Incident Response Contracts in the UK excluding London

Incident Response
UK > UK excluding London

The following table provides summary statistics for contract job vacancies advertised in the UK excluding London with a requirement for Incident Response skills. Included is a benchmarking guide to the contractor rates offered in vacancies that have cited Incident Response over the 6 months to 9 May 2024 with a comparison to the same period in the previous 2 years.

6 months to
9 May 2024
Same period 2023 Same period 2022
Rank 159 291 398
Rank change year-on-year +132 +107 -34
Contract jobs citing Incident Response 283 160 115
As % of all contract jobs advertised in the UK excluding London 1.38% 0.68% 0.38%
As % of the Processes & Methodologies category 1.64% 0.76% 0.43%
Number of daily rates quoted 200 123 95
10th Percentile £425 £333 £286
25th Percentile £456 £450 £456
Median daily rate (50th Percentile) £550 £565 £550
Median % change year-on-year -2.65% +2.73% -
75th Percentile £688 £641 £642
90th Percentile £800 £699 £749
UK median daily rate £550 £580 £550
% change year-on-year -5.17% +5.45% +4.76%
Number of hourly rates quoted 5 0 6
10th Percentile - - £16.02
25th Percentile - - £16.41
Median hourly rate £40.00 - £17.23
75th Percentile - - £19.41
90th Percentile - - £31.46
UK median hourly rate £40.00 - £17.64
% change year-on-year - - -59.68%

All Process and Methodology Skills
UK excluding London

Incident Response is in the Processes and Methodologies category. The following table is for comparison with the above and provides summary statistics for all contract job vacancies advertised in the UK excluding London with a requirement for process or methodology skills.

Contract vacancies with a requirement for process or methodology skills 17,297 21,007 27,024
As % of all contract IT jobs advertised in the UK excluding London 84.45% 89.55% 88.94%
Number of daily rates quoted 10,312 14,549 18,866
10th Percentile £250 £256 £235
25th Percentile £378 £400 £386
Median daily rate (50th Percentile) £500 £500 £475
Median % change year-on-year - +5.26% +8.57%
75th Percentile £600 £600 £575
90th Percentile £688 £688 £650
UK median daily rate £525 £550 £530
% change year-on-year -4.55% +3.77% +8.72%
Number of hourly rates quoted 2,055 1,290 1,325
10th Percentile £12.32 £11.00 £12.22
25th Percentile £15.17 £15.41 £14.00
Median hourly rate £38.00 £35.00 £20.00
Median % change year-on-year +8.57% +75.00% -6.98%
75th Percentile £61.25 £65.00 £46.17
90th Percentile £72.90 £73.75 £60.00
UK median hourly rate £36.50 £36.00 £25.18
% change year-on-year +1.39% +42.97% +2.78%

Incident Response
Job Vacancy Trend in the UK excluding London

Job postings citing Incident Response as a proportion of all IT jobs advertised in the UK excluding London.

Job vacancy trend for Incident Response in the UK excluding London

Incident Response
Contractor Daily Rate Trend in the UK excluding London

3-month moving average daily rate quoted in jobs citing Incident Response in the UK excluding London.

Daily rate trend for Incident Response in the UK excluding London

Incident Response
Daily Rate Histogram in the UK excluding London

Daily rate distribution for jobs citing Incident Response in the UK excluding London over the 6 months to 9 May 2024.

Daily rate histogram for Incident Response in the UK excluding London

Incident Response
Contractor Hourly Rate Trend in the UK excluding London

3-month moving average hourly rates quoted in jobs citing Incident Response in the UK excluding London.

Hourly rate trend for Incident Response in the UK excluding London

Incident Response
Contract Job Locations in the UK excluding London

The table below looks at the demand and provides a guide to the median contractor rates quoted in IT jobs citing Incident Response within the UK excluding London region over the 6 months to 9 May 2024. The 'Rank Change' column provides an indication of the change in demand within each location based on the same 6 month period last year.

Location Rank Change
on Same Period
Last Year
Matching
Contract
IT Job Ads
Median
Daily Rate
Past 6 Months
Median Daily Rate
% Change
on Same Period
Last Year
Live
Jobs
South West +101 107 £579 -7.44% 15
South East +79 70 £484 -19.42% 35
North of England +22 52 £567 +3.09% 42
Midlands +42 39 £635 -2.31% 25
West Midlands +35 36 £635 -2.31% 20
Yorkshire +22 27 £582 +10.86% 17
North West +6 25 £525 -10.41% 19
East of England +4 25 £600 +17.07% 8
Scotland +42 15 £500 +11.11% 12
East Midlands +21 3 £567 -7.65% 5
Incident Response
UK

Incident Response
Co-occurring Skills and Capabilities in the UK excluding London by Category

The follow tables expand on the table above by listing co-occurrences grouped by category. The same employment type, locality and period is covered with up to 20 co-occurrences shown in each of the following categories:

Application Platforms
1 17 (6.01%) CMS
2 9 (3.18%) NetWeaver
3 2 (0.71%) nginx
4 1 (0.35%) Confluence
Applications
1 2 (0.71%) Microsoft Excel
2 1 (0.35%) Microsoft Project
Business Applications
1 9 (3.18%) SAP IBP
Cloud Services
1 37 (13.07%) Azure
2 21 (7.42%) Azure Sentinel
3 20 (7.07%) AWS
4 8 (2.83%) OpenShift
5 6 (2.12%) Entra ID
6 5 (1.77%) CloudFront
6 5 (1.77%) GCP
6 5 (1.77%) Virtual Private Cloud
7 4 (1.41%) Amazon CloudWatch
7 4 (1.41%) AWS CloudTrail
7 4 (1.41%) Azure Monitor
7 4 (1.41%) Microsoft Purview
8 3 (1.06%) Amazon GuardDuty
9 2 (0.71%) Anthos
9 2 (0.71%) Datadog
9 2 (0.71%) Google Kubernetes Engine
9 2 (0.71%) Microsoft 365
9 2 (0.71%) PaaS
9 2 (0.71%) Power Platform
9 2 (0.71%) Sumo Logic
Communications & Networking
1 25 (8.83%) Firewall
2 17 (6.01%) Network Security
3 9 (3.18%) DNS
4 6 (2.12%) Intrusion Detection
4 6 (2.12%) TCP/IP
4 6 (2.12%) VPN
5 4 (1.41%) Cisco Nexus
6 3 (1.06%) FTP
6 3 (1.06%) HTTP
6 3 (1.06%) SMTP
6 3 (1.06%) SSL
7 2 (0.71%) LAN
7 2 (0.71%) Reverse Proxy
7 2 (0.71%) WAN
8 1 (0.35%) DHCP
8 1 (0.35%) tcpdump
8 1 (0.35%) Wi-Fi
8 1 (0.35%) Wireshark
Database & Business Intelligence
1 10 (3.53%) Elasticsearch
2 9 (3.18%) SAP BW
2 9 (3.18%) SAP HANA
3 8 (2.83%) PostgreSQL
4 5 (1.77%) SQL Server
5 2 (0.71%) BigQuery
5 2 (0.71%) Data Hub
5 2 (0.71%) DB2
5 2 (0.71%) Enterprise Data Warehouse
5 2 (0.71%) MongoDB
5 2 (0.71%) Power BI
6 1 (0.35%) Apache Hive
6 1 (0.35%) Hadoop
6 1 (0.35%) Tableau
Development Applications
1 13 (4.59%) JIRA
2 1 (0.35%) GitLab
2 1 (0.35%) IDA Disassembler
2 1 (0.35%) Jenkins
General
1 89 (31.45%) Social Skills
2 28 (9.89%) Analytical Skills
3 26 (9.19%) Public Sector
4 18 (6.36%) Finance
5 14 (4.95%) Telecoms
6 9 (3.18%) Banking
6 9 (3.18%) Legal
7 8 (2.83%) Inclusion and Diversity
8 6 (2.12%) Retail
9 3 (1.06%) Games
9 3 (1.06%) Manufacturing
10 2 (0.71%) Aerospace
10 2 (0.71%) Electronics
10 2 (0.71%) Influencing Skills
10 2 (0.71%) Marketing
11 1 (0.35%) Aviation
11 1 (0.35%) Law
11 1 (0.35%) Military
11 1 (0.35%) Spanish Language
Job Titles
1 106 (37.46%) Analyst
2 66 (23.32%) SOC Analyst
3 29 (10.25%) Lead
4 27 (9.54%) Consultant
5 21 (7.42%) SOC Engineer
6 19 (6.71%) Security Engineer
7 17 (6.01%) Senior
8 15 (5.30%) Cyber Defence Analyst
9 14 (4.95%) Senior Analyst
10 13 (4.59%) Security Analyst
11 11 (3.89%) Security Specialist
11 11 (3.89%) SIEM Consultant
12 10 (3.53%) Cloud Engineer
12 10 (3.53%) IT Security Specialist
12 10 (3.53%) Security Operations Specialist
12 10 (3.53%) Site Engineer
12 10 (3.53%) Site Reliability Engineer
13 9 (3.18%) Data Analyst
13 9 (3.18%) SAP Basis Consultant
13 9 (3.18%) SAP Consultant
Libraries, Frameworks & Software Standards
1 11 (3.89%) Kafka
2 9 (3.18%) SAP Basis
2 9 (3.18%) SAP Fiori
3 5 (1.77%) OAuth
3 5 (1.77%) OAuth2
3 5 (1.77%) SAML
4 3 (1.06%) Elastic Stack
4 3 (1.06%) LDAP
5 1 (0.35%) Ajax
5 1 (0.35%) AngularJS
5 1 (0.35%) CSS
5 1 (0.35%) HTML
5 1 (0.35%) JSON
5 1 (0.35%) OLE
5 1 (0.35%) SOAP
5 1 (0.35%) Web Services
5 1 (0.35%) XML
Miscellaneous
1 79 (27.92%) Management Information System
2 74 (26.15%) Security Operations Centre
3 58 (20.49%) Cyber Kill Chain
3 58 (20.49%) Cyber Threat
4 56 (19.79%) Cyber Defence
5 39 (13.78%) CSOC
6 23 (8.13%) Security Posture
7 21 (7.42%) Cyberattack
8 18 (6.36%) Cloud Native
9 12 (4.24%) Distributed Denial-of-Service
10 8 (2.83%) Onboarding
10 8 (2.83%) Public Cloud
11 5 (1.77%) Analytical Mindset
12 4 (1.41%) CMDB
13 2 (0.71%) Data Fabric
13 2 (0.71%) Insider Threat
14 1 (0.35%) Cloud Security Posture
14 1 (0.35%) Operational Technology
14 1 (0.35%) Renewable Energy
14 1 (0.35%) YARA
Operating Systems
1 46 (16.25%) Linux
2 39 (13.78%) Windows
3 11 (3.89%) Unix
4 5 (1.77%) zOS
5 2 (0.71%) Windows Server
6 1 (0.35%) Mac OS X
Processes & Methodologies
1 164 (57.95%) Cybersecurity
2 138 (48.76%) SIEM
3 124 (43.82%) Security Operations
4 84 (29.68%) Use Case
5 74 (26.15%) Information Security
6 73 (25.80%) Incident Management
7 72 (25.44%) Threat Intelligence
8 66 (23.32%) MITRE ATT&CK
9 59 (20.85%) Vulnerability Management
10 58 (20.49%) SOAR
11 55 (19.43%) Mentoring
12 51 (18.02%) Protective Monitoring
13 49 (17.31%) Cyber Threat Intelligence
14 45 (15.90%) Root Cause Analysis
15 42 (14.84%) Data Security
16 40 (14.13%) Case Management
17 39 (13.78%) Analytics
18 36 (12.72%) Continuous Improvement
19 34 (12.01%) CRM
20 32 (11.31%) Problem-Solving
Programming Languages
1 13 (4.59%) Kusto Query Language
2 5 (1.77%) PowerShell
3 4 (1.41%) Bash
3 4 (1.41%) Python
4 3 (1.06%) Search Processing Language
4 3 (1.06%) SQL
5 2 (0.71%) JavaScript
5 2 (0.71%) Shell Script
6 1 (0.35%) Bicep
6 1 (0.35%) Go
Qualifications
1 142 (50.18%) Security Cleared
2 89 (31.45%) DV Cleared
3 39 (13.78%) SC Cleared
4 33 (11.66%) Degree
5 25 (8.83%) SANS
6 22 (7.77%) CISSP
7 14 (4.95%) CompTIA Security+
8 10 (3.53%) CISM
9 9 (3.18%) Cisco Certification
10 8 (2.83%) SAP Certification
11 7 (2.47%) Azure Certification
11 7 (2.47%) CCNP
11 7 (2.47%) Computer Science Degree
12 5 (1.77%) AWS Certification
12 5 (1.77%) CEH
13 4 (1.41%) CCIE
13 4 (1.41%) CCNA
13 4 (1.41%) Microsoft Certification
14 3 (1.06%) CCSA
14 3 (1.06%) CCSE
Quality Assurance & Compliance
1 56 (19.79%) NIST
2 38 (13.43%) NIST 800
3 24 (8.48%) GDPR
4 23 (8.13%) NCSC
5 21 (7.42%) ISO/IEC 27001
6 5 (1.77%) PCI DSS
7 4 (1.41%) ISO/IEC 27002 (supersedes ISO/IEC 17799)
8 3 (1.06%) GRC
9 2 (0.71%) HIPAA
9 2 (0.71%) SLA
10 1 (0.35%) Cyber Essentials
10 1 (0.35%) Data Quality
10 1 (0.35%) Disclosure Scotland
10 1 (0.35%) SOC 2
System Software
1 7 (2.47%) Active Directory
1 7 (2.47%) Docker
2 4 (1.41%) VMware Infrastructure
3 2 (0.71%) XenApp
4 1 (0.35%) Snort
Systems Management
1 11 (3.89%) Kibana
1 11 (3.89%) Prometheus
2 10 (3.53%) Istio
2 10 (3.53%) Kubernetes
3 9 (3.18%) Grafana
4 8 (2.83%) Argo
5 4 (1.41%) Nessus
5 4 (1.41%) Trend Micro Deep Security
6 3 (1.06%) Computer Emergency Response Teams
6 3 (1.06%) Terraform
7 2 (0.71%) Kiali
7 2 (0.71%) logstash
7 2 (0.71%) Network Intrusion Detection System
8 1 (0.35%) Ansible
8 1 (0.35%) CASB
8 1 (0.35%) FortiGate
8 1 (0.35%) Puppet
8 1 (0.35%) QRadar
8 1 (0.35%) Single Sign-On
8 1 (0.35%) ZABBIX
Vendors
1 110 (38.87%) Microsoft
2 50 (17.67%) Splunk
3 33 (11.66%) LogRhythm
4 23 (8.13%) Qualys
5 21 (7.42%) Darktrace
6 20 (7.07%) Varonis
7 17 (6.01%) FireEye
8 16 (5.65%) Forcepoint
9 11 (3.89%) SAP
10 10 (3.53%) Cisco
11 7 (2.47%) Virgin Media
12 6 (2.12%) Rapid7
13 5 (1.77%) CheckPoint
13 5 (1.77%) F5
14 4 (1.41%) Sophos
14 4 (1.41%) Symantec
14 4 (1.41%) VMware
15 3 (1.06%) CrowdStrike
15 3 (1.06%) IronPort
15 3 (1.06%) Sage