Computer and Mathematical

Cloud Security Engineer Salary (2026), outlook and how to become one

Protects an organization's systems and data in AWS, Azure or Google Cloud by securing identities, networks and configurations.

Median pay
$116,580
Growth to 2035
+5.1%
Openings a year
27,000
Typical entry
Bachelor's

Protects an organization's systems and data in AWS, Azure or Google Cloud by securing identities, networks and configurations. BLS does not publish separate figures for information security engineers; it counts them within information security engineer (SOC 15-1299), whose median pay is $116,580 a year (BLS OEWS, May 2025). Typical entry-level education: Bachelor's degree.

  • SOC 15-1299
  • Computer and Mathematical
  • Last updated October 9, 2026

At a glance

Cloud Security Engineer in four numbers

Median pay
$116,580a year, or $56.05/hr
Lowest 10% $56KTop 10% $188K

US median, all jobs: $50,980

BLS OEWS, May 2025
Projected growth
+5.1%Faster than average
This career
+5.1%
All jobs
+3.5%
Projected employment change, 2025–2035
ItemValue
This career+5.1%
All jobs+3.5%
BLS EP, 2025–2035
Openings a year
27,000471,200 jobs today
  • Jobs in 2025471.2K
  • Projected 2035495.3K
Employment, 2025–2035
ItemValue
Jobs in 2025471.2K
Projected 2035495.3K
BLS EP, 2025–2035
Typical education
Bachelor'sneeded to enter
  • Less than high school5.3%
  • High school5.3%
  • Certificate15.8%
  • Some college10.5%
  • Associate's10.5%
  • Bachelor's47.4%
Highest education held by information security engineers
SegmentValue
Less than high school5.3%
High school5.3%
Certificate15.8%
Some college10.5%
Associate's10.5%
Bachelor's47.4%
BLS EP, 2025–2035; mix: O*NET

Also advertised as: Cloud Security Architect, Cloud Security Specialist, AWS Security Engineer, Cloud Security Analyst.

Pay

How much do Information Security Engineers make?

Annual pay, lowest-paid to highest-paid

Every cloud security engineer in the US, by percentile of annual wage

Median

$116,580

Middle half earn $79,370 to $157,500

10th
$55,940
25th
$79,370
75th
$157,500
90th
$188,470

All US occupations: $50,980

Cloud Security Engineer annual wages
PercentileValue
10th$55,940
25th$79,370
Median$116,580
75th$157,500
90th$188,470
All US occupations$50,980

Source: BLS OEWS, May 2025

Median annual wage
$116,580
Median hourly wage
$56.05/hr
Mean annual wage
$122,230
People employed
435,370

Versus all US occupations

At $116,580, Information Security Engineers earn 129% above the $50,980 median across all US occupations, a difference of $65,600 a year.

Versus computer and mathematical occupations

The median is typical for the Computer and Mathematical group, where the middle occupation pays $116,580.

Pay range

The top 10% earn $188,470 or more while the bottom 10% earn $55,940, a gap of 3.4×. That is an unusually wide spread, which usually tracks specialisation, employer type and years of experience.

Rank in the bank

This median pays more than 82% of the 1,741 occupations in the NueCareer career bank.

Highest-paying state

District of Columbia pays the most at $156,590, and still leads at $142,483 once local prices are taken into account.

Pay by state

Which states pay Information Security Engineers the most?

State medians come from the same OEWS release as the national figures. The cost-of-living column divides each state median by that state's BEA Regional Price Parity, restating pay in national-average dollars so a high-cost state and a low-cost one can be compared directly.

Top 10 states by median annual wage for Information Security Engineers
StateMedianCOL-adjustedEmployed
1District of Columbia$156,590$142,48317,200
2Maryland$144,680$137,84419,060
3Colorado$139,580$135,44611,800
4Virginia$139,030$137,51217,000
5Delaware$137,470$137,734860
6California$134,440$121,42380,150
7Washington$128,940$120,49014,360
8Connecticut$127,720$123,2703,100
9New Mexico$127,090$137,8241,650
10Hawaii$120,100$109,2302,080
See all 54 states, sortable, with cost-of-living adjustments

Job outlook

Is Cloud Security Engineer a growing career?

Projected change in jobs

Employment change over 2025–2035, against every US occupation

Information Security Engineers
+5.1%
All US occupations
+3.5%

Faster than average. +5.1% projected growth vs 3.5% for all occupations.

Projected employment change, 2025–2035
ItemValue
Information Security Engineers+5.1%
All US occupations+3.5%

Source: BLS EP, 2025–2035

Faster than average

BLS projects employment of Information Security Engineers to change 5.1% over 2025–2035, against 3.5% projected for all occupations. That is 24,200 more jobs.

Annual openings

About 27,000 openings are projected each year, 5.7% of the 471,200 jobs that existed in 2025. Most come from workers leaving the occupation, not from growth alone.

Getting in

How to become a Cloud Security Engineer

Most cloud security engineers have a bachelor's degree in computer science, cybersecurity or information systems and come from systems administration, cloud engineering or security analyst roles. Hands-on knowledge of at least one major cloud, identity and access management, networking and scripting is essential.

Respected credentials include ISC2's Certified Cloud Security Professional (CCSP), the Cloud Security Alliance's Certificate of Cloud Security Knowledge (CCSK), and the security specialty certifications offered by AWS, Microsoft and Google. Many people move in sideways, taking on security responsibilities in a cloud engineering job before switching titles.

  1. 1

    Typical entry-level education

    Bachelor's degree

  2. 2

    Work experience in a related occupation

    None

  3. 3

    Typical on-the-job training

    None

  4. 4

    Preparation needed (O*NET job zone)

    Medium preparation

BLS Employment Projections, 2025–2035; job zone from O*NET 31.0 Database.

What education people in the job have

O*NET incumbent survey: the highest level of education reported by people already working as information security engineers.

  • Bachelor's Degree47.4%
  • Post-Secondary Certificate15.8%
  • Some College Courses10.5%
  • Associate's Degree or other 2-year degree10.5%
  • Less than a High School Diploma5.3%
Highest education held by information security engineers
ItemValue
Bachelor's Degree47.4%
Post-Secondary Certificate15.8%
Some College Courses10.5%
Associate's Degree or other 2-year degree10.5%
Less than a High School Diploma5.3%

Source: O*NET 31.0 Database

The work

What does a Cloud Security Engineer do?

Cloud security engineers keep cloud environments from becoming a breach. Most cloud incidents stem from misconfiguration: a storage bucket left public, an overly powerful access key, or a database exposed to the internet. These engineers set guardrails that prevent those mistakes, such as identity policies, encryption defaults and network rules, and they build automated checks that flag risky changes before they reach production.

They also monitor cloud logs for suspicious activity, investigate alerts, and respond when an account is compromised. A growing part of the job is security as code: writing policies and infrastructure templates that make the secure option the default for every engineering team. They work closely with cloud architects, platform engineers and compliance teams.

Day-to-day tasks

  1. Design identity and access policies for cloud accounts
  2. Configure encryption, logging and network controls
  3. Build automated checks for risky cloud configurations
  4. Monitor cloud logs and investigate security alerts
  5. Respond to compromised accounts and exposed resources
  6. Review infrastructure code for security flaws
  7. Map cloud controls to compliance requirements

Typical tasks, researched by NueCareer from the sources below.

Working conditions and hours

Cloud security engineers work at software companies, banks, healthcare organizations, government contractors and security consultancies. The job is desk-based and commonly remote. Some roles share on-call duty for security incidents. Work involves frequent collaboration with engineering teams who own the systems being secured.

Where the work happens

  • Indoors, climate-controlled

    NeverEvery day

    Indoors, in a climate-controlled space, every day.

  • Outdoors in all weather

    NeverEvery day

    Almost never works outdoors.

Physical demands

  • Sitting

    NeverAlmost all the time

    Seated for more than half the working day.

  • Standing

    NeverAlmost all the time
  • Bending or twisting

    NeverAlmost all the time

Working with people

  • Contact with other people

    NoneConstant
  • Face-to-face discussions

    NeverEvery day
  • Dealing with the public

    Not importantExtremely important

Pressure and stakes

  • Strict deadlines

    NeverEvery day
  • Conflict situations

    NeverEvery day
  • Cost of a mistake

    Not seriousExtremely serious

Autonomy

  • Freedom to decide

    NoneA lot

    A lot of freedom to make decisions without checking first.

Conditions: O*NET Work Context survey. Each item has its own scale, so each dot is read against the two answers that end its own line.

Core skills

O*NET importance, 1 to 5

  • Reading Comprehension4.1
  • Critical Thinking4.0
  • Active Listening3.9
  • Writing3.6
  • Monitoring3.6
  • Speaking3.5
  • Active Learning3.3
  • Learning Strategies2.9
Core skills for Information Security Engineers
ItemValue
Reading Comprehension4.1
Critical Thinking4.0
Active Listening3.9
Writing3.6
Monitoring3.6
Speaking3.5
Active Learning3.3
Learning Strategies2.9

Source: O*NET 31.0 Database

Transferable skills

O*NET importance, 1 to 5

  • Quality Control Analysis3.4
  • Systems Analysis3.4
  • Systems Evaluation3.4
  • Complex Problem Solving3.3
  • Judgment and Decision Making3.3
  • Instructing3.1
  • Programming3.1
  • Operations Monitoring3.1
Transferable skills for Information Security Engineers
ItemValue
Quality Control Analysis3.4
Systems Analysis3.4
Systems Evaluation3.4
Complex Problem Solving3.3
Judgment and Decision Making3.3
Instructing3.1
Programming3.1
Operations Monitoring3.1

Source: O*NET 31.0 Database

Tools and software

  • Application server software · in demand
  • Cloud-based management software · in demand
  • Configuration management software · in demand
  • Content workflow software · in demand
  • Data base management system software · in demand
  • Data base reporting software · in demand
  • Data base user interface and query software · in demand
  • Development environment software · in demand
  • Document management software · in demand
  • Electronic mail software · in demand
  • Enterprise application integration software · in demand
  • Enterprise system management software · in demand

“In demand” marks an O*NET Employer-Based Hot Technology, software named in real job postings for this occupation.

Personality fit

What personality type suits a Cloud Security Engineer?

Interest profile

NueCareer estimate (Holland code ICR) built on O*NET's Information Security Engineer profile, scored 1 to 7

Cloud Security Engineer · Realistic: 4Cloud Security Engineer · Investigative: 6Cloud Security Engineer · Artistic: 1Cloud Security Engineer · Social: 2Cloud Security Engineer · Enterprising: 3Cloud Security Engineer · Conventional: 6
Cloud Security Engineer interest profile
AxisCloud Security Engineer
Realistic4
Investigative6
Artistic1
Social2
Enterprising3
Conventional6

Source: O*NET 31.0 Database

What the work is built around

Day to day this is work built around organising, following procedures and working precisely with data, combined with investigating, analysing and solving problems with ideas and data.

  • Conventional6.1
  • Investigative5.7
  • Realistic4.5
  • Enterprising2.7
  • Social1.8
  • Artistic1.3

Closest MBTI types

NueCareer fit scores: cosine similarity between each MBTI type's interest vector and this occupation's O*NET interest profile. Not a BLS or O*NET figure; the method is documented on our methodology page.

Questions

Cloud Security Engineer: frequently asked questions

How much do Information Security Engineers make?

BLS does not publish a separate wage for information security engineers. It counts them within information security engineer, whose median pay is $116,580 a year (BLS OEWS, May 2025). The middle half of that occupation earn between $79,370 and $157,500, and the top 10% earn $188,470 or more.

Do you need a degree to become a Cloud Security Engineer?

Yes. BLS reports a bachelor's degree as the typical entry-level education for Information Security Engineers, and O*NET rates the preparation needed as medium preparation. In O*NET's survey of people already doing the job, 47.4% hold bachelor's degree.

Is Cloud Security Engineer a growing career?

Yes. Employment is projected to grow 5.1% over 2025–2035, faster than the 3.5% average for all occupations (BLS EP, 2025–2035). BLS still projects about 27,000 openings a year, mostly from workers retiring or moving to other work.

What does a Cloud Security Engineer do?

Cloud security engineers keep cloud environments from becoming a breach. A typical task: design identity and access policies for cloud accounts. Employers most often ask for Application server software, Cloud-based management software, Configuration management software.

Which states pay Information Security Engineers the most?

The highest state medians for Information Security Engineers are District of Columbia ($156,590), Maryland ($144,680), Colorado ($139,580) (BLS OEWS, May 2025).

What personality type suits a Cloud Security Engineer?

O*NET scores Information Security Engineers highest on the Conventional, Investigative and Realistic interest areas, so the work mixes organising, following procedures and working precisely with data with investigating, analysing and solving problems with ideas and data. On NueCareer's MBTI-to-interest mapping that lines up most closely with ISTJ personalities. Personality is a fit signal, not a gate. The free NueCareer quiz scores your own profile against all 1,731 careers in the bank.

Research sources for this career