$190,000
median · per year, annualized USD
$287,775
median · per year, annualized USD
Staff+ Application Security Engineer
Staff+ Application Security Engineer - M&A
Staff Engineer - Product Security
Senior Staff Engineer - Product Security
Product & Application Security Engineer
Senior Security Engineer, Product AppSec
Principal Software Engineer II - Product Security
Security Engineer, Application Security
Staff Engineer - Product Security
Principal Security Software Engineer, Application Security
CISO
Chief Information Security Officer
Head of Security & Compliance
Head of Security & Compliance
Chief Information Security Officer
Chief Information Security Officer (CISO)
Chief Information Security Officer (CISO)
Chief Information Security Officer
Field Chief Information Security Officer (Field CISO)
Head of Product Security
| Company | Median | Roles |
|---|---|---|
Anduril Industries
|
$204,500 | 8 |
Mozilla
|
$85,751 | 5 |
Faire
|
$422,240 | 4 |
Veeam Software
|
$315,000 | 4 |
Harvey
|
$275,000 | 3 |
Brex
|
$216,000 | 3 |
Airwallex
|
$205,000 | 3 |
SpaceX
|
$202,500 | 3 |
| Company | Median | Roles |
|---|---|---|
|
|
$482,308 | 3 |
Harvey
|
$317,500 | 2 |
Hippo Insurance
|
$313,750 | 2 |
NexHealth
|
$180,000 | 2 |
| DR DFO Referrals | $530,000 | 1 |
Rain
|
$524,500 | 1 |
Compass
|
$375,000 | 1 |
Vanta
|
$339,500 | 1 |
| Location | Median | Roles |
|---|---|---|
| New York | $237,500 | 26 |
| San Francisco | $232,500 | 47 |
| Chicago | $213,750 | 7 |
| Seattle | $200,000 | 11 |
| Boston | $195,000 | 4 |
| Austin | $187,500 | 5 |
| Toronto | $185,000 | 11 |
| Denver | $177,500 | 5 |
| Berlin | $155,802 | 4 |
| Los Angeles | $150,000 | 7 |
| Location | Median | Roles |
|---|---|---|
| New York | $295,000 | 11 |
| San Francisco | $227,500 | 9 |
| London | $222,500 | 3 |
| Seattle | $180,000 | 3 |
The median for Application Security is $190,000 per year (typically $159,735–$235,000), versus $287,775 for CISO ($224,375–$319,375). That puts CISO about 51% ahead at the median.
Both figures are computed live from active listings on JobsRadar and normalized to annualized USD, so Application Security and CISO are compared on equal terms regardless of the currency each role was originally posted in. Only roles that publish a salary range feed the medians; numbers refresh every few hours as new roles post and older ones close, so this comparison reflects the market right now rather than a fixed survey. Use it as a directional benchmark when weighing one path against the other.