Cyber Security Salary UK 2026: How Average and Median Pay Compare Across Roles

Cyber Security Salary UK 2026: How Average and Median Pay Compare Across Roles

Cyber security remains one of the highest-demand professions in the UK, and salaries reflect that. But what exactly is the "average" or "median" cyber security salary? The answer depends on whether you look at advertised roles, official ONS data, or take-home pay after tax. This article breaks down the latest figures for 2026, using data from reputable sources including ONS ASHE, ITJobsWatch, and HMRC tax bands.

Median vs Average: Why It Matters

The Office for National Statistics (ONS) Annual Survey of Hours and Earnings (ASHE) does not publish a dedicated SOC code for cyber security. Most roles are coded under SOC 2135 (cyber security professionals) or SOC 2139 (information technology professionals n.e.c.), which can blur the picture. The UK median full-time salary across all occupations is £39,039 (ONS ASHE 2025). For cyber security, the median advertised salary is considerably higher.

According to ITJobsWatch, the median salary for UK permanent roles citing cyber security skills is £60,000 – up 4.35% on the previous year. The bottom 10% of roles sit around £30,000 (early-career and support positions), while the top 10% clear £96,250. Most roles fall between £40,000 and £79,000. These figures are based on job adverts, not actual earnings, but they give a reliable benchmark for what employers are offering.

Cyber Security Salaries by Role

Averages hide wide variation. Here are the median advertised salaries for common cyber security roles, from ITJobsWatch data (six months to July 2026):

• Cyber Security Analyst: £55,000
• Security Engineer: £65,000 (+13% year-on-year)
• Security Architect: £85,000 (+13% year-on-year)
• All cyber security roles (median): £60,000
• Top 10% of roles (90th percentile): £96,250

These medians are for permanent positions. Contract rates are typically higher but come without benefits or job security.

Take-Home Pay: What You Actually Keep

Gross salary is only part of the story. The UK has progressive Income Tax and National Insurance, and for higher earners, the 60% tax trap (Personal Allowance taper between £100,000 and £125,140) can bite. Using 2026/27 HMRC rates, here are indicative take-home figures for common cyber security scenarios (England, no pension, no student loan):

• £40,000 (junior SOC Analyst, regional): Income Tax £5,486, NI £2,194, take-home £32,320 (£2,693/month). Effective tax rate 19.2%.
• £75,000 (Security Engineer, London): Income Tax £17,432, NI £3,511, take-home £54,057 (£4,505/month). Effective rate 27.9%.
• £105,000 (Senior Pen Tester, 60% trap): Income Tax £30,432, NI £4,111, take-home £70,457 (£5,871/month). Effective rate 32.9%.
• £160,000 (Principal, additional rate): Income Tax £58,203, NI £5,211, take-home £96,586 (£8,049/month). Effective rate 39.6%.
• £300,000 (CISO total compensation): Income Tax £121,203, NI £8,011, take-home £170,786 (£14,232/month). Effective rate 43.1%.

These figures come from salarytax.uk calculations using HMRC-verified rules. Note that Scotland uses different Income Tax bands: starter rate 19%, basic rate 20%, intermediate rate 21%, higher rate 42%, top rate 47% (2026/27). A Scottish cyber security professional earning £60,000 would pay more tax than an English counterpart.

Regional and Sector Variations

Location still matters, though less than before the pandemic. Outside London, the median cyber security salary is £55,000 – below the capital, but climbing faster (+10% year-on-year). With 6,690 permanent vacancies citing cyber security skills in the six-month period, demand is not easing.

Sector also drives pay. FinTech, Big Tech, and defence offer higher ranges. For example, a Security Engineer with 2–5 years’ experience might earn £45,000–£65,000 regionally, but £70,000–£95,000 in FinTech and £85,000–£115,000 in Big Tech. Defence roles pay £50,000–£72,000 at that level. The table below summarises typical ranges by level and sector (synthesised from multiple surveys):

Level	Regional	London	FinTech	Big Tech	Defence
SOC Analyst (Y1-2)	£30k–£42k	£38k–£55k	£42k–£58k	£55k–£75k	£32k–£48k
Security Engineer (2-5 yrs)	£45k–£65k	£60k–£85k	£70k–£95k	£85k–£115k	£50k–£72k
Senior / Pen Tester (5-8 yrs)	£65k–£95k	£85k–£120k	£95k–£135k	£125k–£170k	£70k–£100k
Principal (8-12 yrs)	£95k–£130k	£125k–£170k	£135k–£180k	£170k–£230k	£100k–£140k
Director / Head of Security	£130k–£200k	£170k–£280k	£180k–£300k	£230k–£340k+	£140k–£210k
CISO	£150k–£260k	£200k–£400k+	£220k–£450k+	£280k–£500k+	£170k–£280k

These are indicative ranges, not a canonical pay scale. Sources include the (ISC)² Cybersecurity Workforce Study UK cut, the CREST UK Pay Survey, Hays UK Salary Guide, Robert Half UK Technology Salary Guide, ITJobsWatch, and Glassdoor.

How Certification Affects Pay

Certifications are one of the most reliable ways to move up the salary range. CISSP, OSCP, CISM, and CEH are commonly cited in job adverts. ITJobsWatch data shows that roles requiring CISSP have a median salary of £85,000, while those requiring OSCP sit around £75,000. Employers often pay for certification training as a retention tool.

The Bottom Line

Cyber security salaries in the UK are well above the national average, with a median of £60,000 compared to the UK median of £39,039. However, the range is wide: from £30,000 for entry-level SOC analysts to over £200,000 for CISOs in London or Big Tech. Take-home pay depends heavily on tax bands, location (especially Scotland), and pension contributions. For the most accurate picture, use a take-home calculator with your specific circumstances.

For more context on how cyber security compares to other professions, see our UK Average Salary, salary data, and salary index. You can also explore topics for other in-demand roles.

Frequently Asked Questions

What is the average cyber security salary in the UK?

The median advertised cyber security salary is £60,000, according to ITJobsWatch data for the six months to July 2026. The mean is likely higher due to very senior roles, but ONS does not provide a dedicated average for this occupation. Role-specific medians range from £55,000 for analysts to £85,000 for architects.

How does cyber security pay compare to the UK national average?

The UK median full-time salary is £39,039 (ONS ASHE 2025). Cyber security roles pay significantly above that, with a median of £60,000 – about 54% higher. Even entry-level roles start around £30,000, which is close to the national median, and experienced professionals often earn £80,000 or more.

Does location affect cyber security salaries in the UK?

Yes. London salaries are typically £5,000–£15,000 higher than the national median, but outside London the median is £55,000 and rising faster (+10% year-on-year). Scotland uses different Income Tax bands, so take-home pay for the same gross salary can be lower than in England. Remote work is narrowing some gaps.