Best Master’s in Cybersecurity Programs (2027)

The strongest cybersecurity master’s programs for 2027 applicants include Carnegie Mellon’s MS in Information Security, Johns Hopkins’ MS in Security Informatics, NYU Tandon’s MS in Cybersecurity, USC’s MS in Cyber Security Engineering and Northeastern’s MS in Cybersecurity. For value, Georgia Tech’s online MS in Cybersecurity and Purdue’s online MS in Cybersecurity and Trusted Systems cost a fraction of most private programs. Most of the programs below no longer require the GRE.

Cyber attacks keep growing. The FBI’s Internet Crime Complaint Center received 1,008,597 complaints in 2025, with $20.9 billion in reported losses. That demand is why a master’s in cybersecurity is one of the most searched graduate degrees in tech. This guide compares 12 programs on cost, format, GRE policy and deadlines, then helps you choose the right type of degree for your background.

Top cybersecurity master’s programs at a glance

School	Program	Format	Typical length	Published tuition	GRE
Carnegie Mellon University	MS in Information Security (MSIS)	On campus, Pittsburgh	3-4 semesters	$30,755 per semester (2026-27)	Not required
Georgia Tech	Online MS in Cybersecurity	Online	2-3 years	~10,000-12,000 total	Not required
Johns Hopkins University	MS in Security Informatics (MSSI)	On campus, Baltimore	~3 semesters	$34,335 per semester (2026-27)	Not required
NYU Tandon	MS in Cybersecurity	On campus or online	1.5-2 years full time	See NYU tuition tool	Optional
UC Berkeley	Master of Information and Cybersecurity (MICS)	Online + in-person immersion	20 months-2 years	~$78,500 est. total (Fall 2026 start)	Not required
University of Southern California	MS in Cyber Security Engineering	On campus or online	~4 semesters	$80,519 tuition and fees (2026-27)	Not required for 2027
Northeastern University	MS in Cybersecurity	Boston, Arlington or online	~2 years	~$61,504 (32 credits x $1,922, 2026-27)	Optional
Purdue University	Online MS in Cybersecurity and Trusted Systems	Online	12 months-5 years	800-825 per credit (~24,000-24,750 total, calc)	Not required
University of Maryland	M.Eng. in Cybersecurity Engineering	On campus or online	Not stated	$1,271 per credit on campus; $1,567 online (2026-27)	Optional
Rochester Institute of Technology	MS in Cybersecurity	On campus	~2 years	$64,542 per year full time (2026-27)	Optional
Arizona State University	MS in Computer Science (Cybersecurity); online MCS option	On campus (MS) or online (MCS)	~2 years	Online MCS $15,000 total; campus rates vary
UT Austin	MS in Information Security and Privacy (MSISP)	Weekend executive format, in person or live online	21 months	50,000total(68,000 for F-1/J-1)	Not required

Tuition changes every year and usually excludes fees, housing, and health insurance. Always confirm on the official program page.

Best master’s in cybersecurity programs for 2027

Programs are grouped by what they are best for, so you can jump to the type of degree that fits you.

Best for deep technical training

1. Carnegie Mellon University: MS in Information Security (MSIS)

CMU’s Information Networking Institute has run this program since 2003, and it is one of the most technical cybersecurity master’s degrees available. Coursework covers secure coding, networking, cyber risk modeling and optional tracks in forensics and incident response, cyber defense, cyber operations and secure AI. CMU holds NSA designations in Cyber Defense, Cyber Operations and Cyber Research.

• Length: 3 semesters (standard) or 4 semesters (advanced, with thesis or project options). New “Applied” options with a summer internship start Fall 2027.
• Tuition: $30,755 per semester full time (2026-27), about $92,000 for 3 semesters (calc)
• GRE: Not required or reviewed
• Fall 2027 deadlines: Priority Dec 1, 2026; final Jan 29, 2027
• Also consider: CMU Heinz College’s MS in Information Security Policy and Management (STEM-designated, 4 semesters) if you want a policy and management angle.

See what applicants report on Carnegie Mellon’s GradCafe page.

2. Johns Hopkins University: MS in Security Informatics (MSSI)

The MSSI is a full-time, immersive program in Baltimore with two tracks: Technology & Research, and Policy & Management. Students take at least 10 courses (cryptography, network security, cyber risk management, privacy law) plus a team capstone. Scholarship routes include the NSF CyberCorps Scholarship for Service and ISI Fellowships.

• Length: About 3 full-time semesters
• Tuition: $34,335 per semester (2026-27 Whiting School rate)
• GRE: Not required, and there is no application fee
• Fall deadline: Feb 15 or Mar 15
• Online alternative: JHU Engineering for Professionals offers an online MS in Cybersecurity (10 courses, $56,200 published total after the automatic Dean’s Fellowship, rolling admission).

Browse Johns Hopkins admissions results.

3. NYU Tandon School of Engineering: MS in Cybersecurity

NYU Tandon’s MS in Cybersecurity is a 30-credit degree recognized by the NSA’s NCAE-C program, with Cyber Defense and Cyber Operations concentrations. Core courses are network security, applied cryptography, application security and information security and privacy. You can study on campus in Brooklyn or fully online, and on-campus students can choose a 6-credit thesis.

• Length: 1.5-2 years full time online; about 3 years part time
• Tuition: Not published on Tandon’s program pages; use NYU’s tuition lookup tool. NYU also lists a 20% Industry Partner Scholarship for online students.
• GRE: Optional across all Tandon master’s programs
• Deadlines: On campus, Dec 1 (priority) and Feb 15 (final); online, Jul 1

Check NYU results on GradCafe and our guide to NYU GPA requirements.

4. University of Southern California: MS in Cyber Security Engineering

USC Viterbi’s MS in Cyber Security Engineering is a 28-unit program built around security systems, systems assurance, information security policy and privacy, with electives in applied cryptography, forensics and trusted system design. The online version (through DEN@Viterbi) charges the same tuition and is considered academically equivalent.

• Length: About 4 semesters on campus
• Tuition: $2,742 per unit; $80,519 total tuition and fees for 28 units (2026-27)
• GRE: Not required for 2027 applications
• International students: STEM OPT extension eligible
• Fall 2027 deadlines: Dec 15 (scholarship consideration), Jan 15 (final)

See USC admissions results.

5. University of Maryland, College Park: M.Eng. in Cybersecurity Engineering

UMD’s cybersecurity engineering master’s is run with the Maryland Cybersecurity Center and is very hands-on: everyone takes a course on hacking C programs and Unix binaries, then picks from network security, secure operating systems, digital forensics and cloud security.

• Credits: 30 (non-thesis)
• Tuition: $1,271 per credit on campus or $1,567 per credit online (2026-27, same for residents and non-residents), about $38,000 or $47,000 for 30 credits (calc)
• GRE: Optional
• Fall 2027 deadlines: Mar 9, 2027 for international (F/J visa) applicants; Jul 31, 2027 for US applicants and online students
• Note: No departmental assistantships; the online version cannot issue I-20s.

Best value and online programs

6. Georgia Tech: Online MS in Cybersecurity

Georgia Tech’s online MS in Cybersecurity is the best-known low-cost option from a top-ranked public university. You choose one of three 18-credit tracks: Information Security, Cyber-Physical Systems or Policy. Everyone completes a 5-credit cybersecurity practicum.

• Credits: 32 (about 10 courses)
• Length: 2-3 years part time
• Tuition: Georgia Tech advertises about $9,920 plus fees in total, but the Fall 2026 bursar sheet lists 373-406 per credit hour, which works out closer to $12,000 
• GRE: Not required (per Georgia Tech’s ECE FAQ)
• Fall 2027 deadlines: Feb 1, 2027 (standard), Mar 15, 2027 (final)

See Georgia Tech results on GradCafe.

7. Purdue University: Online MS in Cybersecurity and Trusted Systems

Purdue Polytechnic’s online MS in Cybersecurity and Trusted Systems is a 30-credit, 8-week-course program with tracks in applied AI and cybersecurity, ethical hacking and cyber forensics. A residential version is taught at Purdue’s Indianapolis location and requires the GRE or GMAT.

• Tuition: $800 per credit (Indiana residents), $825 (non-residents), about 24,000-24,750 total (calc)
• GRE: Not required for the online program
• Requirements: A related bachelor’s degree, 3.0 GPA for unconditional admission and at least 1 year of IT work experience
• Good to know: Purdue Global’s MS in Cybersecurity Management is a different program from a separately accredited online university in the Purdue system.

8. Arizona State University: MS in Computer Science (Cybersecurity)

ASU’s on-campus MS in Computer Science with a cybersecurity concentration is a 30-credit CS degree with required coursework in information assurance and a choice of applied cryptography, software security or network security. You can finish with coursework only, a thesis or an applied project. Prefer online? ASU Online’s Master of Computer Science (cybersecurity) costs $15,000 in total.

• Tuition (campus): Charged per semester; Fall 2026 graduate rates are $7,493 (resident, 7+ credits) and $20,299 (non-resident, 12+ credits) including mandatory fees, before any program fees
• International students: STEM OPT eligible (on-campus degree only)
• GRE: 
• Fall priority deadline: Dec 1

Read our guide to ASU GPA requirements before applying.

Best for working professionals and policy-minded applicants

9. UC Berkeley: Master of Information and Cybersecurity (MICS)

Berkeley’s MICS is an online program with live weekly classes of about 15-20 students and at least one in-person immersion. It blends technical courses (network, software and operating system security, cryptography) with policy, privacy engineering and cyber risk management, and connects students with Berkeley’s Center for Long-Term Cybersecurity.

• Units: 27 (9 courses plus a capstone)
• Tuition: $2,712 per unit; estimated $78,500 total tuition and fees for a Fall 2026 start
• GRE: Not required
• Starts: January, May and September, with rolling review

10. UT Austin: MS in Information Security and Privacy (MSISP)

UT Austin’s MSISP is an executive-style degree from the School of Information and the Center for Identity. Classes meet one Friday and Saturday per month, on campus or live online, and the curriculum covers security, privacy law and policy, governance, risk analysis and a capstone project. It is a strong fit if you searched for a master’s in information security rather than a hands-on engineering degree.

• Length: 21 months (30 credit hours)
• Tuition: $50,000 total; $68,000 for full-time F-1/J-1 students, who must attend in person
• GRE: Not required
• Fall 2027 deadline: June 1, 2027

See UT Austin results on GradCafe.

Best for co-op and applied experience

11. Northeastern University: MS in Cybersecurity

Northeastern’s Khoury College offers its MS in Cybersecurity in Boston, Arlington (Virginia) and online. Students choose technical or contextual courses (system security, applied cryptography, network security, risk management, forensics, cyberlaw) and can add an optional co-op. Northeastern holds NSA designations in Cyber Defense Education, Research and Cyber Operations, and its “Align” pathway admits students from non-CS backgrounds.

• Credits: 32 (about 2 years)
• Tuition: $1,922 per credit, about $61,504 total (2026-27)
• GRE: Optional
• Deadlines: Rolling review; the official pages list different fall dates, so

12. Rochester Institute of Technology: MS in Cybersecurity

RIT’s MS in Cybersecurity (formerly MS in Computing Security) is a 30-credit, on-campus program with core courses in cryptography and authentication, computer system security and enterprise security, ending in a thesis or capstone. RIT is an NSA-designated National Center of Academic Excellence in Cybersecurity.

• Tuition: $64,542 per year full time (2026-27); RIT also advertises a 30% “Master Up” tuition scholarship
• GRE: Optional, no minimum
• International students: The full-time program is STEM-designated and eligible for STEM OPT
• Deadlines: Rolling admission

Master’s in cybersecurity vs information security: what’s the difference?

The names overlap, and many schools use them interchangeably. In practice:

• Cybersecurity master’s degrees (NYU, USC, Northeastern, RIT, UMD) usually focus on defending networks, systems and software: penetration testing, secure coding, forensics, cryptography.
• Information security degrees (CMU’s MSIS, UT Austin’s MSISP, JHU’s MSSI) can be just as technical, but often add risk management, privacy, law and governance.
• Policy and management versions (CMU Heinz MSISPM, UT Austin MSISP, Georgia Tech’s Policy track) suit people aiming for security leadership, compliance or government roles.
• Computer science with a security concentration (ASU) gives you a broader CS degree, which can help if you want flexibility beyond security.

Read the course list, not just the degree title. If most core courses are about risk, law and governance, it is a management degree. If they are about exploits, cryptography and systems, it is a technical one.

How to choose a cyber security master’s program

1. Match the program to your background. Most technical programs expect programming, data structures, discrete math and networking. If you lack these, look for bridge courses (NYU, RIT) or non-CS pathways (Northeastern Align, Berkeley MICS).
2. Check NSA designation. The NSA’s National Centers of Academic Excellence in Cybersecurity (NCAE-C) program designates schools in Cyber Defense, Cyber Research and Cyber Operations. You can search the official list. ABET’s cybersecurity criteria apply mainly to bachelor’s programs, so for master’s degrees, regional accreditation and NCAE-C designation are the signals to look for.
3. Decide between online and campus. Online programs (Georgia Tech, Purdue, Berkeley, JHU EP) let you keep working. Campus programs give you labs, research centers, internships and, for international students, a visa pathway.
4. International students: confirm STEM OPT. USC, RIT (full time) and ASU (campus) state STEM OPT eligibility on their program pages. Online-only degrees generally cannot sponsor a student visa.
5. Compare total cost, not per-credit price. A program with a low per-credit rate can still cost more if it requires more credits or semesters.
6. Look at real applicant outcomes. Search cybersecurity admissions results and information security results on GradCafe to see when decisions go out and what profiles get in.

Still building your list? See how many grad schools you should apply to.

How much does a master’s degree in cyber security cost?

Based on the published 2026-27 rates above:

• Under $25,000: Georgia Tech online (~10,000-12,000), ASU Online MCS (15,000),Purdueonline(~24,000-$24,750)
• 35,000-65,000: UMD (~38,000-47,000), UT Austin (50,000),JHUEPonline(56,200), Northeastern (~$61,500)
• $75,000 and up: Berkeley MICS (~78,500),USC(80,519), CMU (~92,000for3semesters),JHUMSSI(~103,000 for 3 semesters, calc), RIT (~$129,000 for 2 years, calc)

On-campus programs also mean rent, health insurance and living costs. For lower-cost options beyond cybersecurity, see our list of free and low-cost online master’s programs.

Cybersecurity master’s admission requirements

Requirements vary, but most programs ask for:

• A bachelor’s degree, usually in computer science, engineering, math or IT. Some programs (Berkeley, UT Austin, Northeastern Align) accept other majors.
• Technical prerequisites: programming (Python, C/C++ or Java), data structures, discrete math and networking basics.
• GPA: Many programs list 3.0 as a minimum or typical expectation.
• A statement of purpose explaining why security and why this program.
• Letters of recommendation (one to three).
• English test scores for international applicants (for example, TOEFL around 88-100 or IELTS 6.5-7.0, depending on the school).
• GRE: usually optional or not required. CMU, JHU, USC, Berkeley, UT Austin and Purdue online do not require it. If you are deciding whether to submit scores, see what counts as a good GRE score.

Keep track of every piece with our grad school application checklist.

Cybersecurity jobs and salaries with a master’s

According to the U.S. Bureau of Labor Statistics:

Occupation	Median pay (May 2025)	Projected growth, 2025-35	Typical entry education
Information security analysts	$129,180	21%	Bachelor’s
Computer and information research scientists	$140,300	22%	Master’s
Computer network architects	$134,050	8%	Bachelor’s

BLS expects about 14,100 openings per year for information security analysts. CyberSeek counted 514,359 US cybersecurity job listings between May 2024 and April 2025.

A master’s is not required for most entry-level security jobs, but it can help you move into research, architecture and leadership roles, or switch into security from another field. Programs that publish outcomes (for example, CMU INI reports its graduates’ average first-destination salary) are worth asking about directly.

Related: Thinking about research? See the best PhD programs in cyber security, or compare with the best master’s in computer science programs.

Master’s in cybersecurity FAQs

Is a master’s in cybersecurity worth it?

For many people, yes. Information security analysts earn a median of $129,180 (BLS, May 2025), and the field is projected to grow 21% from 2025 to 2035. It is most worthwhile if you want to move into senior, research or leadership roles, or switch into security from another field. Weigh tuition against your expected salary gain.

Which master’s degree is best for cybersecurity?

It depends on your goal. Technical roles fit a cybersecurity or information security MS with heavy coursework in systems, cryptography and networks (CMU, NYU, USC, UMD). Leadership and policy roles fit programs like UT Austin’s MSISP or CMU Heinz’s MSISPM.

Can I get a master’s in cybersecurity without a computer science degree?

Yes, at some schools. Northeastern’s Align pathway, Berkeley’s MICS and UT Austin’s MSISP accept students from other majors, and NYU and RIT offer bridge courses. Most technical programs still expect programming and math skills.

Do cybersecurity master’s programs require the GRE?

Most no longer do. CMU, Johns Hopkins, USC, Berkeley, UT Austin and Purdue’s online program do not require it, and NYU, Northeastern, RIT and UMD make it optional. Always check the current policy on the program page.

How long is a master’s in cybersecurity?

Usually 1.5 to 2 years full time (about 27 to 32 credits). Part-time and online programs can take 2 to 5 years.

What is the difference between a master’s in cybersecurity and information security?

Cybersecurity degrees usually focus on defending systems and networks, while information security degrees often add risk, privacy, policy and governance. Many programs cover both, so compare the course lists.

Next steps

• Search cybersecurity admissions results to see decision dates and applicant profiles.
• Submit your own result to help the next applicant.
• Join the forum discussion.
• Subscribe to the GradCafe newsletter for deadline and results updates.

Disclaimer: Tuition, deadlines and requirements change every year. Figures here come from official university pages checked in October 2026; always confirm on the program’s own site. GradCafe results are self-reported and are not official or statistically representative.