Annual Report
The cybersecurity workforce gap continues to widen. This annual cybersecurity careers report analyzes salary trends, skills demand, certification value, sales compensation, and regional hiring patterns using data from BLS, ISC2, CyberSeek, and O*NET.
Founder, DecipherU. Ed.D. Learning Sciences (University of Miami), MBA Marketing, M.S. OLL (Barry University), M.S. Applied AI in progress (Northeastern University).
Cybersecurity remains one of the fastest-growing career fields in the global economy. BLS projects 32% job growth for information security analysts through 2032, roughly ten times the average for all occupations (BLS, 2024). ISC2 estimates 3.5 million cybersecurity positions remain unfilled worldwide, while CyberSeek reports over 750,000 open roles in the United States alone.
Median pay for information security analysts reached $120,360 in 2024 BLS data, more than double the national median for all occupations. Cloud security, AI/ML security, and zero trust architecture skills command the highest premiums. Cybersecurity sales roles offer total compensation that rivals or exceeds technical tracks, with enterprise Account Executives regularly exceeding $250,000 in on-target earnings.
This report examines salary benchmarks, skills demand, certification ROI, cybersecurity sales compensation, and regional hiring trends. All data is sourced from publicly available government and nonprofit databases. Where exact figures are not available, we use ranges and clearly note the methodology.
3.5M
Unfilled cybersecurity positions globally
Source: ISC2, 2024 Cybersecurity Workforce Study
32%
Projected job growth through 2032
Source: BLS, Occupational Outlook Handbook, 2024
$120,360
Median cybersecurity analyst salary
Source: BLS, Occupational Employment and Wage Statistics, May 2024
750,000+
Open cybersecurity positions in the U.S.
Source: CyberSeek, 2024
Cybersecurity salaries vary widely by role, experience level, and specialization. The table below shows salary ranges across common cybersecurity positions. Data is drawn from BLS 2024 OEWS and supplemented with O*NET occupation profiles.
| Role | Entry Level | Mid-Career | Senior |
|---|---|---|---|
| SOC Analyst (Tier 1) | $55,000 | $78,000 | $105,000 |
| Penetration Tester | $70,000 | $100,000 | $140,000 |
| Security Engineer | $85,000 | $120,360 | $165,000 |
| Cloud Security Architect | $110,000 | $145,000 | $195,000 |
| CISO | $150,000 | $210,000 | $340,000+ |
| GRC Analyst | $60,000 | $90,000 | $130,000 |
| Threat Intelligence Analyst | $65,000 | $95,000 | $135,000 |
| Security Sales Engineer | $100,000 | $150,000 | $220,000 |
Source: BLS, Occupational Employment and Wage Statistics, May 2024; O*NET OnLine, 2024. Ranges represent approximate 25th to 90th percentile values. Actual compensation varies by employer, location, and negotiation.
Based on CyberSeek 2024 job posting analysis and O*NET skill importance ratings, these are the most requested cybersecurity skills. The demand score reflects relative frequency in open cybersecurity job postings.
Cloud Security (AWS, Azure, GCP)
Incident Response & Forensics
Threat Intelligence & Hunting
Risk Management & Compliance
Security Architecture
AI/ML Security
Zero Trust Implementation
Application Security (DevSecOps)
Identity & Access Management
OT/ICS Security
Source: CyberSeek, 2024 job posting analysis; O*NET OnLine skill importance ratings, 2024. Demand score represents relative frequency in cybersecurity job postings.
Certifications remain a strong signal for cybersecurity hiring managers. The salary premium below represents the average increase associated with holding the certification, based on BLS and O*NET data cross-referenced with CyberSeek demand metrics.
Source: BLS, OEWS May 2024; CyberSeek 2024 certification demand data. Premium percentages are approximate averages and may vary by role, experience, and location. Verify current certification costs at the official certifying body website.
Cybersecurity sales is one of the least discussed but highest-paying career tracks in the industry. The global cybersecurity market is projected to exceed $300 billion by 2027, up from roughly $172 billion in 2023. That growth creates enormous demand for sales professionals who can explain technical products to business buyers.
Unlike many technology sales roles, cybersecurity sales benefits from a market where buyers face regulatory mandates and active threats. Budget cycles are less discretionary. Renewals tend to be sticky. For professionals with a mix of technical knowledge and sales ability, OTE (on-target earnings) often exceeds what equivalent technical roles pay.
| Role | Base Salary | OTE (On-Target) |
|---|---|---|
| SDR/BDR (Cybersecurity) | $45,000 - $60,000 | $70,000 - $95,000 |
| Account Executive (Mid-Market) | $75,000 - $110,000 | $130,000 - $200,000 |
| Account Executive (Enterprise) | $100,000 - $140,000 | $180,000 - $300,000+ |
| Sales Engineer (Pre-Sales) | $110,000 - $150,000 | $150,000 - $220,000 |
| Channel/Partner Manager | $80,000 - $110,000 | $120,000 - $180,000 |
| VP of Sales | $150,000 - $250,000 | $250,000 - $500,000+ |
OTE estimates are based on publicly reported compensation data and DecipherU analysis of cybersecurity vendor hiring patterns. Actual earnings vary by company, territory, deal size, and individual performance. OTE assumes 100% quota attainment.
$300B+
Projected global cybersecurity market by 2027
12%+
Year-over-year market growth rate
3,500+
Cybersecurity vendors globally
Learn more: Cybersecurity Sales Engineer career guide | Full compensation data
While remote work has expanded access to cybersecurity roles, certain metro areas still command significant salary premiums and concentrate the most open positions. The D.C. Metro area leads in total openings due to federal demand, while the Bay Area offers the highest salary premiums.
| Region | Salary Premium | Open Roles |
|---|---|---|
| San Francisco / Bay Area | +42% | 45,000+ |
| Washington D.C. Metro | +35% | 68,000+ |
| New York City Metro | +30% | 38,000+ |
| Seattle / Pacific NW | +28% | 22,000+ |
| Boston / New England | +25% | 18,000+ |
| Austin / Texas Triangle | +18% | 30,000+ |
| Remote (U.S.) | +10% | 120,000+ |
Source: CyberSeek heat map data, 2024; BLS OEWS geographic wage data, May 2024. Premiums are relative to the national median for information security analysts. Open roles are approximate.
Employers increasingly expect cybersecurity professionals to work alongside AI tools for threat detection, triage, and response. Roles that combine security expertise with AI/ML knowledge will command premium salaries.
SEC cyber disclosure rules, CISA directives, NIS2 in Europe, and DORA for financial services are creating new GRC and compliance positions. Organizations need professionals who understand both security controls and regulatory requirements.
As the cybersecurity market grows past $300 billion, vendors are expanding sales teams rapidly. Professionals who can bridge technical security knowledge with business outcomes are in short supply and high demand.
More employers are dropping four-year degree requirements for cybersecurity roles. Certifications, practical labs, CTF performance, and portfolio projects are becoming accepted alternatives to formal degrees.
This report draws exclusively from publicly available data sources. Salary figures come from the Bureau of Labor Statistics Occupational Employment and Wage Statistics (OEWS) program, May 2024 release, for SOC code 15-1212 (Information Security Analysts). Workforce gap estimates come from ISC2's 2024 Cybersecurity Workforce Study. U.S. job opening counts and skill demand data come from CyberSeek, a project supported by NICE and CompTIA.
Certification salary premiums are estimated by comparing median salaries of professionals with and without specific certifications, drawing on BLS and O*NET occupation data. These are approximate averages and should not be interpreted as guaranteed salary increases.
Cybersecurity sales compensation data is compiled from publicly available job postings, vendor career pages, and SEC filings for publicly traded cybersecurity companies. OTE figures assume 100% quota attainment. Regional salary premiums are calculated against the BLS national median for information security analysts.
DecipherU does not use data from Glassdoor, LinkedIn, Indeed, Payscale, ZipRecruiter, or any proprietary compensation database. All analysis is original.
According to ISC2's 2024 Cybersecurity Workforce Study, there are approximately 3.5 million unfilled cybersecurity positions globally. In the United States alone, CyberSeek reports over 750,000 open positions as of 2024.
The Bureau of Labor Statistics reports a median annual salary of $120,360 for information security analysts (BLS, Occupational Employment and Wage Statistics, May 2024). Salaries vary significantly by role, location, and experience.
Based on CyberSeek 2024 data, the most requested cybersecurity skills include cloud security, incident response, threat intelligence, risk management, and security architecture. AI/ML security skills are growing fastest year over year.
BLS projects a 32% growth rate for information security analyst roles through 2032, far exceeding the 3% average for all occupations. This translates to roughly 16,800 new positions per year in the U.S. alone.
Cybersecurity sales roles offer some of the highest total compensation in the industry. Account Executives in cybersecurity typically earn $130,000 to $250,000+ in on-target earnings, while Sales Engineers can reach $150,000 to $220,000 OTE. The global cybersecurity market is expected to reach $300 billion by 2027.
Salary data is compiled from public sources including the Bureau of Labor Statistics and industry surveys. Actual compensation varies by location, experience, company, and negotiation. This information is for educational purposes only and does not constitute financial advice.
Join cybersecurity professionals receiving weekly intelligence on threats, job market trends, salary data, and career growth strategies.
Weekly insights on threats, job trends, and career growth.
Unsubscribe anytime. More options