Can You Make $200,000 a Year in Cybersecurity?

Yes, you can make $200,000 a year in cybersecurity, but it’s a top-of-the-range outcome. The 90th percentile for information security analysts is $199,850, and the 90th percentile for computer network architects is $202,680. Managers reach it more often. The federal wage data for May 2025 shows who gets there.

How Common Is a $200,000 Cybersecurity Salary?

It’s the top tenth of analysts. In the May 2025 federal wage survey, the highest-paid tenth of information security analysts earn $199,850 or more. That’s almost exactly the number in the question, so roughly one analyst in ten is at or above it.

The median analyst earns $129,180, and three quarters earn $163,500 or less. To reach $200,000 you have to move well past the middle of the pack. That’s possible, and it’s also not the typical result, and any article that implies otherwise is guessing.

The survey doesn’t tell us how many people sit exactly at $200,000 or what they do, so we can’t give a precise share. What we can do is show where the 90th percentile passes that mark and which roles get you there.

Which States Push the Top of the Range Above $200,000?

State matters more than most people expect. The analyst 90th percentile passes $200,000 in several states.

Tennessee’s number looks out of line with its median of $115,430, which suggests a few very high salaries are driving it. Don’t plan around it.

The other eight are large markets with well-paid employers. Virginia, California, New York, Maryland and Massachusetts all employ thousands of analysts, so the top of their ranges is reachable by more people than a small state’s would be.

At the other end, Louisiana’s 90th percentile is $139,190 and Montana’s is $158,220. In those states, a $200,000 analyst job is rare, and remote work for an out-of-state employer is the practical route.

Which Cybersecurity Roles Reach $200,000 Most Often?

Three categories stand out in the federal data, though none is a perfect match for a single security title.

Computer and information systems managers have a median of $175,140 and a mean of $192,160. A quarter earn $220,730 or more, and the top tenth earn $297,510 or more. This category includes security leaders along with other IT managers, so treat it as the best evidence for management pay, not for a specific title.

Computer network architects have a median of $134,050 and a 90th percentile of $202,680. They design networks, which is a skill many security specialists build.

Information security analysts stop just short, with a 90th percentile of $199,850. Senior analysts in high-paying states pass it. For the full ladder, see our cybersecurity salary overview.

What Does the Manager Path Look Like?

The jump from analyst to manager is the biggest in the survey. The analyst median is $129,180 and the manager median is $175,140.

State by state, the manager numbers are higher still. California’s manager median is $218,290, Massachusetts’s is $214,960, New York’s is $214,300 and Washington’s is $209,370. In those four states the median manager earns more than $200,000.

BLS projects 16 percent employment growth for the group from 2025 to 2035, with about 53,500 openings a year. It lists a bachelor’s degree as the typical entry education, but managers also need experience in related jobs.

The two credentials people often pair with this path are the CISM and the CISSP. Our CISM guide covers the management credential, and our CISSP requirements guide covers the broader one. Both ask for years of experience, which is the point: the top of the range goes to people who’ve done the work.

What Does the Architect Path Look Like?

Network architects design the structures that analysts defend. The national median is $134,050, which is a little above the analyst median, and the top tenth earn $202,680 or more.

In some states the numbers are much higher. Washington’s architect median is $168,070 and its 90th percentile is $224,910. California’s median is $158,870 with a 90th percentile of $224,930. New Jersey’s median is $162,350.

BLS projects 8 percent growth for architects from 2025 to 2035, which it calls much faster than average. The role asks for design and communication skills as much as technical ones, since architects present plans to management, customers and staff.

If you like building more than responding, this path is worth a look. A master’s degree in a technical area can help, and our online master’s in cybersecurity list shows programs in architecture, engineering and defense.

Can an Analyst Reach $200,000 Without Changing Titles?

Some do, usually in high-paying states and at employers that compete hard for talent. The 90th percentile in Massachusetts is $226,190 and in California it’s $221,000, so senior analysts in those places are well past the line.

What gets them there is scope. A senior analyst might lead investigations, own detection engineering for a large environment or cover a rare specialty. The title can stay the same while the responsibility grows.

It also helps to be in a state that already pays near the top. Washington’s analyst median is $154,940, so a senior analyst there is already within reach of the number. If you’re deciding where to live, the state tables on our cybersecurity salary page show where the top of the range sits.

What Role Does a Degree Play?

BLS lists a bachelor’s degree as the typical entry-level education for analysts and doesn’t require graduate study. The federal survey doesn’t report pay by degree, so we can’t tie a degree to a dollar figure.

What a degree does is open doors. Management and architecture roles often prefer graduate study, and a degree gives you a credential employers recognize. It also gives you structure for learning the breadth the senior roles ask for.

Cost is manageable if you shop. The median total tuition for the online master’s programs we compare is $25,488. Our cheapest online cybersecurity degrees list sorts by price, and our online cybersecurity management degrees list shows programs built for the leadership track.

For a closer look at the math, is a cybersecurity degree worth it compares costs and pay side by side.

What Do the Steps Look Like Along the Way?

It helps to see the whole ladder at once. These are national analyst percentiles from the May 2025 survey, and they show how far apart the rungs are.

Moving from the bottom rung to the median is a raise of more than $50,000. The step from the median to the 75th percentile is another $34,000 or so, and the step from there to the top tenth is about the same again. Each rung asks for more responsibility than the last.

Seen that way, $200,000 isn’t a single leap. It’s three or four moves, each one tied to a bigger scope. People who reach it usually can point to a decision or a system they owned.

Does Location Matter More Than the Job Title?

Often it does. An analyst in Montana has a median of $81,950. A manager in California has a median of $218,290. The role and the place both changed, and the gap is huge.

Compare the same role in different places and the effect is clear. The analyst median is $154,940 in Washington and $87,690 in Mississippi. The architect median is $168,070 in Washington and $162,350 in New Jersey, while the national median is $134,050.

If $200,000 is the goal, choosing a strong state is as important as choosing a role. And if you can’t move, remote work with an employer in a high-paying state can close part of the gap. Policies vary by employer, so ask early in the process.

Which Skills Separate Top Earners From the Middle?

BLS’s duty list for computer and information systems managers is a useful map. Managers analyze their organization’s IT needs and recommend upgrades. They establish and maintain processes to detect, prevent and mitigate IT security threats. They assess the costs and benefits of projects and justify funding, determine staffing needs, and plan and direct the work of other IT staff, including information security analysts.

Negotiating with and monitoring vendors is on the list too. None of those duties is purely technical. They’re about money, people and priorities.

That’s the pattern across the top of the range. Technical depth gets you hired, and judgment about cost, risk and people gets you paid more. If you want to develop it, take on budget conversations, vendor reviews and mentoring while you’re still an analyst.

Degrees built around management can help. Our online cybersecurity management degrees list shows programs that mix security with business and leadership.

How Does the Cost of Education Compare With $200,000 Pay?

Education is a small slice next to the pay at the top. The median total tuition is $25,488 for the online master’s programs we compare and $54,780 for bachelor’s programs. Compare that with a manager’s median of $175,140.

That doesn’t mean a degree causes the pay. Most managers in the survey earned their positions through years of experience, and a degree is one piece. But the numbers show that the cost of study isn’t what stands between you and the top range. Time and scope are.

Prices vary a lot, so shop. Per-credit prices for master’s programs range from $235 to $2,712, and a lower price doesn’t mean a weaker program. Our online master’s in cybersecurity list shows tuition next to delivery and admissions details.

What Should You Do If $200,000 Is Your Goal?

Be specific. Pick a state, a role and a timeline, and check each against the numbers on this page.

Choose a path. If you like leading people, aim for management. If you like design, aim for architecture. If you like hands-on depth, aim for a specialty and a high-paying market.

Build proof as you go. Certifications such as the CISSP and CISM appear in senior postings, and each asks for years of experience. Take on the projects that stretch your scope, because responsibility is what the top of the range pays for.

A word of caution: a salary figure is a result, not a plan. People who aim only at the number often take roles that pay well but teach little, and they stall. People who aim at the next level of responsibility usually get the number as a side effect. Pick the role that stretches you, and check your progress against the percentiles once a year.

Then be patient. The survey shows the destination but not the pace, and nobody can promise you a date. What the data does say is that the path exists and that thousands of people are on it.