3 countries, 1 profession: How cybersecurity engineers live and work in Africa, Kazakhstan, and the USA

From security approaches to career opportunities — we compare the reality and challenges of the industry in different parts of the world. Read our article.

Africa

Mohamed Hamdi Ouardi, City — Tunis, Cybersecurity Engineer and International Instructor, LinkedIn

About Me

I am a cybersecurity expert and international mentor, having spoken at TEDx and InfraGard, sharing knowledge about cyber resilience.

I work as a security operations specialist, helping organizations and government bodies build robust protection systems, including threat detection, incident response, and fostering a security culture.

I also actively share my experience on LinkedIn, where I have over 140,000 followers, posting tips, analytical content, and industry trends. Additionally, I host the The Cyber Corner podcast, where I interview leading experts about the challenges and future of cybersecurity.

Furthermore, I was included in Feedspot’s Top 100 Content Creators for my contribution to the professional community.

On the Profession and Work Specifics

Working with international clients, I realized that despite cultural differences, success always rests on trust and collaboration. It is important not just to manage differences but to embrace them—respect for cultures and openness make teams stronger. When people feel valued, they unlock their potential, and that is when the best ideas are born. 

I have been fortunate to work in many areas of cybersecurity—from offensive and defensive operations to DevSecOps. This experience has helped me understand how threats evolve and how protection must adapt. In offensive operations, I conducted penetration testing, red teaming, and vulnerability analysis, focusing on manual methods and an analytical approach. On the defensive side, I handled threat detection, incident response, configured SIEM and EDR systems, performed digital forensics, and followed MITRE ATT&CK to enhance protection effectiveness. In DevSecOps, I integrate security into development processes, implementing threat modeling, secure coding, and task automation.

One of the most significant projects was establishing a CERT in an African country. I participated in all stages—from planning to launching operations. This project was not only a technical challenge but also a cultural experience that taught me flexibility, cross-cultural interaction, and building resilient security systems.

Industry and Career 

Cybersecurity is a dynamic and in-demand field in Tunisia. 

Finding a job in cybersecurity is usually easier than in many other fields; however, success depends on practical skills and certifications. Demand for experts is growing as digital infrastructure expands, but employers prefer candidates with experience and verified qualifications. Investment in training, lab practice, and internship participation significantly increases employment chances. The field also offers flexibility—you can choose a direction ranging from penetration testing to cloud security. 

Salary and Cost of Living

Entry-level specialists earn between $65,000 and $85,000 per year—already more than in many other IT fields. As experience and certifications accumulate, mid-level specialists, such as security analysts or penetration testers, can earn between $90,000 and $120,000 per year, while niche experts, for example in cloud security, are closer to the upper end of the range.

Senior specialists—security engineers and architects—earn between $130,000 and $160,000. In leadership positions, such as CISO, salaries reach $180,000–$250,000, and with bonuses and options, they can exceed $400,000. 

Tips

For those developing in cybersecurity, it is important to have a solid foundation and constantly develop skills. Beginners should study networks, operating systems, and security basics, while experienced specialists should deepen their knowledge in specific areas, maintaining flexibility and keeping their knowledge up to date. Practice through labs, competitions, and virtual environments, analytical thinking, attention to detail, participation in communities, and tracking trends help remain in demand and successful in this rapidly changing field.

Kazakhstan

Alexander Pushkin, City — Almaty, Head of Information Security PS Cloud Services, LinkedIn

About Me

I am a cybersecurity expert with over 20 years of experience in security and pentesting, the last five of which have been in SOC management. Currently, I lead the information security direction at PS Cloud Services.

On the Profession and Work Specifics

In Kazakhstan, cybersecurity culture is still forming, but progress is noticeable. Unlike the West, where security is an integral part of corporate culture, here it is still often perceived as an “add-on.” Nevertheless, large companies and government bodies are actively adopting international standards, developing SOCs, and training specialists. The main difference is less formalization, but more flexibility and opportunities to influence strategic decisions.

One of our key projects is creating our own SaaS platform for SOC services. We combined classic cybersecurity tools into a single system for automated analysis and prioritization of incidents. This allows us to reduce response time and increase process transparency for clients. Essentially, we are creating an “automated SOC-as-a-service” adapted to the local market.

Industry and Career

The profession is undoubtedly in demand. However, there is currently an interesting skew: the public hype around cybersecurity has led to almost every graduate calling themselves a “security professional” wanting to be a pentester. Meanwhile, the market currently needs other specialists more—information security managers, compliance experts, and SOC analysts.

As a result, a paradox arises: there seem to be many specialists, and there are enough vacancies, but there is no “fit” between them—different directions, different competencies.

For local specialists, it is quite simple, especially if you have practical experience and a clear portfolio. But it is important to realistically assess which competencies are currently in demand—the market changes quickly.

For foreigners, there are no serious barriers if we are talking about the private sector. Overall, Kazakhstan is quite open to attracting experts.

Salary and Cost of Living

The starting salary for a young specialist usually begins at 200,000 tenge. The level for experienced specialists, but without managerial functions, is in the range of 700,000 to 1,500,000 tenge.

At the same time, it is important to understand that in Kazakhstan, there is a noticeable “ceiling” on salaries in the information security field. Adjacent fields, such as development, can boast higher average incomes.

Tips

1. Determine your direction—there are many areas in information security, and each differs significantly in tasks and approaches.
2. Only come here if it is truly your calling. The tasks are difficult, but the result is worth it.
3. Look for experienced mentors or companies where you can develop faster—this will save you years.
4. Do not be afraid to experiment. Kazakhstan is a dynamic market where you can not only work but also create new solutions from scratch.

USA

Allamyrat Tuiliyev, City — Dallas, Security Engineer IV, LinkedIn

About Me

I am a cybersecurity engineer in the USA and work at Signet Jewelers—a company that owns the majority of jewelry stores in America, the UK, and Canada. I collaborate with the vulnerability department: in the event of incidents, I handle investigation and analysis, including digital forensics. This is not just an investigation, but a detailed breakdown of the incident: we analyze the facts and determine exactly what happened.

On the Profession and Work Specifics

In Europe, people are strict about personal time—they may work four days a week, and their day off is truly a day off. In the USA, people often call during non-working hours, but it all depends on the individual: someone turns off their phone, while someone else works even at night for different time zones. Work culture depends more on personality than on country.

In the USA, companies have access to modern technologies, such as CrowdStrike, whereas in some countries, such as Turkmenistan, due to high license costs, alternatives must be sought.

However, the approach in cybersecurity is the same—it is all built on community. You start from scratch, meet people, exchange experience, and help others. Conferences, Telegram, and Discord create a network that eventually turns into a full-fledged professional community.

My consulting company in the USA focuses on helping clients, not on profit. The project is small, but it gives a sense of usefulness and client gratitude.

Industry and Career

Working in cybersecurity in the USA is in demand, but very competitive. A few years ago, many went to study cybersecurity due to high demand and salaries, and now the market is oversaturated. Competition is exacerbated by the entry of AI into IT, causing many specialists to switch to cybersecurity, where human thinking and analysis are needed. Young graduates find it hard to break in: they compete with experienced IT specialists who have connections and confidence.

The profession is in demand: in cybersecurity, new companies, startups, threats, and vacancies constantly appear. Opportunities exist, but the path is not easy and requires persistence.

It has become difficult to obtain work visas—a recent visa fee of $100,000 was introduced, and few companies are willing to pay for relocation. Therefore, it is easier to come as a student: student visa, scholarships, OPT for two to three years after university, to prove your value to an employer and obtain a work visa.

This is a difficult path, especially for those coming from Central Asia without support and money. But if you make it, study, and find a job, it commands respect because people understand what you had to go through. Those who managed to get a work visa in seven to eight years showed perseverance; those who did not means there is room for improvement.

Salary and Cost of Living

In the USA, cybersecurity pays well, but it depends on the role. Analysts earn from $75,000, engineers from $100,000, architects from $150,000 per year. It all depends on the company and city: salaries are lower in small towns. If you are paid little in a megacity, you should ask for a raise or look for another company.

Tips

In America, reputation matters a lot: 7 out of 10 companies hire through referrals, but 3 do so based on real skills. It is important to have proof of abilities: create projects, maintain a GitHub, publish articles on LinkedIn or Medium—share your experience without boasting.

Platforms like HackTheBox are useful—activity there can lead to a job. Advice for beginners: create your own things, even small projects, work on your portfolio. 

In Central Asia, cybersecurity is not yet valued, development is slow, but if you create something noticeable, you will be seen here and abroad. The main thing is intelligence, persistence, and desire.