Is Software, IT & Cybersecurity a Good Job Market in Raleigh-Cary, NC?

Executive Verdict

Market rating: competitive | Confidence: Medium

Raleigh-Cary is a good but selective market for Software, IT & Cybersecurity if you already have proven experience in cloud, platform, QA automation, or security. The metro's unemployment rate was 3.0% in May 2026, below North Carolina's 3.7% and the national 4.3%, and metro employment was up 0.4540% year over year.[15][16][17][18] At the same time, Revelio Public Labor Statistics shows North Carolina software, IT & cybersecurity employment down 0.8% year over year in June 2026 even as active postings rose 26.2%, which points to real openings but a choosier hiring bar.[22][23] Local demand is broad rather than dominated by one employer, with more than 700 postings across more than 250 companies in the last 90 days, but only about 15% of sampled roles were entry-level.[4][2]

Best positioned: Your odds are best if you are a mid-to-senior candidate who can show Python or Java depth, cloud and CI/CD fluency, and willingness to work on-site or hybrid in the Raleigh-Morrisville-RTP corridor.[2][9][5]

Main caution: The biggest mistake is reading the rise in postings as an easy market for juniors; entry roles are a small share, sponsorship is mentioned in less than 5% of postings, and AI adoption is raising expectations for immediate productivity.[2][35][36][31]

What Changed Recently

• Raleigh-Cary's labor market stayed tighter than the broader state and national backdrop in late spring, with 3.0% metro unemployment in May 2026 versus 3.7% in North Carolina and 4.3% nationally.[15][16][17]: That usually supports continued hiring, but it also means employers can stay selective because the local market is not under obvious distress.
• Metro employment rose 0.4540% year over year and the labor force rose 0.3192% year over year in May 2026, while North Carolina employment was essentially flat and the state labor force was down 0.1762%.[18][19][20][21]: Raleigh-Cary is still absorbing workers a bit better than the statewide average, which is a plus for people who can search locally rather than nationally.
• Revelio Public Labor Statistics shows North Carolina software, IT & cybersecurity employment down 0.8% year over year in June 2026, but active postings in the field up 26.2% and mean offered salary on new openings at about $116,359.[22][23][24]: The market is producing more requisitions than staffed headcount growth, which often means more competition per role and a premium on exact-match skills.
• The local posting sample showed more than 700 postings across more than 250 companies over the last 90 days, but only about 15% of roles were entry-level and the typical active posting had been open around 32 days.[4][2][25]: There is breadth in the market, but the funnel is much better for experienced candidates than for first-job seekers.
• Nationally, the job openings rate was 4.6% in May 2026, while the hires rate was 3.3% and the quits rate 1.9%.[26][27][28]: For Raleigh-Cary tech job seekers, that points to more advertised opportunities than completed hiring, so interview cycles can feel slower than the posting volume suggests.

What This Means for You

Entry-Level Candidates

Difficulty: Hard right now; only about 15% of sampled openings are entry-level, and national evidence suggests AI adoption has hit junior demand harder than senior demand.[2][6]

Best target: Target QA automation, UI-leaning full-stack work, and cloud-supporting application roles where you can prove JavaScript or TypeScript, Python, testing, and CI/CD rather than applying only to generic junior software engineer titles.[7][8][9]

Biggest mistake: Leading with coursework alone instead of a shipped project, test suite, deployment pipeline, and clear evidence that you can work productively with modern AI-assisted development tools.

Next step: Build one portfolio app with automated tests and CI/CD, plus one cloud deployment project, then apply to hybrid and on-site roles where your proof of execution matters more than pedigree.

Mid-Career Candidates

Difficulty: Moderate if you have a clean match; the local mix is much friendlier to mid and senior candidates than to true entry-level applicants.[2]

Best target: Aim at cloud platform, DevOps-style, security, SDET, and principal-track engineering roles that require Python, AWS, CI/CD, Kubernetes, Azure, or microservices depth.[10][9]

Biggest mistake: Using one resume for backend, platform, security, and leadership roles instead of showing a role-specific operating story.

Next step: Split your search into two lanes, such as application engineering and platform or security, and tailor examples, metrics, and architecture stories to each lane.

Career Switchers

Difficulty: Hard unless you can anchor the switch in prior domain knowledge or adjacent systems work.

Best target: The best bridge is usually domain-heavy application support, QA automation, ERP-adjacent development, or security/governance work tied to industries already active locally, especially healthcare and financial services.[11][12]

Biggest mistake: Trying to switch straight into pure backend product engineering without proof that you can already work with cloud, testing, and production workflows.

Next step: Pick one conversion path and make it concrete: an Azure DevOps or architecture track for cloud-oriented work, or a security path built around real controls, labs, and governance stories rather than theory alone.[10][13][14]

Salary Reality

high pay highly concentrated

Observed local wage data is solid: software developers and QA analysts/testers have a median annual wage of about $123,000 in Raleigh-Cary, with roughly $95,000 at the 25th percentile and about $150,000 at the 75th percentile, while information security analysts have a median near $114,000 with about $92,000 at the 25th percentile and around $136,000 at the 75th percentile.[37] Posting-based local salary ranges are higher and broader, centering on about $120k to $194k with a broader 25th-75th band of about $105k to $242k, but those are advertised ranges from a partial posting sample rather than wages actually paid.[39]

Local tech pay sits above broad Raleigh STEM benchmarks: the metro STEM median was $104,300, the broad computer-and-math median was about $108,000, and software-specific medians ran higher.[38][37] Statewide new openings in this field averaged about $116,359 in June 2026 versus about $76,498 across all occupations, which reinforces that tech still pays a clear premium in North Carolina.[24]

That upside comes with a higher bar on specialization, only about 15% entry roles in the local sample, and a Raleigh cost-of-living index of 108.9, or 8.9% above the national average.[2][40]

Best-paying path: The strongest pay tends to sit in senior software, security, cloud architecture, and IT leadership. Software developer pay reaches about $150,000 at the 75th percentile and near $180,000 at the 90th percentile, information security reaches about $168,000 at the 90th percentile, IT managers median about $163,000, and a Morrisville principal engineer role was posted at $150,000-$180,000.[37][10]

Caution: Do not treat the top of posted ranges as normal. Only about 10% of sampled roles were lead+ and about 35% were senior, so the eye-catching numbers are concentrated in a relatively narrow slice of the market.[2][39]

Where the Opportunities Are Concentrated

Real opportunity is spread across a long employer tail rather than a single dominant hirer. In the local sample, there were more than 700 postings across more than 250 companies, hiring was fragmented across employers, and about 35% of postings came from large employers with about 20% from enterprise employers.[4][1][32] Industry mix also matters: technology accounts for about 35% of sampled postings and software development about 25%, with healthcare, information technology, and financial services each around 10%.[11] The strongest concentration is in experienced engineering work tied to cloud, platform, automation, and security. The skill mix leans toward python, java, javascript, aws, ci/cd, typescript, and kubernetes, while specific local postings highlight Azure, GCP, microservices, UI-heavy full-stack work, and test automation stacks such as Playwright and Cypress.[9][10][8][7] That fits the seniority mix: about 40% mid-level, about 35% senior, and about 10% lead+, versus about 15% entry-level.[2] A practical secondary lane is domain-heavy product engineering in healthcare and financial services, especially when you can pair software delivery with testing, compliance, or platform reliability. That is not the widest slice of the market, but it is one of the clearest places where local employers are advertising concrete tool stacks and hybrid expectations.[11][7][10]

• Large-employer product and platform teams (high): The local sample skews toward large and enterprise employers, and tech plus software development makes up most postings.[32][11]
• Cloud, platform, and security-specialized roles (high): AWS, CI/CD, Kubernetes, Azure, GCP, microservices, and CISSP-linked security signals recur in the local mix, which favors specialists over generalists.[9][10][13]
• Healthcare and financial-services engineering (moderate): Healthcare and financial services each account for about 10% of the local sample, and a Durham hybrid SDET role shows ongoing demand for regulated-product test automation.[11][7]

Where to focus: Prioritize mid-to-senior cloud, automation, platform, and security roles inside larger tech, health-tech, and financial-services employers rather than broad junior SWE searches.

Skills and Credentials Worth Pursuing

• Python (table stakes): Python appears in about 40% of sampled local postings, making it the clearest common denominator across software, automation, and infrastructure work.[9]
• AWS, CI/CD, and Kubernetes (differentiator): AWS and CI/CD each appear in about 20% of sampled postings, and Kubernetes in about 15%, which is a strong signal for platform-minded hiring rather than pure feature coding.[9]
• Azure and GCP cloud architecture with Azure certifications (premium): A Morrisville principal engineering role explicitly called for Azure and GCP depth, microservices, and Azure certifications such as AI-200, AZ-400, and AZ-305.[10]
• Test automation stack (differentiator): A local hybrid SDET opening called for Playwright, Cypress, BDD, GraphQL, Jenkins, Git or Bitbucket, and Sonar, showing that automation-heavy QA is still a live niche in the Raleigh-Durham market.[7]
• TypeScript, JavaScript, and UI-leaning full-stack delivery (differentiator): JavaScript appears in about 25% of sampled postings, TypeScript in about 15%, and one RTP role was explicitly 60/40 UI-leaning, so front-end-capable engineers have a clearer local angle than generic full-stack claims suggest.[9][8]
• CISSP (premium): CISSP is the certification most often required in the local sample at about 5%, and it remains the clearest senior-security credential in 2026 hiring discussions.[13][14]
• Cloud security, DevSecOps, and Zero Trust (premium): National cyber guidance emphasizes cloud security, DevSecOps, Zero Trust, identity security, and AI-aware defense, which lines up well with Raleigh-Cary's cloud-heavy local skill mix.[29][10][9]

Adjacent Roles to Consider

• AI/ML engineer (pivot): This sits outside the core scope here, but employers are paying some of the strongest 2026 premiums for AI/ML work, and software engineers with production, API, and cloud experience are the closest feeders.[12][31]
• Data analyst or BI analyst (pivot): If your background is more SQL, reporting, experimentation, and dashboards than backend engineering, this is a cleaner pivot than forcing a pure software title. It belongs in a data-first lane rather than this category.[12]
• ERP developer (bridge): Enterprise-process and systems candidates can pivot here without proving the same depth expected for platform engineering, and national salary guidance flags ERP developer as a growth role.[12]
• Data scientist (pivot): For candidates already doing statistics, experimentation, or model work, moving fully into a data-first title is more coherent than competing for general software roles. This is a neighboring lane, not a core software role in this report's scope.[12]

30 / 60 / 90-Day Plan

First 30 Days

• Create two resume versions: one for application or full-stack roles, and one for cloud, platform, security, or automation roles.
• Rebuild your LinkedIn headline and summary around a specific stack, not a generic title; include local hybrid availability and one sentence on the business problems you solve.
• Ship one public proof project with tests, CI/CD, deployment, and a short architecture README.
• Make a target list of local employers across tech, software, healthcare, and financial services, plus a second list of staffing and consulting firms that place engineering talent.
• If you are security-focused, map your experience to CISSP-style domains; if you are cloud-focused, choose one Azure or AWS credential path and commit to it.

Days 31-60

• Add a second proof artifact tailored to your lane: a Playwright or Cypress automation suite, a microservices project, or a cloud-security hardening lab.
• Apply in small, customized batches and rewrite the top third of your resume for each role family instead of mass-applying.
• Build interview stories for system design, production incidents, tradeoffs, and security decisions, not just feature delivery.
• Ask contacts for referrals tied to specific requisitions rather than broad introductions.
• Track response rates by lane so you can quickly see whether software, QA, platform, or security is the strongest fit.

Days 61-90

• Add one visible market signal: a completed credential, a polished public repo, or a concise case study showing measurable impact.
• If interviews stall, widen the search to adjacent lanes such as ERP, data-first, or governance-heavy roles rather than doubling down on the same title.
• Expand geographically within commuting distance for hybrid roles, because many local employers still expect regular office presence.
• Negotiate on total package, scope, and flexibility, not just base pay, especially for hybrid senior roles.
• If you are entry-level, stop chasing only junior software engineer titles and move toward QA automation, support-to-cloud, or UI-heavy full-stack routes with stronger proof of work.

Methodology and Confidence

This June 2026 report was generated on July 10, 2026. Latest direct national data: June 2026. Latest direct Raleigh-Cary, NC data: July 2026.

Confidence: Overall confidence: Medium. The local picture is usable, but some conclusions rely on statewide occupation signals and posting-based proxies rather than real-time metro occupation counts.

Limitations

• The most current metro occupation pay benchmarks used here come from May 2024 wage data, so they are useful for salary levels but not a real-time read on June 2026 compensation.[37][38]
• Some of the newest local labor-market readings, including Raleigh-Cary employment and North Carolina unemployment trends for May 2026, are preliminary and may be revised later.[18][19][16][20][21]
• Statewide occupation data was used as a proxy where metro-level software, IT, and cybersecurity hiring data is not published, so North Carolina direction signals may not match Raleigh-Cary perfectly.[22][23][24]
• The Callings.ai job database is a partial, deduplicated sample of online postings, so direction of demand, leading employer names, and skill patterns are more reliable here than exact posting counts, salary shares, or employer market share.[4][3][9]
• This category combines software engineering, IT infrastructure, QA, help desk, and cybersecurity work, so any single wage or skill figure can overstate one sub-role and understate another.[37][9]

References

1. Callings.ai. Callings.ai job-market aggregation · 2026-06 · callings.ai
2. Callings.ai. Callings.ai job-market aggregation · 2026-06 · callings.ai
3. Callings.ai. Callings.ai job-market aggregation · 2026-06 · callings.ai
4. Callings.ai. Callings.ai job-market aggregation · 2026-06 · callings.ai
5. Callings.ai. Callings.ai job-market aggregation · 2026-06 · callings.ai
6. Addyosmani. The Next Two Years of Software Engineering · 2026-01 · addyosmani.com
7. Careers. Senior Software Engineer in Test · 2026-06 · careers.eliassen.com
8. Randstadusa. Job Opening - Full Stack Engineer (60/40 Ui Leaning project) - Research Triangle Park, NC | Randstad USA · 2026-05 · randstadusa.com
9. Callings.ai. Callings.ai job-market aggregation · 2026-06 · callings.ai
10. Jobs. Principal Software Engineer · 2026-06 · jobs.smartrecruiters.com
11. Callings.ai. Callings.ai job-market aggregation · 2026-06 · callings.ai
12. Robert Half. 2026 Tech and IT Salaries and Compensation Trends · 2025-10 · roberthalf.com
13. Callings.ai. Callings.ai job-market aggregation · 2026-06 · callings.ai
14. Ucertify. Top CyberSecurity Certifications 2026: Best CyberSecurity Certifications for High-Paying Careers · 2026-05 · ucertify.com
15. Stlouisfed. Federal Reserve Bank of St. Louis · 2026-07 · stlouisfed.org
16. Bureau of Labor Statistics. Bureau of Labor Statistics Data · 2026-05 · data.bls.gov
17. Bureau of Labor Statistics. Bureau of Labor Statistics Data · 2026-04 · data.bls.gov
18. Bureau of Labor Statistics. Bureau of Labor Statistics Data · 2026-05 · data.bls.gov
19. Bureau of Labor Statistics. Bureau of Labor Statistics Data · 2026-05 · data.bls.gov
20. Bureau of Labor Statistics. Bureau of Labor Statistics Data · 2026-05 · data.bls.gov
21. Bureau of Labor Statistics. Bureau of Labor Statistics Data · 2026-05 · data.bls.gov
22. Reveliolabs. Employment - Revelio Public Labor Statistics (RPLS) · 2026-06 · reveliolabs.com
23. Reveliolabs. Job Openings - Revelio Public Labor Statistics (RPLS) · 2026-06 · reveliolabs.com
24. Reveliolabs. Salaries - Revelio Public Labor Statistics (RPLS) · 2026-06 · reveliolabs.com
25. Callings.ai. Callings.ai job-market aggregation · 2026-06 · callings.ai
26. Bureau of Labor Statistics. Bureau of Labor Statistics Data · 2026-05 · data.bls.gov
27. Bureau of Labor Statistics. Bureau of Labor Statistics Data · 2026-05 · data.bls.gov
28. Bureau of Labor Statistics. Bureau of Labor Statistics Data · 2026-05 · data.bls.gov
29. Eccu. Cybersecurity Skills You Need to Stay Ahead in 2026 · 2025-12 · eccu.edu
30. Bureau of Labor Statistics. Bureau of Labor Statistics Data · 2026-06 · data.bls.gov
31. Okoone. The most in-demand IT skills for 2026 | Okoone · 2026-01 · okoone.com
32. Callings.ai. Callings.ai job-market aggregation · 2026-06 · callings.ai
33. Wral. WRAL | News and Weather in Raleigh NC · 2026-06 · wral.com
34. Reveliolabs. Mass-layoff Notices - Revelio Public Labor Statistics (RPLS) · 2026-06 · reveliolabs.com
35. Callings.ai. Callings.ai job-market aggregation · 2026-06 · callings.ai
36. Getpanto. AI Tools Statistics 2026: Users, Adoption, Market Share & Trends · 2026-06 · getpanto.ai
37. Bureau of Labor Statistics. Occupational Employment and Wage Statistics (OEWS) Tables · 2025-04 · bls.gov
38. Bureau of Labor Statistics. Bureau of Labor Statistics - 25th_percentile_annual_wage · 2024-05 · bls.gov
39. Salary.com. Salary.com | Compensation Data, Survey, Software & Analytics · 2026-06 · salary.com