$190,000
median · per year, annualized USD
$184,700
median · per year, annualized USD
Staff+ Application Security Engineer
Staff+ Application Security Engineer - M&A
Staff Engineer - Product Security
Senior Staff Engineer - Product Security
Product & Application Security Engineer
Senior Security Engineer, Product AppSec
Principal Software Engineer II - Product Security
Security Engineer, Application Security
Staff Engineer - Product Security
Principal Security Software Engineer, Application Security
Offensive Security Engineer, Agent Products
Member of Technical Staff (Offensive Security Engineer)
Offensive Hardware Security Engineer, Platform Security
Principal Offensive Security Engineer
Senior Information Security Engineer, Offensive Security
Staff Offensive Security Engineer
Senior Information Security Engineer, Offensive Security
Penetration Tester
WebApp Offensive Security Software Engineer
Offensive Security Engineer
| Company | Median | Roles |
|---|---|---|
Anduril Industries
|
$204,500 | 8 |
Mozilla
|
$85,751 | 5 |
Faire
|
$422,240 | 4 |
Veeam Software
|
$315,000 | 4 |
Harvey
|
$275,000 | 3 |
Brex
|
$216,000 | 3 |
Airwallex
|
$205,000 | 3 |
SpaceX
|
$202,500 | 3 |
| Company | Median | Roles |
|---|---|---|
| GR GRVTY | $215,000 | 2 |
Robinhood
|
$191,444 | 2 |
Accenture Federal Services
|
$174,200 | 2 |
M9 Solutions
|
$120,000 | 2 |
TP-Link Systems Inc.
|
$106,000 | 2 |
OpenAI
|
$418,500 | 1 |
Anthropic
|
$362,500 | 1 |
Perplexity
|
$312,500 | 1 |
| Location | Median | Roles |
|---|---|---|
| New York | $237,500 | 26 |
| San Francisco | $232,500 | 47 |
| Chicago | $213,750 | 7 |
| Seattle | $200,000 | 11 |
| Boston | $195,000 | 4 |
| Austin | $187,500 | 5 |
| Toronto | $185,000 | 11 |
| Denver | $177,500 | 5 |
| Berlin | $155,802 | 4 |
| Los Angeles | $150,000 | 7 |
| Location | Median | Roles |
|---|---|---|
| San Francisco | $312,500 | 5 |
| New York | $236,000 | 7 |
The median for Application Security is $190,000 per year (typically $159,735–$235,000), versus $184,700 for Penetration Tester ($136,250–$218,250). That puts Application Security about 3% ahead at the median.
Both figures are computed live from active listings on JobsRadar and normalized to annualized USD, so Application Security and Penetration Tester are compared on equal terms regardless of the currency each role was originally posted in. Only roles that publish a salary range feed the medians; numbers refresh every few hours as new roles post and older ones close, so this comparison reflects the market right now rather than a fixed survey. Use it as a directional benchmark when weighing one path against the other.