Cyber Security Salary in India 2026: Fresher to CISO Pay
Quick Answer: Cyber security freshers in India typically earn ₹3.5 lakh to ₹6.8 lakh per annum across entry-level roles. Hyring’s 2026 India Salary Model places the Cyber Security Analyst fresher band at ₹4.2–6.8 LPA (10th–25th percentile) and the SOC Analyst fresher band at the same range. Role-specific entry positions such as junior cloud security engineer or penetration tester are reported at the upper end, commonly ₹5–8 LPA. At the senior end, typical CISO compensation is reported at ₹40 LPA to ₹1 crore+, with exceptional packages at large banks and GCCs reaching ₹2.5–4 Cr+ in total compensation including variable pay and equity.
How to read the numbers. Figures are synthesised from advertised job postings, employee-reported platforms (Glassdoor, AmbitionBox), Hyring’s 2026 percentile salary model, and government notifications. We do not calculate a single “national average” from one harmonised dataset — the tables combine different evidence types with different job titles, experience bands, and compensation definitions. Monthly figures are annual CTC ÷ 12, not take-home pay. See CTC Full Form and Gross Salary Meaning.
Cyber Security Salary by Experience Level
Population: all cyber security roles pooled by experience band. Anchored primarily to Hyring’s 2026 percentile model and cross-checked against reported platform data.
| Experience | Indicative annual CTC | Monthly equivalent (CTC ÷ 12) | Typical roles |
|---|---|---|---|
| Fresher (0–2 yrs), no certification | ₹3.5 – ₹6.8 LPA | ₹29,167 – ₹56,667 | SOC Analyst L1, Junior Security Analyst |
| Fresher, certified + lab work — broader indicative band | ₹5 – ₹9 LPA | ₹41,667 – ₹75,000 | SOC L1 with Security+/CEH, Junior Pentester |
| Early career (1–3 yrs) | ₹6.5 – ₹10 LPA | ₹54,167 – ₹83,333 | SOC L2, Network Security Engineer |
| Mid-level (3–6 yrs) — pooled editorial range | ₹9 – ₹17 LPA | ₹75,000 – ₹1,41,667 | SOC L2/L3, Security Engineer, Pentester |
| Senior (7–10 yrs) | ₹17 – ₹26 LPA | ₹1,41,667 – ₹2,16,667 | Senior Analyst, Security Engineer, Team Lead |
| Senior specialist / architect (10+ yrs) | ₹26 – ₹60 LPA | ₹2,16,667 – ₹5,00,000 | Security Architect, Principal Engineer, Red Team Lead |
| CISO / leadership — typical range | ₹40 LPA – ₹1 Cr+ | ₹3,33,333 – ₹8,33,333 | CISO, Head of Cybersecurity |
| CISO / leadership — exceptional (GCC, large bank) | ₹2.5 Cr – ₹4 Cr+ (total comp.) | Not meaningful as a monthly figure | Group CISO, GCC CISO |
Sources and basis: Hyring’s 2026 model places the Cyber Security Analyst fresher band at ₹4.2–6.8 LPA, intermediate at ₹6.8–17 LPA, and senior at ₹17–26 LPA, with a national median of ₹10 LPA and mean of ₹11.2 LPA. AmbitionBox reports a Cyber Security Analyst starting range of ₹6.4–7.1 LPA based on 12,300+ salaries. Glassdoor reports a 25th–75th percentile of ₹4.24–9.12 LPA. For the CISO typical range, EICTA IIT Kanpur (2026) reports ₹40 LPA to ₹1 crore+ for 12–20 years’ experience. For the exceptional range, SBI’s Group CISO recruitment (2026) advertises annual CTC up to ₹2.5 crore, structured as 90% fixed and 10% variable; Gladwin International’s GCC CISO model (August 2026) shows fixed pay of ₹1.15–2.90 Cr and annual total cash of ₹1.35–4.35 Cr, explicitly labelled as a directional model, not an observed-offer median. The ₹3.5 LPA pooled floor reflects the lower end of Networkers Home’s reported SOC L1 range without a verified experience letter.
On the CISO ceiling: the ₹2.5–4 Cr+ figure is not a typical CISO salary. It represents the upper tail of the market at large banks and GCCs, where compensation includes variable pay and may include equity components not captured in a simple CTC figure. SalaryExpert’s model places the average Indian CISO gross salary at ₹42.66 lakh, with total compensation at ₹46.71 lakh and a senior-level average of ₹55.72 lakh — a far more representative central tendency than the exceptional packages.
Cyber Security Salary by Role
Population: role-specific, by career stage. These ranges will not map 1:1 onto the experience table.
| Role | Fresher (monthly) | Mid-level, 3–6 yrs (monthly) | Senior, 10+ yrs (monthly) |
|---|---|---|---|
| SOC Analyst (L1→L3) | ₹29,000 – ₹46,000 | ₹75,000 – ₹1,20,000 | ₹1,50,000 – ₹2,50,000 |
| Security / GRC Analyst | ₹33,000 – ₹50,000 | ₹83,000 – ₹1,25,000 | ₹1,50,000 – ₹2,50,000 |
| Cyber Security Engineer | ₹40,000 – ₹58,000 | ₹1,00,000 – ₹1,50,000 | ₹2,00,000 – ₹3,50,000 |
| Penetration Tester | ₹46,000 – ₹58,000 | ₹1,00,000 – ₹1,80,000 | ₹2,50,000 – ₹4,00,000 |
| Cloud Security Engineer | ₹50,000 – ₹67,000 | ₹1,10,000 – ₹1,70,000 | ₹2,20,000 – ₹3,80,000 |
| Security Architect | — | ₹1,50,000 – ₹2,00,000 | ₹3,00,000 – ₹5,00,000 |
Sources: Role-wise bands adapted from Scaler (24 June 2026), which aggregates AmbitionBox, Naukri, and Glassdoor India data. Cross-checks include EICTA IIT Kanpur (2026) — SOC Analyst L1 ₹4–8 LPA (₹28,000–58,000/month), Penetration Tester ₹8–20 LPA (₹57,000–1,45,000/month), Security Architect ₹25–50 LPA (₹1,80,000–3,60,000/month) — and AmbitionBox enterprise-level data: IBM analyst ₹6.9–8.8 LPA, KPMG Bengaluru ₹6.0–8.5 LPA, Deloitte New Delhi ₹5.7–8.5 LPA, Cognizant engineer ₹5.3–6.2 LPA. Treat as employee-reported or model-estimated ranges, not employer guarantees.
Why the experience and role tables do not match
- “Senior” means different things: the experience table’s senior band (₹17–26 LPA) corresponds to 7–10 years and includes team leads; the role table’s senior column is 10+ years and covers architect and principal-engineer tracks.
- Pooled vs isolated: SOC analysts outnumber architects, so the pooled senior band sits below the architect-specific band.
- The mid-level pooled floor (₹9 LPA) sits above Hyring’s analyst-specific intermediate lower bound (₹6.8 LPA) because the pooled population includes engineer-track roles.
Read More: Mail Guard Salary / Enrolled Agent Salary / BSc Nautical Science Salary / AME Salary
Government Cyber Security Salary
CERT-In Group A deputation posts (August 2026 memorandum; closed window)
Important context: these are deputation (including short-term contract) posts, ordinarily filled by serving government officers. They are not fresher entry points.
| Post | Pay level (7th CPC) | Basic pay range (₹/month) | Posts |
|---|---|---|---|
| Director | Level 13 | ₹1,23,100 – ₹2,15,900 | 1 |
| Joint Director | Level 12 | ₹78,800 – ₹2,09,200 | 1 |
| Deputy Director | Level 11 | ₹67,700 – ₹2,08,700 | 4 |
Source: CERT-In office memorandum No. 1(15)/2026-CERT-In, August 2026. The memorandum confirms these posts are filled only on deputation (including short-term contract) and that pay is governed by MeitY Recruitment Rules notified in the Gazette of India on 27 July 2026. The CERT-In recruitment page lists the last date to apply as 12 October 2026. These are basic pay figures, before DA, HRA, and transport allowance. The same page separately lists a Scientist-B direct recruitment (133 posts, Level 10, ₹56,100–₹1,77,500) as the relevant graduate-entry route.
Contractual PSU roles (historical advertised rates)
| Role | Monthly pay | Experience sought | Contract period |
|---|---|---|---|
| Cyber Threat Analyst (TOR-22) | ₹65,000 | 3 years | Up to 30 May 2026 |
| Cyber Crime Researcher (TOR-23) | ₹1,60,000 | 5 years | Up to 30 May 2026 |
Source: TCIL advertisement No. TCIL/ITTI/47/2023, dated 19 December 2025. This advertisement is historical — the contract period expired on 30 May 2026. TCIL re-advertised a Cyber Threat Analyst contract role in April 2026 at the same ₹65,000/month rate, indicating periodic re-tendering.
Cyber Security Salary by City
City-level means in the second and third columns are Hyring model estimates. The fresher and senior columns are editorial illustrative estimates — not derived by a single formula from the means.
| City | Hyring Analyst mean (annual) | Hyring Engineer mean (annual) | Editorial fresher range (LPA) | Editorial senior range, all employer types (LPA) — illustrative |
|---|---|---|---|---|
| Bengaluru | ₹14.8 LPA | ₹14.0 LPA | ₹4.5 – ₹8 | ₹25 – ₹45 |
| Mumbai | ₹14.0 LPA | ₹13.3 LPA | ₹4 – ₹7 | ₹22 – ₹40 |
| Gurugram | ₹13.7 LPA | ₹13.0 LPA | ₹4 – ₹6.5 | ₹20 – ₹35 |
| Hyderabad | ₹13.2 LPA | ₹12.5 LPA | ₹4 – ₹7 | ₹22 – ₹38 |
| Delhi | ₹12.5 LPA | ₹11.9 LPA | ₹3.5 – ₹6.5 | ₹20 – ₹35 |
| Pune | ₹12.5 LPA | ₹11.9 LPA | ₹4 – ₹6.5 | ₹18 – ₹30 |
Sources: Hyring’s 2026 city model for Cyber Security Analyst provides the mean annual figures; national analyst mean is ₹11.2 LPA. Enterprise-level cross-checks from AmbitionBox (2026) provide specific reported ranges by city and employer: IBM India analyst ₹6.9–8.8 LPA; KPMG Bengaluru ₹6.0–8.5 LPA; Deloitte New Delhi ₹5.7–8.5 LPA; Cognizant engineer ₹5.3–6.2 LPA. Glassdoor reports a 1–3 year Bengaluru analyst at ₹5 LPA, a 4–6 year New Delhi analyst at ₹9–12 LPA, and a 4–6 year Bengaluru analyst at ₹22 LPA. Methodology for the editorial city columns: the fresher bands are anchored to the gap between the national Hyring mean and the pooled fresher band, adjusted by the city’s deviation from the national mean; the senior ranges are set at approximately 1.7–3.0× the city analyst mean, reflecting the observed relationship between the national senior band and the national mean. These are editorial inferences, not data points from any single source.
Delhi NCR: four different numbers, four different populations
| Figure | What it describes | Source type |
|---|---|---|
| ₹20–35 LPA (senior) | Illustrative range across all employer types | Editorial estimate, not a source figure |
| ~₹12.5 LPA (analyst mean) / ~₹11.9 LPA (engineer mean) | City-wide average across employer types | Hyring model estimate, 2026 |
| ₹5.7–8.5 LPA (analyst, Deloitte New Delhi) | Enterprise-specific reported range | AmbitionBox employee-reported data, 2026 |
| ₹3–4 LPA | Advertised fresher analyst vacancy, Delhi | Job-posting advertisement, 2026 |
The lower city-wide averages for Delhi reflect the employer mix, weighted toward IT-services delivery and government-adjacent consulting. The enterprise-specific Deloitte range and the city-wide mean describe different populations — a reader comparing offers should compare employer type first.
Read More: MNS Salary / IMU CET Salary / Eurasian CEO Salary / Electro Technical Officer Salary
Certifications: What They Change, and What They Don’t
No certification guarantees a salary increase, and the widely repeated rupee premiums are not backed by published comparative methodology. What the evidence supports is eligibility, not a payslip increment.
| Certification | What it typically changes | Where it matters |
|---|---|---|
| CompTIA Security+ | Meets a common baseline requirement in IT-services and MSSP job postings | Entry-level SOC and analyst roles |
| CEH | Frequently listed as preferred or required in VAPT job descriptions | IT services, VAPT teams |
| OSCP | Often a hard requirement for offensive-security roles | Product companies, red teams, pentest consultancies |
| CISSP | Typically tied to architecture and leadership tracks | Security architecture, CISO track |
| Cloud security (AWS Security Specialty, Azure Security Engineer, CCSP) | Aligns with cloud security engineering roles | GCCs, product companies |
The defensible statement: a certification combined with demonstrable lab work improves eligibility for roles that pay more. The salary difference reflects the role and demonstrated skill, not the certificate in isolation.
What Is Actually Driving Cyber Security Pay
1. A demand-supply gap. Careernet’s India Cybersecurity Talent Outlook 2026 puts unfilled positions at nearly 39,000, with attrition near 19% against industry growth of 9–10%. The “80,000 vs 1 million” claim circulates widely but could not be traced to an original, methodologically transparent source; it is not repeated as fact here.
2. Regulatory compliance. The DPDP Rules were notified on 13 November 2025, with consent-manager provisions effective 13 November 2026 and substantive obligations effective 13 May 2027. Compliance creates sequenced demand for data protection, GRC, and security-architecture skills.
3. Specialisation and automation. AI is absorbing routine L1 SOC triage. SANS–DSCI’s 2025–2026 skilling report finds 57% of cybersecurity providers and 48% of enterprises struggling to hire AI/ML security specialists.
Key Takeaways
- Fresher salary sits at ₹3.5–6.8 LPA pooled; Hyring’s analyst-specific model places the fresher band at ₹4.2–6.8 LPA (10th–25th percentile).
- The experience and role tables do not match by design — they describe different populations. The mid-level pooled floor (₹9 LPA) sits above Hyring’s analyst intermediate floor (₹6.8 LPA) because it includes engineer-track roles.
- Government pay is verifiable but lower at entry. CERT-In Group A posts (Levels 11–13) are deputation roles, not graduate entry points; the October 2026 window closed on 12 October 2026. TCIL’s contractual rates are historical.
- Delhi NCR salary depends more on employer type than on city. City-wide analyst means (~₹12.5 LPA) sit below enterprise-specific ranges at consulting and product employers.
- CISO pay has two distinct tiers: a typical range of ₹40 LPA–₹1 Cr+ and an exceptional GCC/large-bank tail reaching ₹2.5–4 Cr+ in total compensation. The exceptional figure is not a typical CISO salary.
- Monthly figures throughout are CTC ÷ 12, not take-home pay.
FAQs
1. What is the monthly salary of a cyber security fresher in India?
2. What is the cyber security salary per month in India for mid-level roles?
3. How much does a government cyber security officer earn per month?
Answer: CERT-In Group A posts sit in Pay Levels 11–13 (₹67,700–₹2,15,900 basic pay), but these are deputation posts, not fresher recruitment. Contractual PSU roles have advertised ₹65,000–₹1,60,000 per month, though the cited TCIL contract expired in May 2026.
4. Which city pays the most for cyber security in India?
Answer: Bengaluru, by city mean: Hyring’s 2026 model puts the Cyber Security Analyst mean at ₹14.8 LPA. Mumbai (₹14.0 LPA) and Gurugram (₹13.7 LPA) follow. Enterprise-specific data shows KPMG Bengaluru at ₹6.0–8.5 LPA for analysts, and Deloitte New Delhi at ₹5.7–8.5 LPA.
5. Is cyber security a high-salary career in India?
6. Does OSCP increase salary in India?
Answer: OSCP improves eligibility for offensive-security roles, which as a group pay more. No source reviewed publishes a controlled comparison isolating the certificate, so no rupee premium is quoted.
Read More: WB Primary Teacher Salary / Village Field Assistant Salary / Village Accountant Salary / Merchant Navy Salary