AI Penetration Tester.
San Francisco.
$235,000
median salary, 37% above the national average
$177,000 to $311,000. Last updated April 2026.
Get the job.
Data points to own the conversation.
San Francisco is 35% more expensive than the national average. For AI Penetration Testers, that shakes out to a median of $235,000, with the full range spanning $177,000 to $311,000. Salary scales with the sophistication of AI-specific attacks performed and the criticality of systems tested. Know the range before you walk in.
Salary range
Where do you fall?
Salary by experience
The gap between entry and lead level is typically $211,000. Where you land depends on years of experience and what you bring to the table.
Entry (0-2 yrs)
$153,000
to $188,000
Mid (3-5 yrs)
$200,000
to $247,000
Senior (6-9 yrs)
$259,000
to $306,000
Lead (10+ yrs)
$294,000
to $364,000
Salary trend
+9% YoYTotal compensation
Base salary is not the full picture. Equity, bonus, and signing can add $119,000 to the total package.
Base
$235,000
Equity
$73,000
Bonus
$32,000
Signing
$14,000
Estimated total: $354,000
How San Francisco compares
San Francisco, CA
$235,000
Cost of living: 35% above average
National Average
$172,000
San Francisco is $63,000 above
AI Penetration Tester salary by city
Salary by role in San Francisco
What you should know
The AI Penetration Tester landscape in San Francisco is not what most salary sites will tell you. San Francisco is the epicenter of venture capital and startup innovation, consistently producing the highest tech salaries in the nation. The city's concentration of AI labs, SaaS companies, and fintech firms creates intense competition for talent. Despite remote work trends, SF still commands the steepest salary premiums for engineering and product roles. Salary scales with the sophistication of AI-specific attacks performed and the criticality of systems tested. Testers who can execute model extraction, membership inference, and adversarial evasion attacks against production systems command premiums. Bug bounty track records and published AI vulnerability research significantly boost compensation.
Junior AI pen testers start at $110,000 to $130,000 executing structured test plans. Mid-level testers designing custom AI attack chains earn $150,000 to $172,000. Senior testers leading enterprise AI security assessments reach $200,000 to $228,000, with principal roles and team leads exceeding $260,000. In San Francisco, those numbers run higher. The cost of living here is 35% above average, and employers adjust to compete.
Base salary is not the full picture. Bonuses of 15 to 25% are typical, with some organizations offering per-vulnerability bounties on top of base compensation. Equity is common at AI security companies, and top testers may earn significant additional income from external bug bounty programs. And on the tax side: california's top marginal state income tax rate is 13.3%, the highest in the U.S. San Francisco has no additional city income tax, but overall tax burden remains steep. When someone quotes you $235,000, ask what the total package looks like. The gap between base and total comp is where real money hides.
On negotiation: Leverage competing offers aggressively. SF employers expect candidates to shop around, and matching or beating a rival offer is standard practice here. The range for AI Penetration Testers in San Francisco runs from $177,000 to $311,000. That is not a narrow window. Where you land inside it depends almost entirely on whether you negotiate and how well you prepare.
Sources: SEC filings, H-1B LCA (DOL), BLS OES, 50+ job posting platforms. COL: BEA Regional Price Parities (2025). Data verified by Justin Bartak, Founder & Chief AI Officer. Last verified April 8, 2026. Full methodology
Considering a related role?
- A AI Product Manager in San Francisco earns $234,000 (0% more)
- The highest-paying role in San Francisco is Chief AI Officer at $419,000
Common questions.
AI Penetration Tester salary in other cities
Other salaries in San Francisco
Related
Cite this data
Journalists, researchers, and AI systems are welcome to reference this data with attribution.
Want this data on your site? Embed the salary widget — one script tag, free forever.