Security Analyst vs Security Engineer Salary: a $38,005 Gap That Shrinks to 2.5% at the Same Employer
The security analyst vs security engineer salary gap, as of November 12, 2026: in 2,868 certified H-1B wage filings decided July 2025 to June 2026, security engineer titles had a median offer of $145,000 and security analyst titles $106,995, a $38,005 (35.5%) gap. At the same employer and wage level it falls to 2.5%.
The data is the Labor Department’s Labor Condition Application file, the one public record where employers state a salary, a job title, a worksite and a government wage level for each hire. We sorted every security-titled filing into analyst or engineer with two published rules, then walked the pay up the four DOL wage levels, which work as an experience ladder. The government’s own salary series, BLS OEWS, cannot do this: it has one code for information security analysts and none for engineers.
Engineer premium at each DOL wage level, medians, filings decided July 2025 to June 2026. Source: DOL OFLC LCA disclosure data, The Uptime Report analysis.
Key findings
- Security engineer titles drew a median offer of $145,000 (2,115 filings, 917 employers); security analyst titles $106,995 (753 filings, 477 employers). Gap: $38,005, or 35.5%.
- The gap is widest at the entry step: $46,292 at Level I, then $10,520 at Level II, $17,871 at Level III and $15,557 at Level IV.
- 47% of engineer filings sit at Level III or IV, against 25% of analyst filings, and that mix alone takes the log gap from 29.5% to 19.9%.
- Inside the same employer at the same level, engineers are paid 2.5% more (95% interval -2.2% to 7.5%, 267 filings at 66 employers), a difference that could be zero.
- Tech vendors file 37% of engineer offers and 10% of analyst offers; consulting and staffing firms file 57% of analyst offers. Amazon alone filed 14% of engineer offers.
- The as-filed gap widened from 20.9% in the year to June 2023 to 35.5% in the year to June 2026. The same-employer, same-level gap went the other way, from 7.7% in the year to June 2022 to 2.5%.
- BLS OEWS puts Information Security Analysts (15-1212) at $129,180 for May 2025, between the two filing medians; 51% of engineer filings are coded to a different occupation, 15-1299.
The wage-level staircase: security analyst vs security engineer salary at each step
DOL assigns every H-1B job offer one of four prevailing wage levels. Level I is for “beginning level employees who have only a basic understanding of the occupation,” and Level IV for “competent employees who have sufficient experience in the occupation to plan and conduct work requiring judgment” (2009 prevailing wage guidance). The levels describe the job’s requirements, not the person, so they are the closest thing to an experience band in any public salary file.
| DOL wage level | Analyst filings (employers) | Analyst middle half | Analyst median | Engineer filings (employers) | Engineer middle half | Engineer median | Engineer premium | Paid above prevailing wage, analyst / engineer |
|---|---|---|---|---|---|---|---|---|
| Level I | 170 (143) | $75,868 to $95,000 | $85,758 | 262 (127) | $89,372 to $160,000 | $132,050 | $46,292 (+54.0%) | +0.1% / +54.8% |
| Level II | 358 (245) | $96,972 to $118,233 | $105,373 | 740 (416) | $95,540 to $154,240 | $115,893 | $10,520 (+10.0%) | +0.0% / +6.9% |
| Level III | 99 (79) | $116,201 to $140,000 | $128,300 | 477 (272) | $123,400 to $178,400 | $146,171 | $17,871 (+13.9%) | +1.4% / +8.5% |
| Level IV | 92 (60) | $149,531 to $165,470 | $154,443 | 523 (311) | $148,960 to $201,700 | $170,000 | $15,557 (+10.1%) | +2.1% / +7.9% |
The prevailing wage the employer had to meet is almost identical for both titles at each step: $79,331 vs $81,619 at Level I and $149,531 vs $150,301 at Level IV. The difference is how far each employer offers above that floor. At Level II the median analyst offer is 0.0% above its prevailing wage, in effect at the floor; the median engineer offer is 6.9% above it. At Level I the figures are 0.1% and 54.8%.
Why Level I has the biggest gap
The entry step is where one employer matters most. Amazon filed 93 of the 262 Level I engineer offers. Without Amazon, the Level I engineer median is $97,594 on 169 filings, $11,836 above the analyst median rather than $46,292. Inside the same employer, Level I engineer titles are paid 6.9% less than analyst titles (95% interval -14.5% to +1.5%), but only 10 employers filed both titles at that level, so treat that as a hint, not a finding.
Why the headline gap is bigger than three of the four steps
The all-levels gap of 35.5% is larger than the premium at Levels II, III and IV because the two titles sit on different steps. Analyst offers cluster at Level II; engineer offers spread up the stairs.
We then compared like with like, one control at a time. Each row is the engineer premium on log wages, estimated only inside groups (cells) that contain both titles, with 95% intervals clustered by employer. Because it averages log wages and drops filings with no level, the first row (29.5%) differs from the 35.5% gap in medians.
| Comparison | Engineer premium | 95% interval | Filings used | Employers |
|---|---|---|---|---|
| Every filing, no controls | +29.5% | +21.2% to +38.2% | 2,721 | 1,253 |
| Same wage level | +19.9% | +7.6% to +33.6% | 2,721 | 1,253 |
| Same wage level and state | +11.0% | +3.3% to +19.3% | 2,561 | 1,187 |
| Same employer, any level | +8.1% | +3.6% to +12.9% | 515 | 106 |
| Same employer and wage level | +2.5% | -2.2% to +7.5% | 267 | 66 |
| Same employer, level and state | +0.1% | -4.9% to +5.3% | 123 | 38 |
Same level and state still leaves a 11.0% premium. Adding the employer takes it to 2.5%. The pay gap between these titles is mostly a gap between the employers that use them. By employer type, the level-matched premium is +2.1% at consulting and staffing firms (429 analyst and 647 engineer filings) and +25.3% at tech vendors, where engineers outnumber analysts 781 to 76. Without Amazon, the same-level premium is +11.9% instead of +19.9%.
The largest filers of analyst titles were Citi (28), Wipro (23), Gp Technologies (11), Tata Consultancy Services (9), Compunnel (9). The largest filers of engineer titles were Amazon (304), Google (43), Apple (29), Meta (26), Walmart (25).
Employers that filed both titles
13 employers filed at least three of each. Engineers had the higher median at 10 of them and the lower median at 3. These are raw medians, not level-matched.
| Employer | Analyst filings | Analyst median | Engineer filings | Engineer median | Engineer premium |
|---|---|---|---|---|---|
| Compunnel | 9 | $120,300 | 10 | $112,875 | -6.2% |
| The Vanguard Group | 7 | $143,775 | 10 | $166,563 | +15.8% |
| Avco Consulting | 6 | $92,251 | 3 | $80,000 | -13.3% |
| PayPal | 5 | $127,255 | 7 | $171,000 | +34.4% |
| 4 | $139,630 | 43 | $194,000 | +38.9% | |
| Visa | 4 | $137,921 | 10 | $155,320 | +12.6% |
| Adobe | 4 | $111,340 | 8 | $184,461 | +65.7% |
| Meta | 3 | $168,000 | 26 | $202,235 | +20.4% |
| TikTok / ByteDance | 3 | $130,000 | 12 | $231,800 | +78.3% |
| Salesforce | 3 | $161,260 | 9 | $179,386 | +11.2% |
| Fidelity | 3 | $122,529 | 6 | $112,923 | -7.8% |
| New Era Technology | 3 | $120,750 | 4 | $136,230 | +12.8% |
| First Citizens Bank And Trust | 3 | $120,286 | 3 | $130,832 | +8.8% |
Medians from certified, full-time H-1B filings decided July 2025 to June 2026. States listed have at least 10 filings of each title.
Security analyst vs security engineer salary by state
16 of the 46 worksite states have at least 10 filings of each title. The engineer premium is largest in California (+56.3%) and smallest in Florida (+3.9%). In California, engineer titles drew $182,900 against $117,000 for analysts. Texas has the most analyst filings (180), where the gap is $30,275. Arizona, which appears in related searches, just makes the cut with 10 analyst and 36 engineer filings: medians $112,709 and $138,941. For a state-by-state view of the BLS figure across IT jobs, see our IT salaries by state for 2026.
| State | Analyst filings | Analyst median | Engineer filings | Engineer median | Gap | Gap % | Same-level premium | BLS 15-1212 median |
|---|---|---|---|---|---|---|---|---|
| Texas | 180 | $106,996 | 432 | $137,271 | $30,275 | +28.3% | +12.0% | $129,890 |
| California | 81 | $117,000 | 441 | $182,900 | $65,900 | +56.3% | +26.6% | $138,570 |
| Illinois | 57 | $98,200 | 66 | $124,288 | $26,088 | +26.6% | +2.5% | $124,180 |
| Florida | 44 | $105,998 | 56 | $110,100 | $4,102 | +3.9% | +2.8% | $124,860 |
| New Jersey | 40 | $119,693 | 85 | $134,145 | $14,452 | +12.1% | -1.6% | $134,820 |
| New York | 39 | $120,286 | 130 | $171,000 | $50,714 | +42.2% | +20.0% | $134,660 |
| Georgia | 35 | $104,562 | 78 | $127,254 | $22,692 | +21.7% | +3.3% | $128,970 |
| Massachusetts | 30 | $114,171 | 47 | $136,700 | $22,529 | +19.7% | +6.2% | $136,550 |
| Ohio | 27 | $94,682 | 38 | $116,451 | $21,769 | +23.0% | +5.1% | $110,480 |
| North Carolina | 25 | $105,373 | 65 | $123,449 | $18,076 | +17.2% | -2.9% | $131,540 |
| Virginia | 23 | $101,275 | 112 | $156,200 | $54,925 | +54.2% | +33.0% | $134,900 |
| Minnesota | 17 | $108,000 | 26 | $127,400 | $19,400 | +18.0% | +12.0% | $130,710 |
| Pennsylvania | 16 | $101,657 | 31 | $116,729 | $15,072 | +14.8% | -3.7% | $117,770 |
| Washington | 13 | $142,600 | 208 | $170,000 | $27,400 | +19.2% | +19.1% | $154,940 |
| Michigan | 11 | $99,632 | 43 | $112,788 | $13,156 | +13.2% | +16.2% | $106,230 |
| Arizona | 10 | $112,709 | 36 | $138,941 | $26,232 | +23.3% | +4.6% | $125,260 |
Click a column header to sort. Same-level premium: log-wage gap within wage level, as in the comparison table.
By industry (NAICS)
IT services firms (NAICS 5415) file 428 analyst and 716 engineer offers, more than any other sector, and pay both titles close together: $104,562 vs $117,664. Finance and insurance pays analysts the most of the large sectors ($129,000). Software, hosting and media firms (NAICS 51) pay engineer titles $176,078. The retail line is mostly Amazon, which files under e-commerce codes.
| Industry (employer NAICS) | Analyst filings | Analyst median | Engineer filings | Engineer median | Gap % | Same-level premium | BLS 15-1212 sector median |
|---|---|---|---|---|---|---|---|
| IT services (NAICS 5415) | 428 | $104,562 | 716 | $117,664 | +12.5% | +6.3% | $131,720 |
| Finance and insurance (52) | 103 | $129,000 | 244 | $145,638 | +12.9% | +10.3% | $130,630 |
| Information: software, hosting, media (51) | 41 | $121,741 | 322 | $176,078 | +44.6% | +31.1% | $138,650 |
| Retail and e-commerce (44 to 45) | 8 | $133,115 | 338 | $166,750 | +25.3% | +31.8% | $124,410 |
| Manufacturing (31 to 33) | 45 | $127,171 | 190 | $149,240 | +17.4% | +10.2% | $129,260 |
| Other professional services (54, not 5415) | 45 | $104,790 | 131 | $130,000 | +24.1% | +9.3% | $131,720 |
| Health care (62) | 21 | $91,730 | 28 | $129,986 | +41.7% | -1.2% | $105,890 |
| Education (61) | 11 | $90,941 | 12 | $92,500 | +1.7% | -4.8% | $98,430 |
| All other industries | 51 | $110,000 | 134 | $135,400 | +23.1% | n/a | n/a |
Each filing counts once, in the first row it matches. The BLS column is the OEWS May 2025 median for 15-1212 in the matching NAICS sector (sector 54 for both professional services rows).
Five years: the as-filed gap widened, the like-for-like gap did not
| Decisions | Analyst filings | Analyst median | Engineer filings | Engineer median | As-filed gap | Same level | Same employer and level | Analyst filings at Level I |
|---|---|---|---|---|---|---|---|---|
| Jul 2021 to Jun 2022 | 670 | $99,112 | 1,826 | $124,615 | +25.7% | +14.1% | +7.7% | 16.1% |
| Jul 2022 to Jun 2023 | 546 | $107,362 | 1,572 | $129,840 | +20.9% | +14.8% | +5.2% | 10.3% |
| Jul 2023 to Jun 2024 | 699 | $102,690 | 1,868 | $135,000 | +31.5% | +14.7% | +3.1% | 20.6% |
| Jul 2024 to Jun 2025 | 678 | $105,000 | 2,005 | $139,672 | +33.0% | +13.8% | +3.5% | 22.3% |
| Jul 2025 to Jun 2026 | 753 | $106,995 | 2,115 | $145,000 | +35.5% | +19.9% | +2.5% | 22.6% |
The engineer median rose 16.4% over the five windows and the analyst median 8.0%. Part of the widening is a change in who files analyst titles: Level I made up 16.1% of analyst filings in the year to June 2022 and 22.6% in the year to June 2026. Inside the same employer and level, the premium fell from 7.7% to 2.5%.
The variants people search for
Cyber security analyst vs cyber security engineer salary
Restricting to titles that use the word cyber: 172 analyst filings at $106,080 and 298 engineer filings at $133,167. Exact titles only: SECURITY ANALYST $102,440 (69) vs SECURITY ENGINEER $143,900 (213); INFORMATION SECURITY ANALYST $105,373 (219) vs INFORMATION SECURITY ENGINEER $97,000 (149).
SOC analyst vs security engineer salary
25 filings named a SOC or security operations analyst, median $106,995. That is $38,005 below the security engineer median. Large SOC employers rarely put “SOC” in an H-1B title, so treat this as a small sample.
Security analyst vs penetration tester vs security engineer salary
Penetration tester, ethical hacker and red team titles (managers excluded): 38 filings, median $141,767, between the analyst median ($106,995) and the engineer median ($145,000). With 38 filings, treat the tester figure as indicative.
The government benchmark, and why it lumps both jobs
BLS OEWS reports Information Security Analysts, SOC 15-1212, at a median of $129,180 in May 2025 (190,650 jobs; 10th percentile $75,090, 90th $199,850). The 2018 SOC direct-match title list puts “Information Security Analyst” and “Network Security Analyst” in 15-1212 and lists no security engineer title. O*NET files Information Security Engineers as 15-1299.05, under Computer Occupations, All Other, a catch-all that OEWS reports at $116,580 across 435,370 jobs. Employers split the same way when they file:
| SOC code on the filing | Share of analyst titles | Share of engineer titles | BLS OEWS median, May 2025 |
|---|---|---|---|
| 15-1212 Information Security Analysts | 82.9% | 26.5% | $129,180 |
| 15-1299 Computer Occupations, All Other | 10.8% | 51.5% | $116,580 |
| 15-1252 Software Developers | 2.0% | 12.9% | $135,980 |
| 15-1244 Network and Computer Systems Administrators | 1.2% | 3.5% | $99,130 |
| 15-1241 Computer Network Architects | 0.4% | 1.9% | $134,050 |
| 15-1211 Computer Systems Analysts | 0.9% | 0.3% | $105,850 |
So the BLS number is neither an analyst nor an engineer salary. It is the pay of everyone coded 15-1212, which includes many engineers, and it excludes the 51% of engineer filings coded 15-1299. 76% of analyst offers and 37% of engineer offers fall at or below the 15-1212 national median. Our cybersecurity salary report for 2026 breaks the BLS series down by metro and percentile.
What this means for MSPs and IT teams
Budget by step, not by title. If you are hiring a first security hire at an MSP, the market rate at Level II is $105,373 for an analyst title and $115,893 for an engineer title, a $10,520 difference. At IT services firms (NAICS 5415) the two titles are close: $104,562 vs $117,664.
The title alone moves little inside one company. At employers that file both, the level-matched premium is 2.5%. Renaming an analyst role “engineer” will not by itself buy a different candidate pool at your pay band; the engineer median is lifted by large tech employers (Amazon (304), Google (43), Apple (29), Meta (26) engineer filings).
Expect competition at the top steps. Engineer offers at Level IV have a middle half of $148,960 to $201,700. Only 5 filings in this window came from NAICS 541513 (computer facilities management, the code closest to managed services), so MSP-specific medians cannot be published. The IT and cybersecurity jobs outlook for 2026 covers demand, and our H-1B statistics page covers the visa program behind these filings.
FAQ
Which pays better, security analyst or security engineer?
Security engineer, as filed. In 2,868 certified H-1B filings decided July 2025 to June 2026, engineer titles had a median offer of $145,000 and analyst titles $106,995, a $38,005 (35.5%) gap. At the same employer and wage level the gap is 2.5% (95% interval -2.2% to 7.5%), so most of the difference comes from which employers hire engineers.
How much more does a junior security engineer make than a junior security analyst?
At DOL wage Level I (entry), engineer titles had a median of $132,050 on 262 filings against $85,758 on 170 for analyst titles, a $46,292 gap. Amazon filed 93 of the 262 entry-level engineer offers; without Amazon the engineer median is $97,594, $11,836 above analysts.
Do SOC analysts earn less than security engineers?
Yes. Only 25 filings in the year to June 2026 named a SOC or security operations analyst; their median was $106,995, against $145,000 for security engineer titles. Most SOC staff at consultancies are filed under generic titles, so this sample is small.
Can you make $500,000 a year in cyber security?
Not in base salary, judging by these filings. Of 32,318 annual-rate security-related H-1B filings (security, cyber or infosec titles, or SOC 15-1212 and its pre-2018 code 15-1122) decided October 2020 to June 2026, 4 offered $500,000 or more: two PwC principal filings, one blockchain security engineer, and a $900,000 Level I junior security consultant offer that looks like an entry error. In the year to June 2026 the top annual offer was $404,690 for an engineer title and $300,000 for an analyst title. Bonus and stock are not in the data.
What pays more, software engineering or cyber security engineering?
It depends on the step. Security engineer titles beat all software developer (SOC 15-1252) filings at Level I ($132,050 vs $108,422, a lead driven by Amazon), trail at Level II ($115,893 vs $122,013) and trail at Level IV ($170,000 vs $178,725), July 2025 to June 2026 decisions.
Does the BLS publish a security engineer salary?
No separate figure. BLS OEWS reports Information Security Analysts (15-1212) at a $129,180 median for May 2025. O*NET places Information Security Engineers under 15-1299, Computer Occupations, All Other, which OEWS reports at $116,580. In the filings, 51% of engineer titles carry 15-1299 and 27% carry 15-1212.
Research library
More original data reports from The Uptime Report. Every report includes its methodology and a free CSV download. Browse all research
Threats and breaches
- AT&T Data Breach Settlement Payout Date
AT&T payout status, tiers, incident history - Microsoft Data Breach History
Microsoft incidents by type, 2020 to 2026 - IC3 Report 2025
IC3 losses, crime types, states per capita - AI Incidents Statistics 2026
AI incidents by year, harm type, company - Cyber Attacks 2026
Every 2026 cyber attack, primary-sourced - WordPress Vulnerabilities
WordPress plugin, theme and core CVEs - Hypervisor Vulnerabilities
Hypervisor CVEs vs exploitation - DMARC Adoption Statistics 2026
DMARC enforcement, 15,000 domains - RMM Vulnerabilities and Remote Access Flaws
RMM and remote access flaws in KEV - Identity Theft Statistics 2026
ID theft per 100K by state and type - Scam Statistics 2026
FTC fraud losses by channel and age - VPN Vulnerabilities by Vendor
VPN gateway KEV and CVEs by vendor - MFA Statistics 2026
MFA methods across 2,571 services - Password Statistics 2026
12,674 passwords tested against HIBP - Ransomware Groups 2026
Most active ransomware groups, ranked - Ransomware Statistics 2026
Leak-site victims by month since 2021 - Malicious npm Packages
Malicious npm packages, day by day - Cybersecurity Statistics 2026
70 sourced stats, every number traced - Zero-Day Statistics
Every tracked zero-day since 2014 - Phishing Statistics 2026
Four phishing measures, one evidence board - Patch Tuesday Statistics 2026
Every Microsoft CVE since 2021 - Disaster Declarations by State
FEMA data for continuity planning - Data Breach Statistics 2026
980 breaches in Have I Been Pwned - Ransomware Initial Access Vectors
CISA advisories coded by entry technique - CVE Statistics 2026
Vulnerabilities published per year, NIST NVD - How Long Do Companies Take to Report a Data Breach?
1,675 Washington notices - Known Exploited Vulnerabilities
The CISA KEV catalog analyzed - Healthcare Data Breach Report 2026
HHS OCR breach portal scorecard - Ransomware Reported to the FBI
Five-year IC3 trend - ConnectWise ScreenConnect Vulnerabilities
ScreenConnect CVEs dated, with version lookup - SonicWall Vulnerabilities 2026
SonicWall CVEs by product line and KEV year - Dental Practice Data Breaches 2026
Every 2026 dental breach on the HHS portal - Apple Zero Days 2026 List
Every Apple-flagged CVE, with KEV dates - Android Zero Days 2026
Android flags by layer, OEM patch lag - Auto Dealership Data Breach 2026 Tracker
Dealer and vendor breaches by state filing - Law Firm Data Breaches 2026
Every law firm AG notice, sized and dated - Accounting Firm Data Breach 2026
CPA breach notices against the tax calendar - Bank DMARC Adoption 2026
DMARC at 4,118 US banks, by size - MSP Email Security
MSP DMARC and SPF, 1,430 domains - Credit Union Cybersecurity Statistics 2026
55% of credit unions skip DMARC - Citrix NetScaler Vulnerabilities 2026
48 NetScaler CVEs, 6 exploited, build checker - Fortinet Vulnerabilities 2026
Every 2026 Fortinet CVE, by product - Okta Vulnerabilities
Okta CVEs and incidents, two ledgers - Veeam Vulnerabilities
Veeam CVEs, fixed builds, KEV flags
Infrastructure and uptime
- Data Centers Using Nuclear Power
Every US nuclear deal, by NRC stage - Claude Outage History
934 Claude incidents by model and hour - AMD vs Nvidia Market Share Over Time
AMD vs Nvidia share: Steam and SEC filings - iPhone Market Share by Country 2026
iPhone share in every country - Android Market Share by Version 2026
Android versions and patch status - OpenAI Outage History
1,051 OpenAI incidents, causes coded - Data Center Construction Spending 2026
Data center build spending, Census monthly - Microsoft End of Support 2026
Every 2026 Microsoft support cutoff - Fiber Internet Availability by State 2026
Fiber by state, build pace, top providers - 5G Coverage Map 2026
5G by state and carrier, FCC data - Cell Phone Outage History
FCC outages, DIRS cell sites, 911 fines - Mac Market Share 2026
Mac desktop share by country and version - Browser Market Share 2026
Browser share since 2009, by platform - Microsoft 365 Market Share 2026
Who runs email: Microsoft vs Google - CrowdStrike Outage
July 19, 2024 outage, minute by minute - Data Center Electricity Prices 2026
Power prices vs data center load, by state - Average Internet Bill 2026
Home internet prices by speed and state - Search Engine Market Share 2026
Search share since 2009, by country - ChatGPT Market Share 2026
AI chatbot referral share, every tracker - Google Cloud Outage History
Google Cloud incidents by product, 2013 on - Azure Outage History
Every Azure PIR, coded by root cause - Data Center Water Usage 2026
Water by site, company and drought - AI Energy Consumption 2026
Big Tech electricity vs US demand - SSD Prices 2026
NAND price cycle from makers’ filings - RAM Prices 2026
DRAM prices from producers’ filings - Domain Name Statistics 2026
Domains by TLD, renewals, registrars - Linux Market Share 2026
Linux desktop share, every headline traced - GitHub Outages
GitHub incidents by month since 2020 - Cloudflare Outage History
Every Cloudflare outage post-mortem - Starlink Statistics 2026
Satellites, subscribers, coverage, outages - Internet Access Statistics 2026
Home internet gaps by state and group - SQL Server End of Life
SQL Server support countdown + CVEs - Windows 11 Market Share 2026
Windows 10 vs 11 share by country - Cloud Computing Statistics 2026
Hyperscaler revenue and capex, SEC data - AWS Outage History
Every AWS Post-Event Summary since 2011 - Data Centers by State 2026
Sites, jobs, power for every state - Data Center Statistics 2026
Data center power, spending, jobs - 99.9% Uptime
Uptime calculator and 35 real SLAs - Power Outage Statistics by State
Outage hours by state, EIA data - Cost of Downtime
Revenue per hour for 3,001 public companies - Windows Server End of Life
Support dates and CVEs per server version - SQL Server 2016 ESU Cost
ESU cost calculator, every formula - Slack Outage History
1,459 Slack entries, SLA history, ledger - Google Workspace vs Microsoft 365 in US Schools
Google vs Microsoft in 10,591 districts - Block GPTBot
AI crawler blocks across top 10k sites - security.txt Adoption 2026
Who publishes a valid security.txt - Government Email Security 2026
.gov DMARC: local 40% vs federal 88% - Government Website Security 2026
.gov web security scored by state - vSphere 8 End of Support
vSphere 8 dates, exploited flaws by version - Office 2019 End of Life
Office 2019 EOL: who still gets patches - Zoom Outage History
Every Zoom incident since 2015
Regulation and disclosure
- Are Ransomware Payments Illegal? Law by Jurisdiction
Who may pay a ransom, by jurisdiction - HIPAA Security Rule Changes 2026
Security Rule status: current vs proposed - FTC Safeguards Rule Breach Notification
500-consumer, 30-day FTC breach duty - Data Center Moratorium by State 2026
Moratoria and bans in every state - State Privacy Laws 2026
23 state privacy laws, compared - State AI Laws 2026
131 state AI laws, dates and penalties - FedRAMP Statistics 2026
FedRAMP authorizations, GSA data - Item 1C Cybersecurity Disclosures
What 600 10-Ks say in Item 1C - CMMC Certification Statistics 2026
CMMC demand vs assessor capacity - Data Brokers List 2026
728 brokers across three state registries - SEC Cybersecurity Incident Disclosures
Every 8-K Item 1.05 filing - HIPAA Enforcement Tracker
Every OCR penalty and settlement - CMMC Level 2 Assessment Cost
CMMC Level 2 cost estimator, DoD figures - Safe Harbor Cybersecurity Laws by State
10 states, 11 laws, framework grid
Workforce and pay
- Intel Layoff Tracker
Every Intel WARN notice, by site and date - Amazon Layoffs by State
Amazon WARN notices, state by state - Oracle Layoffs by State
Oracle WARN notices and restructuring cost - Cloud Architect vs Cloud Engineer Salary
Architect vs engineer pay, H-1B filings - Entry Level DevOps Engineer Salary
Entry level DevOps pay, H-1B filings - Microsoft Layoff History Timeline
Every round dated, 2009 to 2026 - Google Layoffs by Year
Notices, headcount, severance by year - AI Engineer vs ML Engineer Salary
AI vs ML engineer pay, from H-1B filings - Data Engineer Salary by Experience
Data engineer pay by DOL wage level - Most Popular Programming Languages 2026
Language ranks by country, GitHub data - Computer Science Graduates Per Year
CS degrees per year, IPEDS 2011 to 2024 - Data Scientist Salary 2026
Data scientist pay ladder and metros, BLS - Web Developer Salary 2026
Web dev vs software pay by state, BLS - AI at Work Statistics 2026
Worker AI use: ever, weekly, daily, by job - Network Engineer Salary 2026
Network engineer vs admin pay, BLS - IT Manager Salary 2026
IT manager pay by industry, BLS OEWS - Software Engineer Salary 2026
Developer pay by metro, BLS OEWS - H-1B Statistics 2026
H-1B lottery, employers, and wages - AI Layoffs 2026
AI-blamed job cuts, sourced to filings - Help Desk Salary 2026
Help desk hourly pay, BLS OEWS - Cybersecurity Salary 2026
Security pay percentiles, BLS OEWS - Women in Tech Statistics 2026
Women’s share of tech jobs since 2011 - IT Unemployment Rate 2026
Tech vs national jobless rate, monthly - Tech Job Postings 2026
Tech postings vs 2020, by role and country - Tech Layoffs 2026
Tech layoffs from state WARN notices - Remote Work Statistics 2026
Telework by job, industry, and state - Highest Paying Cities for IT Jobs 2026
Metro pay by role, BLS OEWS - The Tech Job Market in 2026
Openings, quits, hires, layoffs - IT Salaries by State 2026
Pay matrix for four IT roles - IT and Cybersecurity Jobs Outlook 2026
BLS employment projections - Salesforce Layoffs by State
Salesforce WARN notices, state by state - Dell Layoffs by Year
Headcount, severance, notices by year - IBM Layoffs by Year
IBM workforce charges against headcount - Meta Layoffs by Year
Meta rounds, sites and headcount by year - IT Director vs IT Manager Salary
IT director vs manager pay, H-1B filings - Penetration Tester Salary Entry Level
Entry level pen test pay, H-1B filings - Site Reliability Engineer vs DevOps Salary
SRE vs DevOps pay, H-1B filings - Solutions Architect vs Software Engineer Salary
Architect vs engineer pay, Level I to IV - Data Engineer vs Data Analyst Salary
Data engineer vs analyst pay, H-1B ledger - Network Engineer vs System Administrator Salary
Network engineer vs sysadmin pay by state - Cloud Engineer vs DevOps Engineer Salary
Cloud vs DevOps pay by metro, H-1B - Cisco Layoffs by Year
Cisco cuts by year: charges vs staff
MSP market and spending
- AI Capex 2026
Big Tech capex vs cash flow, SEC data - Cybersecurity Budget 2027
Federal and CISA cyber budgets, benchmarks - Microsoft 365 Price Increase 2026
Every M365 price change, vs inflation - Computer Prices 2026
Computer price indexes and HS 8471 imports - MSP Market Size 2026
Managed services market, built from Census - Small Business AI Adoption 2026
AI use by firm size, sector, state, Census - Cyber Insurance Statistics
Cyber insurance market, NAIC 2015-2024 - IT Spending by Industry
IT investment by industry, BEA - IT Services Industry Growth 2026
Census revenue by service industry - IT Hourly Rates 2026
Hourly IT labor rates, GSA contracts - VoIP Statistics 2026
Business VoIP vs landlines, FCC - MSP Industry Statistics 2026
Jobs, wages, and firms, BLS QCEW - Federal IT Spending 2026
IT services contracts, USAspending - IT Services Firms by State
Census business patterns atlas - How Much Do MSPs Charge Per User?
Published MSP prices, 1,310 websites - VMware Price Increase Broadcom Timeline
Broadcom VMware changes and revenue, dated
Free to cite and republish with a link. The CSV holds every aggregate on this page: medians and quartiles by wage level, state, industry, employer type and year, for both title families, with the BLS benchmark where one exists.
Methodology
Source. U.S. Department of Labor, Office of Foreign Labor Certification, LCA Disclosure Data, quarterly files FY2021 Q1 to FY2026 Q3 (newest file on the DOL page when checked on November 12, 2026). One extract of every H-1B row whose title mentions security, cyber, infosec and related terms, or whose SOC code is 15-1212 or 15-1122: 35,805 unique case numbers, a later file’s copy replacing an earlier one. Kept: certified, full-time, wage between $30,000 and $1,000,000 after annualizing the low end of the offered range (hourly x 2,080, monthly x 12): 33,327 filings. Main window: decisions July 1, 2025 to June 30, 2026. 32% of offers state a range; we use the bottom. 162 offers were stated per hour and annualized.
Title rules, applied to the upper-cased title. Analyst: contains \bANALYST\b and one of CYBER ?SECURITY|CYBER|SECURITY|INFOSEC|SECOPS|SOC (whole words). Engineer: contains \bENGINEER\b and one of the same security words except SOC. Excluded from both: MANAGER|MGR|DIRECTOR|HEAD|VICE PRESIDENT|VP|SVP|AVP|CHIEF|CISO|ARCHITECT|INTERN|SALES|PRESALES|CONSULTANT|PARTNER, consultancy job codes (JC\d+, KB...\d), any engineer word in an analyst title and any analyst word in an engineer title. Analyst titles also exclude DATA, BUSINESS, FINANCIAL, FINANCE, PROGRAMMER, INVESTMENT, CREDIT, QUALITY, QA, PRODUCT, MARKETING and SECURITIES ANALYST; engineer titles exclude DATA, SALES, FIELD, TEST, QA and VALIDATION ENGINEER. Plural titles such as “INFORMATION SECURITY ANALYSTS” are excluded because they repeat the occupation name rather than describe a job. 6% of engineer titles also contain SOFTWARE (for example “Software Development Engineer, Security”).
Checks on the rules. A random sample of 100 titles per family (seed 20261112), read by the AI research agent, not a human: analyst 100 of 100 security analyst jobs; engineer 96 security engineering jobs, 2 hybrid systems or network titles and 2 data engineer titles, which the DATA ENGINEER exclusion now removes. Recall is limited by design: of 3,439 filings coded 15-1212 in the window, 1,185 match a rule. Most of the rest are consultancy titles such as “Manager” or “Senior Consultant” that name no job type.
Wage levels and controls. PW_WAGE_LEVEL (I to IV) as filed; 4.5% of analyst and 5.3% of engineer filings have no level (survey or union wage sources) and are left out of level comparisons. Premiums are differences in mean log wage within cells (level, level and state, employer, and so on), using only cells that hold both titles, with standard errors clustered on the employer parent. Employer type (consulting and staffing, tech vendor, end customer) uses the name and NAICS rule from our earlier title-pay reports; it was right on 169 of 200 filings in a hand check recorded with that rule. Industry is the employer’s NAICS code on the filing.
Limits. H-1B offers are a slice of the market, weighted to large employers and IT services firms (NAICS 5415 is 40% of the filings here) and to Texas and California worksites. Offered base salary only: no bonus, stock or benefits. A wage level describes the job’s requirements, not the worker. BLS OEWS figures are May 2025, the latest release on the BLS tables page on November 12, 2026. Not career or immigration advice.
Cite as: The Uptime Report. “Security Analyst vs Security Engineer Salary: a $38,005 Gap That Shrinks to 2.5% at the Same Employer.” November 2026. https://theuptimereport.com/security-analyst-vs-security-engineer-salary/
References
- U.S. Department of Labor, OFLC Performance Data: LCA Disclosure Data, FY2021 Q1 to FY2026 Q3. Accessed November 2026.
- U.S. Department of Labor, Prevailing Wage Determination Policy Guidance, Nonagricultural Immigration Programs (revised November 2009). Accessed November 2026.
- U.S. Bureau of Labor Statistics, Occupational Employment and Wage Statistics, May 2025: national, state and sector estimates for 15-1212 and 15-1299. Accessed November 2026.
- U.S. Bureau of Labor Statistics, 2018 Standard Occupational Classification and Direct Match Title File. Accessed November 2026.
- O*NET OnLine, 15-1299.05 Information Security Engineers. Accessed November 2026.
Leave a Reply