Pay & careers / United Kingdom
AI security careers.
What about the pay?
You want to know what the work involves, whether your experience fits and what you could earn. Start with a UK benchmark, then compare the role behind the title.
I think AI security is worth learning because people are already building these systems and need help securing them. You may be closer to the work than you think.
Read the UK market evidenceChoose a profession
UK / GBP / checked 26 September 2026
These are related security benchmarks, not AI-specific salaries. Five paths use survey experience bands. Consulting uses advertised salary percentiles; research has no verified range. None guarantees a job level or a pay rise.
Career direction
AI security engineer
Build the application controls and tests around models and their tools.
Benchmark: Security Engineering
Broad security engineering, not an AI-specific salary survey.
- 1-3 years£45,000 to £59,750
- 4-6 years£62,500 to £75,750
- 7-9 years£81,000 to £98,500
- 10-12 years£100,000 to £115,750
Security Engineering source: Cybershark 2026, page 8 (PDF)
Explore this path and its first exerciseCareer direction
AI security architect
Design data flows and decide who can authorise each action.
Benchmark: Security Architecture
Broad security architecture. Job scope and relevant experience matter more than the title.
- 1-3 years£48,000 to £60,500
- 4-6 years£65,750 to £80,250
- 7-9 years£84,500 to £100,500
- 10-12 years£106,500 to £121,000
Security Architecture source: Cybershark 2026, page 8 (PDF)
Explore this path and its first exerciseCareer direction
AI red teamer
Test how AI systems fail and turn findings into reproducible fixes.
Benchmark: Penetration Testing/Red Teaming
Broad penetration testing and red teaming, not a premium for AI attack skills.
- 1-3 years£45,000 to £59,000
- 4-6 years£64,500 to £80,000
- 7-9 years£83,500 to £100,500
- 10-12 years£109,500 to £128,000
Penetration Testing/Red Teaming source: Cybershark 2026, page 8 (PDF)
Explore this path and its first exerciseCareer direction
AI governance and risk
Set risk ownership and help people make informed deployment decisions.
Benchmark: Cyber Governance, Risk & Compliance (GRC)
Broad cyber GRC. This is not a salary estimate for an AI governance lead.
- 1-3 years£38,750 to £53,250
- 4-6 years£60,500 to £73,500
- 7-9 years£72,500 to £86,500
- 10-12 years£90,000 to £105,000
Cyber Governance, Risk & Compliance (GRC) source: Cybershark 2026, page 7 (PDF)
Explore this path and its first exerciseCareer direction
AI compliance and assurance
Check which obligations apply and what the control evidence proves.
Benchmark: Technology Risk & IT Audit
Related audit and technology-risk work, not a direct AI compliance benchmark.
- 1-3 years£35,000 to £47,000
- 4-6 years£50,750 to £65,000
- 7-9 years£62,000 to £77,500
- 10-12 years£78,500 to £93,750
Technology Risk & IT Audit source: Cybershark 2026, page 8 (PDF)
Explore this path and its first exerciseCareer direction
AI security consultant
Help clients scope the work, understand risks and act on findings.
Benchmark: Security Consultant
Broad security-consultant vacancies, not AI-specific consulting pay. This uses advertised salaries, not the experience-banded survey above.
£55,000 to £86,250
Middle 50% of advertised annual salaries (25th to 75th percentile).
Median: £70,000
368 salary-bearing adverts from 594 permanent UK vacancies. 6 months to 26 September 2026.
Levels are mixed. These percentiles do not map to years of experience or a promotion ladder. No bonus or equity has been added.
Source: IT Jobs Watch, Security ConsultantCareer direction
AI security researcher
Reproduce attack and defence results, with clear test conditions.
No verified comparable range yet
We have not verified a comparable UK AI-security research range. Academic pay and AI-lab total compensation should not be pooled.
Check current vacancies for the same work and level. Compare base salary separately from bonuses and equity.
No zero-experience salary is established here. Years in another field do not automatically translate into the same level in AI security. Employer, location and responsibility can change the offer.
Sources, salary basis and limitations
The report gives salary ranges by experience band and reports 3,861 participants overall. It does not give counts for each role/band or define how its ranges were calculated. The table is not explicitly defined as base-only. Bonuses, equity and sales OTE have not been added. These are directional recruiter benchmarks, not a representative UK market estimate or a personal salary prediction. No AI premium or currency conversion has been applied.
Compliance and assurance use technology risk and IT audit as a related benchmark. Consultancy uses a different basis: IT Jobs Watch permanent UK vacancy data, with its observation period and salary-bearing sample count shown. Research remains unpriced.
Looking at leadership roles?
Leadership has a different scope. The same survey reports these UK cyber-leadership bands, separately from its years-of-experience table.
Broad cyber leadership, not AI-specific pay. The report does not provide a sample count for each title. These are not the next automatic step after 10-12 years.
Leadership source: page 6 (PDF)Opportunity, with context
There is real work here. Hiring is still selective.
The UK government's 2026 cyber-sector report describes firms moving from isolated AI-security engagements to a steady pipeline of testing, advice and training. That is evidence of work securing AI, not a count of open AI-security jobs. [1]
The 2026 report estimates 69,600 cyber-related full-time-equivalent roles at UK cyber suppliers. Growth was the slowest recorded since the series began in 2018. [1]
The 2025 skills report counted 32,370 core cyber job postings in January-December 2024, down 33% from 2023. These are historical vacancies, not today's live openings. [2]
My advice: build on the work you already know and show what you can do with an AI system. A small, explained project gives you something concrete to discuss with an employer.
Market sources and observation dates
DSIT Cyber Security Sectoral Analysis 2026: 2026 publication; research and data blending in 2025. Its sector-employment estimate covers cyber suppliers, not all security jobs across the economy.
DSIT Cyber Security Skills in the UK Labour Market 2025: 2025 publication; vacancy data January-December 2024. The datasets have different scopes and periods; do not combine them into one growth rate.
Turn a career idea into a first task.
The quiz, learning guide and practice exercises are completely free. No account or email needed.
The quiz suggests what to explore. It does not measure job readiness.
Compare company compensation on Levels.fyi. Check location, level and whether a figure includes stock or bonuses. This is an external site, not a data feed.