Security Engineer salaries and job demand
Last updated
Security Engineer roles typically advertise around US$177,000 a year. Here's the current salary range, hiring demand, and the skills employers ask for most.
What do Security Engineer roles pay in 2026?
As of November 2026, the typical advertised salary is US$177,000 a year, with most postings between US$149,547 and US$206,000.
| 25th percentile | US$149,547 |
|---|---|
| Median (50th percentile) | US$177,000 |
| 75th percentile | US$206,000 |
Advertised base salary, from 275 job postings with pay data, as of November 2026.
Disclosed base wage (H-1B/LCA)
Employers disclose a median base wage of US$140,000 on H-1B/LCA visa filings for this role, between US$106,995 and US$172,827, against the US$177,000 median advertised above.
| 25th percentile | US$106,995 |
|---|---|
| Median (50th percentile) | US$140,000 |
| 75th percentile | US$172,827 |
Disclosed base wage, from 5,091 H-1B/LCA filings, U.S. DOL OFLC, as of Q4 2025.
| Period | 25th percentile | Median | 75th percentile |
|---|---|---|---|
| Q3 2024 | US$112,000 | US$145,000 | US$175,000 |
| Q4 2024 | US$118,693 | US$144,971 | US$177,872 |
| Q1 2025 | US$113,381 | US$144,800 | US$173,056 |
| Q2 2025 | US$98,983 | US$126,747 | US$164,212 |
| Q3 2025 | US$112,346 | US$145,887 | US$180,000 |
| Q4 2025 | US$120,286 | US$149,712 | US$181,907 |
How strong is hiring demand for Security Engineer roles in 2026?
Tarmac tracked 1,272 postings in October 2026, the most recent month we tracked from start to finish.
We're not publishing a month-by-month series yet: the number of postings Tarmac collects each month is still growing, so a month-on-month change would measure our coverage rather than the job market.
Skills employers ask for
- cloud-security2843
- aws1750
- python1604
- vulnerability-management1483
- siem-soar1400
- threat-modeling1322
- network-security1245
- identity-access-management1175
- kubernetes945
- azure875
- ci-cd-pipelines871
- sast-dast-tooling855
Postings for this role that named each skill, out of the postings we could parse. Bars run to 2843, the most-asked skill here.
Which skills to study first
These skills matter most for this role, scored together on how often employers ask for them, what they pay, and how often people pass them when they practise.
| Skill | Market demand | Median pay | Pass rate | Leverage | Practice |
|---|---|---|---|---|---|
| Python | 48% of postings50,058 postings | £75,000 | Not enough data yet | — | Practice |
| AWS | 36% of postings37,858 postings | £80,000+7% | Not enough data yet | — | Practice |
| CI-CD Pipelines | 19% of postings20,214 postings | £75,000 | Not enough data yet | — | Practice |
| Kubernetes | 16% of postings16,986 postings | £80,000+7% | Not enough data yet | — | Practice |
| Microsoft Azure | 11% of postings11,145 postings | £75,000 | Not enough data yet | — | Practice |
| Cloud Security | 6% of postings6,713 postings | A$118,750+8% | Not enough data yet | — | Practice |
| Network Security | 4% of postings4,575 postings | A$110,000 | Not enough data yet | — | Practice |
| Identity & Access Management | 4% of postings4,376 postings | A$128,749+17% | Not enough data yet | — | Practice |
| SIEM & SOAR | 3% of postings3,418 postings | £72,250−4% | Not enough data yet | — | Practice |
| Vulnerability Management | 3% of postings3,096 postings | A$150,000+36% | Not enough data yet | — | Practice |
| Threat Modeling | 2% of postings2,307 postings | £79,550+6% | Not enough data yet | — | Practice |
| SAST & DAST Tooling | 2% of postings1,977 postings | £80,000+7% | Not enough data yet | — | Practice |
Pass rate is the share of correct answers among people who practised that skill on Tarmac, a self-selected group rather than every developer, so read it as relative difficulty, not a universal stat. It comes from how people actually scored, not what anyone claimed, and a dash in that column means not enough people have practised the skill here yet. Leverage scores demand, pay, and difficulty together (out of 100); a higher score means a skill is both worth learning and worth your study time.
Pay by level and city in United States
These figures cover United States postings only, as of November 2026. The median above pools every level and every city; these split it, so you can read the rung you are actually applying for.
| Level | 25th | Median | 75th | Postings with pay |
|---|---|---|---|---|
| Mid-level | US$129,800 | US$157,500 | US$180,850 | 44 |
| Senior | US$157,500 | US$180,000 | US$206,000 | 195 |
| Staff+ | US$229,125 | US$252,000 | US$257,250 | 16 |
| City | 25th | Median | 75th | Postings with pay |
|---|---|---|---|---|
| San Francisco, CA | US$177,250 | US$216,300 | US$250,000 | 43 |
| Seattle, WA | US$180,850 | US$202,550 | US$213,750 | 39 |
| Washington, DC | US$142,500 | US$175,000 | US$190,000 | 35 |
| Chicago, IL | US$125,000 | US$154,600 | US$175,000 | 29 |
| New York, NY | US$135,800 | US$198,750 | US$216,169 | 28 |
| Los Angeles, CA | US$117,500 | US$145,000 | US$173,250 | 27 |
Advertised base salary. A level or city with too few postings quoting pay is left out rather than shown on a thin sample.
What it takes
The entry bar and required skills employers ask for. Most job ads reach us as a short summary rather than the full posting, and the percentages below count only the ones we have in full — so they skew toward employers who publish a fuller description. Every bar runs 0 to 60% of those postings: solid is required, outlined is preferred, dashed is the posting's own words.
Australia
Required
Preferred
In the postings’ own words
Required
Preferred
In the postings’ own words
- Years asked up 2 years over the last 5 weeks.
- Cloud Security required in only 28% of postings, was 70% 5 weeks ago.
- AWS required in only 8% of postings, was 44% 5 weeks ago.
- Python required in only 4% of postings, was 33% 5 weeks ago.
Required
Preferred
In the postings’ own words
Not enough postings state a years-of-experience figure for Mid-level yet.
United States
Required
Preferred
In the postings’ own words
Required
Preferred
In the postings’ own words
Not enough postings state a years-of-experience figure for Mid-level yet.
United Kingdom
Required
Preferred
In the postings’ own words
Required
Not enough postings state a years-of-experience figure for Senior and Staff / lead yet.
Practice interview questions
Vacancy and salary data includes Adzuna.
Disclosed wage data from the U.S. Department of Labor, OFLC.
Prep for these roles
Paste a job ad and practise a quiz built from what it asks, scored on the spot. One a day with no account, two a month on a free one.
Free plan · no card · sign in with an emailed code