Mức lương tham chiếu Việt Nam (2024) - USD/tháng (Gross)
| Vị trí | Fresher / Junior (0-2 năm) | Mid-level (2-5 năm) | Senior / Lead (5-8+ năm) | Principal / Architect / Manager |
|---|---|---|---|---|
| SOC Analyst (L1/L2/L3) | $800 - $1,500 | $1,500 - $3,000 | $2,500 - $4,500 | $4,000 - $7,000+ (Manager) |
| Security Engineer (Net/Cloud/AppSec/Infra) | $1,200 - $2,000 | $2,000 - $4,000 | $3,500 - $6,000 | $5,000 - $9,000+ (Architect/Lead) |
| Penetration Tester / Red Teamer | $1,000 - $1,800 | $2,000 - $4,000 | $3,500 - $6,500 | $5,000 - $10,000+ (Lead/Manager) |
| GRC / Risk / Compliance / Privacy | $1,000 - $1,800 | $1,800 - $3,500 | $3,000 - $5,500 | $4,500 - $8,000+ (DPO/CRO) |
| Threat Hunter / Detection Engineer | $1,500 - $2,500 | $2,500 - $4,500 | $4,000 - $7,000 | $5,500 - $9,000+ |
| Incident Responder / DFIR | $1,200 - $2,000 | $2,200 - $4,000 | $3,500 - $6,000 | $5,000 - $9,000+ |
| Security Architect (Ent/Cloud/Zero Trust) | - | $3,000 - $5,000 | $4,500 - $8,000 | $6,000 - $12,000+ |
| CISO / VP Security / Head of Security | - | - | $5,000 - $10,000 | $8,000 - $20,000+ (Equity/Bonus lớn) |
Lưu ý: Lương **Net (thực nhận)** thường = Gross - BHXH/BHYT/BHTN (10.5%) - TNCN (5-35% lũy tiến). Lương **Product Company / Big Tech / Bank / Foreign Corp** cao hơn **Outsource / MSSP / SME / Gov** 30-100%. **Remote US/EU/SG**: Nhân hệ số 3-5x lương VN đồng vị trí.
Mức lương Quốc tế (US / Singapore / AU / EU - 2024 Annual Gross USD)
| Role | US (Tech Hub: SF/NYC/Seattle/DC) | Singapore | Australia (Sydney/Melb) | Germany / NL / UK |
|---|---|---|---|---|
| Junior SOC / Security Analyst | $75K - $110K | SGD 60K - 90K ($45K-$67K) | AUD 80K - 110K ($53K-$73K) | €50K - €75K ($54K-$81K) |
| Security Engineer | $110K - $160K | SGD 90K - 140K ($67K-$104K) | AUD 120K - 160K ($80K-$106K) | €70K - €100K ($75K-$108K) |
| Senior / Lead Engineer | $150K - $220K | SGD 130K - 190K ($97K-$141K) | AUD 160K - 210K ($106K-$139K) | €95K - €130K ($102K-$140K) |
| Architect / Principal | $180K - $280K+ | SGD 180K - 250K+ ($134K-$186K) | AUD 200K - 280K+ ($133K-$186K) | €120K - €170K+ ($130K-$183K) |
| CISO / VP Security | $250K - $500K+ (Base + Bonus + Equity) | SGD 300K - 600K+ | AUD 300K - 500K+ | €200K - €400K+ |
Yếu tố quyết định lương (Salary Drivers)
- Kỹ năng chuyên sâu (Deep Skills): Cloud Sec (AWS/Azure/GCP), AppSec/DevSecOps, Red Team/Exploit Dev, Detection Engineering (Sigma, YARA, KQL), Zero Trust/SASE, OT/ICS, Crypto/PQC, AI/ML Security.
- Chứng chỉ (Certs) có trọng lượng: CISSP, GIAC (GCIA, GCFW, GNFA, GCFA, GREM, GDAT), OSCP/OSEP/OSWE, Cloud Security Specialty, SABSA, CISM, CISA. Cert ≠ Skill nhưng là "cửa ngõ" lương cao.
- Kinh nghiệm thực chiến (Portfolio): GitHub (Tools, Rules, Automation), Blog (Technical writeup), CTF Rank, Bug Bounty Hall of Fame, Conference Speaker, Open Source Contribution.
- Ngôn ngữ & Soft Skills: Tiếng Anh fluent (bắt buộc cho remote/global), Communication, Leadership, Stakeholder Management, Business Acumen.
- Địa điểm & Loại hình: Remote US > Onsite SG > Onsite VN (Product) > Onsite VN (Outsource/MSSP) > Onsite VN (Gov/SME).
Tiến trình thăng tiến điển hình (Career Progression Timeline)
Year 0-1: Fresher / Intern → Junior SOC Analyst (L1) / Jr Security Engineer
Focus: Security+, Network+/Linux+, Python, TryHackMe/HTB, Home Lab, English.
Year 1-3: SOC L2 / Security Engineer (Network/Cloud/Endpoint) / Jr Pen Tester
Focus: GIAC (GCIA/GCFW), Vendor Cert (PCNSE/NSE4/CCNP Sec), SIEM/EDR/FW mastery, Detection Engineering, Cloud Sec Basics.
Year 3-5: Senior SOC / Threat Hunter / Detection Eng / Pen Tester / Cloud Sec Eng
Focus: Specialization (Cloud/Red/Blue/Purple/Arch/GRC), OSCP/OSEP/OSWE, AWS Sec/AZ-500, Lead small project, Mentor junior.
Year 5-8: Lead / Principal Engineer / Architect / Team Lead / Manager
Focus: CISSP/CISM/SABSA, Strategy/Roadmap, Budget, Hiring, Vendor Mgmt, Board Reporting, Cross-functional Leadership.
Year 8-12+: Director / VP / CISO / Chief Security Officer / Consultant / Founder
Focus: Business Alignment, Enterprise Risk, Regulatory, M&A Security, Security Culture, Industry Influence, Next-gen Tech (AI Sec, PQC).
So sánh Network Security vs Cyber Security vs IT Security - Lương
**Cùng một thị trường nhân lực.** Title khác nhau nhưng skill overlap 80-90%. Lương quyết định bởi **Độ sâu kỹ thuật (Technical Depth) + Trách nhiệm (Scope) + Tác động kinh doanh (Business Impact)** – không phải tên gọi.
Bảng lương các vai trò liên quan (VN 2024 - Gross USD/tháng)
| Vai trò | Junior | Mid | Senior |
|---|---|---|---|
| Network Engineer (Traditional) | $700-$1,200 | $1,200-$2,200 | $2,000-$3,500 |
| System Admin / DevOps Engineer | $800-$1,500 | $1,500-$3,000 | $2,500-$4,500 |
| Software Engineer (Backend/Fullstack) | $1,000-$2,000 | $2,000-$4,000 | $3,500-$6,000+ |
| Data Engineer / Analyst | $800-$1,500 | $1,500-$3,000 | $2,500-$4,500 |
→ **Security Premium:** Network Security Engineer thường cao hơn Network Engineer truyền thống **30-50%** do yêu cầu kỹ năng chồng chéo (Net + Sec + Code + Cloud).
Kế hoạch tăng lương chủ động (Proactive Salary Growth)
- 6 tháng / 1 năm: Học xong 1 skill mới có giá trị (Cloud Sec, Detection Eng, Red Team, Go/Rust for Sec Tools) → Đàm phán raise 15-30% hoặc nhảy việc (Job hop 20-50%).
- Mỗi năm: Cập nhật CV/Portfolio, phỏng vấn thị trường (3-5 lần) để biết "giá trị thực" – không bao giờ loyal với underpay.
- Cert Milestone: Security+ → $+10-20%. CISSP/GIAC Expert/OSCP → $+30-50% (kết hợp kinh nghiệm).
- Remote Global: Target US/EU/SG remote role (Deel, RemoteOK, Wellfound, LinkedIn, Turing, Andela, Toptal). Lương x3-5 VN.
- Side Income: Bug Bounty (H1, BC, Intigriti), Training/Mentoring (TopDev, EdTech), Consulting, Content (YouTube, Blog affiliate, Paid Newsletter).
Kết luận
Ngành An ninh mạng **lương khởi điểm khá, tăng rất nhanh, trần cao** – nếu bạn **liên tục nâng cấp kỹ năng sâu (Deep Technical), tiếng Anh, chứng chỉ trọng lượng, portfolio công khai, và dám nhảy việc / làm remote global**. Đừng chỉ làm "ticket monkey" – hãy trở thành **Detection Engineer, Cloud Security Architect, Red Teamer, hoặc Security Researcher**. Đầu tư vào bản thân (Cert, Lab, English, Network) cho ROI cao nhất nghề nghiệp.