Cynet-2020年网络安全行业薪酬调查报告（英文）-2020.8-44页_15mb

2020 Cybersecurity Salary Survey Summary

Core Content

The 2020 Cybersecurity Salary Survey collected data from 1,324 security professionals to provide insights into salary ranges and factors influencing compensation across five key cybersecurity roles: Security Analyst/Threat Intelligence Specialist, Penetration Tester, Network Security Engineer, Security Architect/Cloud Security Architect, and Security Director/Manager. The survey also analyzed the impact of various factors including geolocation, industry, organizational size, operational scope, experience, and academic qualifications on salaries.

Main Findings

Geolocation

• Security Analysts in North America (NAM) earn significantly higher salaries compared to those in EMEA and APAC.
  • NAM: >80% earn between $71K and $110K
  • EMEA: <35% earn between $71K and $110K
  • APAC: <21% earn between $71K and $110K
• Penetration Testers in NAM also show higher salary distributions.
• Security Directors/Managers have salary ranges influenced by geolocation, with higher compensation in NAM.

Industry

• Banking and Finance leads in salary range and distribution for both management and individual contributor roles.
• Healthcare and Industrial sectors show lower salary ranges for most roles.
• Retail and IT/Security Service Providers have moderate salary distributions.

Organizational Size

• Smaller organizations (1-50 employees) tend to offer lower salaries for most roles.
• Larger organizations (500-10,000+ employees) show a more varied salary distribution, with some roles seeing higher compensation.

Operational Scope

• Global and Regional operational scope influence salary, with more complex roles generally commanding higher pay.

Experience

• Experience has a variable impact on salary, with some roles showing that individuals with little experience can earn higher than those with more, indicating that quality can sometimes outweigh experience.
• For Security Analysts, those with 1-3 years of experience earn under $50K.
• For Penetration Testers, those with 1-3 years also earn under $50K.
• For Network Security Engineers, those with 1-3 years earn under $50K.
• For Security Architects, those with 1-3 years earn under $50K.
• For Security Directors/Managers, those with 1-3 years earn under $50K.

Academic Degree

• A degree in CS/engineering does not guarantee higher salaries; similar salary distributions are seen for both degree and non-degree holders.
• However, the presence of a degree can influence salary in some roles, particularly for Security Architects and Security Directors/Managers, where it appears to have a moderate impact.

Bonus Component

• Bonus is a common component in cybersecurity salaries, except for Security Analysts.
• Bonus sizes vary between 1% - 10% annually.
• Frequency of bonuses is typically periodic, with some roles showing higher variability.

Key Insights

• Geolocation significantly impacts salary, with NAM having the highest compensation.
• Pivoting from an IT position to cybersecurity leads to higher earnings.
• Degree does not consistently lead to higher pay.
• Bonus is a standard part of compensation for most roles.
• Women are underrepresented in cybersecurity roles, with the highest percentage in the Security Director/Manager position at 10%.
• Quality can sometimes be more important than experience in determining salary.

Summary

The survey provides actionable data for both individual contributors and decision-makers, highlighting the importance of geolocation, industry, and organizational factors in determining cybersecurity salaries. While experience and degrees play a role, the data suggests that other elements such as pivoting from IT, bonus components, and operational scope are also significant. The findings underscore the need for a balanced approach in setting competitive compensation plans and highlight the ongoing gender disparity in the cybersecurity field.