SOC Analyst Salary 2026: Entry-Level to Senior, by State

The US Bureau of Labor Statistics (BLS) reports a median of $129,180 a year for information security analysts, the occupation that includes SOC analysts. The bottom 10% of that group earned less than $75,090, and the top 10% earned more than $199,850 (BLS, May 2025). Entry-level SOC analysts usually start well below the median, so the lower end of that range is the honest place to look.

This post gives you the real numbers, shows you where they come from, and says plainly where no reliable number exists.

What the data covers (and what it doesn't)

BLS has no "SOC analyst" job category. It counts SOC analysts, along with other security roles, under Information Security Analysts (SOC code 15-1212). That means three things:

- The national median of $129,180 covers analysts, engineers and others in that group. A Tier 1 analyst is one slice of it, and usually the lowest-paid slice.

- BLS reports pay by percentile, not by job tier. There is no official "Tier 1 salary" or "Tier 2 salary".

- Every figure below is wages from the BLS Occupational Employment and Wage Statistics (OEWS) program, May 2025 data. We read the national and state percentiles through O*NET OnLine, which republishes the BLS figures. They do not include bonuses, equity or benefits.

The old version of this post had neat Tier 1, 2 and 3 salary bands and certification premiums. We could not trace those to a source, so we removed them. A salary post is only useful if you can trust the numbers.

Entry-level SOC analyst salary

If you want the entry-level number, start with the bottom of the BLS range:

- 10th percentile: $75,090

- 25th percentile: $97,810

- Median: $129,180

(BLS OEWS, May 2025, information security analysts, national.)

Read these carefully. The 10th percentile is where the lowest-paid tenth of the whole occupation sits. Entry-level SOC roles tend to cluster near the bottom of that range, and sometimes below it, because the occupation also includes experienced analysts and engineers. BLS does not break out beginners, so we won't invent a number for them.

What we can say with confidence:

- Pay for your first SOC job depends heavily on the employer. Managed security service providers (MSSPs), enterprises, government and tech companies pay differently for the same title.

- Shift work, on-call duty and location change the offer a lot.

- The job title is a poor guide. Always compare the actual duties.

For real offers in your area, check current job postings for the title "SOC analyst" and read the posted ranges. Treat those as a better guide to your first offer than any national average.

Why the entry-level number looks high

If you've seen lower figures on job boards and wondered why BLS looks so much higher, there are a few likely reasons. BLS counts the whole occupation, including experienced analysts and engineers. Job-board averages often mix in other titles and part-time roles. And the "SOC analyst" label covers everything from a monitoring seat at a service provider to a senior role at a large company.

Neither view is wrong. They measure different things. Use the BLS percentiles as a ceiling for what the occupation pays at the low end, and use live postings in your area to find out what employers are actually offering this month. If an offer lands well below the 10th percentile, ask what the role covers and how fast people move up from it.

Mid-level and senior pay

BLS does not publish tier-level pay, so here is the pattern without made-up numbers.

- Tier 2 (mid-level): you run investigations on escalated alerts and tune detections. Pay moves toward the middle of the BLS range as you gain experience.

- Tier 3 and senior: you hunt threats, lead incidents and mentor others. Pay moves toward the upper range. The 75th percentile ($163,500) and 90th percentile ($199,850) are where the strongest senior and specialist roles sit.

- Specialists: detection engineering, threat hunting and incident response tend to pay more than generalist triage, because fewer people can do them well.

The BLS Occupational Outlook Handbook also shows how much the employer matters. Median annual wages for information security analysts in May 2025, by industry:

- Information: $138,650

- Computer systems design and related services: $132,410

- Finance and insurance: $130,630

- Management of companies and enterprises: $128,950

- Management, scientific and technical consulting services: $125,420

If you want to see what the day-to-day work looks like at each level, read a day in the life of a SOC analyst.

SOC analyst salary by state

State pay varies a lot. These are BLS OEWS figures for information security analysts in May 2025, shown as 25th percentile and median. The 25th percentile is a better guide for newer analysts than the median. We only list states where we pulled the numbers.

- Washington: 25th percentile $123,590, median $154,940

- Maryland: 25th percentile $106,790, median $139,640

- California: 25th percentile $101,840, median $138,570

- Virginia: 25th percentile $103,980, median $134,900

- New York: 25th percentile $102,930, median $134,660

- Texas: 25th percentile $101,380, median $129,890

- Florida: 25th percentile $91,020, median $124,860

- Ohio: 25th percentile $83,250, median $110,480

Two cautions. First, a high state median does not mean a high entry-level offer. Costs of living differ, and remote roles may pay by company band rather than your state. Second, these are statewide numbers. Large cities and smaller towns in the same state can look very different.

How certifications and experience affect pay

We could not find a reliable, sourced figure for how much a certification adds to a SOC analyst's pay, so we won't give one. Most "cert premium" numbers online come from self-reported surveys with no clear method.

What BLS does say: many employers prefer candidates with an information security certification, and some roles call for related work experience. That matches what we see in hiring:

- Security+ is a common baseline. It helps you clear screening for entry-level roles. It rarely lifts an offer by itself.

- CySA+ shows a blue team focus. It is most useful when paired with real investigation practice. If you're deciding between the two, Security+ vs CySA+: which should you get first walks through it.

- Advanced certifications (GIAC and similar) matter more as you move toward senior and specialist roles, and some employers pay for them.

- Experience beats certificates. Pay rises when you can show you've done the work: triaged alerts, written up investigations, built detections.

CySA+ salary gets searched on its own. The honest answer is that no official source separates CySA+ holders from other analysts, so there is no clean CySA+ salary figure. The BLS ranges above are the right frame. A certificate gets your application read. What you can show in the interview, such as a walkthrough of an alert you investigated and the evidence you used, is what shifts where in the range your offer lands.

How to raise your pay

- Prove skills, not just credentials. Keep a short record of investigations you've done and what you found. Interviewers pay attention to it.

- Learn the tools employers use. SIEM searching (Splunk SPL, KQL), endpoint investigation and email analysis are the skills that separate Tier 1 from Tier 2.

- Aim at higher-paying industries. The industry list above shows information and computer services paying above the all-industry median.

- Move after learning, not before. A first job can give fast exposure. Plan your next step before you get comfortable.

- Negotiate with data. Bring posted ranges for similar roles in your area and tie your ask to specific skills.

New to the field? The zero to SOC analyst roadmap and how to become a SOC analyst with no experience cover the route in.

FAQs

What is the average entry-level SOC analyst salary?

BLS has no entry-level figure for SOC analysts. The 10th percentile for information security analysts is $75,090 and the 25th percentile is $97,810 (May 2025). Beginners usually sit toward the bottom of that range, depending on employer and location.

How much do SOC analysts make a year?

The BLS median for information security analysts is $129,180 a year (May 2025). That group includes more senior security roles, so a new SOC analyst should expect to start below it.

Is SOC analyst a good career for pay?

BLS projects 21% employment growth for information security analysts from 2025 to 2035, and the median pay above is well into six figures. It is a solid career for pay, but your first job is a starting point.

Which state pays SOC analysts the most?

Of the states we checked, Washington had the highest median at $154,940, followed by Maryland at $139,640 and California at $138,570 (BLS OEWS, May 2025). We did not check all fifty states, so another state may rank in that group.

TL;DR

BLS counts SOC analysts as information security analysts, with a May 2025 median of $129,180. Entry-level pay sits nearer the lower percentiles: $75,090 at the 10th and $97,810 at the 25th. State and employer matter a great deal. Certifications help you get hired, but skills you can demonstrate are what move pay.

How EpicDetect Can Help

The fastest way into a higher pay band is being able to prove the skills. The EpicDetect Atlas maps the route from entry-level SOC work up, and Adventures lets you practise real investigations. Season Zero is free. Studying for Security+ first? Take the free 20-question practice test.