Salary Survey Extra is a series of periodic dispatches that give added insight into the findings of our most recent Salary Survey. These posts contain previously unpublished Salary Survey data.‍‍

‍

‍The FBI's Internet Crimes Complaint Center (IC3) estimated the total losses from cybercrime in 2022 at more than $10 billion. That's a whole lot of outright theft, but the stories that popular culture tends to tell about hackers rarely paint them as, you know, straight-up malicious lawbreakers.

There are good guy hackers out there, of course, but they're the ones who are trying to help beat back the rising tide of cybercrime. The Certified Ethical Hacker (CEH) credential managed by EC-Council (No. 16 on our most recent Salary Survey 75 list) is the foremost certification in the industry for those engaged in the ethically permissible brand of hacking.

Here's what the salary picture looks like for CEH holders who responded to the Salary Survey:‍

All U.S. Respondents
Average Annual Salary: $138,650
Median Annual Salary: $140,470
How satisfied are you with your current salary?
Completely Satisfied: 7.4 percent
Very Satisfied: 28.1 percent
Satisfied: 41.9 percent
Not Very Satisfied: 18.7 percent
Not At All Satisfied: 3.9 percent‍

All Non-U.S. Respondents
Average Annual Salary: $56,710
Median Annual Salary: $39,000
How satisfied are you with your current salary?
Completely Satisfied: 5.9 percent
Very Satisfied: 10.5 percent
Satisfied: 35 percent
Not Very Satisfied: 32.9 percent
Not At All Satisfied: 15.7 percent

The largest single group of CEH holders who participated in the Salary Survey are U.S. residents (41.5 percent of those surveyed), but we also heard from CEH-certified professionals in 66 other countries: Albania, Argentina, Armenia, Australia, Bangladesh, Belgium, Bermuda, Botswana, Brazil, Bulgaria, Canada, China, Colombia, Cote d'Ivoire, Dominican Republic, Ecuador, Egypt, Estonia, Finland, France, Germany, Ghana, Hungary, India, Indonesia, Ireland, Israel, Italy, Japan, Jordan, Kenya, Kuwait, Malawi, Malaysia, Mauritius, Mexico, Nepal, Netherlands, New Zealand, Nigeria, Oman, Pakistan, Paraguay, Peru, Philippines, Poland, Portugal, Qatar, Rwanda, Saudi Arabia, Singapore, South Africa, Spain, Sri Lanka, Sweden, Switzerland, Taiwan, Thailand, Trinidad and Tobago, Turkey, Uganda, Ukraine, United Arab Emirates, United Kingdom, United States, Uzbekistan, and Vietnam.

The cybersecurity profession tends to be male-dominated, and that's certainly reflected here: 84.5 percent of the CEH holders who participated in the survey are men, with 11.1 percent who are women, 3.4 percent who chose not to identify their gender, 0.6 percent who are transgender male, and 0.4 percent who are gender variant/nonconforming. Most of those surveyed are solidly middle-aged, either between the ages of 35 and 44 (39.1 percent of respondents) or between the ages of 45 and 54 (29.4 percent). The outliers are the 18.4 percent of CEH holders who are between the ages of 25 and 34, the 8.8 percent between the ages of 55 and 64, the 1.6 percent between the ages of 65 and 74, and the 2.7 percent between the ages of 19 and 24.

A bit more than 91 percent of CEH holders who responded to the survey have an educational background that includes time spent at a college or university. The highest level of formal education completed by most CEH holders is either a master's degree (44.8 percent of respondents), bachelor's degree (38.4 percent), associate's degree (3.7 percent), professional degree (2.7 percent), or doctorate (2.2 percent). The outliers are the 3.7 percent of those surveyed who topped out at some level of post-high school technical training, the 3.9 percent who exited the realm of formal education after completing high school, the 0.4 percent who are currently in school, and the 0.2 percent who entered the workforce with no formal education.

All but a handful of the CEH holders who participated in the survey are regularly employed, with 92.2 percent holding full-time jobs, 2.1 percent in part-time jobs, 2.1 percent who are students, 1.9 percent on sabbatical, and the remaining 1.7 percent out of work at the time of the survey. Among those who have full-time jobs, most are at work either for the standard 40 hours per week (36.6 percent of respondents) or put in between 41 and 50 hours per week (also 36.6 percent). The rest are either laboring under a lighter load — spending either between 31 and 39 hours per week doing work (8.7 percent of respondents), between 21 and 30 hours on the job (2.5 percent), or fewer than 20 hours per week on the clock (both 0.6 percent) — or are really leaning into the all-work-and-no-play ethic, putting in more than 50 hours per week (15 percent).

Many IT jobs aren't tied to a physical location, a condition that became more widespread in recent years as the COVID-19 pandemic reshuffled traditional working arrangements. About one-third of CEH holders who participated in the survey have been spending their entire work schedule at home of late, putting in either more than 40 hours per week (18.3 percent of those surveyed) or 40 hours per week (15 percent). Everyone else is scattered across the spectrum, with 40 percent working from home either fewer than 10 hours per week (27.1 percent) or between 10 and 20 hours per week (13.3 percent), and 25 percent working from home either between 21 and 30 hours per week (15.8 percent) or between 31 and 39 hours per week (10.5 percent).

In terms of workplace standing, the largest single group of CEH holders we heard from, 33.2 percent of those surveyed, are employed at the senior specialist level. The rest, in descending order, are either managers (17.4 percent), senior managers (15 percent), specialists (12.5 percent), directors (10.8 percent), rank-and-file employees (6.8 percent), or executives (4.3 percent).

The largest single group of CEH holders who responded to the survey are IT veterans, having worked in a role that directly utilizes one or more of their certified skills for more than a decade (46 percent). The rest have been plying their certified skills for either between zero years (1 to 11 months) and 2 years (11.5 percent of respondents), between 3 and 5 years (16 percent), between 6 and 8 years (15.7 percent), or between 9 and 10 years (10.8 percent).

Finally, here's the view of CEH holders on key questions from the survey about how certification impacts job performance:

At my current job I use skills learned or enhanced through certification:
Several times a day: 48.4 percent
Several times a week: 26.6 percent
Several times a month: 12.6 percent
Occasionally: 9.4 percent
Rarely: 3 percent

Since becoming certified, I feel there is greater demand for my skills.
Strongly agree: 41.1 percent
Agree: 39.8 percent
Neither Agree nor Disagree: 14.2 percent
Disagree: 1.7 percent
Strongly Disagree: 3.2 percent

Becoming certified has increased my problem-solving skills.
Strongly agree: 32 percent
Agree: 41.1 percent
Neither Agree nor Disagree: 20.6 percent
Disagree: 4.3 percent
Strongly Disagree: 2 percent

Becoming certified has increased my workplace productivity.
Strongly agree: 27.9 percent
Agree: 39.8 percent
Neither Agree nor Disagree: 24.2 percent
Disagree: 4.5 percent
Strongly Disagree: 3.6 percent

PAST CEH DEEP FOCUS FEATURES

2022

2021

2020

2019

2018

2017

‍