Security Engineer salaries and job demand
Last updated
Security Engineer roles typically advertise around US$171,600 a year. Here's the current salary range, hiring demand, and the skills employers ask for most.
What do Security Engineer roles pay in 2026?
As of September 2026, the typical advertised salary is US$171,600 a year, with most postings between US$142,500 and US$206,000.
| 25th percentile | US$142,500 |
|---|---|
| Median (50th percentile) | US$171,600 |
| 75th percentile | US$206,000 |
Advertised base salary, from 196 job postings with pay data, as of September 2026.
Disclosed base wage (H-1B/LCA)
Employers disclose a median base wage of US$140,719 on H-1B/LCA visa filings for this role, between US$108,098 and US$173,139, against the US$171,600 median advertised above.
| 25th percentile | US$108,098 |
|---|---|
| Median (50th percentile) | US$140,719 |
| 75th percentile | US$173,139 |
Disclosed base wage, from 6,125 H-1B/LCA filings, U.S. DOL OFLC, as of Q4 2025.
| Period | 25th percentile | Median | 75th percentile |
|---|---|---|---|
| Q3 2024 | US$112,000 | US$145,000 | US$175,000 |
| Q4 2024 | US$118,693 | US$144,971 | US$177,872 |
| Q1 2025 | US$113,381 | US$144,800 | US$173,056 |
| Q2 2025 | US$98,983 | US$126,747 | US$164,212 |
| Q3 2025 | US$112,346 | US$145,887 | US$180,000 |
| Q4 2025 | US$120,286 | US$149,712 | US$181,907 |
How strong is hiring demand for Security Engineer roles in 2026?
Tarmac tracked 955 postings in August 2026, the most recent month we tracked from start to finish.
We need 3 complete months of tracking before we publish a month-by-month series. Months we only partly covered are left out rather than shown as low demand.
Skills employers ask for
- aws1977
- python1600
- cloud-security1210
- http-apis1022
- kubernetes998
- vulnerability-management982
- devops957
- ci-cd-pipelines830
- siem-soar828
- threat-modeling824
- terraform639
- network-security609
Postings for this role that named each skill, out of the postings we could parse. Bars run to 1977, the most-asked skill here.
Which skills to study first
These skills matter most for this role, scored together on how often employers ask for them, what they pay, and how often people pass them when they practise.
| Skill | Market demand | Median pay | Pass rate | Leverage | Practice |
|---|---|---|---|---|---|
| Python | 57% of postings33,051 postings | US$170,000+28% | Not enough data yet | — | Practice |
| AWS | 46% of postings26,710 postings | US$171,289+29% | Not enough data yet | — | Practice |
| HTTP & APIs | 26% of postings14,969 postings | US$168,620+27% | Not enough data yet | — | Practice |
| CI-CD Pipelines | 21% of postings12,173 postings | £77,500+11% | Not enough data yet | — | Practice |
| Kubernetes | 19% of postings10,856 postings | US$170,000+28% | Not enough data yet | — | Practice |
| DevOps | 16% of postings9,056 postings | £80,000+14% | Not enough data yet | — | Practice |
| Terraform | 12% of postings6,970 postings | £80,000+14% | Not enough data yet | — | Practice |
| Cloud Security | 4% of postings2,086 postings | US$177,000+33% | Not enough data yet | — | — |
| Network Security | 3% of postings1,663 postings | A$136,250 | Not enough data yet | — | — |
| SIEM & SOAR | 3% of postings1,661 postings | £65,000−7% | Not enough data yet | — | Practice |
| Vulnerability Management | 3% of postings1,504 postings | US$159,500+20% | Not enough data yet | — | Practice |
| Threat Modeling | 2% of postings1,145 postings | US$172,050+29% | Not enough data yet | — | Practice |
Pass rate is the share of correct answers among people who practised that skill on Tarmac, a self-selected group rather than every developer, so read it as relative difficulty, not a universal stat. It comes from how people actually scored, not what anyone claimed, and a dash in that column means not enough people have practised the skill here yet. Leverage scores demand, pay, and difficulty together (out of 100); a higher score means a skill is both worth learning and worth your study time.
Pay by level and city in United States
These figures cover United States postings only, as of September 2026. The median above pools every level and every city; these split it, so you can read the rung you are actually applying for.
| Level | 25th | Median | 75th | Postings with pay |
|---|---|---|---|---|
| Mid-level | US$129,020 | US$151,000 | US$179,500 | 27 |
| Senior | US$142,500 | US$171,600 | US$205,000 | 131 |
| Staff+ | US$182,500 | US$220,500 | US$252,000 | 27 |
| City | 25th | Median | 75th | Postings with pay |
|---|---|---|---|---|
| San Francisco, CA | US$172,950 | US$206,125 | US$251,500 | 38 |
| Chicago, IL | US$127,363 | US$157,900 | US$181,875 | 26 |
| Seattle, WA | US$185,875 | US$209,500 | US$240,000 | 21 |
| New York, NY | US$158,475 | US$195,000 | US$214,250 | 19 |
| Washington, DC | US$142,500 | US$157,500 | US$177,025 | 18 |
| Los Angeles, CA | US$117,500 | US$145,000 | US$157,500 | 17 |
Advertised base salary. A level or city with too few postings quoting pay is left out rather than shown on a thin sample.
What it takes
The entry bar and required skills employers ask for. Most job ads reach us as a short summary rather than the full posting, and the percentages below count only the ones we have in full — so they skew toward employers who publish a fuller description. Every bar runs 0 to 60% of those postings: solid is required, outlined is preferred, dashed is the posting's own words.
Australia
Required
Preferred
In the postings’ own words
Required
Preferred
In the postings’ own words
Required
Preferred
In the postings’ own words
Required
Preferred
In the postings’ own words
United States
Required
In the postings’ own words
Required
Preferred
In the postings’ own words
- Years asked up 5 years over the last 4 weeks.
Required
Preferred
In the postings’ own words
- AWS now required in 46% of postings, was 14% 4 weeks ago.
- Google Cloud Platform now required in 36% of postings, was 14% 4 weeks ago.
United Kingdom
Required
Preferred
In the postings’ own words
Required
Preferred
In the postings’ own words
Practice interview questions
Jobs data powered by Adzuna.
Disclosed wage data from the U.S. Department of Labor, OFLC.
Prep for these roles
Paste a job ad and practise a quiz built from what it asks, scored on the spot. One a day with no account, two a month on a free one.
Free plan · no card · sign in with an emailed code