exabeam 2018 cyber security professionals salary and job report · 2019-12-19 · overview overview...
TRANSCRIPT
EXABEAM 2018 CYBER SECURITY PROFESSIONALS SALARY AND JOB REPORT:COMPENSATION, JOB SATISFACTION, EDUCATION, AND TECHNOLOGY OUTLOOK
OVERVIEW
OVERVIEW
Compensation, Job Satisfaction, Education,and Technology Outlook
THE EXABEAM 2018 CYBER SECURITY PROFESSIONALS SALARY
AND JOB REPORT is based on a global survey of 481 security
professionals that was conducted in March 2018. The purpose of the survey was to
gain insights into the trends with security professionals’ salaries (focusing on the
median range of income earners according to this sample), their education levels, job
satisfaction, and attitudes towards innovative and new emerging technologies.
Note: All salaries were converted to U.S. dollars after answering survey questions
about salary. The resulting income numbers do not represent regional differences in
income and cost of living, which can be a significant factor when evaluating salary.
REPORT
exabeam.com // The Exabeam 2018 Cyber Security Professionals Salary and Job Report
2
ContentsKEY INSIGHTS
JOB SECURITY & SATISFACTION
SALARY TRENDS IN THE SECURITY PROFESSION
ARTIFICIAL INTELLIGENCE, MACHINE LEARNING, AND NEW TECHNOLOGIES
TRENDS IN SECURITY PROFESSION ROLES, CERTIFICATIONS, AND EDUCATION
CAREER ADVICE TO THOSE THINKING OF HAVING A CAREER IN CYBER SECURITY
04
24
07
33
17
41
exabeam.com // The Exabeam 2018 Cyber Security Professionals Salary and Job Report
3
KEY INSIGHTSKey Salary And Demographic Insights
SALARIES ARE HIGHEST IN NORTH AMERICA
Salaries in North America are 50-100% higher than reported salaries
in Europe or Asia Pacific. Salaries are twice as much in North America
as they are in Latin America.
SALARIES ARE HIGHEST IN THE RETAIL INDUSTRY
Salaries in the retail sector are the highest, while those in the education
and telecommunication sectors are the lowest. While salaries do
not continue to increase reliably with increased levels of education,
participants with advanced degrees consistently earned more than those
with only bachelor’s degrees.
SALARIES AT SMALL COMPANIES ARE LOWEST
Among companies with 101 employees or more, median salary ranges
were $75,001-$100,000. Companies with 100 employees or less had
median salary ranges of $50,001-$75,000. Participants reporting higher
salaries also reported lower job security.
SALARIES AT SMALL COMPANIES ARE LOWEST
50-100%Salaries in North America are higher than reported salaries in Europe or
Asia Pacific
101 Employees or more100 Employees or less
$75,001-$100,000
$50,001-$75,000
Median Salary Ranges
KEY INSIGHTS
exabeam.com // The Exabeam 2018 Cyber Security Professionals Salary and Job Report
4
Key Survey Satisfaction Insights
Participants who graduated from high school, but did not
go to college, reported the lowest satisfaction with their
current salary.
Participants who reported not attending school,
were some of the most satisfied with their salaries.
System and security admins, chief security inspectors,
and security engineers are the most satisfied with their
current salaries.
Security professionals with roles in risks, standards and
compliance officers, security program managers, and
SOC/security leads are the least satisfied with their
current salaries.
Nearly one fifth of respondents said that continuous learning
or defending their company and catching threats was the
most satisfying part of their job.
A bachelor’s degree is the most common degree obtained
by security professionals. However, SIEM content creators,
security architects, cloud application, and security analysts
most often have obtained master’s degrees.
40% 35%
40%
16.8%with bachelor’s and
master’s degrees were satisfied with their
current pay
reported being satisfied with their
current pay
reported being unsatisfied with their
current pay
said the people they work with is the most
satisfyingpart of their job
KEY INSIGHTS
Participants who reported not attending school, were some of
the most satisfied with their salaries.
A bachelor’s degree is the most common degree obtained by
security professionals.
exabeam.com // The Exabeam 2018 Cyber Security Professionals Salary and Job Report
5
Additional Insights
Most security professionals are male.
Security professionals are well educated. Along with a
variety of certifications, the majority of participants reported
having at least a Bachelor’s degree (72%). Almost 40%
reported having completed post-bachelor’s work or
an advanced degree.
More than 25% of participants said that constant
interruptions were the least satisfying part of the job.
Overwhelmingly, participants (86%) said they would
recommend a career as a security analyst to new graduates.
90%
25%
72%
40%
86%of survey participants
identified as male
said that constant interruptions were the least satisfying part of
the job
at least have a Bachelor’s degree
reported having completed post-bachelor’s or an advanced degree
said they would recommend a career
as a security analyst to new graduates
KEY INSIGHTS
exabeam.com // The Exabeam 2018 Cyber Security Professionals Salary and Job Report
6
SURVEY PARTICIPANT PROFILE
Overall, the median salary range among all respondents
participating in the survey was $75,000-$100,000 per year.
However, the largest percentage of participants (24.7%)
reported their salary range as $50,001-$75,000 per year,
with 34% earning more than $100,000 per year.
Other security professional demographics include:
SALARY TRENDS IN THE SECURITY PROFESSION
GENDER EDUCATION
MEDIAN SALARY BY INDUSTRY
Less than $50,000 per year
$50,001 - $75,000 per year
$75,001 - $100,000 per year
$100,001 - $125,000 per year
$125,001 - $150,000 per year
$150,001 - $175,000 per year
$175,001 - $200,000 per year
$200,001 or more per year
18.3%
22.7%
11.9%
5.8%
1.9%
1.5%
Median salary ranges were calculated by sorting the list of salary ranges for each of the 408 participants from least to greatest and selecting the middle salary range. Where there was no middle point, due to an even number of participants in a group, the mean of the two middle points was reported in most instances. If the mean was not representative due to higher discrepancy between the two middle ranges, the ranges of the two midpoints were reported.
24.7%
13.3%
90% 71%Male have at least a
bachelor’s degree
MEDIAN ANNUAL SALARIES
exabeam.com // The Exabeam 2018 Cyber Security Professionals Salary and Job Report
8
MEDIAN SALARY BY REGION
The median salary range was greatest for professionals
working in North America, while those in Latin America
reported the lowest median salary ranges.
MEDIAN SALARY AND INDUSTRY
Reported median salaries were highest in the retail and consumer durables
industry. Education, financial services, manufacturing, and telecommunications
security professionals reported the lowest salaries.
SALARY TRENDS IN THE SECURITY PROFESSION
North Ameria
Europe
Asia Pacific
Latin America
Other
Retail & Consumer Durables
Government
Healthcare & Pharmaceuticals
Insurance
Other
Energy & Extraction
Education
Finance & Financial Services
Manufacturing
Telecommunications & Tech
$75,001 - $100,000 $100,001 - $125,000
$50,001 - $75,000
$75,001 - $100,000
$50,001 - $75,000
$75,001 - $100,000
$50,001 - $75,000
$50,001 - $75,000
$50,001 - $75,000
$50,001 - $75,000
$50,001 - $75,000
$50,001 - $75,000$75,001 - $100,000
< $50,001 - $75,000
$75,001 - $100,000
exabeam.com // The Exabeam 2018 Cyber Security Professionals Salary and Job Report
9
SALARY SATISFACTION BY INDUSTRY
Based on survey responses, security professionals in the
airlines and aerospace, and non-profit verticals are the least
satisfied with their salaries. Industries that reported 0%
satisfaction are not reported here.
SALARY TRENDS IN THE SECURITY PROFESSION
SALARY SATISFACTION BY INDUSTRY
Airlines & Aerospace
Automotive
Business Support & Logistics
Construction
Education
Entertainment & Leisure
Finance & Financial Services
Food & Beverages
Government
Healthcare & Pharmaceuticals
Insurance
Manufacturing
Nonprofit
Retail & Consumer Durables
Telecommunications & Tech
Transportation & Delivery
Energy & Extraction
22.2%
27%
44.4%
45%
47.1%
33.3%
47.1%
28.7%
33.9%
50%
50%
31.8%
30.8%
100%
43.8%
75%
25%
exabeam.com // The Exabeam 2018 Cyber Security Professionals Salary and Job Report
10
COMPANY SIZE AND MEDIAN SALARY
About half (48.2% ) of survey participants reported working
for large Enterprise-sized companies with 2,501 or more
employees, while only 13.9% reported working for small
companies with less than 100 employees. Median salaries
remained similar for companies with more than 101
employees. Only employees in the smallest companies saw
lower salaries for the previous year.
SALARY TRENDS IN THE SECURITY PROFESSION
48.2% 13.9%of survey participants reported working for
large Enterprise-sized companies with 2,501 or
more employees
reported working for small companies with
less than 100 employees
Large Enterprise$75,001 - $100,000
Mid-Sized$75,001 - $100,000
Enterprise$75,001 - $100,000
Small$50,001 - $75,000
Small (0-100 employees)
Mid-Sized (101-1,000 employees)
Enterprise (1,001 to 2,500 employees)
Large Enterprise (2,501 or more employees)
21.6%
13.9%
16.2%
48.2%
exabeam.com // The Exabeam 2018 Cyber Security Professionals Salary and Job Report
11
MEDIAN SALARY LEVEL OF SECURITY PROFESSIONALS FOR THEIR EXPERIENCE LEVEL
Experience plays a significant role in salaries. Participants
with more than 10 years of experience reported salaries of
nearly twice that of entry-level analysts.
The number of years professionals have been with their
employer did not seem to affect the median salary.
SALARY TRENDS IN THE SECURITY PROFESSION
YEARS WITH COMPANY AND MEDIAN SALARY
0 - 2 years
3 - 5 years
6 - 10 years
More than 10 years
0 - 2 years
3 - 5 years
6 - 10 years
More than 10 years
$75,001 - $100,000
$75,001 - $100,000
$75,001 - $100,000
$75,001 - $100,000
$75,001 - $100,000
$50,001 - $75,000
$50,001 - $75,000
$100,001 - $125,000
exabeam.com // The Exabeam 2018 Cyber Security Professionals Salary and Job Report
12
MEDIAN SALARY AND JOB TITLE
Participants with titles of chief security inspector and security program
manager reported the highest median salaries ($175,000-$200,000),
while system/security admin, security analysts and SOC analysts reported
lower median salaries ($50,001-$75,000).
SALARY SATISFACTION BY TITLE
Based on survey responses SOC/security leads are the least satisfied with
their current salaries. System/security admins, chief security inspectors
and security engineers are the most satisfied with their current salaries.
SALARY TRENDS IN THE SECURITY PROFESSION
Chief Security Inspector
Manager, Information Security
Officer, Information Security
Researcher
Risk, Standards and Compliance Analyst/Officer
SOC Analyst 1 or 2
SOC/Security Lead
Security Analyst and Information Security Analyst
Security Consultant
Security Engineer
Secuirty Program Manager
System/Security Admin
Chief Security Inspector
Manager, Information Security
Officer, Information Security
Researcher
SOC Analyst 1 or 2
SOC/Security Lead
Security Analyst and Information Security Analyst
Security Consultant
Security Engineer
System/Security Admin
$175,001 - $200,000
100%
100%$175,001 - $200,000
44.6%
$125,001 - $150,000
$75,001 - $100,000
38.5%
$75,001 - $100,000
38.7%
$75,001 - $100,000
29.9%
$75,001 - $100,000
31.6%
$75,001 - $100,000
34%
$75,001 - $100,000
$50,001 - $75,000
25%
$50,001 - $75,000
35.4%
$50,001 - $75,000
exabeam.com // The Exabeam 2018 Cyber Security Professionals Salary and Job Report
13
PRIMARY RESPONSIBILITY AND THEIR MEDIAN SALARY
Security leadership positions reported the highest median
salaries of all respondents.
Respondents whose primary responsibility was compliance
and forensic also reported salaries that were higher than the
overall median salary range of $75,001-$100,000.
Those whose primary responsibility was malware analysis
or security researcher reported the lowest salaries.
SALARY TRENDS IN THE SECURITY PROFESSION
Adversary Simulation
Application Security
Audit and Compliance
Cloud Application Security
Compliance Reporting
Endpoint Security
Forensic Analysis
Incident Response
Leadership
Malware Analysis/Researcher
Network Security
Other
Packet Analysis
Penetration Testing
SIEM Content Creation
SOC Management
Security Architecture
Security Education & Training
Security Training
Threat Hunting
Threat Intelligence
$50,001 - $75,000
$50,001 - $75,000
$50,001 - $75,000
$50,001 - $75,000
$50,001 - $75,000
$50,001 - $75,000
$50,001 - $75,000
< $50,001
$75,001 - $100,000
$75,001 - $100,000
$75,001 - $100,000
$75,001 - $100,000
$75,001 - $100,000
$75,001 - $100,000
$75,001 - $100,000
$75,001 - $100,000
$62,500 - $87,500
$62,500 - $87,500
$62,500 - $87,500
$87,500 - $112,000
$100,001 - $125,000
exabeam.com // The Exabeam 2018 Cyber Security Professionals Salary and Job Report
14
SECURITY PROFESSIONALS’ SATISFACTION WITH CURRENT SALARY
Only 35% of survey participants reported being satisfied
with their current pay, while nearly 40% reported being
unsatisfied with their pay.
SALARY AND JOB SATISFACTION
Overall, most survey respondents reported being satisfied with their current job
regardless of their median salary.
SALARY TRENDS IN THE SECURITY PROFESSION
Very Unsatisfied
Unsatisfied
Neither Satisfied nor Unsatisfied
Satisfied
Very Satisfied
Less than $50,000 per year
$50,001 - $75,000per year
$75,001 - $100,000per year
$100,001 - $125,000per year
$125,001 - $150,000per year
$150,001 - $175,000per year
$175,001 - $200,000per year
8.9%
73.9%
77.3%
76.1%
62.5%
73.7%
75%
100%
6.8%
8.4%
10.1%
3.1%
Unsatisfied Satisfied
10.5%
14.3%
0%
24.9%
3.7%
30.3%
32%
exabeam.com // The Exabeam 2018 Cyber Security Professionals Salary and Job Report
15
SALARY SATISFACTION BY EDUCATION LEVEL Forty percent of those those with bachelor’s and master’s
degrees were satisfied with their current pay.
Participants who graduated from high school, but did not
go to college, reported the lowest satisfaction with their
current salary.
Participants who reported not attending school, were some
of the most satisfied with their salaries.
SALARY TRENDS IN THE SECURITY PROFESSION
Did not attend school
Graduated from high school/GED
Some college
Bachelor’s degree
Post-bachelor’s degree work
Master’s degree
Ph.D
Post-doctoral work
Other
50%
50%
29.6%
28.6%
20%
39.2%
32.4%
39.4%
40%
exabeam.com // The Exabeam 2018 Cyber Security Professionals Salary and Job Report
16
JOB TITLES
More than 30% of participants reported having a job title of
security analyst or information security analyst, while chief
security inspector, security program manager and system/
security administrator were less common.
TRENDS IN SECURITY PROFESSION ROLES, CERTIFICATIONS, AND EDUCATION
Chief Security Inspector
Manager, Information Security
Officer, Information Security
Researcher
Risk, Standards and Compliance Analyst/Officer
SOC Analyst 1 or 2
SOC/Security Lead
Security Analyst and Information Security Analyst
Security Consultant
Security Engineer
Secuirty Program Manager
System/Security Admin
0.2%
14.1%
16.2%
0.8%
1.7%
10.2%
6.2%
15.4%
0.2%
0.2%
4%
30.6%30%reported having a job title of
security analyst orinformation security analyst
exabeam.com // The Exabeam 2018 Cyber Security Professionals Salary and Job Report
18
PRIMARY JOB RESPONSIBILITIES
Security professionals’ job functions are as varied as their
titles. More than 14% of participants reported that their
primary job responsibility is as a security architect.
It is telling that 12% of participants reported their main
responsibility as something other than what was listed,
exemplifying the diverse responsibilities of those in the
security field.
TRENDS IN SECURITY PROFESSION ROLES, CERTIFICATIONS, AND EDUCATION
Adversary Simulation
Application Security
Audit and Compliance
Cloud Security
Compliance Reporting
Education and Training
Endpoint Security
Forensic Analysis
Incident Response
Leadership
Malware Analysis/Researcher
Network Security
Other
Packet Analysis
Penetration Testing
Security Architecture
Security Training
SIEM Content Creation
SOC Management
Threat Hunting
Threat Intelligence
0.8%
1%
4%
1%
1%
4.2%
0.8%
6.2%
8.5%
1.5%
12.1%
5.6%
0.4%
14.4%
1.3%
3.3%
12.3%
4%
7.1%
3.7%
6.9%
14% 12%reported that
their primary job responsibility is
security architect
reported that their main responsibility as something other than
what was listed
exabeam.com // The Exabeam 2018 Cyber Security Professionals Salary and Job Report
19
ADDITIONAL JOB RESPONSIBILITIES
More than 60% of participants reported that their jobs also
include incidence response and network security. Code review
and adversary simulation are performed by participants
less frequently.
TRENDS IN SECURITY PROFESSION ROLES, CERTIFICATIONS, AND EDUCATION
Adversary Simulation
Application Security
Audit and Compliance
Cloud Security
Code Review
Compliance Reporting
Education and Training
Endpoint Security
Forensic Analysis
Incident Response
Leadership
Malware Analysis
Network Security
Other
Packet Analysis
Penetration Testing
Security Architecture
Security Training
SIEM Content Creation
SOC Management
Threat Hunting
Threat Intelligence
11.4%
28.5%
39.9%
10.4%
32.4%
27.7%
54.3%
65.1%
49.7%
40.3%
28.5%
40.5%
52%
4.4%
38.3%
53.4%
47.8%
63.4%
27.7%
34.1%
50.3%
31.2%
exabeam.com // The Exabeam 2018 Cyber Security Professionals Salary and Job Report
20
CERTIFICATIONS
Security professionals hold a wide variety of certifications.
Respondents listed more than 150 different types of held
certifications. CISSP: Certified Information Systems Security
Professional certification was the most popular certification
reported by survey participants (33.9%), followed by
CEH:Certified Ethical Hacker (23.7%), and CompTIA (22.7%).
Certifications that were held by fewer than 5% of survey
participants are not shown.
TRENDS IN SECURITY PROFESSION ROLES, CERTIFICATIONS, AND EDUCATION
33.9% 23.7%
22.7%
Certified Information Systems Security
Professional certification
CEH:Certified Ethical Hacker
CompTIA
CISSP: Certified Information Systems Security Professional
33.9%
CEH: Certifed Ethical Hacker
23.7%GSEC:
SecurityEssentials Network
Security
None
CISM: Certified
Information SecurityManager
SANS GIAC
Comp TIA22.7%
OtherCertifcations
exabeam.com // The Exabeam 2018 Cyber Security Professionals Salary and Job Report
21
RAISES AND EDUCATION
Education did have some influence on raises that
respondents received last year. However, most respondents
reported receiving a raise between 1-5% in 2017.
Levels of education reported by less than 3% of participants
are not shown.
MEDIAN YEARS WITH CURRENT COMPANY BY INDUSTRY
Most participants, regardless of industry, have worked for their current company for a
median of 3-5 years. However, those in the insurance and healthcare sectors reported
being with their current companies for less than 2 years.
TRENDS IN SECURITY PROFESSION ROLES, CERTIFICATIONS, AND EDUCATION
Graduated from high school/GED
Some college
Bachelor’s degree
Post-bachelor’s degree work
Master’s degree
Education
Finance & Financial Services
Government
Healthcare & Pharmaceuticals
Insurance
Manufacturing
Other
Retail & Consumer Durables
Telecommunications & Tech
Utilities, Energy, and Extraction
1 - 5%
0%
1 - 5%
1 - 5%
1 - 5%
3 - 5 years
3 - 5 years
3 - 5 years
3 - 5 years
3 - 5 years
3 - 5 years
3 - 5 years
<6 months - 2 years
<6 months - 2 years
<6 months - 2 years
exabeam.com // The Exabeam 2018 Cyber Security Professionals Salary and Job Report
22
OVERALL EXPERIENCE AND INDUSTRY
Survey participants who work in the agriculture, real estate, and the utilities
industries reported having the longest security careers. Most participants,
irrespective of industry, have worked in the cyber security field for at least 6 years.
TRENDS IN SECURITY PROFESSION ROLES, CERTIFICATIONS, AND EDUCATION
Education
Finance & Financial Services
Government
Healthcare & Pharmaceuticals
Insurance
Manufacturing
Other
Retail & Consumer Durables
Telecommunications & Tech
Utilities, Energy, and Extraction
6 - 10 years
6 - 10 years
6 - 10 years
6 - 10 years
6 - 10 years
>10 years
6 - 10 years
6 - 10 years
6 - 10 years
6 - 10 years
exabeam.com // The Exabeam 2018 Cyber Security Professionals Salary and Job Report
23
JOB SECURITY AND SATISFACTION
OVERALL JOB SATISFACTION
Security professionals seem to be very happy with their
career choices. Overall, they (83%) are satisfied with
their jobs.
Nearly 30% of respondents reported being very satisfied and
more than 45% reported being satisfied.
Less than 9% of survey participants reported being very
unsatisfied or unsatisfied with their jobs.
83% 30%
45%
of workers are satisfied with their jobs
reported being very satisfied
reported being satisfied
Very Satisfied
Satisfied
Neither Satisfied nor Unsatisfied
Unsatisfied
Very Unsatisfied
1.9%
45.9%
6.2%
28.3%
17.7%
exabeam.com // The Exabeam 2018 Cyber Security Professionals Salary and Job Report
25
JOB SECURITY AND SATISFACTION
OVERALL JOB SECURITY
Overall, nearly 80% of participants feel secure about the
future of their jobs.
Only 6.3% reported that they felt their jobs may be
in jeopardy.
80% 6.3%of participants feel
secure about the future of their jobs
reported that they felt their jobs may be
in jeopardy
Very Secure
Secure
Neither Secure nor Insecure
Insecure
Very Insecure
1.7%
29.9%
4.6%13.9%
49.9%
exabeam.com // The Exabeam 2018 Cyber Security Professionals Salary and Job Report
26
JOB SECURITY AND SATISFACTION
PROFESSIONAL EXPERIENCE
Nearly 40% of survey respondents reported careers in the
security industry spanning more than 10 years.
Nearly 45% of respondents reported working at their current
company for less than 2 years.
40% 45%reported careers in security industry
spanning more than 10 years
reported working at their current company
for less than 2 years
<6 months - 2 years 3 - 5 years 6 - 10 years >10 years
21.2%
20.7%
6.9%
24.7%
28.5%
7.9%
43.5%
37.1%
YEARS WORKING AT CURRENT COMPANY
EXPERIENCE WORKING IN SECURITY INDUSTRY
exabeam.com // The Exabeam 2018 Cyber Security Professionals Salary and Job Report
27
JOB SECURITY AND SATISFACTION
Not surprisingly, respondents who felt more secure in their job also
generally reported being more satisfied with their jobs.
However, it may be surprising that 50% of participants who reported
having very little job security also reported high job satisfaction.
JOB SECURITY BY MEDIAN SALARY
Participants reporting higher salaries also reported lower job security.
JOB SECURITY AND SATISFACTION
Very Secure
Secure
Neither Secure nor Insecure
Insecure
Very insecure
Very Secure
Secure
Neither Secure nor Insecure
Insecure
Very insecure
84.7%
$62,500 - $87,500
77.5%
$50,001 - $75,000
55.2%
$50,001 - $75,000
36.4%
$75,001 - $100,000
50%
$75,001 - $100,000
exabeam.com // The Exabeam 2018 Cyber Security Professionals Salary and Job Report
28
COMPANY SIZE AND JOB SATISFACTION
Job satisfaction does not significantly vary based on company
size. Overall, the majority of participants were satisfied with
their jobs regardless of the size of their company.
EDUCATION AND JOB SATISFACTION
Overall, survey respondents reported being satisfied with their current job
regardless of level of education.
JOB SECURITY AND SATISFACTION
Large Enterprise (2,501 or more employees)
Enterprise (1,001 - 2,500 employees)
Mid-sized (101 - 100 employees)
Small (0-100 employees)
Did not attend school
Graduated from high school/GED
Some college
Bachelor’s degree
Post-bachelor’s degree work
Master’s degree
Ph.D
Post-doctoral work
Other
50%
12%
14.3%
19.9%
11.8%
17.6%
0%
21.4%
20%
50%76.3%
80%
69.2%74.7%
70.2%72.3%
79.1%
Unsatisfied
Unsatisfied
Satisfied
Satisfied
82.4%
76.8%
100%
50%
80%
9.9%
11.5%
4.8%
3%
exabeam.com // The Exabeam 2018 Cyber Security Professionals Salary and Job Report
29
JOB SECURITY AND SATISFACTION
JOB SATISFACTION AND EXPERIENCE
Satisfaction does not significantly vary with the amount of
time that participants had been with their current company.
However, participants who have been working as security
professionals for less time (0-2 years) are more satisfied
with their jobs than those who have been working for longer.
0-2 Yearsworkers are more satisfied with their
jobs than those who have been working for longer
TIME WITH COMPANY AND JOB SATISFACTION
EXPERIENCE AND JOB SATISFACTION
0 - 2 years
3 - 5 years
6 - 10 years
More than 10 years
0 - 2 years
3 - 5 years
6 - 10 years
More than 10 years
75.8%
76.3%
67%
75.6%
84.9%
70.8%
74.6%
77.5%
exabeam.com // The Exabeam 2018 Cyber Security Professionals Salary and Job Report
30
PRIMARY RESPONSIBILITY AND JOB SATISFACTION
Respondents whose primary responsibilities are adversary
simulation, cloud security, compliance security, and packet
analysis are the most satisfied with their jobs. Those who are
responsible for security training and forensics reported being
the least satisfied.
JOB SECURITY AND SATISFACTION
Adversary Simulation
Application Security
Audit And Compliance
Cloud Application Security
Compliance Reporting
Endpoint Security
Forensic Analysis
Incident Response
Leadership
Malware Analysis/Researcher
Network Security
Packet Analysis
Penetration Testing
SIEM Content Creation
SOC Management
Security Architecture
Security Education & Training
Security Training
Threat Hunting
Threat Intelligence
100%
100%
78.9%
100%
84.5%
70%
69.7%
80%
56.1%
66.7%
70%
78.9%
79.4%
71%
71.4%
100%
81.3%
50%
50%
73.3%
exabeam.com // The Exabeam 2018 Cyber Security Professionals Salary and Job Report
31
LEAST SATISFYING ASPECT OF JOB
More than 25% of participants said that constant interruptions were least
satisfying part of their job.
MOST SATISFYING ASPECT OF JOB
Nearly one fifth of respondents said that continuous learning or
defending their company and catching threats was the most satisfying
part of their job.
16.8 % of respondents said the people they work with is the most
satisfying part of their job.
JOB SECURITY AND SATISFACTION
ALways learning something new
Defend company & catching threats
People & teams
Challenge
Flexibility, freedom & independence
Helping customers
Problem solving
Cutting-edge technology
Improving security
Ever-changing field
Making a difference
Not the same everyday
Interruptions
False positives/dead ends
Tedium
Hours
Never-ending tickets
Nothing
Lack of support from management
Other
Bureaucracy
User non-compliance
Budget cuts
Competing priorities
19.4%
27.9%
7.3%
9.8%
19.4%
22.5%
5.8%
8.3%
3.7%
1%4.2%
3.3%
3.7%
1.9%
16.8%
11.5%
5.2%
7.1%
3.1%
0.8%
5.2%
4%
4.2%
1.9%
exabeam.com // The Exabeam 2018 Cyber Security Professionals Salary and Job Report
32
ARTIFICIAL INTELLIGENCE, MACHINE LEARNING, AND NEW TECHNOLOGIES
Currently Using
Planning to Use
No Plans to Use
46.4%
21.4%
32.2%
ARTIFICIAL INTELLIGENCE (AI) AND MACHINE LEARNING UTILIZATION
Nearly half, 46.4%, of respondents reported that they are
not currently using AI or machine learning in their jobs, but
are planning to utilize them in the future.
Approximately 32% of respondents reported currently
utilizing AI and machine learning, while 21% of respondents
reported not having any plans to use machine learning or
artificial intelligence in the future.
46.4% 32%reported that they are not currently using AI or machine learning in
their jobs
reported currently utilizing AI and
machine learning
exabeam.com // The Exabeam 2018 Cyber Security Professionals Salary and Job Report
34
ARTIFICIAL INTELLIGENCE, MACHINE LEARNING, AND NEW TECHNOLOGIES
Strongly Agree
Agree
Strongly Disagree
Disagree
I Don’t Know
14.1%
0.8%
6.2%
20.8%
58%
CAN MACHINE LEARNING AND ARTIFICIAL INTELLIGENCE (AI) MAKE YOUR JOB EASIER?
Nearly 75% of respondents agreed that machine learning
and AI can make their job better or easier. Only 7% of
respondents believed that AI and machine learning could not
make their jobs better.
75% 7%agreed that machine learning and AI can
make their job better or easier
believed that AI and machine learning could
not make their jobs better
exabeam.com // The Exabeam 2018 Cyber Security Professionals Salary and Job Report
35
ARTIFICIAL INTELLIGENCE, MACHINE LEARNING, AND NEW TECHNOLOGIES
17.9%
3.3%
1.9%
18.1%
58.8%
CAN MACHINE LEARNING AND ARTIFICIAL INTELLIGENCE (AI) IMPROVE SECURITY?
Overall, participants believe AI and machine learning can
contribute to improved security in their organization. More
than 75% of survey participants agreed that AI and machine
learning can help with security, while approximately 5%
said that it would not be helpful within their organizations.
Eighteen percent of participants were unsure.
75% 5%
18%
agreed that AI and machine learning can
help with security
said that it would not be helpful within their
organizations
were unsure
Strongly Agree
Agree
Strongly Disagree
Disagree
I Don’t Know
exabeam.com // The Exabeam 2018 Cyber Security Professionals Salary and Job Report
36
ARTIFICIAL INTELLIGENCE, MACHINE LEARNING, AND NEW TECHNOLOGIES
2.7% 8.7%
15.4%
52.8%
20.4%
ARE MACHINE LEARNING AND ARTIFICIAL INTELLIGENCE (AI) A THREAT TO JOB SECURITY?
Most participants, nearly 75%, do not believe that AI and
machine learning area threat to their job security.
However, more than 10% of participants feel threatened by
the increased use of AI and machine learning in their field.
75% 10%do not believe that AI and machine learning
area threat to their job security
feel threatened by the increased use of AI and
machine learning in their field
Strongly Agree
Agree
Strongly Disagree
Disagree
I Don’t Know
exabeam.com // The Exabeam 2018 Cyber Security Professionals Salary and Job Report
37
MACHINE LEARNING AND ARTIFICIAL INTELLIGENCE (AI) UTILIZATION BY INDUSTRY
Most industries utilize AI and machine learning to some
extent. For those participants who are not currently using AI
and machine learning, many have plans to implement them
in the future.
ARTIFICIAL INTELLIGENCE, MACHINE LEARNING, AND NEW TECHNOLOGIES
Utilities, Energy, and Extraction
Healthcare & Pharmaceuticals
Manufacturing
Telecommunications & Tech
Retail & Consumer Durables
Finance & Financial Services
Government
Insurance
Education
57.7%
37.8%
35%
34.6%
29.4%
28.7%
25%
12.5%
11.8%
26.9%
43.2%
45%
48.8%
52.9%
48.3%
45.5%
68.8%
58.8%
15.4%
18.9%
20%
16.5%
17.6%
23%
29.5%
18.8%
29.4%
Currently Using Plan to Use in Future No Plans to Use
exabeam.com // The Exabeam 2018 Cyber Security Professionals Salary and Job Report
38
THREAT TO JOB SECURITY BY INDUSTRY
Those surveyed in the insurance industry have the strongest
belief that artificial intelligence and machine learning are
threats to their jobs.
ARTIFICIAL INTELLIGENCE, MACHINE LEARNING, AND NEW TECHNOLOGIES
Insurance
Finance & Financial Services
Telecommunications & Tech
Manufacturing
Education
Retail & Consumer Durables
Government
Utilities, Energy and Extraction
Healthcare & Pharmaceuticals
25%
13.8%
12.6%
10%
5.9%
5.9%
4.5%
3.8%
2.7%
31.3%
20.7%
20.5%
30%
23.5%
20.5%
19.2%
18.9%
43.8%
65.5%
66.9%
60%
70.6%
94.1%
75%
76.9%
78.4%
Agree Undecided Disagree
exabeam.com // The Exabeam 2018 Cyber Security Professionals Salary and Job Report
39
EMERGING TECHNOLOGIES
Security professionals are always on the lookout for cutting-
edge technologies to make their jobs better.
Endpoint detection and response (EDR) technologies
and artificial intelligence are the technologies security
professionals are most excited about.
Endpoint Detection and Response (EDR - SIEM, network forensics, DLP, threat detection and incident response, etc.)
Artificial Intelligence
User and Entity Behavior Analytics (UEBA), (data aggregation and advanced analytics, etc. )
Machine Learning
Cloud Security (data encryption, infra security, DDoS mitigation, identity & access management, penetration testing, etc.)
Network Security (monitoring, firewalls, security gateways, SDN, VPN, web security, network segmentation, etc.)
Blockchain technologies (encryption to address increased volume and sophistication of cyber threats, etc.)
Internet of Things (IoT)
ARTIFICIAL INTELLIGENCE, MACHINE LEARNING, AND NEW TECHNOLOGIES
Endpoint Detection
and Response
Machine Learning
CloudSecurity
Blockchain
IoT
NetworkSecurity
Artifical Intelligence
UEBA: User and Entity Behavior
Analytics
exabeam.com // The Exabeam 2018 Cyber Security Professionals Salary and Job Report
40
CAREER ADVICE TO THOSE THINKING OF HAVING A CAREER IN CYBER SECURITY
WOULD YOU RECOMMEND A CAREER AS A SECURITY ANALYST?
Overwhelmingly, participants (86%) said they would
recommend a career as a security analyst to new graduates.
While 9.4% said they were unsure or didn’t know if they
could recommend the career, less than 5% of security
professionals recommended against the career.
86% 9.4%
5%
say they would recommend a career
as a security analyst to new graduates
say they were unsure or didn’t know if they
could recommend the career
recommended against the career
Yes
Unsure
No
9.4%
4.6%86.1%
exabeam.com // The Exabeam 2018 Cyber Security Professionals Salary and Job Report
42
CAREER ADVICE TO THOSE THINKING OF HAVING A CAREER IN CYBER SECURITY
WHAT ADVICE WOULD YOU GIVE TO NEW GRADUATES?
The most common advice security professionals would give
to recent graduates wanting to enter the field is,
“ALWAYS KEEP LEARNING.”
Professionals realize that the security field is constantly
evolving, and to be successful they must keep current on
new technologies.
Security professionals also recommended that new
graduates focus on obtaining certifications. Many security
professionals recommended getting certifications early in
your career when there is more time to study.
Always keep learning
Get certifications
Other
Do what you love
Participate in internships
Start in IT
Work hard
Get a breadth of knowledge
Be curious
Be patient
Be a self-learner
Be flexible
Improve communication skills
Be creative
Find a great organization
Don’t give up
Find your niche
Don’t be afraid to start at the bottom
23.2%
11.8%
15.5%
8.6%
2.3%
3.2%
2.3%
13.2%
5%
1.8%
1.4%
0.9%
0.9%
0.9%
1.8%
0.9%
4.1%
2.3%
exabeam.com // The Exabeam 2018 Cyber Security Professionals Salary and Job Report
43
METHODOLOGYSurvey participants included 481 security professionals worldwide.
Participants were recruited through mailing lists and technical forums.
Participants self-selected into the survey and were not compensated
for their participation. However, all who submitted email addresses
were entered into a drawing for a variety of prizes. Participants were
also promised they would receive a copy of the salary survey once the
results were compiled. Responses were collected through an online
questionnaire. All salaries were converted to U.S. dollars after answering
survey questions about salary.
METHODOLOGY
55%
50%
481
40%
82%
reside in the North America
living in the United States
security professionals participants worldwide
reside in Europe
reside in one of just 14 countries worldwide
exabeam.com // The Exabeam 2018 Cyber Security Professionals Salary and Job Report
44
Exabeam provides security intelligence and management solutions to
help organizations of any size protect their most valuable information.
The Exabeam Security Intelligence Platform uniquely combines a
data lake for unlimited data collection at a predictable price, machine
learning for advanced analytics, and automated incident response into
an integrated set of products. The result is the first modern security
intelligence solution that delivers where legacy SIEM vendors have failed.
Built by seasoned security and enterprise IT veterans from Imperva,
ArcSight, and Sumo Logic, Exabeam is headquartered in San Mateo,
California. Exabeam is privately funded by Norwest Venture Partners,
Aspect Ventures, Icon Ventures, Lightspeed Venture Partners, and investor
Shlomo Kramer. Follow us on Twitter and LinkedIn.
2 Waters Park Dr., Suite 200
San Mateo, CA 94403
1.844.EXABEAM