Community Cyber Salaries 2026
Real cybersecurity pay, self-reported by 157 professionals. Every figure is USD base salary, shown as a median with 25th-75th percentiles and its sample size. Unlike our scraped Salary Report, this data comes straight from people in the field.
By role
| Role | Median base (USD) | 25th-75th | Submissions |
|---|---|---|---|
| Security Engineering | $100k | $60k - $150k | 34 |
| Identity & Access | $100k | $70k - $119k | 13 |
| GRC | $80k | $51k - $130k | 48 |
| Cloud Security | $70k | $12k - $80k | 9 |
| Detection Engineering | $58k | $18k - $90k | 12 |
| Offensive Security | $51k | $27k - $100k | 13 |
| Threat Intelligence | $50k | $45k - $70k | 11 |
| AppSec | $45k | $14k - $70k | 9 |
| AI Security | $20k | $12k - $500k | 7 |
By country
| Country | Median base (USD) | 25th-75th | Submissions |
|---|---|---|---|
| United States | $120k | $100k - $150k | 50 |
| United Kingdom | $113k | $95k - $151k | 6 |
| Canada | $66k | $53k - $110k | 11 |
| Remote / Global | $65k | $30k - $100k | 16 |
| Spain | $58k | $38k - $75k | 5 |
| Germany | $50k | $45k - $65k | 11 |
| India | $12k | $9k - $60k | 35 |
By seniority
| Level | Median base (USD) | 25th-75th | Submissions |
|---|---|---|---|
| Lead+ | $200k | $151k - $475k | 11 |
| Senior | $101k | $73k - $145k | 30 |
| Mid | $70k | $20k - $130k | 45 |
| Entry | $51k | $20k - $95k | 71 |
Frequently asked questions
What is the median self-reported cybersecurity salary in 2026?
Based on 157 self-reported submissions to InfoSec Job Board, the median base salary is $70k (25th-75th percentile $32k-$126k), in USD. These figures are self-reported by professionals, not scraped from postings.
Which cybersecurity role reports the highest pay?
Security Engineering reports the highest median at $100k (from 34 self-reported submissions).
How is this salary data collected and kept clean?
Cyber professionals submit their pay anonymously (no login, no name). Numbers are shown as medians and 25th-75th percentiles, only where a cut has enough submissions, so a few outliers cannot move the published figure. Submissions are deduplicated and reviewed.
Self-reported and unverified. Figures are correlation, not guarantees. See also the scraped Cybersecurity Salary Report.