How much can you earn working in cyber security in the UK?
The answer depends on what you do, how experienced you are, and where you work. A junior penetration tester, a security operations analyst, and an experienced cloud security engineer can all have very different salaries.
According to the UK government's Cyber Security Skills in the UK Labour Market 2026 report, the median advertised salary for core cyber security roles was £58,050 in 2025.
That's a useful benchmark, although it isn't necessarily what you'll earn in your first role.
In this guide, we'll explore what different cyber security jobs pay in 2026, how salaries vary across the UK, and which skills and certifications can help you prepare for your next career move.
All salary figures are annual gross pay, before tax and other deductions, unless stated otherwise.
Cyber Security Salaries in the UK by Role
Cyber security covers several specialisms, from monitoring threats and investigating incidents to penetration testing and securing cloud infrastructure.
Each requires a different set of skills and responsibilities.
The following figures come from Barclay Simpson's 2026 Cyber Security Salary Guide, which provides base salary benchmarks for UK security professionals.
What Do These Cyber Security Jobs Involve?
Here's a quick explanation of the roles in the table.
Penetration testers simulate authorised cyber attacks to identify security weaknesses before malicious attackers exploit them. Their work can involve testing applications, networks, and systems, then explaining the vulnerabilities and how to fix them.
Security operations analysts, often called SOC analysts, monitor security alerts and investigate suspicious activity. They help determine which events require further attention and support the organisation's response.
Incident response analysts investigate security incidents, determine how attackers gained access, and help contain and recover from compromises.
Threat detection engineers develop and improve the rules and monitoring systems used to identify potentially malicious activity.
Information security engineers implement and maintain security controls that protect an organisation's infrastructure and systems.
Cloud security engineers protect applications, services, and data hosted on cloud platforms such as AWS and Microsoft Azure.
Enterprise security architects design security approaches across an organisation's technology environment, ensuring that systems and controls meet broader security requirements.
These salary differences partly reflect the technical expertise and responsibilities involved.
An experienced incident responder or security architect may be expected to make decisions that affect critical systems, while an entry-level practitioner is more likely to work under supervision.
When comparing salaries, always read the actual responsibilities behind the job title.
What Is the Average Cyber Security Salary in the UK?
The government's 2026 labour market report provides two useful national figures for core cyber security job adverts in 2025:
These figures describe jobs where cyber security is a primary function.
The median is the middle salary in a distribution: half the advertised salaries fall below it and half above it.
The mean is the arithmetic average. It's calculated by adding the salary values together and dividing by the number of values. Higher-paying jobs can pull the mean upwards.
For understanding a typical salary, the median is often a more useful starting point.
However, there's another important limitation.
The government found that 76% of core cyber security job adverts did not disclose salary information. Its advertised-salary analysis was based on 8,481 job postings from January to December 2025.
The figures therefore describe the vacancies with available salary data, rather than every cyber security job or the earnings of everyone already employed in the field.
That's why looking at salaries for your specific role and experience level is more useful than relying on one national average.
What Can You Expect to Earn in Your First Cyber Security Job?
If you're new to cyber security, the £58,050 national median shouldn't be your starting salary expectation.
It includes advertised positions across different levels of seniority and specialisation.
For a more specific example, Barclay Simpson's 2026 guide puts entry-level penetration tester salaries at £25,000–£35,000 UK-wide, rising to £30,000–£40,000 in Central London.
The government's latest published graduate outcomes data provides another reference point.
Cyber security and computer science graduates entering cyber security professional roles had a median salary band of £30,001–£35,000, measured around 15 months after graduation.
What If You're Changing Careers?
You may already have experience that's relevant to cyber security.
For example, someone who has administered Windows systems, supported cloud applications, or troubleshot network problems may bring useful technical knowledge into a security role.
The important part is showing employers how that experience applies to the work they need done.
If you're applying for a junior SOC analyst position, demonstrate that you can examine security logs, investigate alerts, and explain your findings.
If you're interested in penetration testing, show how you identify vulnerabilities, test them safely, and document remediation advice.
Look for junior vacancies, apprenticeships, and related IT roles that offer opportunities to develop your security responsibilities.
Your first position should also give you an environment where you can learn, receive feedback, and build practical experience.
Does Location Affect Cyber Security Salaries in the UK?
Yes. Salaries can differ substantially between UK regions, although the location isn't the only factor.
The government's 2026 report provides the following average advertised salaries for selected regions, using job postings from 2025.
London has the highest regional average in the report.
However, these figures combine different job types and experience levels. A higher regional average doesn't mean the same position will always pay more in London.
For example, a specialised remote role outside London may offer more than an entry-level position based in the capital.
When comparing opportunities, consider the salary alongside commuting costs, housing expenses, working arrangements, and any location-based pay policies.
For remote positions, check whether the employer offers the same salary across the UK or adjusts it according to where you live.
Are Cyber Security Salaries Increasing in 2026?
The picture is mixed. The government's 2026 report found that the median advertised salary for core cyber security roles increased by approximately 6% between 2024 and 2025, from £55,000 to £58,050.
However, higher advertised salaries don't necessarily mean employees are receiving equivalent pay rises.
According to Harvey Nash's 2026 Tech Talent & Salary Report, 77% of surveyed UK cyber security professionals did not receive a pay rise in the previous year.
The report surveyed 1,394 UK technology professionals, with cyber security respondents forming a subgroup.
These findings measure different things. The government data concerns advertised vacancies, while the Harvey Nash survey reflects reported pay experiences among employed professionals.
For anyone already working in cyber security, it's worth understanding how your employer handles salary reviews and promotions.
Ask which responsibilities are associated with the next level, what performance is required, and when progression decisions are made.
Taking on more complex work, developing specialised skills, and documenting your contributions can strengthen those conversations, even though they don't guarantee a salary increase.
Which Cyber Security Skills Can Help You Progress?
As you gain experience, your salary potential will increasingly depend on the responsibilities you're qualified to handle.
For example, a SOC analyst who can independently investigate complex incidents may be able to pursue more advanced security operations positions.
A penetration tester who can manage broader engagements and communicate findings effectively may be ready for positions with greater responsibility.
Choose your next learning goal around the work you want to do, then build evidence that you can perform it.
Start With Cyber Security Fundamentals
If you're new to the field, TryHackMe's Cyber Security 101 path introduces essential knowledge across networking, operating systems, and cyber security.
It's a useful foundation before specialising in offensive or defensive security.
The SEC1 certification provides a way to assess your foundational knowledge and practical abilities.
Develop SOC and Incident Response Skills
If you're interested in defensive security, SOC Level 1 helps you develop skills in monitoring, alert triage, and security investigations.
The Security Analyst Level 1 (SAL1) certification assesses relevant analyst skills through a practical SOC environment.
As your experience grows, SOC Level 2 provides opportunities to study more advanced investigations, threat hunting, and detection engineering.
You can then consider SAL2 to assess more advanced security analysis skills.
If you want to specialise in investigating compromised Windows systems, explore the Windows Incident Response & Forensics path.
Build Penetration Testing Skills
If offensive security interests you, start with the Jr Penetration Tester path.
It provides practical training in identifying and exploiting vulnerabilities in authorised environments, including web applications and networks.
The PT1 certification assesses junior penetration testing abilities.
For practitioners ready for more demanding engagements, PT2 provides a more advanced practical assessment that includes professional reporting.
Certifications can help demonstrate your abilities, but employers will still consider your experience, technical judgment, communication, and fit for the role.
There is no guaranteed salary increase attached to completing a particular certification. The value comes from being able to demonstrate skills that match the responsibilities employers are hiring for.
What Else Should You Consider Beyond Base Salary?
When comparing cyber security jobs, the base salary is only one part of the offer.
Base salary is your fixed contractual pay before tax. Total compensation may also include allowances, bonuses, pension contributions, and other benefits.
For example, a SOC position might offer a £45,000 base salary plus a £5,000 annual shift allowance.
That could bring annual cash pay to £50,000 while the allowance applies. However, the amount might change if you stop working the qualifying shifts.
Ask about on-call payments, employer pension contributions, paid leave, and whether training or certification costs are covered.
Also check the working pattern. An attractive salary may come with rotating shifts or regular out-of-hours incident response responsibilities.
What About Cyber Security Contracting?
Experienced cyber security professionals may also consider contract work.
Contractors are commonly paid a day rate rather than a fixed annual salary.
For example, £500 per day across 200 billable days would generate £100,000 in gross billings.
That doesn't mean the contractor takes home £100,000.
The amount excludes applicable taxes, expenses, fees, and other costs. Contractors may also need to account for unpaid leave, gaps between engagements, insurance, and pension contributions.
When comparing a permanent job with a contract, use realistic billable days and consider the full financial arrangement.
The higher headline figure may come with additional responsibilities and less predictable income.
How to Use Salary Data to Plan Your Next Career Move
Salary research is most useful when it helps you make a decision about your next role.
Start by choosing a specific position you're interested in.
Find several recent UK vacancies with salary information and compare their responsibilities. Pay attention to the tools, skills, and experience employers repeatedly request.
Then identify one or two areas where you need more practical experience.
For example, you could investigate a simulated security incident and write a report, build and test a detection rule, or complete a penetration testing lab and document your findings.
Use that work to demonstrate your reasoning during interviews.
When discussing an opportunity, don't be afraid to ask about compensation early:
Could you share the base salary range for this role, any shift or on-call allowances, and what progression typically looks like?
Understanding the expectations and available opportunities will help you assess whether the position is a good next step.
Start Building Skills for Your Next Cyber Security Role
Cyber security offers several career routes, each with different responsibilities and earning potential.
Whether you're preparing for your first security position or aiming for a more specialised role, practical experience gives you something valuable to bring to your next application.
With TryHackMe, you can explore the work involved in different security roles and develop the technical skills employers look for.
If you want to build a career in defensive security, start with SOC Level 1. If you're interested in offensive security, explore Jr Penetration Tester.
Ayomide Joseph A.
