I'm arguing that if you're capable of performing cyberwarfare, $200k is a fairly low salary. The $122k median "cyber security professional" is including a lot of people with CCNAs who configure firewalls for a living.
The kind of people that tend to read about tech for fun, and have enough of an opinion on it to post, tend to be lean above average? At least I certainly like to think of myself as such.
People here are just remarking on what it would take to get them to take a job in the military.
Sure, but they also tend to understand the importance of data and bias. So things like looking at the median instead of making assumptions would be expected more on here than other places.
You aren’t likely to compare compare yourself to the median, but to those whom you consider your peers. If you peers all have higher compensation, you’ll feel bad, regardless of the fact you are objectively in the top 90% of compensation for your role.
The real point is that you can still pull competent professionals under $200k because that's an attractive number to the majority of cyber warfare operators or cyber security professionals being that it's at least $50k over the median for either. Reducing that to $150k is still somewhat to slightly over the medians for either, and thus still a financially attractive number to the majority of the candidate pool. Money isn't the real issue here, it's the other restrictions, culture, etc.
They aren't writing exploits or developing tools. Most (though certainly not all) of that work is done by contractors on very good money, or purchased from industry.