Skip to content

Research report ยท Live data

Remote and On-Site Cybersecurity Jobs

On 14 Nov 2026, 14.8% of 3,041 open security roles were on-site or hybrid, 40.9% were remote and 44.3% did not say; most on-site roles were in the United States, India and the United Kingdom, and within the same specialty they advertised 2.5% more than remote roles.

Data window
11 Nov 2026 to 14 Nov 2026
4 days, UTC
Computed
15 Nov 2026, 14:41 UTC
Recomputed every day
Source
The public job boards of the employers this site tracks (Greenhouse, Ashby, Lever, Workday, SmartRecruiters and the other systems they post on), read every hour, keeping the postings whose title and description read as security work.
Method
Version 3. Definitions
CC BY 4.0, how to cite

Every figure on this page as CSV and JSON, sent to your work email.

of open security roles are on-site or hybrid
15%
on-site or hybrid security roles open
450
of on-site roles are in the United States
64%
new on-site listings in the window
16

Key findings

  1. 1

    14.8% of the 3,041 security roles open on 14 Nov 2026 (450) are on-site or hybrid; 40.9% are remote and 44.3% do not say.

    Figure 1
  2. 2

    1,347 open roles state no arrangement in their title, location or workplace field, 5.9% of them at Thales, so both the remote and the on-site shares are floors.

    Figure 2
  3. 3

    Governance, Risk & Compliance (GRC) has the largest on-site share of any specialty with enough open roles to read on its own (20.2%, 76 roles); 9 specialties have on-site roles at all.

    Figure 1
  4. 4

    119 employers list on-site security roles; OpenAI lists the most (30, 6.7% of all on-site roles).

    Figure 2
  5. 5

    On-site security roles are open in 29 countries; the United States has the most (289, 64.2%), and the place named most is the San Francisco Bay Area (135 roles).

    Figure 3
  6. 6

    Read from their titles, the largest groups of on-site roles are leadership and management (75 roles, 16.7%) and early-career seats (27, 6%); 69.3% are other engineering, analysis and research seats at an employer's office.

    Figure 5
  7. 7

    Within the same specialty, on-site roles advertise 2.5% more than remote ones on average (weighted by on-site roles, across 10 specialties with at least 3 roles publishing pay on each side: Security Engineering $210k/yr against $206k/yr, Governance, Risk & Compliance (GRC) $164k/yr against $164k/yr, Security Leadership $253k/yr against $230k/yr, Application & Product Security $246k/yr against $199k/yr, Security Operations & Incident Response $161k/yr against $175k/yr, Security Architecture & Consulting $178k/yr against $199k/yr, Identity & Access Management $208k/yr against $188k/yr, Cloud Security $182k/yr against $205k/yr, Penetration Testing & Red Team $239k/yr against $195k/yr and Threat Intelligence & Security Research $95k/yr against $176k/yr).

    Figure 6

Figure 1

On-site, remote or not stated, by specialty

Which security specialties are worked from an office or a site, and which from home?

SpecialtyOn-site or hybridRemoteNot stated
All specialties
14.8%
40.9%44.3%
Governance, Risk & Compliance (GRC)
20.2%
33.8%46.0%
Security Engineering
18.6%
33.6%47.8%
Security Leadership
16.1%
43.7%40.2%
Application & Product Security
14.5%
44.7%40.8%
Cloud Security
14.3%
41.2%44.5%
Identity & Access Management
12.9%
36.1%51.0%
Security Operations & Incident Response
11.6%
47.1%41.3%
Threat Intelligence & Security ResearchSmall sample
10.5%
40.7%48.8%
Penetration Testing & Red Team
9.5%
45.3%45.3%
Security Architecture & Consulting
9.3%
49.4%41.3%

Sample. 3,041 security roles open at the end of 14 Nov 2026; 450 on-site or hybrid.

On-site or hybrid: the title or location names an office or a site ('Onsite', 'London (Hybrid)', 'In-office'), or a job board that publishes a workplace field (Lever, Ashby) marks the role not remote. Remote: the title or location says remote, or the board flags the role remote.

Not stated: neither the title, the location nor a workplace field says how the work is done. Many such postings name only a city and say in the description whether the role is remote, hybrid or in the office, so both the on-site and the remote shares are floors, not estimates of the rest.

Hybrid roles are counted with on-site ones: a workplace field marks both not remote, so the listing fields cannot separate them.

Rows with fewer than 116.6 open roles are marked as a small sample and not ranked: below that the average of the rows weighs more than a row's own open roles (the weight fitted on the rows' own counts).

Source. CyberJobs.cc Research, Remote and On-Site Cybersecurity Jobs, live data.

Figure 2

On-site, remote or not stated, by employer

Which employers keep their security staff in the office, and which hire remotely?

EmployerOn-site or hybridRemoteNot stated
OpenAI
81.1%
18.9%0.0%
Tevora
94.7%
5.3%0.0%
CrowdStrike
34.0%
60.0%6.0%
Snowflake
93.3%
6.7%0.0%
Airwallex
100.0%
0.0%0.0%
Applied Intuition
100.0%
0.0%0.0%
Crusoe
100.0%
0.0%0.0%
UltraViolet Cyber
90.9%
9.1%0.0%
Illumio
81.8%
18.2%0.0%
Higgsfield AI
100.0%
0.0%0.0%
Palantir
100.0%
0.0%0.0%
WHOOP
100.0%
0.0%0.0%
Artemis
77.8%
22.2%0.0%
Shield AI
87.5%
12.5%0.0%
Apex
100.0%
0.0%0.0%
Harvey
100.0%
0.0%0.0%
Superhuman
85.7%
14.3%0.0%
Legora
100.0%
0.0%0.0%
Mistral AI
100.0%
0.0%0.0%
Neura Robotics
100.0%
0.0%0.0%
Notion
100.0%
0.0%0.0%
Delinea
62.5%
37.5%0.0%
7AI
71.4%
28.6%0.0%
Ramp
83.3%
16.7%0.0%
Tanium
83.3%
16.7%0.0%
Brillio
100.0%
0.0%0.0%
Checkout.com
100.0%
0.0%0.0%
depthfirst
100.0%
0.0%0.0%
Long View Systems
100.0%
0.0%0.0%
Nubank
100.0%
0.0%0.0%
Reflection AI
100.0%
0.0%0.0%
Rogo
100.0%
0.0%0.0%
TENEX.AI
100.0%
0.0%0.0%
Check Point
20.0%
15.0%65.0%
Plaid
50.0%
50.0%0.0%
Brain Co.
57.1%
42.9%0.0%
Gainsight
66.7%
33.3%0.0%
Cape
80.0%
20.0%0.0%
Saviynt
80.0%
20.0%0.0%
Vercel
80.0%
20.0%0.0%
Decagon
100.0%
0.0%0.0%
Perplexity
100.0%
0.0%0.0%
Sentry
100.0%
0.0%0.0%
Serval
100.0%
0.0%0.0%
Sierra
100.0%
0.0%0.0%
Thinking Machines Lab
100.0%
0.0%0.0%
Writer
100.0%
0.0%0.0%
BJAK
37.5%
62.5%0.0%
Coalfire
75.0%
25.0%0.0%
Eye Security
75.0%
25.0%0.0%

The other 646 rows, in the same order (every value of every row is in the report's data, sent by email):

Xsolla, Deploy, fal, Forus, Gen Digital, Hadrian, Humanoid, Lovable, NETGEAR, Nord Security, Skydio, Sonar, Abnormal Security, Armadin, Cohere, Coupa, Motive, Instructure, LiteLLM, Menlo Security, Vultr, Cyderes, Semperis, Snyk, Tekion, Trigger.dev, AHEAD, Stripe, Methods, Netcompany, Cyberhaven, SimSpace, Dataflow Security, IONOS, OPSWAT, team.blue, BeyondTrust, HelloFresh, Magnet Forensics, Rain, Vanta, AegisAI, Air Apps, Chainalysis, DDN, Flodesk, incident.io, KnowBe4, Kong, LemFi, NEC Software Solutions, Paxos, Redgate, Safe Software, Solidgate, Valence, Zafran, Allium, commercetools, ExtraHop, Malwarebytes, Nexxa.AI, Opal Security, PathAI, Saronic Technologies, Semgrep, Socure, SpecterOps, Zania, Palo Alto Networks, Thales, SpaceX, Inetum, Coupang, GuidePoint Security, Anthropic, Capco, Zscaler, Anduril Industries, Arctic Wolf, SentinelOne, Databricks, Okta, Sophos, Cloudflare, Elastic, Nebius, CoreWeave, Integrity360, Qualys, Roblox, Advens, Trend Micro, xAI, Two Six Technologies, Chainguard, Huntress, MongoDB, Scalian, Veeam, ESET, Nscale, Workstreet, Canonical, Coinbase, DigitalOcean, DoorDash, Dragos, GitLab, IOActive, JustMarkets, Kapres Technology, Trace3, Wiz, Cato Networks, CyberOne, Flexport, Bitdefender, CENSUS, CertiK, EverAI, Myriad360, Pure Storage, Samsara, Verkada, Affirm, Gruve, knowmad mood, Kraken, Ripple, Rocket Lab, Rubrik, Starling Bank, Sword Group, Agoda, Anaplan, Asana, AvePoint, Backblaze, Brex, Fastly, Infosys Consulting, Intuition Machines, Muon Space, Optiveum, SOFTSWISS, Tenable, 1Password, Abacus, Altruist, Box, Braze, Bybit, Coalition, Darktrace, Dropbox, Harness, iCapital, IonQ, JFrog, Logicalis Spain, MOXFIVE, Obsidian Security, OKX, Oneleet, Talan, 10a Labs, Aidoc, Aikido Security, AlphaSense, Appian, Arctiq, Avertium, Block, ClickHouse, European Dynamics, Firmus, Galaxy, Horizon3.ai, Interrupt Labs, Kalles Group, Keeper Security, Klaviyo, Mozilla, Packetlabs, Proofpoint, Qualtrics, Recorded Future, Reddit, Robinhood, Second Front, SonicWall, Trellix, TRM Labs, 3Cloud, Alpaca, Arancia, Axonius, CLEAR, CloudSEK, Cohesity, Deliveroo, Docker, Ebury, Emergent, Endor Labs, Figma, Figure AI, Fivetran, Fullscript, Garner Health, Glean, Gong, Instacart, InterSystems, JumpCloud, Kodex, Mercor, Mirantis, NinjaOne, Ontinue, Plata, PlayStation (Sony Interactive Entertainment), Rhymetec, Ridgeline, SafePaaS, Scopely, Smartsheet, Tailscale, Thoropass, Trail of Bits, Turing, VulnCheck, Acronis, Addepar, AEG, AfterQuery, AIFT, Alloy, Anovia, Apollo.io, AppsFlyer, Beast Industries, Bishop Fox, Black Duck, Bloomreach, Bugcrowd, Carvana, Cribl, Dashlane, DataDome, DeepHealth, Discord, Esri, Geotab, Headway, iFood, Keenfinity, Liftoff, Lila Sciences, Metropolis, micro1, Mimecast, Mysten Labs, N-iX, nesto, Netrix Global, OpenLoop Health, OpenZeppelin, Payoneer, Pinterest, Plain Concepts, Positron AI, QuintoAndar, RELEX Solutions, Reltio, SailPoint, Salesloft, Sectigo, Sezzle, Software Secured, Starburst, Talkdesk, The Quality Group, Upstart, Zeta Global, Zimperium, Zipline, 1GLOBAL, 6sense, Accelerant, Airbnb, Aledade, Anaconda, Angi, Appspace, Arista Networks, Assured, Axios, Axis Communications, Axon, BitGo, Bitsight, BTSE, Canva, Charlie Health, ClickUp, Cogent Security, Colliers, Datadog, Distribusion, Ditto, DuckDuckGo, ElevenLabs, emerchantpay, Engine, Ensono, Ethos, FAR.AI, Finite State, Forward Financing, Gemini, Glia, GoDaddy, Halcyon, Hightouch, ID.me, Immersive, inovex, Insurity, Intercom, Intertek, Ivalua, Jane, Job&Talent, K Health, KOHO, LaunchDarkly, Marqeta, mindsquare, Monks, Neo4j, Netcraft, Nozomi Networks, Offchain Labs, Olo, OneTrust, Orbia, payabl., Peregrine, Phantom, Phoenix Software, Pindrop, Ping Identity, Pomelo Care, Praetorian, Protiviti, Quanata, Quisitive, Redcare Pharmacy, Render, Riskified, Riveron, SafeBreach, Scale AI, Secfix, SentiLink, Septeo, Shopware, Sigma Software, Socket, Squads, Stedi, Stellar Cyber, Super.com, Synack, The New York Times, Threatscape, Thunes, Tide, Toast, Truelogic, Turnkey, Twilio, UpGuard, Valkai, Valon, Vectra AI, vivenu, Wavenet, Wealthsimple, WorkOS, Wrike, Zeely, zerohash, 360Learning, A-Gas, Abusix, Action1, Ada, Adyen, AIOS, Airlock Digital, Airship, airSlate, Airtm, Alan, Ambit Iberia, Anchorage Digital, Anyone AI, Apiiro, Appier, Aptible, Aptos Labs, Ardent, Arionkoder, Asymmetric Research, Atmosera, ATOSS, Auros, Aveniq, Aztec Foundation, Banner Bank, Banyan Software, Base.com, Beam, BibliU, Billigence, BioCatch, Bitwarden, BlackCloak, Blackpanda, Blockstream, Bondora, Bounteous, Brave, Buffer, bunny.net, CampusWorks, Camunda, Canary Technologies, Carrot, Casa, Case IQ, Celonis, Censys, Chartis, Clariness, CloudLinux, Cobalt, Commvault, ConnectWise, Consensys, ControlPlane, Cracken, CREALOGIX, Crowell & Moring, CrucialLogics, Deciphex, Deepgram, Digital Asset, DiliTrust, DISCO, Docplanner, DotWorld, Doxy.me, Druva, Duna, EDB, Empirical, Eneba, ENJOY Gaming, ENSEK, Ent, ePlus, Erbis, ESO, Euna Solutions, Exclusive Networks, Exeon Analytics, Expel, Federato, Filevine, Filigran, FINN, FireMon, First Due, Five9, Flare, Fleetio, Float, Flox, Fly.io, Foley, Form3, FormativGroup, Foundant, FP Digital Business Solutions, Frontline Wildfire Defense, Fuse Energy, FYUL, G-P, gaiia, Gcore, Google Fiber, Grafana Labs, Griffin, Gurobi, GWI, Habitat Learn, HackerOne, HealthVerity, Helius, Hex, Hinge Health, Included Health, Inductive Automation, Injective, Inspectiv, Irth Solutions, Island, Istari Digital, JetBrains, Jusbrasil, Kin Insurance, Kobalt.io, Latent Health, Leadtech, Lightning Labs, Linear, LITIT, Lumos, Luxor, Lyft, Mama Money, Mapbox, MARGO, Material Security, Maze, MeridianLink, Mesh, Metabase, Miovision, Monzo, Morpho, n8n, Netskope, Newxel, NuHarbor Security, Octus, Oddball, OFX, OpenSesame, Orca Security, Orcrist Technologies, Oshi Health, Overflow, Owner, Pacvue, Partly, Payter, Pennylane, People Data Labs, Physitrack, Pico, Pipe, Playlab, Pliancy, Pliant, Prefect, Primer, Project Eleven, Prompt Health, Prowler, PubMatic, qlub, Qoria, Quora, Readdle, Recare, Redflags, Redpanda, Reflow, Rescale, Resend, Resilience, RFA, Roboflow, Robots & Pencils, RootstockLabs, Runway, Salt Security, Sardine, SEON, Shakepay, Signode, SkySlope, Smile Digital Health, Spark Power, Sporty Group, Spotify, SpotMe, Sprocket Security, SpyCloud, Staffbase, Stand Together, Statewise, Strata Information Group, Supabase, Swapcard, Sword Health, Synthesia, Sysdig, Tala, Technosylva, Temporal, Terac, The Browser Company, The Mill Adventure, Thumbtack, Tines, Tonic.ai, toogeza, Transmit Security, TrellisWare Technologies, Trolley, Turquoise Health, Unit4, Upgrade, Uvation, vCluster Labs, VGS, Virta Health, Warp, Webflow, Workleap, Xometry, Xplor, YGO, YipitData, Yopeso, Youtrust, Zapier, Zencoder, Zippy, Zocdoc

Sample. 3,041 security roles open at the end of 14 Nov 2026, by the employer that lists them (listings, not hires).

On-site or hybrid: the title or location names an office or a site ('Onsite', 'London (Hybrid)', 'In-office'), or a job board that publishes a workplace field (Lever, Ashby) marks the role not remote. Remote: the title or location says remote, or the board flags the role remote.

Not stated: neither the title, the location nor a workplace field says how the work is done. Many such postings name only a city and say in the description whether the role is remote, hybrid or in the office, so both the on-site and the remote shares are floors, not estimates of the rest.

No row with any open roles is a small sample: the rows differ so much that each reads on its own from its first.

Source. CyberJobs.cc Research, Remote and On-Site Cybersecurity Jobs, live data.

Figure 3

Where on-site security roles are, by country

In which countries are security roles worked from an office or a site?

CountryOn-site rolesShare of on-site roles
United States
289
64.2%
India
14
3.1%
United Kingdom
13
2.9%
Israel
7
1.6%
Singapore
5
1.1%
Australia
4
0.9%
Ireland
4
0.9%
Canada
3
0.7%
Kazakhstan
3
0.7%
Spain
2
0.4%
Hungary
2
0.4%
Italy
2
0.4%
Japan
2
0.4%
China
1
0.2%
Denmark
1
0.2%
Estonia
1
0.2%
France
1
0.2%
South Korea
1
0.2%
Lithuania
1
0.2%
Mexico
1
0.2%
Malaysia
1
0.2%
Netherlands
1
0.2%
Philippines
1
0.2%
Poland
1
0.2%
Portugal
1
0.2%
Romania
1
0.2%
Tรผrkiye
1
0.2%
Taiwan
1
0.2%
Vietnam
1
0.2%
Not stated
86
19.1%

Sample. 450 on-site or hybrid security roles open at the end of 14 Nov 2026, by the country their location names.

Read from the location text the posting publishes. A role open at offices in two countries counts once in each, so shares can add up to more than 100%.

A city's country is taken from the location itself (the country or US state beside it, the country code a board puts before it, or the one country its list names). Two capital letters after a city are read as a US state. A city named alone ('Paris') is listed with no country.

Source. CyberJobs.cc Research, Remote and On-Site Cybersecurity Jobs, live data.

Figure 4

Cities with on-site security roles

Which cities have the most security roles worked from an office?

City or metro areaCountryOn-site rolesNaming only this city
San Francisco Bay AreaUnited States
135
125
New York CityUnited States
58
49
Seattle areaUnited States
25
17
FairfaxUnited States
18
0
IrvineUnited States
18
0
BostonUnited States
16
16
AustinUnited States
10
6
LondonNot stated
9
7
Washington, D.C.United States
9
7
LondonUnited Kingdom
8
8
Los AngelesUnited States
8
8
Tel AvivIsrael
7
7
HubNot stated
7
0
ArlingtonUnited States
6
6
MetzingenNot stated
6
0
RiederichNot stated
6
0
Mexico CityNot stated
5
5
ParisNot stated
5
5
SingaporeSingapore
5
5
StockholmNot stated
5
5
BerlinNot stated
5
1
BengaluruIndia
4
4
Sรฃo PauloNot stated
4
4
BangaloreNot stated
4
3
DurhamUnited States
4
2

Sample. 436 of the 450 on-site security roles open at the end of 14 Nov 2026 name a city; the 25 cities named most.

A role that may be worked from any of several offices counts once in each city, so 'Naming only this city' counts the roles tied to that city alone.

Cities of one metropolitan area are merged: Sunnyvale, Burlingame, Santa Clara and San Francisco count as the San Francisco Bay Area; Redmond and Bellevue as the Seattle area; Brooklyn as New York City.

Source. CyberJobs.cc Research, Remote and On-Site Cybersecurity Jobs, live data.

Figure 5

What seats on-site security roles are

Which security roles have to be worked from an office or a site: SOC seats, hardware labs, first jobs or management?

Seat, read from the titleOn-site rolesShare of on-site roles
Other engineering, analysis and research seats312
69.3%
Leadership and management (lead, manager, director, CISO)75
16.7%
Early-career seats (interns, juniors, graduates)27
6.0%
Client-facing consulting and field engineering18
4.0%
Device, embedded and hardware security (labs and plants)9
2.0%
Security operations center (SOC) seats5
1.1%
Cleared seats (a security clearance named in the title)4
0.9%

Sample. 450 on-site or hybrid security roles open at the end of 14 Nov 2026.

Each role counts once, in the first group its title falls in, in this order: a security clearance named in the title, a security operations center seat (not a SOC 1 or SOC 2 audit), device, embedded and hardware security, an early-career seat, leadership and management, client-facing consulting and field engineering.

Early-career and leadership seats are read with the board's one level vocabulary, the same words as the entry-level report and the salary pages.

Source. CyberJobs.cc Research, Remote and On-Site Cybersecurity Jobs, live data.

Figure 6

Advertised pay of on-site and remote roles, within each specialty

Do on-site and hybrid security roles advertise more than remote roles of the same specialty?

SpecialtyOn-site median a yearRemote median a yearOn-site against remote
Security Engineering
$210,000
$205,675+2.1%
Governance, Risk & Compliance (GRC)
$163,750
$164,000-0.2%
Security Leadership
$252,500
$230,000+9.8%
Application & Product Security
$246,338
$198,888+23.9%
Security Operations & Incident Response
$161,250
$175,025-7.9%
Security Architecture & Consulting
$177,500
$198,625-10.6%
Identity & Access Management
$208,050
$187,500+11.0%
Cloud Security
$181,500
$205,000-11.5%
Penetration Testing & Red Team
$239,200
$195,000+22.7%
Threat Intelligence & Security Research
$95,000
$176,000-46.0%

Sample. Security roles open at the end of 14 Nov 2026 that publish pay, in the specialties with on-site roles.

Medians need at least 3 roles publishing pay on each side; the comparison is made within each specialty so the mix of work is not read as a premium, exactly as the pay premiums report compares on-site with remote work.

Roles that publish no pay in US dollars are not in the medians.

Source. CyberJobs.cc Research, Remote and On-Site Cybersecurity Jobs, live data.

Figure 7

On-site roles over the window, like for like

Are on-site security roles growing or shrinking against remote ones?

Work arrangementOpen on 11 Nov 2026Open on 14 Nov 2026Change
On-site or hybridSmall sample00
n/a
RemoteSmall sample00
n/a
Not statedSmall sample00
n/a
All rolesSmall sample00
n/a

Sample. Security roles open at the start of 11 Nov 2026 and at the end of 14 Nov 2026 at the employers tracked throughout; new listings over the whole window.

Open counts compare only employers tracked before the window opened, so an employer added during it does not read as growth.

New listings: roles first seen in the window at an employer already tracked before that week (an employer's first week is its back catalogue).

No row with any open roles at the start is a small sample: the rows differ so much that each reads on its own from its first.

This site first read employers' boards on 11 Nov 2026, during the first day of this window, so no employer was tracked at its start and no change can be stated yet.

Source. CyberJobs.cc Research, Remote and On-Site Cybersecurity Jobs, live data.

For employers, recruiters and researchers

Buy the data behind this report

The figures above are a summary. Behind them are records we collect ourselves, every day:

  • 3,462 roles tracked, each with its history

    Every role on 696 job boards, read since 11 Nov 2026 (every hour since 11 Nov 2026): its pay and place, and the first and last day it was open.

  • 3,347 apply clicks in 4 days

    Which security roles people actually apply to, by specialty, pay and where the role is open. It happens on this site, so nobody else can count it.

  • fit checks of members against open roles

    How the people looking for security jobs here measure up against real postings, and what they lack when they fall short: years, a tool, a certification, a clearance.

What you can buy

  • The records

    The rows behind any figure, with their history, not only the totals.

  • A regular feed

    The same figures every week or month, as files.

  • A custom cut or benchmark

    Your countries, specialties or certifications, or your own company against the market.

Hiring for security and want to reach the people behind this data? (you make the hire).

Method and definitions

The public job boards of the employers this site tracks (Greenhouse, Ashby, Lever, Workday, SmartRecruiters and the other systems they post on), read every hour, keeping the postings whose title and description read as security work. Every figure is computed by one database query over the window shown, the same query for the live report and for every edition. Each figure states its sample beneath it.

Coverage
The employers whose public job boards CyberJobs.cc reads in full every hour, from 11 Nov 2026. Each figure states how many were read.
Open role
A role listed by a given day and still on its employer's board that day.
Work arrangement
Read from a posting's title, location and workplace field: remote, on-site or hybrid (hybrid counts with on-site, as it needs a presence), or not stated.
Advertised pay
The pay a posting publishes, on one scale: a year's pay in US dollars (the middle of a stated range; an hourly rate counts as 2,080 hours, a monthly one as 12 months). Pay in another currency is kept in that currency and left out of these medians. Counted once per distinct figure, as the job board counts it. Typical pay is the span from the 25th percentile of range midpoints to the 90th percentile of range tops, every figure taken as a full-time year (an hourly rate times 2,080 hours), stated from 3 distinct figures.
Specialty
Each role is classified from its title and description into one of the 10 security specialties this site tracks (Security Operations & Incident Response, Security Engineering, Cloud Security, Application & Product Security, Identity & Access Management, Penetration Testing & Red Team, Threat Intelligence & Security Research, Governance, Risk & Compliance (GRC), Security Architecture & Consulting, Security Leadership). Every specialty links to its own page.
Window
Live: the last 28 complete days, in UTC. Edition: one calendar month, in UTC.

What this data cannot tell you

  • Employers that hire without a public job board, or post only on LinkedIn or through recruiters, are not counted; government agencies and most staffing firms are not read.
  • A listing is not a hire. Some employers keep a role open for months, and some post one listing per city or country.
  • Many postings state no arrangement in their listing fields and say it only in the description, so both shares are floors.

How the job feeds are read and roles are classified: site methodology. How fresh, complete and consistent the data is, checked every day: data quality and coverage.

Editions

The live report covers the last 28 complete days and changes every day. Each complete month is also published as an edition, frozen two days after the month ends, so a figure you cite from an edition never moves.

  • Live data (this page)Last 28 complete days, recomputed daily

Cite and reuse

Free to quote, chart and republish under CC BY 4.0 (creativecommons.org/licenses/by/4.0) with a link to this page. Live figures change daily: cite a monthly edition for numbers that will read the same later, or keep the access date.

Citation

CyberJobs.cc (2026). Remote and On-Site Cybersecurity Jobs (live data, 11 Nov 2026 to 14 Nov 2026). https://cyberjobs.cc/research/remote-and-on-site-cybersecurity-jobs (accessed 15 Nov 2026)

BibTeX

@misc{cyberjobscc_remote_and_on_site_cybersecurity_jobs_live,
  author = {{CyberJobs.cc}},
  title = {Remote and On-Site Cybersecurity Jobs (live data, 11 Nov 2026 to 14 Nov 2026)},
  year = {2026},
  howpublished = {\url{https://cyberjobs.cc/research/remote-and-on-site-cybersecurity-jobs}},
  note = {Accessed 15 Nov 2026},
}
Data: every figure as CSV (one line per value) and JSON, sent to your work email.Pay and open-roles data

More research

All 50 research reports