when the description offers one with the pay (an annual, target, discretionary or performance bonus, bonus eligibility, incentive or variable pay, a sign-on bonus); an employee referral bonus, which pays for recommending someone else, and 'a bonus' meaning 'a plus' do not.

Equity counts when the description offers equity, stock options, restricted stock units or a stock purchase plan; 'diversity, equity and inclusion', pay equity and an employer's private-equity owners do not.

Many postings say a role 'may be eligible' for a bonus or equity: that counts, as an offer the posting states.

Source. CyberJobs.cc Research, How Cybersecurity Jobs Are Paid, live data.

For employers, recruiters and researchers

Buy the data behind this report

The figures above are a summary. Behind them are records we collect ourselves, every day:

3,462 roles tracked, each with its history
Every role on 696 job boards, read since 11 Nov 2026 (every hour since 11 Nov 2026): its pay and place, and the first and last day it was open.
3,347 apply clicks in 4 days
Which security roles people actually apply to, by specialty, pay and where the role is open. It happens on this site, so nobody else can count it.
fit checks of members against open roles
How the people looking for security jobs here measure up against real postings, and what they lack when they fall short: years, a tool, a certification, a clearance.

What you can buy

The records
The rows behind any figure, with their history, not only the totals.
A regular feed
The same figures every week or month, as files.
A custom cut or benchmark
Your countries, specialties or certifications, or your own company against the market.

Hiring for security and want to reach the people behind this data? (you make the hire).

Method and definitions

The public job boards of the employers this site tracks (Greenhouse, Ashby, Lever, Workday, SmartRecruiters and the other systems they post on), read every hour, keeping the postings whose title and description read as security work. Each open role's compensation text and employment type, and the full description where its board publishes one. Every figure is computed by one database query over the window shown, the same query for the live report and for every edition. Each figure states its sample beneath it.

Coverage: The employers whose public job boards CyberJobs.cc reads in full every hour, from 11 Nov 2026. Each figure states how many were read.
Pay unit: Read from the compensation text a posting publishes: the unit it names (per year, per hour, per month). A figure with no unit is counted as such, never assigned one.
Currency: A "$" is the dollar of the posting's own country (a role based only in Canada quotes Canadian dollars); a code is read as written. Other currencies are never converted.
Window: Live: the last 28 complete days, in UTC. Edition: one calendar month, in UTC.

What this data cannot tell you

Employers that hire without a public job board, or post only on LinkedIn or through recruiters, are not counted; government agencies and most staffing firms are not read.
A listing is not a hire. Some employers keep a role open for months, and some post one listing per city or country.

How the job feeds are read and roles are classified: site methodology. How fresh, complete and consistent the data is, checked every day: data quality and coverage.

Editions

The live report covers the last 28 complete days and changes every day. Each complete month is also published as an edition, frozen two days after the month ends, so a figure you cite from an edition never moves.

Live data (this page)Last 28 complete days, recomputed daily

Cite and reuse

Free to quote, chart and republish under CC BY 4.0 (creativecommons.org/licenses/by/4.0) with a link to this page. Live figures change daily: cite a monthly edition for numbers that will read the same later, or keep the access date.

Citation

CyberJobs.cc (2026). How Cybersecurity Jobs Are Paid (live data, 11 Nov 2026 to 14 Nov 2026). https://cyberjobs.cc/research/how-cybersecurity-jobs-are-paid (accessed 15 Nov 2026)

BibTeX

@misc{cyberjobscc_how_cybersecurity_jobs_are_paid_live,
  author = {{CyberJobs.cc}},
  title = {How Cybersecurity Jobs Are Paid (live data, 11 Nov 2026 to 14 Nov 2026)},
  year = {2026},
  howpublished = {\url{https://cyberjobs.cc/research/how-cybersecurity-jobs-are-paid}},
  note = {Accessed 15 Nov 2026},
}

Data: every figure as CSV (one line per value) and JSON, sent to your work email.Pay and open-roles data

More research

All 50 research reports