Community Cyber Salaries 2026
Real cybersecurity pay, self-reported by 180 professionals. Every figure is USD base salary, shown as a median with 25th-75th percentiles and its sample size. Unlike our scraped Salary Report, this data comes straight from people in the field.
By role
| Role | Median base (USD) | 25th-75th | Submissions |
|---|---|---|---|
| Security Engineering | $100k | $60k - $145k | 40 |
| Identity & Access | $100k | $70k - $119k | 16 |
| GRC | $86k | $51k - $130k | 56 |
| Cloud Security | $62k | $12k - $80k | 10 |
| Detection Engineering | $58k | $18k - $90k | 12 |
| Threat Intelligence | $57k | $45k - $70k | 14 |
| Offensive Security | $51k | $27k - $100k | 13 |
| AppSec | $48k | $14k - $70k | 10 |
| AI Security | $20k | $12k - $500k | 7 |
By country
| Country | Median base (USD) | 25th-75th | Submissions |
|---|---|---|---|
| United States | $120k | $100k - $150k | 59 |
| United Kingdom | $110k | $101k - $151k | 7 |
| France | $92k | $92k - $100k | 5 |
| Canada | $66k | $53k - $110k | 11 |
| Remote / Global | $65k | $30k - $100k | 19 |
| Spain | $58k | $38k - $75k | 5 |
| Germany | $50k | $21k - $60k | 13 |
| India | $12k | $8k - $50k | 37 |
By seniority
| Level | Median base (USD) | 25th-75th | Submissions |
|---|---|---|---|
| Lead+ | $188k | $120k - $250k | 14 |
| Senior | $101k | $75k - $145k | 36 |
| Mid | $70k | $30k - $126k | 52 |
| Entry | $51k | $20k - $95k | 78 |
Frequently asked questions
What is the median self-reported cybersecurity salary in 2026?
Based on 180 self-reported submissions to InfoSec Job Board, the median base salary is $73k (25th-75th percentile $44k-$126k), in USD. These figures are self-reported by professionals, not scraped from postings.
Which cybersecurity role reports the highest pay?
Security Engineering reports the highest median at $100k (from 40 self-reported submissions).
How is this salary data collected and kept clean?
Cyber professionals submit their pay anonymously (no login, no name). Numbers are shown as medians and 25th-75th percentiles, only where a cut has enough submissions, so a few outliers cannot move the published figure. Submissions are deduplicated and reviewed.
Self-reported and unverified. Figures are correlation, not guarantees. See also the scraped Cybersecurity Salary Report.