CEH vs Security+ salary — is there a difference?

At entry level they overlap heavily (both roughly $55,000–$80,000 depending on role and region). CEH is associated more with offensive/pentest tracks, which can pay more at senior levels — but that premium comes from demonstrable hands-on skill and experience, not from holding CEH.

CEH Salary in 2026: What Ethical Hackers Really Earn

Q: How much do CEH holders make?

Job-market aggregators in 2026 put the average around $96,000–$121,000 for CEH-associated roles in the US, with entry-level closer to $72,000–$78,000 and senior offensive-security roles reaching $150,000+. For context, the US Bureau of Labor Statistics median for information security analysts (all experience levels) was $124,910 in May 2024. Treat the CEH-specific figures as estimates — pay is driven by role, experience, and location far more than the cert itself.

Q: What is the entry-level ethical hacker salary?

Around $72,000–$78,000 in the US in 2026 per aggregators like PayScale and ZipRecruiter, varying widely by location, clearance, and whether the role is truly offensive (pentest) or a broader security job. Many people enter through SOC/analyst roles first rather than landing a pentest job straight away.

Q: Does CEH increase your salary?

Indirectly. CEH helps you qualify for and get noticed for roles (especially government/DoD positions that list it), but the cert by itself doesn’t set your pay — your role, hands-on skill, and experience do. Beware vendor salary claims that imply the certificate alone guarantees a big number.

Q: Do penetration testers earn more than defensive roles?

Senior penetration testers and red-teamers can earn well into six figures ($120,000–$200,000+), often more than equivalent defensive roles. But those jobs require proven hands-on ability — a CEH alone won’t get you there; practical skill (and often a cert like OSCP) does.

Updated: June 2026 · Read time: 8 min · Level: Beginner

"How much do ethical hackers make?" gets some wildly inflated answers online — often from sites selling the training. Here's a more honest picture: CEH-associated roles pay well, but the cert doesn't hand you a salary. Your role, hands-on skill, experience, and location do the heavy lifting. Let's look at real ranges and sources.

A reality check before the numbers

You'll see "$120K+" splashed across CEH salary pages. Two things to keep in mind:

Many of those numbers come from vendors with an incentive to make the cert look lucrative. Treat them skeptically.
A certificate isn't a salary. CEH helps you qualify for and get noticed for roles. What you actually earn depends on the job and your ability — not the three letters on your resume.

With that framing, here are the ranges from job-market aggregators and official data.

CEH / ethical-hacker pay ranges (2026, US)

Stage	Typical US range
Entry-level (under ~1 yr)	~$72,000–$78,000
Average (CEH-associated roles)	~$96,000–$121,000
Early career (1–4 yrs)	~$100,000
Senior offensive / red team	~$150,000–$200,000+

Sources: aggregators like PayScale and ZipRecruiter, 2026 — these are estimates and vary widely by source, role, and location.

Official anchor: the US Bureau of Labor Statistics put the median for information security analysts at $124,910 (May 2024) — but that's the whole field at all experience levels, not entry-level and not CEH-specific. It's where the career can go, not a starting wage.

What actually moves the number

Role. A true penetration-testing / red-team job pays differently than a SOC analyst or generalist security role. Many "ethical hackers" actually start in analyst roles.
Hands-on skill. The big offensive-security salaries go to people who can demonstrably hack — usually proven with labs, a portfolio, and practical certs. CEH (mostly multiple-choice) signals knowledge, not that skill.
Experience. Pay roughly doubles from entry to senior. Years matter more than any single cert.
Location & clearance. Major metros and cleared/DoD roles pay premiums; remote and lower-cost areas pay less.
Industry. Finance, defense, and big tech tend to pay above healthcare, education, or small business.

Does CEH itself raise your pay?

Indirectly, yes; directly, not much. CEH's value is access: it's a recognized name to recruiters and a requirement for several government/DoD roles, so it helps you land interviews and qualify for jobs you otherwise couldn't. But two CEH holders can earn very different salaries based on role and skill. Don't expect the cert alone to bump your paycheck.

This is exactly why it's worth asking whether the ~$1,000+ price is justified for your goals — see Is CEH worth it? and the full CEH exam cost breakdown.

CEH vs Security+ on pay

At entry level they overlap a lot — both roughly $55,000–$80,000 depending on role and region. CEH leans toward offensive/pentest tracks, which can pay more at senior levels, but that premium comes from proven hands-on ability and experience, not from holding CEH versus Security+. If you're early and choosing, compare the two here — cost and recognition usually matter more than a small salary difference at the start.

How to actually earn the higher numbers

The big offensive-security salaries aren't unlocked by a cert — they're unlocked by skill you can prove:

Build a home lab and practice on TryHackMe / Hack The Box.
Create a portfolio (write-ups, a GitHub, a blog) that shows real work.
Consider a hands-on cert (e.g., OSCP) if you're targeting pentest roles — it carries more weight with technical interviewers than CEH.
Get experience — even a SOC or IT-security role compounds your pay faster than collecting certificates.

FAQ

How much do CEH holders make? Aggregators put the 2026 average around $96K–$121K, entry-level ~$72K–$78K, and senior offensive roles $150K+. The BLS field median (info security analysts, all levels) was $124,910 in May 2024. Treat CEH-specific figures as estimates.

What is the entry-level ethical hacker salary? Roughly $72K–$78K in the US in 2026 per aggregators, varying by role, location, and clearance.

Does CEH increase your salary? Indirectly — it helps you qualify for and get noticed for roles, especially government/DoD. The cert alone doesn't set your pay; role, skill, and experience do.

CEH vs Security+ salary? They overlap at entry level (~$55K–$80K). CEH leans toward offensive tracks that can pay more senior, but that's from skill and experience, not the cert.

Do penetration testers earn more than defensive roles? Senior pentesters/red-teamers can reach $120K–$200K+, often above defensive roles — but only with proven hands-on ability, which CEH alone doesn't demonstrate.

Salary figures are estimates from public sources (US BLS, May 2024; job-market aggregators, 2026) and change by time and location. Verify current numbers for your role and area before making decisions.

→ Related: CEH full guide · Is CEH worth it? · CEH exam cost