Cybersecurity Analyst Salary Guide: How Much Can You Make?

As everything from our social lives to valuable company data moves online, cybersecurity has quickly become a critical priority for just about every organization. 

If you have an interest in cybersecurity, this is good news. There are more cybersecurity positions than there are qualified people to fill them—nearly half a million open jobs in the US alone [1]. Plus, skilled cybersecurity analysts often get well-compensated for their work. 

Read on to learn about how much you can expect to earn as a cybersecurity analyst, as well as factors that can influence your salary. If you’re interested in starting or advancing your career in this field, we’ll discuss some ways you may be able to boost your earning potential.

What is an average cybersecurity analyst salary?

The median salary for cybersecurity analysts in the US in 2022 was $112,000, according to the US Bureau of Labor Statistics (BLS) [2]. That equates to $53.85 per hour.

Cybersecurity analyst salaries by experience

In many industries, your level of experience can have a big impact on how much you earn. This is especially true in cybersecurity, where hands-on experience is just as valuable, if not more important, to companies than education. Here’s a look at how your average base salary (US) might change as you gain more experience, based on salary data from job site PayScale [4].

Cybersecurity salaries by industry

As more and more companies turn to technology and connectivity to run their business, it becomes increasingly important to keep a company’s data—and reputation—secure. While cybersecurity analysts can find work across a range of industries, some tend to pay more than others. If you’re looking to find a job in a higher-paying industry, these are some of the top:

• Information

• Finance and insurance

• Computer systems design

Cybersecurity salaries by location

Where you live and work can also have an impact on your salary. Average salaries in big cities like Washington, DC, New York, and Alabama have average salaries higher than the national average, according to PayScale [3]. 

As you’re considering your options, remember that it’s often more expensive to live in these larger cities, which can offset the higher salary. Many companies offer location-based salaries—salaries that take into account your location rather than the company location—for remote workers.

Cybersecurity salaries by certification

Around six in 10 cybersecurity positions request a relevant certification [3]. Earning a cybersecurity certification can be another way to boost your earning potential. The IT Skills and Salary Survey from Global Knowledge found that these security certifications are associated with the highest salaries [4]. Keep in mind that factors like skills, role, and tenure also impact these numbers.

• Certified Information Security Manager (CISM): $162,347

• Certified in Risk and Information Systems Control: $167,145

• Certified Information Systems Security Professional (CISSP): $158,190

• Certified Information Systems Auditor (CISA): $142,336

Salaries for other job titles

As you progress in your cybersecurity career, you may find opportunities to move into more advanced or specialized roles. Here are a few average US base salaries of other cybersecurity roles, according to Glassdoor, as of September 2023.

• Information security analyst: $91,805

• Penetration tester: $93,973

• Digital forensic examiner: $75,543

• IT auditor: $78,933

• Security systems administrator: $76,380

• Security engineer: $106,141

• Security architect: $149,722

• Ethical hacker: $109,495

Read more: 10 Cybersecurity Jobs: Entry-Level and Beyond

Job outlook for cybersecurity analysts

Cyberattacks continue to grow in frequency and complexity, and companies will need professionals with the latest cybersecurity skills to ensure data privacy, integrity, and availability.

The BLS projects that employment for cybersecurity analysts will expand by 32 percent between 2022 and 2032, much faster than the national average of all other ocupations [2].

How to increase your cybersecurity salary

Now that you have a better idea of what you could expect to earn as a cybersecurity analyst, let’s take a look at how you might boost your salary, even for an entry-level analyst position.

 1. Learn new cybersecurity skills.

Companies are looking for professionals with robust cybersecurity skills to face evolving threats. Job listing site PayScale reports that the following skills are associated with the biggest salary increases for cybersecurity analysts [3]:

• Vendor management: Understand how companies can protect themselves from attacks originating from third-party vendor networks

• Intelligence analysis: Research and collect data on potential threats and bad actors to inform better security practices

• Network support: Know best practices for keeping a company’s computer network working and secure

• Identity management: Ensure that only authorized users have access to data and technological resources

• Splunk: Operate this security information and event management system (SIEM) to respond to threats

2. Earn a certification or degree.

While you don’t necessarily need a degree to get a job in cybersecurity, earning one could help you find more job opportunities and get a bump in your salary. According to Zippia, 61 percent of cybersecurity analysts have a bachelor's and 19 percent hold an associate degree [5]. 

Read more about degree options and alternatives for cybersecurity, including what types of majors to consider.

If you already have a degree or IT experience, earning a cybersecurity certification could translate into a bigger paycheck. Some companies will cover the cost of certification courses and exams, offsetting how much you’d need to spend out of pocket. Be sure to speak with your manager about options if you’re interested in pursuing a certification.

Explore your options: 10 Popular Cybersecurity Certifications

3. Negotiate your job offer.

Next time you’re offered a cybersecurity job, ask if the amount offered is open to negotiation. A survey by Glassdoor found that nearly one in three employees accepted their most recent salary offer without negotiating [6]. While there’s no guarantee that you’ll get what you ask for, you could be walking away from a bigger salary by not trying. 

For more tips on how to negotiate your salary, check out this post on the Coursera blog.

Get started in cybersecurity

If you’re interested in starting a career in cybersecurity, consider the Google Cybersecurity Professional Certificate on Coursera. This program is designed ​​to help individuals with no previous experience find their first job in the field of cybersecurity, all at their own pace. The courses cover topics such as security models, tools that are used to access and address threats, networks, and more.