Security Engineer Salary in Dallas — 2026 BLS Data
Salary distribution
Percentile breakdown of Security Engineer base salaries in Dallas.
The BLS OEWS May 2024 data for information security analysts (SOC 15-1212) in the Dallas-Fort Worth-Arlington metropolitan area puts the median annual wage at approximately $131,280 — essentially matching the national median of $124,910 within rounding — which makes Dallas one of the few major metros where security engineers earn close to national benchmarks without paying a San Francisco or New York City cost-of-living penalty. That alignment is the defining feature of the Dallas market: compensation is competitive but not inflated, while the city’s composite cost-of-living index sits at 101 on the C2ER scale (US average = 100), meaning your dollar goes almost exactly as far as the national average. The math is straightforward and worth understanding before you walk into any compensation conversation.
What the median hides
The $131K median is an average of three very different labor market segments that happen to share the same BLS occupation code.
At P25 ($101,550), you are looking at roles dominated by corporate security analysts at mid-market companies doing compliance-driven work — SOC 2 readiness, vendor risk assessments, policy documentation — alongside junior engineers at financial institutions who are building toward more technical responsibilities. Dallas’s large financial services presence (American Airlines Credit Union, Comerica, Goldman Sachs’s large operations campus, Fiserv, Broadridge) generates consistent demand for entry-level and early-mid-career analysts, but these roles are often benchmarked against compliance peer groups rather than engineering peer groups, and compensation reflects that.
At P50 ($131,280), the median engineer is in a technical individual contributor role: vulnerability management, detection engineering, cloud security operations, or application security at a company between 500 and 5,000 employees. The Dallas-Fort Worth tech employer base is broad here — AT&T (headquartered in Dallas), McKesson, Texas Instruments, Sabre, Match Group, and a growing cohort of fintech and cybersecurity companies that have relocated or expanded to avoid West Coast costs. The median is also strongly influenced by the healthcare sector: Tenet Healthcare, HCA Healthcare’s Texas operations, and major hospital systems like UT Southwestern Medical Center all maintain significant security teams driven by HIPAA requirements and the high value of electronic health records as ransomware targets. Healthcare security roles typically track within $10K–$15K of the market median and rarely reach P75.
At P75 ($154,150) and P90 ($172,920), you are in a smaller, more specific market. These engineers are either senior ICs at technology companies treating security as a product differentiator rather than a cost center — Cylance (now BlackBerry), CrowdStrike’s Dallas-area presence, Zscaler’s Texas field engineering teams — or staff-level engineers at large enterprises where the security function is staffed to engineering standards rather than analyst standards. Defense contractors with DFW footprints (Lockheed Martin Aeronautics in Fort Worth, L3Harris, Raytheon) also contribute to the upper band, particularly for roles that combine a TS/SCI clearance with architecture-level responsibilities.
The P25-to-P90 spread is 1.7x, narrower than Boston (2.1x) or San Francisco (2.4x), reflecting a market that has fewer pure-play hypergrowth security product companies at the top end but also fewer salary-suppressed junior analyst roles at the bottom.
How Dallas compares to other major security hubs
Dallas is neither the highest-paying market nor the lowest among major US tech metros for security engineers. Placing it in context matters for evaluating offers and deciding where to set expectations.
San Francisco remains the benchmark for pure-tech security compensation. A senior application security engineer at a FAANG or well-funded AI company in SF clears $200K–$250K in base salary — roughly 52%–90% above Dallas P75. After adjusting for San Francisco’s cost-of-living index of approximately 178 (C2ER), that premium shrinks but does not disappear; SF engineers earn materially more in purchasing power terms, with the gap most visible for engineers in the top quartile.
Austin, the intra-Texas comparison point, runs close to Dallas but slightly higher at the top end, driven by Dell, Apple, Google, and Meta’s expanded Austin campuses. Austin’s P50 for security engineers is roughly $135K–$140K versus Dallas’s $131K; the difference is within noise for most negotiation purposes, but Austin’s P90 reaches somewhat higher ($185K–$195K) due to those large tech employers setting compensation at their national scales.
Houston, the other major Texas market, runs approximately 5%–8% below Dallas across all percentiles for security roles, partly because the dominant employer base (energy and petrochemical companies) benchmarks technology compensation against industrial sector peers rather than tech sector peers. A senior security engineer in Dallas should not accept a Houston-indexed offer without adjustment.
Washington DC and Northern Virginia remain the strongest competitor to Dallas for security talent, particularly for candidates with clearances. DC-area P50 runs $145K–$160K, but that premium comes with a COL index of approximately 152 — significantly above Dallas’s 101 — so the purchasing power advantage disappears for non-cleared roles. For engineers with active TS/SCI clearances, the DC market offers 25%–35% higher base compensation than Dallas for comparable cleared roles, and that premium is real even after cost-of-living adjustment.
New York runs $145K–$165K at the median for security engineers in financial services, which is the dominant hiring context there. Against Dallas’s $131K, NY looks 10%–25% better on paper; after adjusting for NYC’s COL index of approximately 187, NY and Dallas are roughly equivalent in purchasing power for mid-level roles. The case for staying in Dallas is largely financial.
What drives the spread: company tier, level, and specialty
Three variables explain most of the distance from P25 to P90 in the Dallas market.
Company tier and industry vertical. Dallas is one of the few major metros where corporate security programs — meaning security teams embedded inside large non-tech companies — represent a significant share of total demand. AT&T alone employs hundreds of security engineers across its Dallas campus; the role profiles and compensation structures look more like telco than pure-play tech, with defined pay bands, strong benefits, and limited equity for most individual contributor levels. Positions at companies like this cluster near P50. Contrast that with cybersecurity product companies or well-funded startups: a detection engineering role at a company whose product is threat intelligence or a security orchestration platform will pay $20K–$35K more for the same experience level because the employer benchmarks against software engineering salaries, not analyst salaries.
Technical specialty. Cloud security is the highest-compensated specialty in the current Dallas market, driven by the mass migration of large enterprise workloads from on-premises data centers (AT&T, American Airlines, and the large healthcare systems all have multi-year cloud migration programs underway). Engineers who can design secure landing zones on AWS or Azure, build IAM policies at scale, and operate cloud security posture management (CSPM) tooling command premiums of $18K–$28K above the generalist median. Application security engineers with actual software development fluency — engineers who can write production code and do security reviews, not just run DAST scanners — are similarly in demand and similarly well-compensated.
Penetration testing and red team roles pay well at the senior level nationally, but the Dallas market is thin for these positions outside of the defense contractor ecosystem in Fort Worth and the small number of dedicated security firms (Bishop Fox, Coalfire, and Rapid7 professional services have Texas presence). If your background is primarily offensive security, the employer universe in Dallas is smaller than in DC, SF, or New York, and you may need to open the aperture to include remote roles at pure-play security firms to capture the full market.
GRC (Governance, Risk, Compliance) roles pay consistently below technical security engineering roles at every experience level — typically 15%–25% below a P50 technical engineer — and Dallas has a particularly large supply of these positions driven by its financial services and healthcare employer base. If you hold a CISSP or CISA and are operating primarily in policy and audit work, be aware that the Dallas market will price your experience against the GRC comp bands, not the engineering comp bands, unless you actively reframe your technical contributions.
Level and ownership scope. The most significant single driver of compensation within a company tier is whether you are operating at the engineer-who-implements level or the engineer-who-designs level. In concrete terms: an engineer who can document “I built the detection rule that identified the initial access technique used in our Q3 incident, reducing mean time to detect from 18 hours to 45 minutes” will level differently than an engineer who describes the same incident in terms of the SIEM queries they ran. Outcome-framed experience — especially experience that ties security work to business outcomes like audit findings resolved, regulatory certifications achieved, or breach costs avoided — commands the largest level-over-level compensation step-ups.
Total compensation breakdown
For a mid-level security engineer in Dallas hitting the P50 base ($131,280), a realistic total compensation package at a commercial technology or financial services employer looks like this:
- Base salary: $131,280. This is the BLS-tracked figure — what shows up on your W-2, what lenders use for qualification, and what determines target bonus calculations.
- Annual cash bonus: $11,000. Most Dallas commercial employers pay an 8%–10% target bonus for individual contributors. Financial services firms (Fiserv, Broadridge, Comerica) often run bonus as a higher percentage of a somewhat lower base. Defense contractors typically pay minimal discretionary bonuses outside specific contract incentive structures.
- Equity / RSUs: $12,000 annualized. Public companies grant RSUs worth $40K–$60K over four-year schedules for mid-level hires, producing $10K–$15K per year in realized comp at current valuations. Pre-IPO equity is common at startup-stage security companies that have set up in Dallas-Fort Worth (several cyber insurance and security analytics companies have emerged in the region), but illiquid options should be modeled conservatively. AT&T and most large enterprise employers have equity programs that become meaningful at director level and above; individual contributor equity at those companies is often minimal.
Total cash (base + bonus): approximately $142,000. Total comp including equity: $154,000.
At P75 ($154,150 base), the equity component grows substantially — senior engineers at product-focused security companies often receive RSUs worth $60K–$100K over four years, producing $15K–$25K annually, and target bonuses may run 12%–15% of base at companies competing with pure-play tech. A reasonable P75 total comp estimate is $185K–$210K for a full package.
At P90 ($172,920 base), you are most likely at a company where security is a product or critical business differentiator, or holding a clearance in a senior contractor role. Total comp estimates here range $210K–$250K, and refresh grants (additional equity granted in high-retention years) can push that higher at companies with strong stock performance.
Cost-of-living adjusted purchasing power
Dallas’s COL index of 101 (C2ER composite, US average = 100) is the city’s defining compensation advantage. The median security engineer salary of $131,280 in Dallas has nearly identical purchasing power to the national median, unlike the same salary in Boston (COL ~151), San Francisco (COL ~178), or New York (COL ~187), where it would represent significant financial strain.
The housing component is where this shows up most concretely. A one-bedroom apartment in Uptown Dallas or the Knox-Henderson corridor runs $1,600–$2,100 per month in 2026 — comparable to suburban Austin or Denver, and roughly half of what the same money buys in San Francisco or Manhattan. For engineers earlier in their careers who are building savings or paying down student debt, this differential is material.
The comparison to Austin is particularly relevant for Texas-based engineers weighing opportunities in both cities. Austin’s COL index is now approximately 120 — meaningfully above Dallas’s 101 — meaning a $131K Dallas salary is roughly equivalent in purchasing power to a $155K Austin salary. The Austin tech premium rarely reaches that level for security engineers outside the largest tech employers, so Dallas frequently wins on net financial outcome even when Austin base salaries appear higher on paper.
Texas has no state income tax, which is the other structural advantage relative to California (9.3% marginal rate for this income level), New York (6.85%), and Massachusetts (5% plus the 4% millionaire’s surtax). For a Dallas engineer at $131K, the effective state tax burden is zero. Against a comparable San Francisco offer, that zero-state-tax advantage is worth roughly $12K–$15K in annual after-tax income at this income level — equivalent to almost a full month’s gross salary, and a real argument for Dallas if you are comparing offers across states.
The offset: Dallas utility costs run approximately 13% above the national average (BLS Consumer Price Index data for the Dallas-Fort Worth-Arlington area), driven largely by summer cooling costs in a climate that regularly reaches 100°F+ for weeks at a time. For a household, that is a real line item — plan for $200–$350 per month in summer electricity bills — but it does not meaningfully alter the overall COL calculation.
Negotiation playbook: three levers that move offers
1. Frame your ask against P75, not the median, if you have three or more years of technical security experience. The P50 median includes a large volume of compliance-analyst and early-career roles that naturally pay below the engineering market rate for experienced practitioners. If a recruiter asks for your target compensation, “I’m targeting $150,000–$160,000 base, consistent with senior security engineer roles in the Dallas-Fort Worth market” is defensible using the BLS P75 figure of $154,150 as your anchor. You are not asking for an outlier number; you are asking for what top-half experienced engineers actually earn. Many candidates anchor to the median and leave $20K–$30K on the table.
2. Quantify your impact in terms that matter to non-security business stakeholders. The single most effective differentiator in Dallas security compensation negotiations is the ability to convert security work into business language. “I reduced our mean time to detect from 18 hours to 45 minutes” matters less to a hiring manager than “I built the detection capability that identified a ransomware precursor in our environment, which our IR team assessed would have cost $2–4M to remediate.” Dallas’s dominant employer base — large enterprises in finance, healthcare, and telecom — evaluates security spend as a business risk management function. Engineers who can explain their work in those terms get leveled up; engineers who describe their work in terms of tools and protocols get leveled with the analyst pool.
3. Use competing offers with specificity and a timeline. “I have another offer” is the weakest possible negotiation signal. “I have an offer at $148,000 base with a 10% target bonus and $50,000 in RSUs vesting over four years, and I need to respond by [specific date]” is actionable. The specificity accomplishes two things: it establishes your revealed market value with precision, and the deadline creates a real decision point that recruiters can take to their compensation approval chain. If you do not have a competing offer, your current total compensation stated precisely — “I’m currently at $127,000 base with a $10,000 target bonus, and I would need a clear step up to make this move worthwhile” — serves as an anchor with similar specificity. Vague pressure creates friction; specific data creates negotiation.
A third-party salary data point strengthens both tactics. Mentioning that “BLS OEWS May 2024 data for Dallas-Fort Worth puts the P75 for this occupation at $154,000” is more credible than referencing a crowdsourced platform because BLS data is mandatory employer reporting, not voluntary self-reporting. It is harder to push back on.
Data caveats
The BLS OEWS May 2024 data is the most rigorous source available for this market, built from mandatory employer reporting covering hundreds of thousands of workers, but it has specific limitations worth understanding.
SOC 15-1212 is a wide bucket. “Information Security Analysts” captures everything from junior SOC analysts running playbooks to principal cloud security architects designing zero-trust network segmentation. Your specific subfield — particularly whether you work in cloud security, AppSec, detection engineering, GRC, or offensive security — narrows the relevant comparison range considerably from the full P25-to-P90 spread.
Equity is excluded by design. BLS tracks wages reported to state unemployment agencies — W-2 wages — and does not capture RSU vesting, stock option exercises, or unvested equity grants. For roles at commercial technology companies with active equity programs, BLS data understates total economic compensation by 10%–20% at P50 and 20%–35% at P75–P90. For GRC and compliance roles at large enterprises, BLS is largely complete.
The data is lagged. May 2024 survey data reflects wages paid in spring 2024. The Dallas security market has continued to evolve; the CrowdStrike global IT outage of July 2024 and subsequent cybersecurity spending response have increased demand for detection and incident response expertise specifically. Current job postings from companies required to disclose salary ranges in other states (California, Colorado, New York) that have Dallas offices can give you a more current read on specific employer pay bands.
The BLS metro definition is broad. The Dallas-Fort Worth-Arlington MSA covers an area that includes both the dense inner urban core (Uptown, Deep Ellum, Knox-Henderson) and lower-cost suburban and exurban communities (Denton, McKinney, Mansfield). Roles located in downtown Dallas or Plano’s Legacy corridor — where AT&T, Toyota Financial Services, and many financial firms are headquartered — may benchmark slightly above the metro median shown here; roles further out in the suburbs may benchmark at or below it.
For managing multiple security engineer applications simultaneously — a search that often spans enterprise employers, product companies, and staffing agencies across a wide geography — a job tracker that records offer details, compensation components, and timeline deadlines helps avoid the common failure mode of mixing up which offer has which terms when you are finally in the final-round stage with three companies at once.