Trail of Bits has a nice summary[0] on that (they're discussing this[1] book).

> As productive as the top 1% are, their earnings are equally depressing. The top seven participants in the Facebook data set averaged 0.87 bugs per month, earning an average yearly salary of $34,255; slightly less than what a pest control worker makes in Mississippi.

---

[0] https://blog.trailofbits.com/2019/01/14/on-bounties-and-boff...

[1] https://mitpress.mit.edu/books/new-solutions-cybersecurity