/ Blog
Cyber Security Salary UK 2026 — SOC, Pen Testing, Security Engineering
Cyber security salary UK — what SOC analysts, pen testers, and security engineers earn in 2026
UK cyber security hiring has been one of the strongest segments of UK tech for the last five years. Demand has outstripped supply consistently, and salaries reflect that imbalance. The UK median salary for cyber security professionals is £47,500, but the spread is wide because the discipline spans entry-level SOC work through to senior security architecture.
This article breaks down UK cyber security salaries by specialism, seniority, and city using Geekery.io's live data.
Cyber security salary by specialism
Cyber security is a broad discipline with several distinct career paths, each with its own pay band:
| Specialism | UK median | Senior median | Notes |
|---|---|---|---|
| SOC analyst (L1/L2) | £32,000 | £48,000 | Entry to mid-level; largest volume |
| SOC analyst (L3) / incident response | £55,000 | £75,000 | Senior technical |
| Security engineer | £60,000 | £88,000 | Building and operating security tooling |
| Penetration tester | £62,500 | £95,000 | Offensive security, requires demonstrable skills |
| Security architect | £85,000 | £115,000 | Designing security across the organisation |
| GRC analyst | £50,000 | £72,500 | Governance, risk, compliance |
| GRC manager / head of | £80,000 | £110,000 | Senior leadership |
| CISO (large enterprise) | £150,000+ | £200,000+ | Executive level |
Penetration testing and security architecture command the highest premiums at senior level. SOC analyst is the largest entry-level pipeline into the field.
Cyber security salary by city
| City | Median | Senior median |
|---|---|---|
| London | £60,000 | £90,000 |
| Manchester | £48,000 | £72,000 |
| Bristol | £52,000 | £80,000 |
| Edinburgh | £55,000 | £82,000 |
| Cheltenham | £65,000 | £95,000 |
| Belfast | £50,000 | £78,000 |
| Remote (UK-based) | £50,000 | £78,000 |
Cheltenham pays a notable premium because of the cluster of defence, intelligence, and cyber security employers there (GCHQ, BAE Systems, and the wider defence ecosystem). London is the largest single hiring market.
Cyber security salary by experience
- Entry (0–2 years): £28,000–£40,000 (SOC L1/L2)
- Mid-level (3–6 years): £45,000–£70,000
- Senior (7–10 years): £70,000–£100,000
- Lead / Principal (10+ years): £100,000–£130,000
- Director / CISO: £130,000–£200,000+
The progression from SOC L1 to senior security engineer can see a £50,000+ salary uplift over 5–7 years.
What affects a UK cyber security salary?
- Certifications. CISSP, OSCP, GIAC, and CREST certifications correlate with higher salaries — especially at senior level.
- Domain expertise. Engineers with experience in regulated industries (finance, healthcare, government, defence) command premiums.
- Hands-on offensive skills. Penetration testers with strong CTF or bug-bounty records earn substantially more.
- Clearance. Holding SC or DV security clearance opens up Cheltenham-area roles that pay a premium.
How to use this data
- Browse [current cyber security jobs](/jobs/security/) on Geekery.io
- See the [full cyber security salary breakdown](/salaries/security/) for city and experience detail
- If you're considering a move into cyber security, see the [Geekery.io cyber security career guide](/blog/) (link to your existing relevant post if you have one)
FAQ
Q: What's the average cyber security salary in the UK? A: UK median is £47,500, but the experienced median is much higher. Senior security engineers earn £70,000–£100,000; security architects exceed £100,000.
Q: Do I need CISSP for a UK cyber security job?
A: For senior and architect roles, usually yes. For junior roles, hands-on skills and demonstrable work substitute.
Q: Is cyber security hiring growing in the UK?
A: Yes, steadily. The UK government has set ambitious targets to grow the cyber security workforce, and demand continues to outpace supply.