Is Software, IT & Cybersecurity a Good Job Market in Raleigh-Cary, NC?

Executive Verdict

Market rating: competitive | Confidence: High

Raleigh-Cary is still one of the better Southeastern markets for Software, IT & Cybersecurity, but it is not an easy market. The metro labor market is tight overall, with 3.1% unemployment in August 2026 and total nonfarm employment up 2.2338% year over year; local professional and business services employment also rose 2.9566%.[1][2][3] The catch is that local information employment fell -6.7194% year over year, while statewide Software, IT & Cybersecurity employment was down 1.2% even as statewide active postings were up 43.8%, which suggests real demand but also more churn, backfills, and tougher competition for each opening.[4][5][6]

Best positioned: Your best odds are as a mid-to-senior candidate who can show production depth in Python, Java, AWS, Kubernetes, or CI/CD, especially for software, platform, and security work.[7][8]

Main caution: The biggest trap is assuming that a strong tech metro is automatically junior-friendly: only about 15% of sampled openings were entry level, only about 15% were remote, and less than 5% of postings that stated a policy mentioned visa sponsorship.[7][9][10]

What Changed Recently

• Raleigh-Cary unemployment was 3.1% in August 2026, and the metro unemployment level was down -11.1997% year over year.[1][12]: The local economy is still absorbing workers, so the problem for tech job seekers is less about a collapsing metro and more about getting through role-specific screening.
• Raleigh-Cary information employment fell -6.7194% year over year in August 2026, while professional and business services rose 2.9566%.[4][3]: That shifts the practical target from pure media/telecom-style information employers toward consulting, enterprise software, and internal tech teams inside larger business services firms.
• Statewide, Software, IT & Cybersecurity employment was down 1.2% year over year in September 2026, but active postings were up 43.8% according to Revelio Public Labor Statistics.[5][6]: You should treat openings as real, but not assume they all convert quickly into net new headcount; some are likely replacements, hard-to-fill roles, or slower searches.
• Relay announced a $36 million raise on September 30 to expand its software and AI platform, including enterprise integrations and worker-safety capabilities.[31]: That is a local signal that applied software, platform, and product-adjacent engineering work still has fresh pockets of demand in Raleigh.
• Nationally, CPI was up +3.0% year over year in August 2026, the federal funds rate was 3.75% in September 2026, and U.S. total nonfarm payrolls were up only 0.3128% year over year.[29][30][28]: That mix usually supports hiring, but with tighter budget discipline, which means Raleigh candidates should expect more scrutiny on level, stack fit, and location flexibility than in a boom cycle.

What This Means for You

Entry-Level Candidates

Difficulty: High.

Best target: QA automation, support-to-sysadmin ladders, implementation/support engineering, and smaller teams where a portfolio can substitute for years of experience.

Biggest mistake: Applying as a generic junior software engineer without a visible stack, shipped project, or proof that you can work in production-like environments.

Next step: Build one portfolio package that matches a real hiring lane: a cloud-deployed app, an automated test suite, a CI/CD workflow, or a documented home lab with monitoring and security controls.

Mid-Career Candidates

Difficulty: Moderate if you are clearly specialized; tough if you are broad but vague.

Best target: Software engineering, platform/cloud, DevOps, enterprise security, and regulated-industry tech teams where reliability and delivery matter.

Biggest mistake: Leading with title history instead of measurable systems work, ownership, and outcomes.

Next step: Rewrite your resume around 3-5 concrete wins: migration, uptime, release velocity, cost reduction, incident response, or security hardening.

Career Switchers

Difficulty: High unless you can anchor the switch in adjacent domain experience.

Best target: Implementation, technical support, QA, security compliance, and business-facing technical roles that reward domain knowledge plus technical fluency.

Biggest mistake: Trying to compete head-on for mid-level engineering jobs without proving you can already use the tools employers screen for.

Next step: Pick one bridge lane, then build proof for that lane only: cloud ops, QA automation, security operations, or implementation.

Salary Reality

high pay highly concentrated

Observed government data shows strong local pay, but with meaningful spread by sub-role: software developers averaged $136,640, information security analysts $132,540, software QA analysts and testers $115,100, and network and computer systems administrators $107,070 in Raleigh-Cary in May 2025.[11] For the broader computer and mathematical group, 2025 pay ranged from $78,740 at the 25th percentile to $141,460 at the 75th percentile, with a $107,760 median.[20][21][22] Recent local posting data points to advertised ranges centered on about $118k to $180k, but that is a current posting sample rather than an official wage median.[23]

This is a solid-paying market for people who land in software or security tracks, especially given a local cost-of-living index estimated at approximately 102.5.[19] Raleigh-Cary does not pay like the very top coastal hubs, but it does pay materially above general local-market levels for qualified technical talent.[11]

The tradeoff is access. The hiring mix is tilted toward experience, with about 35% mid-level, about 40% senior, and about 10% lead+ roles, versus about 15% entry-level openings, and only about 15% remote.[7][9]

Best-paying path: The strongest pay tends to sit in software development and security work, where local averages reached $136,640 for software developers and $132,540 for information security analysts.[11]

Caution: Do not overread top-end numbers: the broader local 90th percentile for computer and mathematical occupations was $172,180 in 2025, and current posted ranges mix senior, specialized, hybrid, and on-site roles rather than a typical offer for every applicant.[24][23][9]

Where the Opportunities Are Concentrated

The biggest opportunity pool is the metro's established computer-and-math base. Raleigh-Cary had 43,780 computer and mathematical jobs in 2025, equal to 5.9% of local employment versus 3.4% nationally, and software developers alone accounted for 12,580 jobs with a location quotient of 1.56.[11] Security is especially concentrated here: Raleigh-Cary had 2,510 information security analyst jobs with a location quotient of 2.75, a much stronger specialization signal than you see in many metros.[11] Recent posting mix suggests that real opportunities are not spread evenly across all tech work. In the current local sample, software development made up about 35% of category postings, IT services and consulting about 20%, financial services about 15%, with smaller shares in business consulting and insurance.[17] That points job seekers toward employers where software supports business-critical systems, cloud operations, compliance-heavy environments, and internal platforms rather than purely consumer-facing product work. The employer base is also broad rather than single-company dependent. Active hiring was fragmented across employers, with named activity from Cisco Systems, Inc, Deloitte, Garmin, Soteria Reinsurance Ltd., Fidelity International, Hewlett Packard Enterprise, and First Citizens.[14][18] That reduces one-company risk, but it also means you need a multi-segment search strategy instead of betting on one marquee brand.

• Enterprise software and platform engineering (high): This is the strongest core lane, supported by the metro's software-developer base and the local skill mix around Python, Java, AWS, Kubernetes, and CI/CD.[11][8]
• Cybersecurity, IAM, and enterprise security (high): Security is a real local specialization, not just a generic add-on, with 2,510 information security analyst jobs and a local concentration of 2.75; CISSP is also the certification most often explicitly named in postings.[11][16]
• QA automation, infrastructure, and traditional IT operations (moderate): These roles are meaningful but usually pay less than software engineering or security. Raleigh-Cary still had 1,760 software QA jobs and 2,730 network and computer systems administrator jobs in 2025.[11]

Where to focus: Focus first on software, platform, and security openings tied to enterprise or regulated environments, then use QA, implementation, or infrastructure paths as practical entry bridges.

Skills and Credentials Worth Pursuing

• Python (premium): Python was the most-requested hard skill in the local sample at about 40%, making it one of the clearest screening advantages in Raleigh-Cary.[8]
• Java (table stakes): Java appeared in about 30% of sampled postings, which makes it a strong fit for enterprise software and internal platform teams.[8]
• AWS (premium): AWS showed up in about 20% of local postings and also sits inside the local cloud-tool cluster with Kubernetes, Docker, and Terraform.[8][19]
• Kubernetes (premium): Kubernetes appeared in about 20% of local postings and is one of the clearest markers that employers want production-grade platform and container experience, not just coding basics.[8]
• CI/CD (differentiator): CI/CD appeared in about 20% of local postings, which signals that teams want candidates who can ship, test, and release software reliably, not just write it.[8]
• Docker (differentiator): Docker appeared in about 15% of local postings and pairs well with the Kubernetes and AWS demand showing up in the same market.[8]
• CISSP (differentiator): CISSP was the certification most often explicitly required in local postings, at about 5%, which is notable in a category where many postings do not name certifications at all.[16]
• Terraform (differentiator): Terraform appears in local employer demand signals alongside Python, Kubernetes, AWS, and Docker, which makes infrastructure-as-code a useful separator in Raleigh's platform-heavy lanes.[19]

Adjacent Roles to Consider

• Technical Product Manager (pivot): Strong engineers who can translate customer and business needs into roadmaps can move here without abandoning their technical background.
• Solutions Architect / Sales Engineer (both): This is a good fit for senior engineers, cloud specialists, and security professionals who are credible with customers.
• Implementation Consultant / Business Systems Analyst (bridge): This is a practical bridge for QA, support, sysadmin, and domain-heavy career switchers who know how systems get deployed and adopted.
• IT Auditor / GRC Analyst (both): Security-minded candidates can pivot into risk, control, and compliance work without needing to be pure incident-response specialists.

30 / 60 / 90-Day Plan

First 30 Days

• Split your search into two lanes only: a primary lane you can defend in interviews and one adjacent lane for volume. Do not keep sending one generic resume.
• Rebuild your resume around the local keyword stack most likely to trigger screens: Python, Java, AWS, Kubernetes, CI/CD, and Docker.[8]
• Create a target list of named local employers from the recent sample, including Cisco Systems, Inc, Deloitte, Garmin, Soteria Reinsurance Ltd., Hewlett Packard Enterprise, Fidelity International, and First Citizens.[14]
• If you want cybersecurity roles, use Triangle InfoSeCon on October 30 as a live networking deadline rather than passive networking someday.[15]
• If you need remote-only work or visa sponsorship, filter aggressively at the start because only about 15% of sampled roles were remote and less than 5% of postings that stated a policy mentioned sponsorship.[9][10]

Days 31-60

• Ship one proof-of-work asset that matches your lane: a cloud app on AWS, a Kubernetes deployment, a CI/CD pipeline, or a QA automation suite.
• Add one visible enterprise-style story to your portfolio or GitHub README: uptime, deployment reliability, security controls, cost reduction, or observability.
• If you are targeting security, turn CISSP from a vague goal into a concrete proof plan: exam date, domain study map, or a portfolio project tied to identity, logging, or hardening.[16]
• Run focused outreach into software development, IT services and consulting, and financial services employers, since those are the biggest local demand pockets in the current sample.[17]

Days 61-90

• If interviews are not converting, widen your search into adjacent roles such as product, implementation, GRC, or solutions work instead of only sending more engineering applications.
• Be willing to compete for hybrid and on-site roles if Raleigh is your target market, because about 85% of sampled openings were not fully remote.[9]
• Reprice your expectations by lane, not by internet headline. Security and software can justify higher asks; infrastructure, QA, and bridge roles may be the faster way in.
• Review every rejection pattern and fix one bottleneck at a time: stack mismatch, level mismatch, location mismatch, or weak proof of production experience.

Methodology and Confidence

This September 2026 report was generated on October 10, 2026. Latest direct national data: September 2026. Latest direct Raleigh-Cary, NC data: September 2026.

Confidence: Overall confidence: High. Based on 35 direct local occupation data points and 61 total local evidence items with recent coverage.

Limitations

• The most detailed local wage and occupation counts in this report are from May 2025, so the pay picture is reliable but somewhat lagged relative to the August-September 2026 market conditions discussed elsewhere.[11]
• Some of the August 2026 metro labor-force and unemployment changes are preliminary and may be revised, so treat month-to-month and year-over-year changes as directional rather than final.[1][12]
• Statewide Software, IT & Cybersecurity readings from Revelio Public Labor Statistics were used as a proxy where metro-by-occupation data is not published, so they are informative for direction but not a direct Raleigh-Cary headcount.[5][6]
• The category is broader than any single title: software engineering, IT support and infrastructure, QA, and cybersecurity do not move in perfect lockstep, and the strongest evidence in this bundle is better for software and security than for every niche sub-role.[11]
• The Callings.ai job database is a partial, deduplicated sample of online postings, so it is better for spotting leading employers, skill patterns, seniority mix, and work arrangements than for treating counts or shares as a full census of Raleigh-Cary hiring.[13]

References

1. Bureau of Labor Statistics. Bureau of Labor Statistics Data · 2026-08 · data.bls.gov
2. Bureau of Labor Statistics. Bureau of Labor Statistics Data · 2026-08 · data.bls.gov
3. Bureau of Labor Statistics. Bureau of Labor Statistics Data · 2026-08 · data.bls.gov
4. Bureau of Labor Statistics. Bureau of Labor Statistics Data · 2026-08 · data.bls.gov
5. Reveliolabs. Employment — Revelio Public Labor Statistics (RPLS) · 2026-09 · reveliolabs.com
6. Reveliolabs. Job Openings — Revelio Public Labor Statistics (RPLS) · 2026-09 · reveliolabs.com
7. Callings.ai. Callings.ai job-market aggregation · 2026-09 · callings.ai
8. Callings.ai. Callings.ai job-market aggregation · 2026-09 · callings.ai
9. Callings.ai. Callings.ai job-market aggregation · 2026-09 · callings.ai
10. Callings.ai. Callings.ai job-market aggregation · 2026-09 · callings.ai
11. Bureau of Labor Statistics. Occupational Employment and Wages in Raleigh-Cary, NC — May 2025 : U.S. Bureau of Labor Statistics · 2026-07 · bls.gov
12. Bureau of Labor Statistics. Bureau of Labor Statistics Data · 2026-08 · data.bls.gov
13. Callings.ai. Callings.ai job-market aggregation · 2026-09 · callings.ai
14. Callings.ai. Callings.ai job-market aggregation · 2026-09 · callings.ai
15. Events. Triangle InfoSeCon 2026 · 2026-10 · events.pt.community
16. Callings.ai. Callings.ai job-market aggregation · 2026-09 · callings.ai
17. Callings.ai. Callings.ai job-market aggregation · 2026-09 · callings.ai
18. Callings.ai. Callings.ai job-market aggregation · 2026-09 · callings.ai
19. Bureau of Labor Statistics. Raleigh, NC - May 2023 OEWS Metropolitan and Nonmetropolitan Area Occupational Employment and Wage Estimates · 2026-06 · bls.gov
20. Bureau of Labor Statistics. Bureau of Labor Statistics Data · data.bls.gov
21. Bureau of Labor Statistics. Bureau of Labor Statistics Data · data.bls.gov
22. Bureau of Labor Statistics. Bureau of Labor Statistics Data · data.bls.gov
23. Callings.ai. Callings.ai job-market aggregation · 2026-09 · callings.ai
24. Bureau of Labor Statistics. Bureau of Labor Statistics Data · data.bls.gov
25. Reveliolabs. Mass-layoff Notices — Revelio Public Labor Statistics (RPLS) · 2026-09 · reveliolabs.com
26. Callings.ai. Callings.ai job-market aggregation · 2026-09 · callings.ai
27. Bureau of Labor Statistics. Bureau of Labor Statistics Data · 2026-09 · data.bls.gov
28. Bureau of Labor Statistics. Bureau of Labor Statistics Data · 2026-09 · data.bls.gov
29. Federal Reserve Economic Data. Consumer Price Index for All Urban Consumers: All Items in U.S. City Average · 2026-08 · fred.stlouisfed.org
30. Federal Reserve Economic Data. Federal Funds Effective Rate · 2026-09 · fred.stlouisfed.org
31. Devcuration. Relay Raises $36M for Frontline Operational Intelligence · 2026-09 · devcuration.com

Live Openings in This Market

This report is published monthly; its companion page tracks the active Software, IT & Cybersecurity openings in Raleigh-Cary, NC from the live Callings.ai job index. Browse current Software, IT & Cybersecurity openings in Raleigh-Cary, NC.