PassRidge Flex: new 3-4h/day tasks every week, paid hourly or per project. See open tasks →

Specialist QA · 36 countries · updated 2026-10-20

Security / Penetration Tester salary by country

A mid-level Security / Penetration Tester earns a median of $180k a year in the US (p10 $150k, p90 $220k). Worldwide the mid-level median runs from $29k in Philippines to $180k in United States. Juniors start at $140k; leads reach $280k in the US.

$180kUS median · mid-level · gross / year
p10 $150kp90 $220k
Posted ranges 22 (US)62 open in 18 countries
Pay by level

Security / Penetration Tester pay in 12 key countries

Median gross annual pay by level in USD. The bar shows the mid-level p10 to p90 range with the median marked. Open a country for local currency and cities.

CountryJuniorMid-level p10–p90Mid-levelSeniorLead
United States$140k $150k–$220k $180k$230k$280k
Switzerland$130k $140k–$210k $170k$220k$260k
Canada$120k $130k–$190k $150k$190k$240k
United Kingdom$82k $87k–$130k $110k$140k$160k
Germany$84k $89k–$130k $110k$140k$170k
Netherlands$84k $89k–$130k $110k$140k$170k
Spain$54k $57k–$85k $70k$89k$110k
Poland$56k $59k–$88k $72k$92k$110k
Portugal$47k $50k–$74k $61k$77k$94k
Brazil$65k $69k–$100k $84k$110k$130k
India$26k $28k–$42k $34k$44k$53k
Australia$100k $110k–$160k $130k$170k$200k

US-dollar equivalents. Local-currency figures on each country page.

All 36 countries

By region

Where Security / Penetration Tester pay is highest

Median mid-level pay per region in USD. The pale bar spans the lowest to the highest country in the region; the marker is the regional median.

North America2 countries
$170k$150k–$180k
UK & Ireland2 countries
$120k$110k–$130k
Western Europe9 countries
$100k$61k–$170k
Nordics4 countries
$100k$89k–$110k
Central & Eastern Europe9 countries
$60k$47k–$72k
Latin America4 countries
$79k$73k–$84k
Asia-Pacific4 countries
$79k$29k–$130k
Middle East & Africa2 countries
$110k$91k–$130k
Top-paying cities

Best-paid cities for a Security / Penetration Tester

Mid-level median per city: the country median times a city pay factor. Factors reflect the local tech market (1.00 = country median).

#CityCountryPay factorMid-level (local)Mid-level (USD)
1San FranciscoUnited States1.22×$220k$220k
2San JoseUnited States1.20×$220k$220k
3New YorkUnited States1.15×$210k$210k
4SeattleUnited States1.15×$210k$210k
5BostonUnited States1.08×$200k$200k
6Washington DCUnited States1.06×$190k$190k
7Los AngelesUnited States1.05×$190k$190k
8ZurichSwitzerland1.10×CHF 160k$190k
9San DiegoUnited States1.03×$190k$190k
10AustinUnited States1.02×$180k$180k

City factors are estimates. See each country page for every city we track.

What drives pay

Level, country and stack

Location moves pay far more than any single tool. Then comes level. Stack effects are real but small and noisy.

6.2×United States vs Philippines, mid-level
+100%lead vs junior, same country
+28%mid to senior step

Stack premiums from posted pay

Median posted pay for Security / Penetration Tester listings that name each tool, from 17 annual pay ranges. The premium compares each tool's listings with all Security / Penetration Tester listings after adjusting for level and country. A tool appears only with at least 4 listings.

Tool in listingListingsMedian posted payvs this role
OWASP ZAP4$220k+19%
Postman4$220k+19%
Burp Suite5$190k+10%
Python11$240k0%
Docker4$150k-17%

Posted ranges skew to US technology employers. Differences under 10% are within noise. 17 posted ranges for this role are in the jobs feed today.

Sample size

How much data is behind this page

Security / Penetration Tester base pay rests on 22 US pay ranges posted by employers. That is one of the larger samples, though it is still US-heavy. Other countries use a regional adjustment.

22US posted ranges (calibration)
17posted ranges in jobs feed
62live listings, 18 countries
2026-10data collected
FAQ

Security / Penetration Tester salary FAQ

How much does a Security / Penetration Tester earn?

In the US the median gross salary for a mid-level Security / Penetration Tester is $180k a year (p10 $150k, p90 $220k). Across 36 countries the mid-level median runs from $29k in Philippines to $180k in United States.

What does a junior, senior and lead Security / Penetration Tester earn in the US?

Junior $140k, mid-level $180k, senior $230k and lead $280k a year. A lead earns 100% more than a junior.

Which country pays a Security / Penetration Tester the most?

United States at a $180k mid-level median, then Switzerland ($170k) and Canada ($150k). Use the country pages for local-currency pay, city differences and take-home estimates.

Which city pays a Security / Penetration Tester the most?

San Francisco, United States ranks first with an estimated mid-level median of $220k, followed by San Jose ($220k) and New York ($210k).

How reliable are the Security / Penetration Tester figures?

The role base pay rests on 22 US pay ranges posted by employers, and 17 posted ranges are in our current jobs feed. That is a usable sample for the US; other countries use the regional adjustment. All figures are estimates; see the methodology page.

All figures are gross estimates, not offers or advice.

PassRidge / start here

Test the market, not your patience.

Tell us the role you want or the role you need. A QA-only recruiter replies within one working day.

Choose your location

We use your location to show local pay, jobs and the right PassRidge legal entity. It never changes the page URL.

Search PassRidge