exabeam 2018 cyber security professionals salary and job report · 2019-12-19 · overview overview...

45
EXABEAM 2018 CYBER SECURITY PROFESSIONALS SALARY AND JOB REPORT: COMPENSATION, JOB SATISFACTION, EDUCATION, AND TECHNOLOGY OUTLOOK

Upload: others

Post on 15-Apr-2020

3 views

Category:

Documents


0 download

TRANSCRIPT

EXABEAM 2018 CYBER SECURITY PROFESSIONALS SALARY AND JOB REPORT:COMPENSATION, JOB SATISFACTION, EDUCATION, AND TECHNOLOGY OUTLOOK

OVERVIEW

OVERVIEW

Compensation, Job Satisfaction, Education,and Technology Outlook

THE EXABEAM 2018 CYBER SECURITY PROFESSIONALS SALARY

AND JOB REPORT is based on a global survey of 481 security

professionals that was conducted in March 2018. The purpose of the survey was to

gain insights into the trends with security professionals’ salaries (focusing on the

median range of income earners according to this sample), their education levels, job

satisfaction, and attitudes towards innovative and new emerging technologies.

Note: All salaries were converted to U.S. dollars after answering survey questions

about salary. The resulting income numbers do not represent regional differences in

income and cost of living, which can be a significant factor when evaluating salary.

REPORT

exabeam.com // The Exabeam 2018 Cyber Security Professionals Salary and Job Report

2

ContentsKEY INSIGHTS

JOB SECURITY & SATISFACTION

SALARY TRENDS IN THE SECURITY PROFESSION

ARTIFICIAL INTELLIGENCE, MACHINE LEARNING, AND NEW TECHNOLOGIES

TRENDS IN SECURITY PROFESSION ROLES, CERTIFICATIONS, AND EDUCATION

CAREER ADVICE TO THOSE THINKING OF HAVING A CAREER IN CYBER SECURITY

04

24

07

33

17

41

exabeam.com // The Exabeam 2018 Cyber Security Professionals Salary and Job Report

3

KEY INSIGHTSKey Salary And Demographic Insights

SALARIES ARE HIGHEST IN NORTH AMERICA

Salaries in North America are 50-100% higher than reported salaries

in Europe or Asia Pacific. Salaries are twice as much in North America

as they are in Latin America.

SALARIES ARE HIGHEST IN THE RETAIL INDUSTRY

Salaries in the retail sector are the highest, while those in the education

and telecommunication sectors are the lowest. While salaries do

not continue to increase reliably with increased levels of education,

participants with advanced degrees consistently earned more than those

with only bachelor’s degrees.

SALARIES AT SMALL COMPANIES ARE LOWEST

Among companies with 101 employees or more, median salary ranges

were $75,001-$100,000. Companies with 100 employees or less had

median salary ranges of $50,001-$75,000. Participants reporting higher

salaries also reported lower job security.

SALARIES AT SMALL COMPANIES ARE LOWEST

50-100%Salaries in North America are higher than reported salaries in Europe or

Asia Pacific

101 Employees or more100 Employees or less

$75,001-$100,000

$50,001-$75,000

Median Salary Ranges

KEY INSIGHTS

exabeam.com // The Exabeam 2018 Cyber Security Professionals Salary and Job Report

4

Key Survey Satisfaction Insights

Participants who graduated from high school, but did not

go to college, reported the lowest satisfaction with their

current salary.

Participants who reported not attending school,

were some of the most satisfied with their salaries.

System and security admins, chief security inspectors,

and security engineers are the most satisfied with their

current salaries.

Security professionals with roles in risks, standards and

compliance officers, security program managers, and

SOC/security leads are the least satisfied with their

current salaries.

Nearly one fifth of respondents said that continuous learning

or defending their company and catching threats was the

most satisfying part of their job.

A bachelor’s degree is the most common degree obtained

by security professionals. However, SIEM content creators,

security architects, cloud application, and security analysts

most often have obtained master’s degrees.

40% 35%

40%

16.8%with bachelor’s and

master’s degrees were satisfied with their

current pay

reported being satisfied with their

current pay

reported being unsatisfied with their

current pay

said the people they work with is the most

satisfyingpart of their job

KEY INSIGHTS

Participants who reported not attending school, were some of

the most satisfied with their salaries.

A bachelor’s degree is the most common degree obtained by

security professionals.

exabeam.com // The Exabeam 2018 Cyber Security Professionals Salary and Job Report

5

Additional Insights

Most security professionals are male.

Security professionals are well educated. Along with a

variety of certifications, the majority of participants reported

having at least a Bachelor’s degree (72%). Almost 40%

reported having completed post-bachelor’s work or

an advanced degree.

More than 25% of participants said that constant

interruptions were the least satisfying part of the job.

Overwhelmingly, participants (86%) said they would

recommend a career as a security analyst to new graduates.

90%

25%

72%

40%

86%of survey participants

identified as male

said that constant interruptions were the least satisfying part of

the job

at least have a Bachelor’s degree

reported having completed post-bachelor’s or an advanced degree

said they would recommend a career

as a security analyst to new graduates

KEY INSIGHTS

exabeam.com // The Exabeam 2018 Cyber Security Professionals Salary and Job Report

6

SALARY TRENDS IN THE SECURITY PROFESSION

SURVEY PARTICIPANT PROFILE

Overall, the median salary range among all respondents

participating in the survey was $75,000-$100,000 per year.

However, the largest percentage of participants (24.7%)

reported their salary range as $50,001-$75,000 per year,

with 34% earning more than $100,000 per year.

Other security professional demographics include:

SALARY TRENDS IN THE SECURITY PROFESSION

GENDER EDUCATION

MEDIAN SALARY BY INDUSTRY

Less than $50,000 per year

$50,001 - $75,000 per year

$75,001 - $100,000 per year

$100,001 - $125,000 per year

$125,001 - $150,000 per year

$150,001 - $175,000 per year

$175,001 - $200,000 per year

$200,001 or more per year

18.3%

22.7%

11.9%

5.8%

1.9%

1.5%

Median salary ranges were calculated by sorting the list of salary ranges for each of the 408 participants from least to greatest and selecting the middle salary range. Where there was no middle point, due to an even number of participants in a group, the mean of the two middle points was reported in most instances. If the mean was not representative due to higher discrepancy between the two middle ranges, the ranges of the two midpoints were reported.

24.7%

13.3%

90% 71%Male have at least a

bachelor’s degree

MEDIAN ANNUAL SALARIES

exabeam.com // The Exabeam 2018 Cyber Security Professionals Salary and Job Report

8

MEDIAN SALARY BY REGION

The median salary range was greatest for professionals

working in North America, while those in Latin America

reported the lowest median salary ranges.

MEDIAN SALARY AND INDUSTRY

Reported median salaries were highest in the retail and consumer durables

industry. Education, financial services, manufacturing, and telecommunications

security professionals reported the lowest salaries.

SALARY TRENDS IN THE SECURITY PROFESSION

North Ameria

Europe

Asia Pacific

Latin America

Other

Retail & Consumer Durables

Government

Healthcare & Pharmaceuticals

Insurance

Other

Energy & Extraction

Education

Finance & Financial Services

Manufacturing

Telecommunications & Tech

$75,001 - $100,000 $100,001 - $125,000

$50,001 - $75,000

$75,001 - $100,000

$50,001 - $75,000

$75,001 - $100,000

$50,001 - $75,000

$50,001 - $75,000

$50,001 - $75,000

$50,001 - $75,000

$50,001 - $75,000

$50,001 - $75,000$75,001 - $100,000

< $50,001 - $75,000

$75,001 - $100,000

exabeam.com // The Exabeam 2018 Cyber Security Professionals Salary and Job Report

9

SALARY SATISFACTION BY INDUSTRY

Based on survey responses, security professionals in the

airlines and aerospace, and non-profit verticals are the least

satisfied with their salaries. Industries that reported 0%

satisfaction are not reported here.

SALARY TRENDS IN THE SECURITY PROFESSION

SALARY SATISFACTION BY INDUSTRY

Airlines & Aerospace

Automotive

Business Support & Logistics

Construction

Education

Entertainment & Leisure

Finance & Financial Services

Food & Beverages

Government

Healthcare & Pharmaceuticals

Insurance

Manufacturing

Nonprofit

Retail & Consumer Durables

Telecommunications & Tech

Transportation & Delivery

Energy & Extraction

22.2%

27%

44.4%

45%

47.1%

33.3%

47.1%

28.7%

33.9%

50%

50%

31.8%

30.8%

100%

43.8%

75%

25%

exabeam.com // The Exabeam 2018 Cyber Security Professionals Salary and Job Report

10

COMPANY SIZE AND MEDIAN SALARY

About half (48.2% ) of survey participants reported working

for large Enterprise-sized companies with 2,501 or more

employees, while only 13.9% reported working for small

companies with less than 100 employees. Median salaries

remained similar for companies with more than 101

employees. Only employees in the smallest companies saw

lower salaries for the previous year.

SALARY TRENDS IN THE SECURITY PROFESSION

48.2% 13.9%of survey participants reported working for

large Enterprise-sized companies with 2,501 or

more employees

reported working for small companies with

less than 100 employees

Large Enterprise$75,001 - $100,000

Mid-Sized$75,001 - $100,000

Enterprise$75,001 - $100,000

Small$50,001 - $75,000

Small (0-100 employees)

Mid-Sized (101-1,000 employees)

Enterprise (1,001 to 2,500 employees)

Large Enterprise (2,501 or more employees)

21.6%

13.9%

16.2%

48.2%

exabeam.com // The Exabeam 2018 Cyber Security Professionals Salary and Job Report

11

MEDIAN SALARY LEVEL OF SECURITY PROFESSIONALS FOR THEIR EXPERIENCE LEVEL

Experience plays a significant role in salaries. Participants

with more than 10 years of experience reported salaries of

nearly twice that of entry-level analysts.

The number of years professionals have been with their

employer did not seem to affect the median salary.

SALARY TRENDS IN THE SECURITY PROFESSION

YEARS WITH COMPANY AND MEDIAN SALARY

0 - 2 years

3 - 5 years

6 - 10 years

More than 10 years

0 - 2 years

3 - 5 years

6 - 10 years

More than 10 years

$75,001 - $100,000

$75,001 - $100,000

$75,001 - $100,000

$75,001 - $100,000

$75,001 - $100,000

$50,001 - $75,000

$50,001 - $75,000

$100,001 - $125,000

exabeam.com // The Exabeam 2018 Cyber Security Professionals Salary and Job Report

12

MEDIAN SALARY AND JOB TITLE

Participants with titles of chief security inspector and security program

manager reported the highest median salaries ($175,000-$200,000),

while system/security admin, security analysts and SOC analysts reported

lower median salaries ($50,001-$75,000).

SALARY SATISFACTION BY TITLE

Based on survey responses SOC/security leads are the least satisfied with

their current salaries. System/security admins, chief security inspectors

and security engineers are the most satisfied with their current salaries.

SALARY TRENDS IN THE SECURITY PROFESSION

Chief Security Inspector

Manager, Information Security

Officer, Information Security

Researcher

Risk, Standards and Compliance Analyst/Officer

SOC Analyst 1 or 2

SOC/Security Lead

Security Analyst and Information Security Analyst

Security Consultant

Security Engineer

Secuirty Program Manager

System/Security Admin

Chief Security Inspector

Manager, Information Security

Officer, Information Security

Researcher

SOC Analyst 1 or 2

SOC/Security Lead

Security Analyst and Information Security Analyst

Security Consultant

Security Engineer

System/Security Admin

$175,001 - $200,000

100%

100%$175,001 - $200,000

44.6%

$125,001 - $150,000

$75,001 - $100,000

38.5%

$75,001 - $100,000

38.7%

$75,001 - $100,000

29.9%

$75,001 - $100,000

31.6%

$75,001 - $100,000

34%

$75,001 - $100,000

$50,001 - $75,000

25%

$50,001 - $75,000

35.4%

$50,001 - $75,000

exabeam.com // The Exabeam 2018 Cyber Security Professionals Salary and Job Report

13

PRIMARY RESPONSIBILITY AND THEIR MEDIAN SALARY

Security leadership positions reported the highest median

salaries of all respondents.

Respondents whose primary responsibility was compliance

and forensic also reported salaries that were higher than the

overall median salary range of $75,001-$100,000.

Those whose primary responsibility was malware analysis

or security researcher reported the lowest salaries.

SALARY TRENDS IN THE SECURITY PROFESSION

Adversary Simulation

Application Security

Audit and Compliance

Cloud Application Security

Compliance Reporting

Endpoint Security

Forensic Analysis

Incident Response

Leadership

Malware Analysis/Researcher

Network Security

Other

Packet Analysis

Penetration Testing

SIEM Content Creation

SOC Management

Security Architecture

Security Education & Training

Security Training

Threat Hunting

Threat Intelligence

$50,001 - $75,000

$50,001 - $75,000

$50,001 - $75,000

$50,001 - $75,000

$50,001 - $75,000

$50,001 - $75,000

$50,001 - $75,000

< $50,001

$75,001 - $100,000

$75,001 - $100,000

$75,001 - $100,000

$75,001 - $100,000

$75,001 - $100,000

$75,001 - $100,000

$75,001 - $100,000

$75,001 - $100,000

$62,500 - $87,500

$62,500 - $87,500

$62,500 - $87,500

$87,500 - $112,000

$100,001 - $125,000

exabeam.com // The Exabeam 2018 Cyber Security Professionals Salary and Job Report

14

SECURITY PROFESSIONALS’ SATISFACTION WITH CURRENT SALARY

Only 35% of survey participants reported being satisfied

with their current pay, while nearly 40% reported being

unsatisfied with their pay.

SALARY AND JOB SATISFACTION

Overall, most survey respondents reported being satisfied with their current job

regardless of their median salary.

SALARY TRENDS IN THE SECURITY PROFESSION

Very Unsatisfied

Unsatisfied

Neither Satisfied nor Unsatisfied

Satisfied

Very Satisfied

Less than $50,000 per year

$50,001 - $75,000per year

$75,001 - $100,000per year

$100,001 - $125,000per year

$125,001 - $150,000per year

$150,001 - $175,000per year

$175,001 - $200,000per year

8.9%

73.9%

77.3%

76.1%

62.5%

73.7%

75%

100%

6.8%

8.4%

10.1%

3.1%

Unsatisfied Satisfied

10.5%

14.3%

0%

24.9%

3.7%

30.3%

32%

exabeam.com // The Exabeam 2018 Cyber Security Professionals Salary and Job Report

15

SALARY SATISFACTION BY EDUCATION LEVEL Forty percent of those those with bachelor’s and master’s

degrees were satisfied with their current pay.

Participants who graduated from high school, but did not

go to college, reported the lowest satisfaction with their

current salary.

Participants who reported not attending school, were some

of the most satisfied with their salaries.

SALARY TRENDS IN THE SECURITY PROFESSION

Did not attend school

Graduated from high school/GED

Some college

Bachelor’s degree

Post-bachelor’s degree work

Master’s degree

Ph.D

Post-doctoral work

Other

50%

50%

29.6%

28.6%

20%

39.2%

32.4%

39.4%

40%

exabeam.com // The Exabeam 2018 Cyber Security Professionals Salary and Job Report

16

TRENDS IN SECURITY PROFESSION ROLES, CERTIFICATIONS, AND EDUCATION

JOB TITLES

More than 30% of participants reported having a job title of

security analyst or information security analyst, while chief

security inspector, security program manager and system/

security administrator were less common.

TRENDS IN SECURITY PROFESSION ROLES, CERTIFICATIONS, AND EDUCATION

Chief Security Inspector

Manager, Information Security

Officer, Information Security

Researcher

Risk, Standards and Compliance Analyst/Officer

SOC Analyst 1 or 2

SOC/Security Lead

Security Analyst and Information Security Analyst

Security Consultant

Security Engineer

Secuirty Program Manager

System/Security Admin

0.2%

14.1%

16.2%

0.8%

1.7%

10.2%

6.2%

15.4%

0.2%

0.2%

4%

30.6%30%reported having a job title of

security analyst orinformation security analyst

exabeam.com // The Exabeam 2018 Cyber Security Professionals Salary and Job Report

18

PRIMARY JOB RESPONSIBILITIES

Security professionals’ job functions are as varied as their

titles. More than 14% of participants reported that their

primary job responsibility is as a security architect.

It is telling that 12% of participants reported their main

responsibility as something other than what was listed,

exemplifying the diverse responsibilities of those in the

security field.

TRENDS IN SECURITY PROFESSION ROLES, CERTIFICATIONS, AND EDUCATION

Adversary Simulation

Application Security

Audit and Compliance

Cloud Security

Compliance Reporting

Education and Training

Endpoint Security

Forensic Analysis

Incident Response

Leadership

Malware Analysis/Researcher

Network Security

Other

Packet Analysis

Penetration Testing

Security Architecture

Security Training

SIEM Content Creation

SOC Management

Threat Hunting

Threat Intelligence

0.8%

1%

4%

1%

1%

4.2%

0.8%

6.2%

8.5%

1.5%

12.1%

5.6%

0.4%

14.4%

1.3%

3.3%

12.3%

4%

7.1%

3.7%

6.9%

14% 12%reported that

their primary job responsibility is

security architect

reported that their main responsibility as something other than

what was listed

exabeam.com // The Exabeam 2018 Cyber Security Professionals Salary and Job Report

19

ADDITIONAL JOB RESPONSIBILITIES

More than 60% of participants reported that their jobs also

include incidence response and network security. Code review

and adversary simulation are performed by participants

less frequently.

TRENDS IN SECURITY PROFESSION ROLES, CERTIFICATIONS, AND EDUCATION

Adversary Simulation

Application Security

Audit and Compliance

Cloud Security

Code Review

Compliance Reporting

Education and Training

Endpoint Security

Forensic Analysis

Incident Response

Leadership

Malware Analysis

Network Security

Other

Packet Analysis

Penetration Testing

Security Architecture

Security Training

SIEM Content Creation

SOC Management

Threat Hunting

Threat Intelligence

11.4%

28.5%

39.9%

10.4%

32.4%

27.7%

54.3%

65.1%

49.7%

40.3%

28.5%

40.5%

52%

4.4%

38.3%

53.4%

47.8%

63.4%

27.7%

34.1%

50.3%

31.2%

exabeam.com // The Exabeam 2018 Cyber Security Professionals Salary and Job Report

20

CERTIFICATIONS

Security professionals hold a wide variety of certifications.

Respondents listed more than 150 different types of held

certifications. CISSP: Certified Information Systems Security

Professional certification was the most popular certification

reported by survey participants (33.9%), followed by

CEH:Certified Ethical Hacker (23.7%), and CompTIA (22.7%).

Certifications that were held by fewer than 5% of survey

participants are not shown.

TRENDS IN SECURITY PROFESSION ROLES, CERTIFICATIONS, AND EDUCATION

33.9% 23.7%

22.7%

Certified Information Systems Security

Professional certification

CEH:Certified Ethical Hacker

CompTIA

CISSP: Certified Information Systems Security Professional

33.9%

CEH: Certifed Ethical Hacker

23.7%GSEC:

SecurityEssentials Network

Security

None

CISM: Certified

Information SecurityManager

SANS GIAC

Comp TIA22.7%

OtherCertifcations

exabeam.com // The Exabeam 2018 Cyber Security Professionals Salary and Job Report

21

RAISES AND EDUCATION

Education did have some influence on raises that

respondents received last year. However, most respondents

reported receiving a raise between 1-5% in 2017.

Levels of education reported by less than 3% of participants

are not shown.

MEDIAN YEARS WITH CURRENT COMPANY BY INDUSTRY

Most participants, regardless of industry, have worked for their current company for a

median of 3-5 years. However, those in the insurance and healthcare sectors reported

being with their current companies for less than 2 years.

TRENDS IN SECURITY PROFESSION ROLES, CERTIFICATIONS, AND EDUCATION

Graduated from high school/GED

Some college

Bachelor’s degree

Post-bachelor’s degree work

Master’s degree

Education

Finance & Financial Services

Government

Healthcare & Pharmaceuticals

Insurance

Manufacturing

Other

Retail & Consumer Durables

Telecommunications & Tech

Utilities, Energy, and Extraction

1 - 5%

0%

1 - 5%

1 - 5%

1 - 5%

3 - 5 years

3 - 5 years

3 - 5 years

3 - 5 years

3 - 5 years

3 - 5 years

3 - 5 years

<6 months - 2 years

<6 months - 2 years

<6 months - 2 years

exabeam.com // The Exabeam 2018 Cyber Security Professionals Salary and Job Report

22

OVERALL EXPERIENCE AND INDUSTRY

Survey participants who work in the agriculture, real estate, and the utilities

industries reported having the longest security careers. Most participants,

irrespective of industry, have worked in the cyber security field for at least 6 years.

TRENDS IN SECURITY PROFESSION ROLES, CERTIFICATIONS, AND EDUCATION

Education

Finance & Financial Services

Government

Healthcare & Pharmaceuticals

Insurance

Manufacturing

Other

Retail & Consumer Durables

Telecommunications & Tech

Utilities, Energy, and Extraction

6 - 10 years

6 - 10 years

6 - 10 years

6 - 10 years

6 - 10 years

>10 years

6 - 10 years

6 - 10 years

6 - 10 years

6 - 10 years

exabeam.com // The Exabeam 2018 Cyber Security Professionals Salary and Job Report

23

JOB SECURITY AND SATISFACTION

JOB SECURITY AND SATISFACTION

OVERALL JOB SATISFACTION

Security professionals seem to be very happy with their

career choices. Overall, they (83%) are satisfied with

their jobs.

Nearly 30% of respondents reported being very satisfied and

more than 45% reported being satisfied.

Less than 9% of survey participants reported being very

unsatisfied or unsatisfied with their jobs.

83% 30%

45%

of workers are satisfied with their jobs

reported being very satisfied

reported being satisfied

Very Satisfied

Satisfied

Neither Satisfied nor Unsatisfied

Unsatisfied

Very Unsatisfied

1.9%

45.9%

6.2%

28.3%

17.7%

exabeam.com // The Exabeam 2018 Cyber Security Professionals Salary and Job Report

25

JOB SECURITY AND SATISFACTION

OVERALL JOB SECURITY

Overall, nearly 80% of participants feel secure about the

future of their jobs.

Only 6.3% reported that they felt their jobs may be

in jeopardy.

80% 6.3%of participants feel

secure about the future of their jobs

reported that they felt their jobs may be

in jeopardy

Very Secure

Secure

Neither Secure nor Insecure

Insecure

Very Insecure

1.7%

29.9%

4.6%13.9%

49.9%

exabeam.com // The Exabeam 2018 Cyber Security Professionals Salary and Job Report

26

JOB SECURITY AND SATISFACTION

PROFESSIONAL EXPERIENCE

Nearly 40% of survey respondents reported careers in the

security industry spanning more than 10 years.

Nearly 45% of respondents reported working at their current

company for less than 2 years.

40% 45%reported careers in security industry

spanning more than 10 years

reported working at their current company

for less than 2 years

<6 months - 2 years 3 - 5 years 6 - 10 years >10 years

21.2%

20.7%

6.9%

24.7%

28.5%

7.9%

43.5%

37.1%

YEARS WORKING AT CURRENT COMPANY

EXPERIENCE WORKING IN SECURITY INDUSTRY

exabeam.com // The Exabeam 2018 Cyber Security Professionals Salary and Job Report

27

JOB SECURITY AND SATISFACTION

Not surprisingly, respondents who felt more secure in their job also

generally reported being more satisfied with their jobs.

However, it may be surprising that 50% of participants who reported

having very little job security also reported high job satisfaction.

JOB SECURITY BY MEDIAN SALARY

Participants reporting higher salaries also reported lower job security.

JOB SECURITY AND SATISFACTION

Very Secure

Secure

Neither Secure nor Insecure

Insecure

Very insecure

Very Secure

Secure

Neither Secure nor Insecure

Insecure

Very insecure

84.7%

$62,500 - $87,500

77.5%

$50,001 - $75,000

55.2%

$50,001 - $75,000

36.4%

$75,001 - $100,000

50%

$75,001 - $100,000

exabeam.com // The Exabeam 2018 Cyber Security Professionals Salary and Job Report

28

COMPANY SIZE AND JOB SATISFACTION

Job satisfaction does not significantly vary based on company

size. Overall, the majority of participants were satisfied with

their jobs regardless of the size of their company.

EDUCATION AND JOB SATISFACTION

Overall, survey respondents reported being satisfied with their current job

regardless of level of education.

JOB SECURITY AND SATISFACTION

Large Enterprise (2,501 or more employees)

Enterprise (1,001 - 2,500 employees)

Mid-sized (101 - 100 employees)

Small (0-100 employees)

Did not attend school

Graduated from high school/GED

Some college

Bachelor’s degree

Post-bachelor’s degree work

Master’s degree

Ph.D

Post-doctoral work

Other

50%

12%

14.3%

19.9%

11.8%

17.6%

0%

21.4%

20%

50%76.3%

80%

69.2%74.7%

70.2%72.3%

79.1%

Unsatisfied

Unsatisfied

Satisfied

Satisfied

82.4%

76.8%

100%

50%

80%

9.9%

11.5%

4.8%

3%

exabeam.com // The Exabeam 2018 Cyber Security Professionals Salary and Job Report

29

JOB SECURITY AND SATISFACTION

JOB SATISFACTION AND EXPERIENCE

Satisfaction does not significantly vary with the amount of

time that participants had been with their current company.

However, participants who have been working as security

professionals for less time (0-2 years) are more satisfied

with their jobs than those who have been working for longer.

0-2 Yearsworkers are more satisfied with their

jobs than those who have been working for longer

TIME WITH COMPANY AND JOB SATISFACTION

EXPERIENCE AND JOB SATISFACTION

0 - 2 years

3 - 5 years

6 - 10 years

More than 10 years

0 - 2 years

3 - 5 years

6 - 10 years

More than 10 years

75.8%

76.3%

67%

75.6%

84.9%

70.8%

74.6%

77.5%

exabeam.com // The Exabeam 2018 Cyber Security Professionals Salary and Job Report

30

PRIMARY RESPONSIBILITY AND JOB SATISFACTION

Respondents whose primary responsibilities are adversary

simulation, cloud security, compliance security, and packet

analysis are the most satisfied with their jobs. Those who are

responsible for security training and forensics reported being

the least satisfied.

JOB SECURITY AND SATISFACTION

Adversary Simulation

Application Security

Audit And Compliance

Cloud Application Security

Compliance Reporting

Endpoint Security

Forensic Analysis

Incident Response

Leadership

Malware Analysis/Researcher

Network Security

Packet Analysis

Penetration Testing

SIEM Content Creation

SOC Management

Security Architecture

Security Education & Training

Security Training

Threat Hunting

Threat Intelligence

100%

100%

78.9%

100%

84.5%

70%

69.7%

80%

56.1%

66.7%

70%

78.9%

79.4%

71%

71.4%

100%

81.3%

50%

50%

73.3%

exabeam.com // The Exabeam 2018 Cyber Security Professionals Salary and Job Report

31

LEAST SATISFYING ASPECT OF JOB

More than 25% of participants said that constant interruptions were least

satisfying part of their job.

MOST SATISFYING ASPECT OF JOB

Nearly one fifth of respondents said that continuous learning or

defending their company and catching threats was the most satisfying

part of their job.

16.8 % of respondents said the people they work with is the most

satisfying part of their job.

JOB SECURITY AND SATISFACTION

ALways learning something new

Defend company & catching threats

People & teams

Challenge

Flexibility, freedom & independence

Helping customers

Problem solving

Cutting-edge technology

Improving security

Ever-changing field

Making a difference

Not the same everyday

Interruptions

False positives/dead ends

Tedium

Hours

Never-ending tickets

Nothing

Lack of support from management

Other

Bureaucracy

User non-compliance

Budget cuts

Competing priorities

19.4%

27.9%

7.3%

9.8%

19.4%

22.5%

5.8%

8.3%

3.7%

1%4.2%

3.3%

3.7%

1.9%

16.8%

11.5%

5.2%

7.1%

3.1%

0.8%

5.2%

4%

4.2%

1.9%

exabeam.com // The Exabeam 2018 Cyber Security Professionals Salary and Job Report

32

ARTIFICIAL INTELLIGENCE, MACHINE LEARNING, AND NEW TECHNOLOGIES

ARTIFICIAL INTELLIGENCE, MACHINE LEARNING, AND NEW TECHNOLOGIES

Currently Using

Planning to Use

No Plans to Use

46.4%

21.4%

32.2%

ARTIFICIAL INTELLIGENCE (AI) AND MACHINE LEARNING UTILIZATION

Nearly half, 46.4%, of respondents reported that they are

not currently using AI or machine learning in their jobs, but

are planning to utilize them in the future.

Approximately 32% of respondents reported currently

utilizing AI and machine learning, while 21% of respondents

reported not having any plans to use machine learning or

artificial intelligence in the future.

46.4% 32%reported that they are not currently using AI or machine learning in

their jobs

reported currently utilizing AI and

machine learning

exabeam.com // The Exabeam 2018 Cyber Security Professionals Salary and Job Report

34

ARTIFICIAL INTELLIGENCE, MACHINE LEARNING, AND NEW TECHNOLOGIES

Strongly Agree

Agree

Strongly Disagree

Disagree

I Don’t Know

14.1%

0.8%

6.2%

20.8%

58%

CAN MACHINE LEARNING AND ARTIFICIAL INTELLIGENCE (AI) MAKE YOUR JOB EASIER?

Nearly 75% of respondents agreed that machine learning

and AI can make their job better or easier. Only 7% of

respondents believed that AI and machine learning could not

make their jobs better.

75% 7%agreed that machine learning and AI can

make their job better or easier

believed that AI and machine learning could

not make their jobs better

exabeam.com // The Exabeam 2018 Cyber Security Professionals Salary and Job Report

35

ARTIFICIAL INTELLIGENCE, MACHINE LEARNING, AND NEW TECHNOLOGIES

17.9%

3.3%

1.9%

18.1%

58.8%

CAN MACHINE LEARNING AND ARTIFICIAL INTELLIGENCE (AI) IMPROVE SECURITY?

Overall, participants believe AI and machine learning can

contribute to improved security in their organization. More

than 75% of survey participants agreed that AI and machine

learning can help with security, while approximately 5%

said that it would not be helpful within their organizations.

Eighteen percent of participants were unsure.

75% 5%

18%

agreed that AI and machine learning can

help with security

said that it would not be helpful within their

organizations

were unsure

Strongly Agree

Agree

Strongly Disagree

Disagree

I Don’t Know

exabeam.com // The Exabeam 2018 Cyber Security Professionals Salary and Job Report

36

ARTIFICIAL INTELLIGENCE, MACHINE LEARNING, AND NEW TECHNOLOGIES

2.7% 8.7%

15.4%

52.8%

20.4%

ARE MACHINE LEARNING AND ARTIFICIAL INTELLIGENCE (AI) A THREAT TO JOB SECURITY?

Most participants, nearly 75%, do not believe that AI and

machine learning area threat to their job security.

However, more than 10% of participants feel threatened by

the increased use of AI and machine learning in their field.

75% 10%do not believe that AI and machine learning

area threat to their job security

feel threatened by the increased use of AI and

machine learning in their field

Strongly Agree

Agree

Strongly Disagree

Disagree

I Don’t Know

exabeam.com // The Exabeam 2018 Cyber Security Professionals Salary and Job Report

37

MACHINE LEARNING AND ARTIFICIAL INTELLIGENCE (AI) UTILIZATION BY INDUSTRY

Most industries utilize AI and machine learning to some

extent. For those participants who are not currently using AI

and machine learning, many have plans to implement them

in the future.

ARTIFICIAL INTELLIGENCE, MACHINE LEARNING, AND NEW TECHNOLOGIES

Utilities, Energy, and Extraction

Healthcare & Pharmaceuticals

Manufacturing

Telecommunications & Tech

Retail & Consumer Durables

Finance & Financial Services

Government

Insurance

Education

57.7%

37.8%

35%

34.6%

29.4%

28.7%

25%

12.5%

11.8%

26.9%

43.2%

45%

48.8%

52.9%

48.3%

45.5%

68.8%

58.8%

15.4%

18.9%

20%

16.5%

17.6%

23%

29.5%

18.8%

29.4%

Currently Using Plan to Use in Future No Plans to Use

exabeam.com // The Exabeam 2018 Cyber Security Professionals Salary and Job Report

38

THREAT TO JOB SECURITY BY INDUSTRY

Those surveyed in the insurance industry have the strongest

belief that artificial intelligence and machine learning are

threats to their jobs.

ARTIFICIAL INTELLIGENCE, MACHINE LEARNING, AND NEW TECHNOLOGIES

Insurance

Finance & Financial Services

Telecommunications & Tech

Manufacturing

Education

Retail & Consumer Durables

Government

Utilities, Energy and Extraction

Healthcare & Pharmaceuticals

25%

13.8%

12.6%

10%

5.9%

5.9%

4.5%

3.8%

2.7%

31.3%

20.7%

20.5%

30%

23.5%

20.5%

19.2%

18.9%

43.8%

65.5%

66.9%

60%

70.6%

94.1%

75%

76.9%

78.4%

Agree Undecided Disagree

exabeam.com // The Exabeam 2018 Cyber Security Professionals Salary and Job Report

39

EMERGING TECHNOLOGIES

Security professionals are always on the lookout for cutting-

edge technologies to make their jobs better.

Endpoint detection and response (EDR) technologies

and artificial intelligence are the technologies security

professionals are most excited about.

Endpoint Detection and Response (EDR - SIEM, network forensics, DLP, threat detection and incident response, etc.)

Artificial Intelligence

User and Entity Behavior Analytics (UEBA), (data aggregation and advanced analytics, etc. )

Machine Learning

Cloud Security (data encryption, infra security, DDoS mitigation, identity & access management, penetration testing, etc.)

Network Security (monitoring, firewalls, security gateways, SDN, VPN, web security, network segmentation, etc.)

Blockchain technologies (encryption to address increased volume and sophistication of cyber threats, etc.)

Internet of Things (IoT)

ARTIFICIAL INTELLIGENCE, MACHINE LEARNING, AND NEW TECHNOLOGIES

Endpoint Detection

and Response

Machine Learning

CloudSecurity

Blockchain

IoT

NetworkSecurity

Artifical Intelligence

UEBA: User and Entity Behavior

Analytics

exabeam.com // The Exabeam 2018 Cyber Security Professionals Salary and Job Report

40

CAREER ADVICE TO THOSE THINKING OF HAVING A CAREER IN CYBER SECURITY

CAREER ADVICE TO THOSE THINKING OF HAVING A CAREER IN CYBER SECURITY

WOULD YOU RECOMMEND A CAREER AS A SECURITY ANALYST?

Overwhelmingly, participants (86%) said they would

recommend a career as a security analyst to new graduates.

While 9.4% said they were unsure or didn’t know if they

could recommend the career, less than 5% of security

professionals recommended against the career.

86% 9.4%

5%

say they would recommend a career

as a security analyst to new graduates

say they were unsure or didn’t know if they

could recommend the career

recommended against the career

Yes

Unsure

No

9.4%

4.6%86.1%

exabeam.com // The Exabeam 2018 Cyber Security Professionals Salary and Job Report

42

CAREER ADVICE TO THOSE THINKING OF HAVING A CAREER IN CYBER SECURITY

WHAT ADVICE WOULD YOU GIVE TO NEW GRADUATES?

The most common advice security professionals would give

to recent graduates wanting to enter the field is,

“ALWAYS KEEP LEARNING.”

Professionals realize that the security field is constantly

evolving, and to be successful they must keep current on

new technologies.

Security professionals also recommended that new

graduates focus on obtaining certifications. Many security

professionals recommended getting certifications early in

your career when there is more time to study.

Always keep learning

Get certifications

Other

Do what you love

Participate in internships

Start in IT

Work hard

Get a breadth of knowledge

Be curious

Be patient

Be a self-learner

Be flexible

Improve communication skills

Be creative

Find a great organization

Don’t give up

Find your niche

Don’t be afraid to start at the bottom

23.2%

11.8%

15.5%

8.6%

2.3%

3.2%

2.3%

13.2%

5%

1.8%

1.4%

0.9%

0.9%

0.9%

1.8%

0.9%

4.1%

2.3%

exabeam.com // The Exabeam 2018 Cyber Security Professionals Salary and Job Report

43

METHODOLOGYSurvey participants included 481 security professionals worldwide. 

Participants were recruited through mailing lists and technical forums. 

Participants self-selected into the survey and were not compensated

for their participation. However, all who submitted email addresses

were entered into a drawing for a variety of prizes. Participants were

also promised they would receive a copy of the salary survey once the

results were compiled. Responses were collected through an online

questionnaire. All salaries were converted to U.S. dollars after answering

survey questions about salary.

METHODOLOGY

55%

50%

481

40%

82%

reside in the North America

living in the United States

security professionals participants worldwide

reside in Europe

reside in one of just 14 countries worldwide

exabeam.com // The Exabeam 2018 Cyber Security Professionals Salary and Job Report

44

Exabeam provides security intelligence and management solutions to

help organizations of any size protect their most valuable information.

The Exabeam Security Intelligence Platform uniquely combines a

data lake for unlimited data collection at a predictable price, machine

learning for advanced analytics, and automated incident response into

an integrated set of products. The result is the first modern security

intelligence solution that delivers where legacy SIEM vendors have failed.

Built by seasoned security and enterprise IT veterans from Imperva,

ArcSight, and Sumo Logic, Exabeam is headquartered in San Mateo,

California. Exabeam is privately funded by Norwest Venture Partners,

Aspect Ventures, Icon Ventures, Lightspeed Venture Partners, and investor

Shlomo Kramer. Follow us on Twitter and LinkedIn.

2 Waters Park Dr., Suite 200

San Mateo, CA 94403

1.844.EXABEAM

[email protected]