Tech

Cybersecurity Analyst Salary in New York (2026)

The average Cybersecurity Analyst in New York earns around $150,000/year. After taxes, your estimated take-home is $105,839/year ($8,820/month).

Take-Home Pay Breakdown

CategoryAmount
Annual Take-Home Pay
$105,839
Monthly Take-Home Pay
$8,820
Biweekly Take-Home Pay
$4,071
Hourly Take-Home Pay

based on 2,080 hrs/year

$51/hr
Federal Tax
$24,734
State Tax
$7,952
FICA Taxes
$11,475
Effective Tax Rate

total taxes ÷ gross salary

29.44%
Estimates only — not tax advice. · Full disclaimer →

Equity compensation? Run it through the right calculator.

RSUs, ISOs, and stock sales are taxed differently. Pick the tool that matches your event.

📈
RSU is most of Cybersecurity Analyst comp in New York

At senior tech levels, RSU vesting is 50-65% of total compensation. Our New York RSU tax guide breaks down state-specific withholding, sell-to-cover shortfall math, and metro-level vest patterns.

Read the New York RSU tax guide →

Cybersecurity Analyst Salary Ranges in New York

Entry Level (0–3 yrs)

$92,000

/year

See tax breakdown →

Mid Level (3–7 yrs)

$130,000

/year

See tax breakdown →

Senior Level (7+ yrs)

$220,000

/year

See tax breakdown →

Not all Cybersecurity Analysts earn the same — not even close

The 2023 NYDFS Part 500 Amendment expanded the 2017 baseline — board-level CISO reporting, mandatory pen-testing, third-party risk management, and a 72-hour incident-reporting window — the most prescriptive financial-cyber regulation any US state has on the books. NYC cybersecurity splits four ways from there: Wall Street bank cyber, hedge-fund quant cyber, FAANG NYC product security, and Bloomberg AppSec. Real 2026 comp ranges:

SOC Analyst Tier 1-2 (entry NYC bank)

$95,000–$125,000

Security+ or CySA+ · 24/7 SOC at major NYC bank · stepping-stone

Security Engineer (mid-level NYC bank)

$150,000–$200,000

CISSP / GIAC · IR, detection · NYDFS Part 500 compliance

Senior Security Engineer / Senior AppSec

$200,000–$265,000

OSCP, cloud certs · senior detection, red team, IR

Goldman Marquee / JPMorgan AI Security Lab

$245K-$345K base + bonus 30-80% + 3-yr cliff RSU

Total comp $400K-$650K · banker/security hybrid

Hedge-Fund Quant Security (Citadel / Two Sigma / Jane Street)

$255K-$365K base + bonus 100-300%

Total comp $500K-$1.5M · discretionary bonus + profit-share

FAANG NYC Product Security (Google / Meta / Microsoft Hudson Yards)

$215K base + RSU $200K-$380K/yr

Total comp $415K-$595K · standard FAANG ladder + Mega Backdoor Roth

Bloomberg AppSec / NYC Engineering Security

$205K-$295K base + bonus + RSU

Total comp $345K-$480K · financial-NLP, market-data, terminal

Penetration Tester / Red Team (NYC consulting)

$180,000–$280,000

OSCP / OSCE · 1099 consulting common · NYC market premium

CISO (Fortune 500 NYC-headquartered)

$385K base + bonus + equity/LTI

Total comp $550K-$2.5M · top-tier Wall Street CISO genuinely high

Worth knowing: NYDFS Part 500, in effect since 2017 and expanded by the 2023 Amendment, is the strongest state-level financial cybersecurity regulation in the US. Mandatory CISO designation, multi-factor authentication, encrypted data handling, third-party risk management, annual penetration testing, and 72-hour cyber-incident reporting are all required. The regulatory floor drove sustained hiring and comp acceleration in NYC bank cybersecurity from 2017 through 2026.

How the New York cybersecurity market actually works

14.78%

NY+NYC combined top marginal — kicks in at $25M state and $50K city

$15-$80K

NJ commuter annual savings vs NYC resident at senior cybersecurity tier

72hr

NYDFS Part 500 mandatory incident-reporting window — drives NYC bank IR hiring

NYC's cybersecurity market is functionally four overlapping clusters. Wall Street bank cyber spans Goldman at 200 West Street, JPMorgan at 270 Park, Morgan Stanley at 1585 Broadway, Citi at 388 Greenwich, Bank of America NYC, and BNY Mellon. Hedge-fund quant cyber spans Citadel on Madison, Two Sigma in SoHo and Tribeca, D.E. Shaw on Sixth, Jane Street at Brookfield Place, and HRT at Hudson Yards. FAANG NYC adds Google Chelsea at Pier 57, Meta at Astor Place, Microsoft at Hudson Yards, and the Apple SoHo security subset. Bloomberg LP at 731 Lexington runs its own deep AppSec niche around financial-NLP, market-data, and terminal security.

NYDFS Part 500 plus SOX 404 cyber audit plus GDPR/CCPA compliance creates a durable NYC bank cybersecurity specialty. Senior compliance engineers (CISSP plus CISA plus financial-services experience) at major NYC banks routinely land $245K-$345K base, plus 30-80% bonus, plus 3-year cliff — total comp $400K-$650K. Combined with NYC market premium, bank stability, and benefits, senior bank cyber comp materially exceeds the same role in CA, WA, or TX. The Wall Street CISO market is its own thing entirely. Top-100 NYC bank CISO total comp lands $1M-$3M with equity and LTI — the highest CISO comp band in the country.

Hedge-fund quant cyber is the distinguishing NYC niche. Citadel, Two Sigma, Jane Street, D.E. Shaw, HRT employ ~600-1,000 cybersecurity engineers combined. Senior quant cyber lands $700K-$1.5M TC via discretionary bonus 100-300% of base. PM-track-equivalent promotions reach $1.5M-$3M+ at staff/partner level. Downside: real bonus volatility — discretionary swings of 50-150% year-over-year are normal.

NY+NYC combined top marginal 14.78% (NY state 10.9% + NYC resident 3.876%). At $400K senior NYC bank cyber, ~$44K combined; $1M senior quant cyber, $110K; $1.5M senior principal, $170K. The NJ commuter arbitrage flips the math — NYC employer + NJ residence pays NJ state (1.4-10.75%) with no NYC resident tax. NJ effective at $400K is ~7.0% vs 11.0% NY+NYC. Saves $15K/year at mid-senior, $40K-$80K at senior quant or CISO tier. Combined with Bergen / Hudson / Essex County housing at $700K-$1.4M SFH (vs $1.5M-$3M Manhattan/Brooklyn), tax+housing savings $80K-$200K/year at senior tier.

FAANG NYC product security uses the standard FAANG ladder — Google Chelsea, Meta Astor Place, Microsoft Hudson Yards. Senior AppSec at L5-L6 lands base $215K-$285K + $200K-$380K/yr. Mandiant NYC and Project Zero NYC subset offer offensive-research depth comparable to Bay Area. Bloomberg LP runs its own AppSec track on financial-NLP, market-data, and terminal security — genuinely deep specialty, more stable cash flow than FAANG/quant. Pre-retirement NYC → FL or TX relocation is the standard exit move; NY taxes pension and distributions at full state rates with only a $20K/year exemption. NY DTF audits relocators aggressively above $1M income — document residency carefully.

New York as a place to live for cybersecurity engineers

NYC cybersecurity housing follows the broader Wall Street, FAANG, and hedge-fund geography. Manhattan condo runs $1.5M-$3M for 1-2BR within reasonable commute to the bank cluster (Wall Street and Midtown). Brooklyn — Park Slope, Carroll Gardens, Cobble Hill, Brooklyn Heights, DUMBO — runs $1.5M-$3M+ for brownstone or condo. Queens (Long Island City, Astoria, Sunnyside) is $900K-$1.5M condo. Westchester is the third NYC tier — Yonkers, Hastings, Tarrytown, Scarsdale, Rye SFH at $700K-$2M with Metro-North 30-45 minutes to Grand Central.

NJ commuter housing is the alternative for senior cybersecurity engineers. Hoboken condo at $1.0M-$1.6M sits 15 minutes from Manhattan via PATH. Jersey City Newport and Exchange Place condos at $900K-$1.4M sit 10 minutes from World Trade Center via PATH. Hudson County SFH (Weehawken, Edgewater, Cliffside Park) runs $700K-$1.2M. Bergen County SFH (Englewood, Tenafly, Ridgewood) runs $700K-$1.4M with the top NJ school districts. Combined with the NJ commuter tax arbitrage, the senior bank or quant engineer routinely saves $80K-$200K/year on housing-plus-tax versus Manhattan equivalent.

Long Island (Garden City, Manhasset) at $700K-$1.5M with LIRR commute is the third commuter ring. CT commuter (Stamford, Greenwich) is mostly relevant for hedge-fund cyber engineers at Bridgewater Westport or the Greenwich hedge funds. A smaller flow runs into Manhattan-based work for engineers who take the longer Metro-North ride.

NYC itself is its own lifestyle — public transit that genuinely works, no car required, and the cultural density that engineers either love or quietly tolerate while paying to live in it. The downsides are honest. Manhattan and Brooklyn cost-of-living premium is real, winters are cold and gray December through March, and summer humidity is meaningful. And the bank-cyber 60-70 hour week during NYDFS audit cycles is its own lifestyle commitment that won't show up in the recruiting pitch.

How New York taxes cybersecurity comp — NY+NYC stack, RSU cliff, quant bonus, and the NJ commuter

NY state tax is progressive 4% to 10.9%, plus NYC resident tax 3.078% to 3.876% — combined top marginal 14.78%. Effective state tax for NYC cybersecurity engineers ranges 7.5% to 10.5% across $200K-$1.5M. A $400K senior NYC bank cyber pays roughly $44K combined NY+NYC, around 11% effective. At $1M senior quant cyber, that's $110K. At $1.5M senior hedge-fund principal or top-100 bank CISO, $170K combined. CA doesn't apply, but the city tax does, and the city tax has no upper bracket cap.

The NJ commuter arbitrage is the most consequential tax move in NYC cybersecurity. NYC employer plus NJ resident equals NJ state tax (1.4-10.75%, top 10.75% above $1M) and zero NYC resident tax. NJ effective at $400K senior cyber is roughly 7.0% versus 11.0% as an NYC resident. Savings run $15K/year at mid-senior, $40K-$80K/year at senior quant cyber or bank CISO tier. Combined with Hudson, Bergen, or Essex County housing at materially lower price-per-square-foot, the move stacks tax and housing savings of $80K-$200K/year at senior tier. The PATH from Hoboken or Jersey City runs 10-15 minutes to Wall Street or Midtown — shorter than most Manhattan-internal commutes.

Bank at Goldman, JPMorgan, Morgan Stanley, Citi, and Bank of America vests on a 3-year cliff. Year 3 lands a concentrated tax-plus-cash-flow spike that catches first-time bank engineers off guard. Some firms allow ratable election (graded over 3 years) at hire — take it if offered, because the cliff vests as a single tax-year event. NY taxes RSU vest at full marginal rates: combined ~52% for NYC residents, ~48% for NJ commuters. Quarterly estimated tax or W-4 step 4(c) closes the underwithholding gap that the 22% supplemental rate doesn't cover.

Quant cyber bonus at Citadel, Two Sigma, Jane Street, D.E. Shaw, and HRT is discretionary at 100-300% of base, paid in March of the following year. Senior quant cyber annual bonus lands $200K-$1.5M depending on fund performance and individual contribution. NY taxes the bonus at full marginal rates (~52% NYC resident, ~48% NJ commuter). Estimated tax planning and state-withholding election are critical at this comp level to avoid the April underpayment penalty. Some funds structure profit-share with 3-year holding periods that may qualify for treatment — check the comp documents at offer stage because this changes by fund and by year.

at FAANG NYC offers $47.5K/year of after-tax into Roth — Google, Meta, Microsoft, Amazon, and Apple all run it in NYC. Quant funds and banks generally do not. Pre-retirement NYC-to-FL or TX relocation is the standard exit move. NY taxes pension and 401(k) distributions at full state rates with only a $20K/year retirement-income exemption. The NY Department of Taxation audits relocators aggressively, so document residency carefully.

  • Live in NJ and work in NYC — saves $15K-$80K/year vs NYC resident at senior tier. PATH 10-15 min Manhattan.
  • NYDFS Part 500 + SOX cyber + financial-services compliance specialty — durable NYC bank market, floored comp.
  • Bank 3-year cliff cash-flow planning — concentrated vest spike year 3. Take the ratable election at hire if offered.
  • Quarterly estimated tax or W-4 step 4(c) for bank/quant March bonus to avoid April underpayment penalty.
  • Max at FAANG NYC — $47.5K/year. Quant funds and banks generally don't offer it.
  • Section 1202 at pre-Series B NYC security startups (Forter, Sift, Snyk NYC, BitSight Boston-NYC) — federal $10M tax-free.
  • Backdoor Roth $7K/year. max (NY conforms federal; NJ doesn't). Big 4 SOX cyber audit pivot at Deloitte / PwC / EY / KPMG NYC = senior-track $400K-$650K Director.
  • Pre-retirement NYC → FL or TX relocation — + vesting + retirement income to 0% state. NY DTF audits aggressively above $1M income; document residency.

Four NYC cybersecurity submarkets — Wall Street bank, hedge-fund quant, FAANG NYC, and the NJ commuter

NYC cybersecurity is functionally four submarkets. Wall Street bank cyber (Goldman, JPMorgan, Morgan Stanley, Citi, BAC, BNY Mellon — anchored by NYDFS Part 500). Hedge-fund quant cyber (Citadel, Two Sigma, Jane Street, D.E. Shaw, HRT — bonus-driven). FAANG NYC plus Bloomberg AppSec. The NJ commuter — a structural housing-plus-tax move that compounds at senior tier.

Wall Street bank cyber — Goldman + JPMorgan + Morgan Stanley + Citi + BAC + BNY Mellon

Senior compliance engineer base $245K-$345K + bonus 30-80% + 3-yr cliff RSU · TC $400K-$650K · CISO $1M-$3M+

Goldman Sachs at 200 West Street runs Marquee Security and the Goldman CISO Office across roughly 1,500 cybersecurity engineers within ~13K total NY tech. JPMorgan at 270 Park and 383 Madison runs JPMorgan Cybersecurity, the JPMorgan AI Security Lab, and JPMorgan Chase Cyber across roughly 800 cybersecurity engineers. Morgan Stanley at 1585 Broadway runs the CISO Office and MS Tech Security. Citi at 388 Greenwich runs Citi Cyber and Citi GIS. Bank of America NYC plus BNY Mellon round out the cluster. NYDFS Part 500 plus SOX 404 cyber audit plus GDPR/CCPA privacy is the regulatory floor.

Wall Street bank cyber is the most stable NYC cybersecurity market — base plus bonus plus 3-year cliff instead of the discretionary swings at the funds. The CISO market here is the highest-paid in the country: top-100 bank CISO total comp $1M-$3M with equity and LTI.

Hedge-fund quant cyber — Citadel + Two Sigma + Jane Street + D.E. Shaw + HRT

Senior base $255K-$365K + bonus 100-300% · TC $700K-$1.5M+ · partner-track $1.5M-$3M+

Citadel on Madison Avenue (~250 cyber engineers within ~3K NY). Two Sigma in SoHo / Tribeca / Hudson Yards (~150 cyber within ~2K). D.E. Shaw on Sixth Avenue (~1.5K total). Jane Street at Brookfield Place / Hudson Yards (~1.2K total). HRT at Hudson Yards (~700 total). Bridgewater Westport CT-adjacent and Renaissance Long Island add to the cluster.

Distinguishing NYC niche. Senior TC $700K-$1.5M via discretionary 100-300% bonus, partner-track $1.5M-$3M+. Downside: real bonus volatility, 50-150% year-over-year swings are normal.

FAANG NYC + Bloomberg + cybersecurity startups

Senior AppSec base $215K-$285K + RSU $200K-$380K/yr · TC $415K-$595K · L7 staff $775K-$1.05M

Google NYC HQ Chelsea (Pier 57, 111 8th Ave, 76 9th Ave). Meta NYC Astor Place / Hudson Yards. Microsoft Hudson Yards. Apple SoHo. Bloomberg LP 731 Lexington (financial-NLP + market-data + terminal security). Cybersecurity startups: Forter, Sift, Snyk NYC, HackerOne NYC, BitSight Boston-NYC.

Standard FAANG ladder + + . Mandiant NYC and Project Zero NYC offer offensive-research depth comparable to Bay Area. Bloomberg AppSec is the deep financial-NLP/market-data niche.

NJ commuter — Hoboken + Jersey City + Bergen / Hudson / Essex County

Same NYC employer comp · NJ 7.0% vs NYC resident 11.0% · saves $15K-$80K/yr at senior tier

Less an employer cluster than a structural housing+tax move. Hoboken $1.0M-$1.6M (15 min PATH to Manhattan); Jersey City Newport / Exchange Place $900K-$1.4M (10 min to WTC). Hudson + Bergen County SFH (Weehawken, Edgewater, Englewood, Tenafly, Ridgewood) $700K-$1.4M with top NJ schools.

Saves $15K-$80K/year on tax + another $40K-$120K/year on housing vs Manhattan/Brooklyn — the cleanest tax move for senior NYC cyber engineers.

The NYC cybersecurity career arc — entry SOC, NYDFS Part 500, FAANG/quant/CISO pivot

Year 0-2 (SOC Tier 1-2 or new-grad security engineer): $95K-$125K base. Security+ or CySA+ at entry. New-grad PhDs with security focus at Google NYC L4 typically land $185K-$215K base plus $130K-$200K/yr. Entry SOC at NYC banks (Goldman, JPMorgan, Citi) runs $95K-$135K plus a small bonus.

Year 2-5 (security engineer / mid-level): $150K-$200K base plus or bonus. CISSP and GIAC stack pursuits are common at this tier. The NYDFS Part 500 plus SOX cyber plus financial-services compliance specialty is the distinguishing NYC mid-career path. No other US state has the regulatory depth to support it. CISSP requires 5 years of experience, so it's a year 5 milestone for most.

Year 5-10 (senior security engineer / senior NYDFS Part 500 / FAANG NYC L5-L6 / senior quant cyber): $200K-$345K base plus or bonus $200K-$700K/yr — total comp $400K-$1M. The mid-career FAANG-to-quant pivot peaks at this stage. Leave FAANG for Citadel, Two Sigma, D.E. Shaw, or Jane Street at +30-80% base plus 100-300% discretionary bonus. The tradeoff is bonus volatility and a 60-70 hour week during peak cycles, but the comp upside is real.

Year 10-18 (staff/principal AppSec / senior CISO / senior quant cyber): $345K-$510K base plus or equity $400K-$1.2M/yr — total comp $775K-$1.7M. At FAANG NYC, L7 staff or principal lands $775K-$1.05M. At growth-stage NYC cybersecurity startups, Director or VP Security runs $400K-$650K plus significant equity. Senior bank CISO runs $700K-$1.5M base plus 50-100% bonus plus LTI.

Year 15+ (CISO / VP Security / hedge-fund cyber partner): Fortune 500 NYC CISO total comp $1M-$2.5M with equity and LTI. Top-100 Wall Street bank CISO is genuinely high — $1.5M-$3M total comp. Hedge-fund cyber partner-track lands $1.5M-$3M+. Pre-retirement NYC-to-FL or TX relocation is the standard exit. home-sale exclusion plus vesting plus retirement income all moved to 0% state. NY DTF audits relocators aggressively above $1M income.

Where New York cybersecurity engineers live

NYC cybersecurity housing splits between Manhattan and Brooklyn (FAANG and bank engineers) and the NJ commuter ring (senior bank and quant cyber, where the tax-plus-housing math compounds).

Hoboken / Jersey City Newport / Exchange Place (NJ commuter)

PATH 10-20 min Manhattan · $900K-$1.6M condo · saves $15K-$80K/yr NYC tax

Edgewater / Weehawken / Cliffside Park (NJ Hudson SFH)

NJT bus 25-35 min · $700K-$1.2M SFH · scenic Hudson views

Park Slope / Cobble Hill / Brooklyn Heights (Brooklyn brownstone)

Subway 20-30 min Wall Street · $1.5M-$3M brownstone

Long Island City / Astoria / Sunnyside (Queens)

7/N/W trains 15-25 min Manhattan · $900K-$1.5M condo

Englewood / Tenafly / Ridgewood (Bergen County NJ)

NJT 35-45 min Penn · $700K-$1.4M SFH · top NJ ISDs

Westchester (Yonkers / Hastings / Scarsdale)

Metro-North 30-45 min Grand Central · $700K-$2M SFH · top schools

PATH plus NJ Transit plus Metro-North plus LIRR makes 25-50 minute commutes routine across the metro.

Is this the right move?

New York cybersecurity — who it's best for

Working in your favor

  • +NYDFS Part 500 plus SOX plus GDPR/CCPA = durable financial-services cybersecurity specialty
  • +Wall Street bank CISO market = highest-paid US CISO comp ($1M-$3M total comp at top-100 banks)
  • +Hedge-fund quant cyber TC $700K-$1.5M+ via 100-300% discretionary bonus + partner-track promotions
  • +FAANG NYC product security (Google Chelsea, Mandiant NYC, Project Zero NYC subset) = world-class
  • +NJ commuter arbitrage saves $15K-$80K/year on tax plus another $40K-$120K/year on housing
  • +Bloomberg AppSec offers the most stable NYC cybersecurity cash flow vs FAANG/bank/quant
  • +NYC market premium plus bank stability plus benefits creates an attractive senior career environment

Worth knowing before you sign

  • NY+NYC combined top marginal 14.78% — eats $44K-$170K/year at senior+ tiers
  • Bank RSU 3-year cliff vest creates a concentrated vest spike year 3 (cash-flow plus tax planning)
  • NY taxes pension and 401(k) distributions (only $20K/year exemption) — pre-retirement relocation common
  • NY DTF aggressive on residency audits when relocating mid- or late-career
  • Manhattan and Brooklyn workforce housing $1.5M-$3M+ for SFH equivalent
  • Quant bonus discretionary swings (50-150% YoY) create real cash-flow volatility
  • Quant funds and banks generally do NOT offer Mega Backdoor Roth (FAANG NYC offers full MBR)
  • Frontier-AI cluster CA-concentrated — NYC FAANG product security less differentiated than Bay Area

Calculate Your Exact Take-Home Pay

Add 401(k) contributions, HSA, dependents, and more to see your personalized take-home.

Open Full Calculator

Frequently Asked Questions

Find answers to common questions about your taxes and our calculator.

Compare Two States

See how income tax, take-home pay, and total tax burden differ between any two US states side by side.

State 1

State 2

Cybersecurity Analyst Salary in Other States

More on New York