Information Security Analyst vs Penetration Tester: Which Pays More?
Side-by-side salary comparison by city, experience level, and career growth outlook. Data reflects current market rates.
Information Security Analyst
Protect organisational data and systems from cyber attacks.
Penetration Tester
Conduct authorised attacks on systems to find and report vulnerabilities.
Information Security Analyst earns more on average — the national median is $0/year (0%) higher than a Penetration Tester. However, salaries vary significantly by city, employer, and experience level — see the city-by-city breakdown below.
Information Security Analyst vs Penetration Tester — Salary by City
National median figures in USD across top cities.
| City | Information Security Analyst | Penetration Tester | Difference |
|---|---|---|---|
| San Francisco, CA | $184,843 | $193,496 | Information $8,653 |
| New York, NY | $140,470 | $140,470 | Information +$0 |
| Seattle, WA | $188,507 | $188,841 | Information $334 |
| Austin, TX | $148,073 | $145,769 | Information +$2,304 |
| Chicago, IL | $135,227 | $135,251 | Information $24 |
| Boston, MA | $169,408 | $171,501 | Information $2,093 |
| London, UK | £101,423 | £102,480 | Information $1,057 |
| Toronto, Canada | CA$172,721 | CA$166,911 | Information +$5,810 |
Frequently Asked Questions
Does a Information Security Analyst or Penetration Tester earn more?+
A Information Security Analyst earns more on average. The national median salary for a Information Security Analyst is $129,180/year, compared to $129,180/year for a Penetration Tester — a difference of $0 (0%).
Which has better career growth — Information Security Analyst or Penetration Tester?+
Information Security Analyst roles are growing at 32% YoY while Penetration Tester demand is growing at 30% YoY. Information Security Analyst has stronger near-term demand growth.
Can you switch from Information Security Analyst to Penetration Tester?+
Yes. Many professionals transition between these roles, especially since both are in the same category. Shared skills include: analytical thinking, communication, and industry knowledge.
Which is harder to automate — Information Security Analyst or Penetration Tester?+
Penetration Tester has a lower AI automation risk (22% vs 48%). Based on Oxford Martin School and McKinsey 2023 analysis.