Technology/Security
Security
Defend the org against adversaries — the fastest-growing computer occupation, where AI raises demand for the human defender.
US medians, indicative and sourced — never a guarantee.
Roles at a glance
| Role | Level | Median (US) | Difficulty | Demand | AI-risk |
|---|---|---|---|---|---|
| Security Engineer | S1 | $177,000 | High | High | Low |
| Senior Security Engineer | S2 | $262,000 | High | High | Low |
| Security Architect | S3 | $325,000 | High | High | Low |
| CISO | S4 | $555,000 | High | Med | Low |
Climb the ladder
Progression is driven by scope and level, not tenure. Years shown are typical, not required.
Impact promotions — same track, bigger scope
The evidence
Typical route into CISO: Security Architect, ~6 yrs.
Source: ACSMI entry-to-CISO progression 2026-27; Cybersecurity Ventures
Readiness, quantified
Wherever you are on this ladder, the next rung is measurable.
Pick your current role and SkillReceipts maps every route open to you across technology — real pay at every rung, typical years per move, and exactly what's missing for the next one. Free, no sign-up.
Check my routes — free →Credentials that help
Credentials help entry and specialisation; scope drives seniority.
- CS / related bachelor's degree · $10k-$40k+/yr public in-state to private; highly variable
- CompTIA Security+ (SY0-701) · $439
- CISSP (ISC2) · $749
Ask the advisor
The questions this page can't answer about you.
Map your trajectory first — the advisor answers against your role, your metro, and this family's sourced data.
Questions, answered straight
What does a career in security pay?
Entry-level Security Engineer runs around $177,000 (US median, indicative); the family tops out near $555,000 at CISO. Every figure is a sourced, indicative range — location, company stage, and equity move it substantially.
Which security role is most in demand?
Security Engineer carries the strongest hiring demand in this family (high).
How do you move up in security?
Progression is by scope and level, not tenure — e.g. Security Engineer → Senior Security Engineer (~3 yrs typical). Each move on the ladder above shows its typical years and whether it's an impact promotion or a track switch.
How exposed is security to AI?
Security Engineer, Senior Security Engineer, Security Architect rate lowest — scope and judgment are the hedge. Ratings are indicative signals, not predictions.
Do you need a degree or certification for security?
Credentials help entry and specialisation — this family most often rewards CS / related bachelor's degree, CompTIA Security+ (SY0-701), CISSP (ISC2). Past entry, scope and delivered impact drive seniority more than paper.
Explore the roles
See what you'd earn on this ladder.
Pick your role. Sixty seconds later, every route through security is mapped.
See my routes — free →Figures are indicative, in USD, and never a guarantee of an outcome. Personas and guides are added as the family's content is authored.