Security Orchestration, Automation and Response (SOAR)
UK

The following table provides summary statistics for contract job vacancies with a requirement for SOAR skills. Included is a benchmarking guide to the contractor rates offered in vacancies that have cited SOAR over the 6 months to 27 April 2024 with a comparison to the same period in the previous 2 years.

6 months to
27 Apr 2024
Same period 2023 Same period 2022
Rank 479 570 785
Rank change year-on-year +91 +215 -147
Contract jobs citing SOAR 119 149 64
As % of all contract jobs advertised in the UK 0.27% 0.25% 0.072%
As % of the Processes & Methodologies category 0.32% 0.28% 0.080%
Number of daily rates quoted 79 114 53
10th Percentile £492 £413 £423
25th Percentile £525 £450 £513
Median daily rate (50th Percentile) £568 £570 £600
Median % change year-on-year -0.44% -5.00% -
75th Percentile £594 £725 £675
90th Percentile £688 £796 £750
UK excluding London median daily rate £568 £475 £538
% change year-on-year +19.47% -11.71% +7.60%
Number of hourly rates quoted 5 1 0
Median hourly rate £40.00 £97.50 -
Median % change year-on-year -58.97% - -
UK excluding London median hourly rate £40.00 - -

All Process and Methodology Skills
UK

SOAR is in the Processes and Methodologies category. The following table is for comparison with the above and provides summary statistics for all contract job vacancies with a requirement for process or methodology skills.

Contract vacancies with a requirement for process or methodology skills 37,374 53,774 80,482
As % of all contract IT jobs advertised in the UK 86.31% 89.91% 90.60%
Number of daily rates quoted 24,095 37,304 56,474
10th Percentile £300 £325 £340
25th Percentile £413 £438 £425
Median daily rate (50th Percentile) £525 £550 £525
Median % change year-on-year -4.55% +4.76% +8.25%
75th Percentile £638 £650 £638
90th Percentile £750 £750 £738
UK excluding London median daily rate £500 £500 £475
% change year-on-year - +5.26% +9.20%
Number of hourly rates quoted 2,422 1,763 1,928
10th Percentile £12.75 £11.00 £12.50
25th Percentile £16.00 £16.25 £15.25
Median hourly rate £35.00 £37.34 £25.00
Median % change year-on-year -6.27% +49.36% -
75th Percentile £59.44 £65.00 £49.25
90th Percentile £72.50 £75.00 £63.75
UK excluding London median hourly rate £36.00 £36.00 £20.00
% change year-on-year - +80.00% -8.17%

SOAR
Job Vacancy Trend

Job postings citing SOAR as a proportion of all IT jobs advertised.

Job vacancy trend for SOAR in the UK

SOAR
Contractor Daily Rate Trend

3-month moving average daily rate quoted in jobs citing SOAR.

Daily rate trend for SOAR in the UK

SOAR
Daily Rate Histogram

Daily rate distribution for jobs citing SOAR over the 6 months to 27 April 2024.

Daily rate histogram for SOAR in the UK

SOAR
Contractor Hourly Rate Trend

3-month moving average hourly rates quoted in jobs citing SOAR.

Hourly rate trend for SOAR in the UK

SOAR
Top 12 Contract Locations

The table below looks at the demand and provides a guide to the median contractor rates quoted in IT jobs citing SOAR within the UK over the 6 months to 27 April 2024. The 'Rank Change' column provides an indication of the change in demand within each location based on the same 6 month period last year.

Location Rank Change
on Same Period
Last Year
Matching
Contract
IT Job Ads
Median
Daily Rate
Past 6 Months
Median Daily Rate
% Change
on Same Period
Last Year
Live
Jobs
England +132 119 £568 -3.28% 17
UK excluding London +87 103 £568 +19.47% 12
South West +69 86 £568 +19.47% 1
Work from Home +89 19 £600 +4.35% 6
North of England +24 18 £591 -5.44% 2
South East +38 16 £500 -19.19% 5
Yorkshire +11 15 £582 -6.88% 1
London +65 12 £650 - 8
Midlands +29 8 £538 -13.92%
West Midlands - 7 £538 -
North West +16 3 £600 +2.39% 1
East Midlands +17 1 - -

SOAR
Co-occurring Skills and Capabilities by Category

The follow tables expand on the table above by listing co-occurrences grouped by category. The same employment type, locality and period is covered with up to 20 co-occurrences shown in each of the following categories:

Cloud Services
1 24 (20.17%) Azure
2 7 (5.88%) AWS
3 4 (3.36%) Amazon CloudWatch
3 4 (3.36%) AWS CloudTrail
3 4 (3.36%) Azure Monitor
4 3 (2.52%) IaaS
5 2 (1.68%) PaaS
5 2 (1.68%) SaaS
6 1 (0.84%) Azure Sentinel
6 1 (0.84%) Azure Stack
6 1 (0.84%) GCP
6 1 (0.84%) Microsoft 365
Communications & Networking
1 2 (1.68%) TCP/IP
2 1 (0.84%) Firewall
2 1 (0.84%) Intrusion Detection
2 1 (0.84%) VPN
Database & Business Intelligence
1 1 (0.84%) Big Data
1 1 (0.84%) Hadoop
Development Applications
1 9 (7.56%) JIRA
2 1 (0.84%) Git
General
1 68 (57.14%) Social Skills
2 11 (9.24%) Telecoms
3 8 (6.72%) Analytical Skills
4 7 (5.88%) Legal
5 6 (5.04%) Finance
5 6 (5.04%) Public Sector
6 2 (1.68%) Aerospace
7 1 (0.84%) Aviation
7 1 (0.84%) Military
7 1 (0.84%) Presentation Skills
7 1 (0.84%) Publishing
Job Titles
1 70 (58.82%) Analyst
2 29 (24.37%) Threat Intelligence Analyst
3 20 (16.81%) Cyber Threat Analyst
3 20 (16.81%) Cyber Threat Intelligence Analyst
4 16 (13.45%) Cyber Defence Analyst
4 16 (13.45%) SOC Engineer
5 13 (10.92%) SOC Analyst
6 12 (10.08%) Lead
7 9 (7.56%) Compliance Analyst
7 9 (7.56%) Data Analyst
7 9 (7.56%) Data Compliance Analyst
8 8 (6.72%) Architect
9 7 (5.88%) Security Engineer
10 5 (4.20%) Senior
11 4 (3.36%) Cloud Engineer
11 4 (3.36%) Security Architect
11 4 (3.36%) Senior Analyst
11 4 (3.36%) SOC Architect
11 4 (3.36%) Vulnerability Analyst
12 3 (2.52%) Security Operations Analyst
Libraries, Frameworks & Software Standards
1 2 (1.68%) OAuth
1 2 (1.68%) OpenID
1 2 (1.68%) SAML
2 1 (0.84%) Elastic Stack
2 1 (0.84%) Kafka
Miscellaneous
1 61 (51.26%) Cyber Threat
2 44 (36.97%) Cyber Kill Chain
3 43 (36.13%) Cyber Defence
4 31 (26.05%) Management Information System
5 15 (12.61%) Security Operations Centre
6 7 (5.88%) Cloud Native
6 7 (5.88%) Private Cloud
7 6 (5.04%) Analytical Mindset
7 6 (5.04%) Security Posture
8 4 (3.36%) Public Cloud
9 2 (1.68%) Data Protection Act
10 1 (0.84%) Greenfield Project
Operating Systems
1 5 (4.20%) Linux
1 5 (4.20%) Windows
2 2 (1.68%) Mac OS X
3 1 (0.84%) Red Hat Enterprise Linux
3 1 (0.84%) Ubuntu
3 1 (0.84%) Windows Server
Processes & Methodologies
1 105 (88.24%) SIEM
2 83 (69.75%) Cybersecurity
3 69 (57.98%) Threat Intelligence
4 66 (55.46%) Cyber Threat Intelligence
5 65 (54.62%) Incident Response
6 60 (50.42%) MITRE ATT&CK
7 51 (42.86%) Use Case
8 50 (42.02%) Incident Management
9 47 (39.50%) Security Operations
10 45 (37.82%) Information Security
11 43 (36.13%) Root Cause Analysis
12 41 (34.45%) Case Management
13 39 (32.77%) Protective Monitoring
14 37 (31.09%) CRM
15 34 (28.57%) Mentoring
16 27 (22.69%) Open Source
17 26 (21.85%) Malware Analysis
17 26 (21.85%) OSINT
18 22 (18.49%) Vulnerability Management
19 20 (16.81%) Cyber Intelligence
Programming Languages
1 6 (5.04%) Python
2 5 (4.20%) PowerShell
3 4 (3.36%) JavaScript
4 1 (0.84%) Bash
4 1 (0.84%) Kusto Query Language
4 1 (0.84%) Search Processing Language
4 1 (0.84%) Shell Script
Qualifications
1 89 (74.79%) Security Cleared
2 76 (63.87%) DV Cleared
3 11 (9.24%) SC Cleared
4 2 (1.68%) CEH
4 2 (1.68%) CISSP
4 2 (1.68%) CREST Certified
4 2 (1.68%) Degree
4 2 (1.68%) GIAC
4 2 (1.68%) SANS
5 1 (0.84%) CISM
5 1 (0.84%) Microsoft Certification
Quality Assurance & Compliance
1 46 (38.66%) NIST
2 41 (34.45%) NIST 800
3 5 (4.20%) ISO/IEC 27001
4 4 (3.36%) NCSC
5 1 (0.84%) PCI DSS
System Software
1 1 (0.84%) Snort
1 1 (0.84%) VMware Infrastructure
Systems Management
1 4 (3.36%) CSIRT
1 4 (3.36%) Trend Micro Deep Security
2 2 (1.68%) Terraform
3 1 (0.84%) Ansible
3 1 (0.84%) Kubernetes
3 1 (0.84%) Prometheus
3 1 (0.84%) Puppet
Vendors
1 65 (54.62%) Microsoft
2 15 (12.61%) Splunk
3 4 (3.36%) Palo Alto
4 2 (1.68%) Rapid7
4 2 (1.68%) SolarWinds
4 2 (1.68%) Sophos
5 1 (0.84%) ArcSight
5 1 (0.84%) Carbon Black
5 1 (0.84%) Cisco
5 1 (0.84%) Google
5 1 (0.84%) Red Hat
5 1 (0.84%) ServiceNow
5 1 (0.84%) VMware