Cybersecurity Salary by State 2026: Complete US Pay Guide

Quick facts

National median

$124,910

BLS OEWS May 2024

Top-paying state

Washington

$148,090 mean annual

Lowest-paying state

Mississippi

~$95,800 mean annual

90th percentile

$186,420

Top earners nationally

10th percentile

$69,660

Entry-level floor

Job growth 2024-34

+29%

Much faster than average

Jump to section

Top 10 states Cost-adjusted Lowest-paying Top metros By experience By role Negotiation tips FAQ

Where you live determines how much cybersecurity work pays you — sometimes by more than $50,000 per year for the same role. Washington's $148,090 average crushes Mississippi's $95,800 by 55%. But raw salary numbers lie. California's massive $140,730 mean becomes just $99,107 in real purchasing power once cost of living factors in. This guide gives you both numbers — nominal and adjusted — across all 50 states, verified against BLS OEWS May 2024 data, with realistic salary ranges by experience level and role.

Top 10 highest-paying states

Mean annual salaries for information security analysts (BLS occupation code 15-1212). Washington leads at $148,090, driven by Microsoft, Amazon, and Boeing concentration. Iowa surprises at #2 with $143,960 — exceptional for a state with below-average cost of living.

Rank	State	Mean Annual	Jobs	COL Index
#1	Washington	$148,090	6,890	116
#2	Iowa	$143,960	1,140	90
#3	New York	$140,770	11,520	126
#4	California	$140,730	20,420	142
#5	New Hampshire	$139,050	550	108
#6	Delaware	$134,560	780	104
#7	Maryland	$134,130	8,770	110
#8	Virginia	$133,520	21,930	103
#9	DC	$132,470	3,890	143
#10	New Jersey	$131,340	8,260	115

COL Index: 100 = national average. Above 100 = more expensive than US average. Source: BLS OEWS May 2024 + BEA Regional Price Parities 2023.

Washington — $148,090

Tech giants (Amazon, Microsoft) + Boeing defense

Iowa — $143,960

Hidden gem — high pay, low cost of living

New York — $140,770

Finance + media + government concentration

California — $140,730

Largest market, but cost wipes out premium

New Hampshire — $139,050

Boston commuter belt, lower state tax

Cost-adjusted top 10 (real purchasing power)

Nominal salary tells you the offer letter number. Cost-adjusted salary tells you what that number actually buys. When you factor in housing, food, healthcare, and taxes, the ranking changes dramatically. Iowa beats California — by a lot. Texas with no state income tax beats much of the West Coast in real take-home value.

Rank	State	Adjusted	Nominal
#1	Iowa	$159,956	$143,960
#2	New Mexico	$140,940	$130,070
#3	Alabama	$140,310	$118,800
#4	Texas	$132,758	$119,480
#5	Tennessee	$132,540	$112,659
#6	Virginia	$129,631	$133,520
#7	Washington	$127,664	$148,090
#8	Georgia	$125,889	$113,300
#9	Maryland	$121,936	$134,130
#10	Ohio	$120,857	$108,772

The hidden truth: California ranks #4 nominal but drops to #15 cost-adjusted. The $40K+ premium evaporates against housing costs in the Bay Area (median home: $1.4M) and Los Angeles ($870K). Meanwhile, Iowa's $143,960 nominal buys a $400K home in suburban Des Moines — same square footage as a $1.4M Bay Area house.

Lowest-paying states (but watch the COL)

Mississippi, Montana, and Arkansas rank lowest by raw salary numbers. But these states also have very low costs of living — sometimes 25–30% below the national average. Don't dismiss them outright if you're targeting remote work with a low-cost lifestyle.

Rank	State	Mean Annual	Why It's Low
#1	Mississippi	~$95,800	Limited tech sector, mostly government roles
#2	Montana	~$96,200	Small market, few tech employers
#3	Arkansas	~$96,800	Walmart HQ provides some demand
#4	Vermont	~$97,400	Tiny market, mostly remote roles
#5	Oklahoma	~$98,100	Energy sector security only
#6	Indiana	~$98,600	Manufacturing-focused, limited specialization
#7	West Virginia	~$99,200	Few tech employers
#8	South Dakota	~$100,100	Some financial sector demand
#9	Kentucky	~$101,400	Government + some financial roles
#10	Louisiana	~$102,800	Energy + healthcare security

Note: These are local market salaries. Remote work from these states for higher-paying employers can completely change the math.

Top 10 highest-paying metros

Within a state, metro area matters enormously. Silicon Valley ($175,520) exceeds the rest of California by $35K. DC metro ($148,900) crushes rural Virginia. If you're location-flexible within a state, target the right metro.

San Jose-Sunnyvale-Santa Clara, CA

Silicon Valley — highest in nation

$175,520

San Francisco-Oakland-Berkeley, CA

Tech giants + fintech

$168,300

Seattle-Tacoma-Bellevue, WA

Amazon, Microsoft headquarters

$155,600

New York-Newark-Jersey City, NY-NJ

Wall Street + media + Fed Reserve

$152,100

Washington-Arlington-Alexandria, DC-VA-MD

Federal cyber + Pentagon contractors

$148,900

Los Angeles-Long Beach-Anaheim, CA

Entertainment + aerospace

$142,400

Boston-Cambridge-Newton, MA

Universities + biotech + Defense

$139,800

Austin-Round Rock-Georgetown, TX

Tech boom + Dell + Oracle

$136,200

Denver-Aurora-Lakewood, CO

Tech hub + Lockheed + telecom

$133,500

#10

Chicago-Naperville-Elgin, IL

Finance + consulting concentration

$130,100

Salary by experience level

Experience drives more salary growth than any other factor in cybersecurity. Entry to principal typically multiplies pay by 3–4x. State location adds 30–50% on top of that progression.

Entry-Level (0–2 years)

$70,000 – $95,000

SOC Tier 1, Junior Security Analyst, Security Specialist roles. Most candidates need Security+ + hands-on lab work to land first role.

Top 5 states for this level

Washington $85,000 – $110,000

California $80,000 – $105,000

Virginia $78,000 – $100,000

Texas $70,000 – $92,000

Florida $65,000 – $88,000

Mid-Level (3–5 years)

$95,000 – $130,000

SOC Tier 2/3, Security Engineer, Vulnerability Analyst, Penetration Tester. Most candidates hold Security+ plus specialized cert (CySA+, eJPT, OSCP, AWS Security).

Top 5 states for this level

Washington $120,000 – $155,000

California $118,000 – $150,000

New York $115,000 – $148,000

Virginia $110,000 – $140,000

Texas $95,000 – $125,000

Senior (6–10 years)

$130,000 – $170,000

Senior Engineer, Security Architect (junior), Threat Hunter, Lead Pentester. CISSP, OSCP, or specialized senior cert typically required.

Top 5 states for this level

Washington $155,000 – $200,000

California $160,000 – $210,000

New York $150,000 – $195,000

Maryland $148,000 – $185,000

Texas $130,000 – $165,000

Principal/Lead (10+ years)

$170,000 – $250,000+

Principal Security Engineer, Security Architect, CISO direct reports. CISSP, CISM, or executive cert + significant leadership experience.

Top 5 states for this level

California (Bay Area) $220,000 – $400,000+

Washington $200,000 – $340,000

New York $190,000 – $320,000

Massachusetts $180,000 – $290,000

Virginia/DC $175,000 – $260,000

Salary by role type

Within cybersecurity, role specialization shifts pay significantly. SOC Tier 1 sits at the bottom; Security Architects and CISOs sit at the top. Cloud security commands premiums across all levels in 2026.

Role	Entry	Senior
SOC Analyst (Tier 1) Entry point for most cybersecurity careers	$60,000–$78,000	$95,000–$130,000
SOC Analyst (Tier 2/3) Investigates escalated incidents	$85,000–$110,000	$120,000–$165,000
Information Security Analyst BLS official category, broad role	$70,000–$95,000	$130,000–$180,000
Penetration Tester OSCP/eJPT-track, offensive security	$75,000–$100,000	$140,000–$200,000
Security Engineer Builds and maintains security infrastructure	$85,000–$115,000	$150,000–$200,000
Cloud Security Engineer AWS/Azure/GCP specialization premium	$95,000–$125,000	$160,000–$220,000
Security Architect Senior role, designs security frameworks	$120,000–$150,000	$180,000–$260,000
CISO / Security Director Executive role, requires extensive experience	$160,000–$200,000	$250,000–$500,000+

6 salary negotiation tactics that actually work

State and metro data is the starting point. These tactics use that data to get you 15–25% more than the initial offer.

Research the metro, not just the state

Pay varies enormously within a state. Austin pays $35K+ more than rural Texas. Silicon Valley exceeds the rest of California by $40K+. Look up your specific metro area's BLS data, not just the state average. The metro number is what hiring managers benchmark against.

Use remote work as leverage (carefully)

Roughly 70% of cybersecurity roles offer remote/hybrid options in 2026. Companies pay regional rates — but you can sometimes negotiate the higher metro rate while living in a cheaper area. The 'work from Texas, paid like SF' play works at smaller companies; FAANG-tier employers usually adjust pay to your location.

Add the certification premium

Security+ alone adds 10–15% to base offers. CISSP adds 20–25%. Cloud certs (AWS Security Specialty, Azure SC-100) add 15–20%. Specialized certs (OSCP, GIAC) add 25–30% in offensive/IR roles. Document your certs in offer negotiations — they're hard salary anchors employers respect.

Compare total comp, not just salary

FAANG-tier employers structure compensation as base + equity + bonus. Total comp at Amazon Seattle ($200K+) for senior engineer often beats base salary at smaller companies in higher-paying states. When comparing offers, demand the full breakdown: base, signing bonus, RSU vesting schedule, annual bonus target, retirement match.

Leverage clearance for federal contractor roles

Active security clearance adds $15,000–$30,000+ to baseline salary in DC/Virginia/Maryland markets. Top Secret with SCI access commands the highest premium. If you have or can obtain clearance, your earning ceiling in those metros jumps dramatically. Federal contractors will pay more than commercial employers for cleared candidates.

Time your move strategically

Salaries typically increase 8–15% with each job change in cybersecurity. Staying 4+ years at one employer often costs $20K–$40K in foregone earnings vs strategic moves every 18–24 months. Loyalty rarely beats market timing — but don't job-hop aggressively until you have 2–3 years of solid experience first.

The honest verdict

Cybersecurity pays well in every state — even the lowest-paying state (Mississippi at ~$95,800) crushes the national median for all occupations ($49,500) by nearly 2x. But the real winners aren't always in the headline-grabbing markets.

The hidden gem is Iowa: $143,960 mean salary with the cost of living 10% below the national average. That's $159,956 in adjusted purchasing power — beating California, Washington, and New York after housing costs settle. The same pattern applies to New Mexico, Alabama, Texas, and Tennessee. Smart cybersecurity professionals optimize for adjusted income, not nominal.

My recommendation: Don't move to the Bay Area for a $40K nominal raise that becomes negative purchasing power. Target your top 3 metros by cost-adjusted income, lock in remote work where possible, and negotiate the metro-level rate even if you don't live in the metro. That's how cybersecurity professionals build wealth, not just income.

Frequently asked questions

The most common questions about cybersecurity salaries by state.

01 Which US state pays cybersecurity professionals the most in 2026?

Washington pays the highest mean annual salary for information security analysts at $148,090, according to BLS OEWS May 2024 data. The state's salary premium reflects concentration of tech giants (Amazon, Microsoft) and Boeing's defense contracts. Iowa surprisingly ranks second at $143,960, offering exceptional value when adjusted for the state's below-average cost of living. New York ($140,770), California ($140,730), and New Hampshire ($139,050) round out the top five highest-paying states for cybersecurity roles.

02 What is the cybersecurity salary in California vs Texas?

California pays significantly more in nominal terms: $140,730 mean annual salary vs Texas at $119,480, according to BLS 2024 data. However, when adjusted for cost of living, the gap narrows substantially. California's COL index is 142 (42% above national average), while Texas sits at 93 (7% below). Adjusted for purchasing power: California's $140,730 is worth roughly $99,107 nationally, while Texas's $119,480 is worth $128,473. In real purchasing power, Texas often beats California for cybersecurity professionals. Texas also has no state income tax, which adds another 8–10% in take-home pay.

03 How much does an entry-level cybersecurity analyst make by state?

Entry-level (0–2 years) cybersecurity salaries range from $60,000 in low-cost states to $110,000 in major tech hubs. Top entry-level markets: Washington ($85,000–$110,000), California Bay Area ($90,000–$115,000), Virginia/DC area ($78,000–$100,000), Massachusetts ($75,000–$98,000), and Texas ($70,000–$92,000). Lower-cost states like Iowa, Tennessee, or Alabama typically start entry-level around $60,000–$75,000, but cost-adjusted purchasing power often matches higher-paying states.

04 What states have the most cybersecurity jobs?

By absolute job count, Virginia leads with 21,930 employed information security analysts (BLS 2024) due to DC metro federal cyber concentration. California follows at 20,420 jobs (tech sector dominance), then Texas at 14,870, New York at 11,520, and Maryland at 8,770. CyberSeek tracks 470,000+ open cybersecurity positions nationally, concentrated in Virginia, California, Texas, Maryland, and Florida — same top 5 states. For job seekers, these markets offer the highest probability of landing roles, especially for those without existing networks.

05 Do cybersecurity salaries adjust for cost of living when adjusted?

Yes, dramatically. Iowa's $143,960 nominal salary becomes $159,956 when adjusted for its 90 cost-of-living index — making it the highest-value state for cybersecurity work. California's $140,730 drops to $99,107 in real purchasing power due to its 142 COL index. Top cost-adjusted states for cybersecurity: Iowa ($159,956), New Mexico ($140,940), Alabama ($140,310), Texas ($132,758), and Tennessee ($132,540). Pure-nominal salary rankings often mislead — focus on cost-adjusted figures when comparing job offers across states.

06 How does remote work affect cybersecurity salaries by state?

Remote work creates location-arbitrage opportunities, but with employer caveats. Roughly 70% of cybersecurity roles offer remote or hybrid options in 2026. Smaller companies often pay the same regardless of employee location — meaning a Bay Area-equivalent salary while living in Texas creates real wealth. Major employers (Amazon, Microsoft, Meta) adjust pay to local cost of living: same role pays 15–25% less in Austin than in Seattle. The strategy: target remote roles at smaller/mid-size companies if optimizing for cost-adjusted income, or accept location-based pay at FAANG-tier employers for higher total compensation.

07 What's the difference between BLS data and Glassdoor/Levels.fyi numbers?

BLS measures information security analyst median wages from employer surveys — official, comprehensive, but lags 12–18 months. Glassdoor and Levels.fyi capture self-reported data from current employees, often heavily skewed toward higher-paying tech companies and tech hubs. Result: Glassdoor consistently reports higher salaries than BLS. For accurate market reality: use BLS as baseline floor, then add 15–25% for tech-heavy metros to estimate competitive offers. Levels.fyi data is most accurate for big tech FAANG-tier roles specifically.

08 Which cybersecurity certification increases salary the most?

CISSP delivers the largest verified salary premium — typically 20–25% above non-certified peers, though it requires 5 years of experience to obtain. For specialized salary boosts: AWS Security Specialty adds 15–20% in cloud-focused roles, OSCP adds 25–30% in penetration testing positions, GIAC certifications add 20–25% in incident response and digital forensics roles. Security+ provides 10–15% premium and is often the entry-level hiring filter. The compounding effect matters: candidates holding Security+ plus a specialized cert (cloud, offensive, IR) typically earn 30–40% more than uncertified peers in equivalent roles.

Free tool