Key findings
- 2
Of the 9 specialties with enough open roles to read on their own, Application & Product Security was the most open to the world (8% of its roles open worldwide) and Identity & Access Management the least (0.7%).
- 3
Residents of the United States (1,542), the United Kingdom (372) and Canada (307) could apply to the most open security roles; a resident of a country no posting names could apply only to the 94 roles open worldwide.
- 4
The United States was named by 49.0% of the roles open only in listed countries, and 88.6% of those roles named a single country.
- 5
Every one of the 7 security roles open worldwide except listed countries excluded the same 18 countries, among them Afghanistan, Belarus and DR Congo.
- 6
Of the cities, the San Francisco Bay Area had both the most open security roles (12.7% of them) and the highest advertised median ($231k/yr); Los Angeles roles advertised the lowest ($145k/yr).
Figure 1
Who may apply, by security specialty
Which security specialties are open to applicants anywhere in the world?
| Specialty | Open worldwide | Except listed | Only listed countries |
|---|---|---|---|
| All specialties | 3.1% | 0.2% | 96.7% |
| Application & Product Security | 8.0% | 0.0% | 92.0% |
| Security Engineering | 4.2% | 0.0% | 95.8% |
| Security Leadership | 2.8% | 0.0% | 97.2% |
| Penetration Testing & Red Team | 2.6% | 2.1% | 95.3% |
| Cloud Security | 2.5% | 0.0% | 97.5% |
| Security Architecture & Consulting | 2.1% | 0.0% | 97.9% |
| Security Operations & Incident Response | 1.8% | 0.3% | 98.0% |
| Governance, Risk & Compliance (GRC) | 1.6% | 0.3% | 98.1% |
| Identity & Access Management | 0.7% | 0.0% | 99.3% |
| Threat Intelligence & Security ResearchSmall sample | 0.0% | 1.2% | 98.8% |
Sample. 3,041 security roles open at the end of 14 Nov 2026.
The rule is read from each posting's location text, then, where that names no country, from what the posting's own description states, and where both are silent from what the employer states about where it hires.
Open worldwide: open to remote applicants from any country. Only listed countries: open to people in the countries the posting names, which is how a role based in one country (on site, hybrid, or remote within it) reads.
Rows with fewer than 98.5 open roles are marked as a small sample and not ranked: below that the average of the rows weighs more than a row's own open roles (the weight fitted on the rows' own counts).
Source. CyberJobs.cc Research, Where Cybersecurity Jobs Are Open, live data.
Figure 2
Open roles a resident of each country can apply to
Residents of which countries can apply to the most security roles, and what do those roles pay?
Sample. 3,041 security roles open at the end of 14 Nov 2026; the 40 countries with the most, of 170 named by some posting.
A country's count is the roles open worldwide (including roles that state no rule, as on the job board), plus roles whose list names it, plus roles whose exclusion list does not.
Median pay is a year's pay in US dollars, over the roles open to that country whose postings state pay (at least 3 distinct pay figures).
Source. CyberJobs.cc Research, Where Cybersecurity Jobs Are Open, live data.
Figure 3
Countries named by roles open only in listed countries
When a security role is open only in some countries, which countries does it name?
| Country | Limited roles naming it | Share of limited roles |
|---|---|---|
| United States | 1,441 | 49.0% |
| United Kingdom | 271 | 9.2% |
| Canada | 206 | 7.0% |
| India | 196 | 6.7% |
| France | 176 | 6.0% |
| Spain | 153 | 5.2% |
| Poland | 135 | 4.6% |
| Germany | 134 | 4.6% |
| Israel | 123 | 4.2% |
| Portugal | 104 | 3.5% |
| Ireland | 92 | 3.1% |
| Czechia | 82 | 2.8% |
| Belgium | 75 | 2.6% |
| Mexico | 74 | 2.5% |
| Netherlands | 74 | 2.5% |
| Romania | 73 | 2.5% |
| Sweden | 71 | 2.4% |
| Greece | 66 | 2.2% |
| Slovakia | 65 | 2.2% |
| Italy | 63 | 2.1% |
| Switzerland | 59 | 2.0% |
| Austria | 57 | 1.9% |
| Bulgaria | 55 | 1.9% |
| Brazil | 55 | 1.9% |
| Denmark | 55 | 1.9% |
Sample. 2,940 security roles open on 14 Nov 2026 that only accept applicants in listed countries; 2,604 of them name a single country.
Open only there: roles whose list names this country alone.
Source. CyberJobs.cc Research, Where Cybersecurity Jobs Are Open, live data.
Figure 4
Countries excluded by roles open elsewhere
Which countries are left out of security roles that are otherwise open worldwide?
| Country | Roles excluding it | Share of such roles |
|---|---|---|
| Afghanistan | 7 | 100.0% |
| Belarus | 7 | 100.0% |
| DR Congo | 7 | 100.0% |
| China | 7 | 100.0% |
| Cuba | 7 | 100.0% |
| Iraq | 7 | 100.0% |
| Iran | 7 | 100.0% |
| North Korea | 7 | 100.0% |
| Libya | 7 | 100.0% |
| Myanmar | 7 | 100.0% |
| Macau | 7 | 100.0% |
| Russia | 7 | 100.0% |
| Sudan | 7 | 100.0% |
| Somalia | 7 | 100.0% |
| South Sudan | 7 | 100.0% |
| Syria | 7 | 100.0% |
| Venezuela | 7 | 100.0% |
| Yemen | 7 | 100.0% |
| Burundi | 4 | 57.1% |
| Central African Republic | 4 | 57.1% |
Sample. 7 security roles open on 14 Nov 2026 that are open worldwide except listed countries.
An exclusion list usually follows sanctions and export-control rules: the countries where an employer cannot hire or contract, not where it has no security work.
Source. CyberJobs.cc Research, Where Cybersecurity Jobs Are Open, live data.
Figure 5
How many countries a role open only in listed countries accepts
Is a security role open only in listed countries open in one country or across a region?
| Countries accepted | Roles | Share |
|---|---|---|
| One country | 2,604 | 88.6% |
| 2 to 5 countries | 245 | 8.3% |
| 6 to 20 countries | 41 | 1.4% |
| 21 countries or more | 50 | 1.7% |
Sample. 2,940 security roles open on 14 Nov 2026 that only accept applicants in listed countries.
Source. CyberJobs.cc Research, Where Cybersecurity Jobs Are Open, live data.
Figure 6
Security jobs by city and region
Which cities and regions have the most open security roles, what do they advertise, and how many of them are remote?
| City or region | Open roles | Share of open roles | Median a year | Remote |
|---|---|---|---|---|
| Europe | 739 | 24.3% | $174,000 | 40.3% |
| San Francisco Bay Area | 387 | 12.7% | $231,000 | 7.0% |
| California | 369 | 12.1% | $212,000 | 10.0% |
| New York | 202 | 6.6% | $208,000 | 12.9% |
| Seattle | 137 | 4.5% | $212,000 | 12.4% |
| Washington DC area | 101 | 3.3% | $154,000 | 6.9% |
| Tel Aviv | 96 | 3.2% | n/a | 0.0% |
| London | 94 | 3.1% | n/a | 19.1% |
| Bengaluru | 93 | 3.1% | n/a | 7.5% |
| Los Angeles | 73 | 2.4% | $145,000 | 4.1% |
| Texas | 71 | 2.3% | $180,000 | 22.5% |
| Virginia | 62 | 2.0% | $113,000 | 11.3% |
| Austin | 53 | 1.7% | $187,000 | 18.9% |
| Boston | 45 | 1.5% | $185,000 | 20.0% |
| Singapore | 34 | 1.1% | n/a | 14.7% |
| Pune | 32 | 1.1% | n/a | 12.5% |
| Denver | 19 | 0.6% | $204,000 | 31.6% |
| Prague | 19 | 0.6% | n/a | 5.3% |
Sample. 3,041 security roles open at the end of 14 Nov 2026; a role counts in every city or region its location names.
A city is the area its page covers: the city itself, its suburbs and the towns its employers list (the San Francisco Bay Area takes in San Jose and Palo Alto, for one); a region (a US state, Europe) takes in every place of it. A role in San Jose counts in the Bay Area and in California. A remote role counts in a place only when its location still names it.
Median pay needs at least 3 roles publishing pay. Outside the US it is read only from postings that name no US place: a posting listed for several offices states one range, almost always the US one. Remote is a share of the roles whose posting says whether the work is remote.
Source. CyberJobs.cc Research, Where Cybersecurity Jobs Are Open, live data.
For employers, recruiters and researchers
Buy the data behind this report
The figures above are a summary. Behind them are records we collect ourselves, every day:
3,462 roles tracked, each with its history
Every role on 696 job boards, read since 11 Nov 2026 (every hour since 11 Nov 2026): its pay and place, and the first and last day it was open.
3,347 apply clicks in 4 days
Which security roles people actually apply to, by specialty, pay and where the role is open. It happens on this site, so nobody else can count it.
fit checks of members against open roles
How the people looking for security jobs here measure up against real postings, and what they lack when they fall short: years, a tool, a certification, a clearance.
What you can buy
The records
The rows behind any figure, with their history, not only the totals.
A regular feed
The same figures every week or month, as files.
A custom cut or benchmark
Your countries, specialties or certifications, or your own company against the market.
Hiring for security and want to reach the people behind this data? (you make the hire).
Method and definitions
The public job boards of the employers this site tracks (Greenhouse, Ashby, Lever, Workday, SmartRecruiters and the other systems they post on), read every hour, keeping the postings whose title and description read as security work. Every figure is computed by one database query over the window shown, the same query for the live report and for every edition. Each figure states its sample beneath it.
- Coverage
- The employers whose public job boards CyberJobs.cc reads in full every hour, from 11 Nov 2026. Each figure states how many were read.
- Security role
- A posting whose title and description read as security work (engineering, operations, cloud, application, identity, offensive, intelligence, governance, architecture or leadership). Physical security, guarding, loss prevention, securities and chip-design "SoC" jobs are left out, as are sales, marketing and recruiting seats at security companies; a vendor's customer-facing engineers count as architecture and consulting.
- Open role
- A role listed by a given day and still on its employer's board that day.
- Where it is open
- Read from each posting's location text and, where that names no country, from what the posting's own description states: open to applicants anywhere (remote worldwide), worldwide except listed countries, only listed countries (the country or countries the role is based in or hires from), or no rule stated.
- Open to a country
- A role is open to residents of a country if it is open worldwide, its list names the country, or its exclusion list does not. A role based in one city counts for that city's country.
- Advertised pay
- The pay a posting publishes, on one scale: a year's pay in US dollars (the middle of a stated range; an hourly rate counts as 2,080 hours, a monthly one as 12 months). Pay in another currency is kept in that currency and left out of these medians. Counted once per distinct figure, as the job board counts it. Typical pay is the span from the 25th percentile of range midpoints to the 90th percentile of range tops, every figure taken as a full-time year (an hourly rate times 2,080 hours), stated from 3 distinct figures.
- Window
- Live: the last 28 complete days, in UTC. Edition: one calendar month, in UTC.
What this data cannot tell you
- Employers that hire without a public job board, or post only on LinkedIn or through recruiters, are not counted; government agencies and most staffing firms are not read.
- A listing is not a hire. Some employers keep a role open for months, and some post one listing per city or country.
- A posting can name a country for the office and still hire elsewhere, or say "remote" and mean within one country; the rule is read as the posting states it.
- Visa sponsorship is not read here: a role open to a country's residents may not sponsor a work permit for anyone else.
How the job feeds are read and roles are classified: site methodology. How fresh, complete and consistent the data is, checked every day: data quality and coverage.
Editions
The live report covers the last 28 complete days and changes every day. Each complete month is also published as an edition, frozen two days after the month ends, so a figure you cite from an edition never moves.
- Live data (this page)Last 28 complete days, recomputed daily
Cite and reuse
Free to quote, chart and republish under CC BY 4.0 (creativecommons.org/licenses/by/4.0) with a link to this page. Live figures change daily: cite a monthly edition for numbers that will read the same later, or keep the access date.
Citation
CyberJobs.cc (2026). Where Cybersecurity Jobs Are Open (live data, 11 Nov 2026 to 14 Nov 2026). https://cyberjobs.cc/research/where-cybersecurity-jobs-are-open (accessed 15 Nov 2026)
BibTeX
@misc{cyberjobscc_where_cybersecurity_jobs_are_open_live,
author = {{CyberJobs.cc}},
title = {Where Cybersecurity Jobs Are Open (live data, 11 Nov 2026 to 14 Nov 2026)},
year = {2026},
howpublished = {\url{https://cyberjobs.cc/research/where-cybersecurity-jobs-are-open}},
note = {Accessed 15 Nov 2026},
}More research
- Cybersecurity Salary TransparencyHow many security job postings publish pay, which specialties and employers publish it most, and how is advertised pay spread?Read the report
- What Raises Cybersecurity PayWithin the same specialty, how much more do roles with a senior title, a named certification, a clearance or remote work advertise?Read the report
- Remote and On-Site Cybersecurity JobsHow many security roles are remote, how many on-site or hybrid, where are the on-site ones and do they pay differently?Read the report
- How Cybersecurity Jobs Are PaidDo security postings quote a salary or an hourly rate, in which currency, as a range or a single figure, on what contract, with what bonus?Read the report
- Cybersecurity Employers ComparedWhich employers list the most security roles, what do they pay, who may apply to them and what do they hire for?Read the report
- How Concentrated Cybersecurity Hiring IsIs security hiring spread across many employers or held by a few, overall and within each specialty?Read the report
- The Cybersecurity Salary ReportWhat do security roles pay, by specialty and by employer?Read the report