Incident Response
UK

The following table provides summary statistics for permanent job vacancies with a requirement for Incident Response skills. Included is a benchmarking guide to the salaries offered in vacancies that have cited Incident Response over the 6 months to 27 April 2024 with a comparison to the same period in the previous 2 years.

6 months to
27 Apr 2024
Same period 2023 Same period 2022
Rank 292 372 432
Rank change year-on-year +80 +60 +6
Permanent jobs citing Incident Response 954 920 1,291
As % of all permanent jobs advertised in the UK 0.97% 0.88% 0.84%
As % of the Processes & Methodologies category 1.13% 0.92% 0.88%
Number of salaries quoted 728 631 826
10th Percentile £42,500 £39,748 £38,500
25th Percentile £51,250 £47,500 £48,750
Median annual salary (50th Percentile) £65,000 £65,000 £62,500
Median % change year-on-year - +4.00% +4.17%
75th Percentile £80,000 £77,500 £80,000
90th Percentile £97,500 £92,500 £91,625
UK excluding London median annual salary £55,000 £52,500 £52,500
% change year-on-year +4.76% - -

All Process and Methodology Skills
UK

Incident Response is in the Processes and Methodologies category. The following table is for comparison with the above and provides summary statistics for all permanent job vacancies with a requirement for process or methodology skills.

Permanent vacancies with a requirement for process or methodology skills 84,305 100,095 147,310
As % of all permanent jobs advertised in the UK 85.99% 95.64% 95.57%
Number of salaries quoted 59,591 58,745 83,129
10th Percentile £29,000 £34,000 £33,500
25th Percentile £40,000 £45,000 £43,750
Median annual salary (50th Percentile) £55,000 £62,000 £60,000
Median % change year-on-year -11.29% +3.33% +9.09%
75th Percentile £72,500 £82,500 £80,000
90th Percentile £92,500 £100,000 £96,250
UK excluding London median annual salary £50,000 £55,000 £52,500
% change year-on-year -9.09% +4.76% +9.38%

Incident Response
Job Vacancy Trend

Job postings citing Incident Response as a proportion of all IT jobs advertised.

Job vacancy trend for Incident Response in the UK

Incident Response
Salary Trend

3-month moving average salary quoted in jobs citing Incident Response.

Salary trend for Incident Response in the UK

Incident Response
Salary Histogram

Salary distribution for jobs citing Incident Response over the 6 months to 27 April 2024.

Salary histogram for Incident Response in the UK

Incident Response
Top 19 Job Locations

The table below looks at the demand and provides a guide to the median salaries quoted in IT jobs citing Incident Response within the UK over the 6 months to 27 April 2024. The 'Rank Change' column provides an indication of the change in demand within each location based on the same 6 month period last year.

Location Rank Change
on Same Period
Last Year
Matching
Permanent
IT Job Ads
Median Salary
Past 6 Months
Median Salary
% Change
on Same Period
Last Year
Live
Jobs
England +110 841 £62,500 -3.85% 353
UK excluding London +68 591 £55,000 +4.76% 259
Work from Home +3 329 £70,000 +12.00% 109
London +88 312 £75,000 +7.14% 92
North of England +151 198 £52,084 -13.19% 97
North West +90 133 £52,084 -13.19% 68
Midlands +16 121 £60,000 +20.00% 39
South East -3 108 £62,500 +13.64% 62
West Midlands +44 92 £60,000 +9.09% 27
South West +53 78 £50,000 - 27
Yorkshire +118 56 £60,000 -6.25% 23
Scotland -60 46 £67,500 +28.57% 11
East Midlands -25 29 £65,000 +36.84% 12
East of England +4 15 £50,000 -2.44% 20
Wales +1 14 £62,500 +13.64% 3
North East +4 9 £70,000 +3.70% 6
Isle of Man -14 8 £46,500 +3.33% 1
Northern Ireland +22 2 - - 2
Channel Islands - 1 £100,000 -

Incident Response
Co-occurring Skills and Capabilities by Category

The follow tables expand on the table above by listing co-occurrences grouped by category. The same employment type, locality and period is covered with up to 20 co-occurrences shown in each of the following categories:

Application Platforms
1 20 (2.10%) Microsoft Exchange
2 15 (1.57%) SharePoint
3 9 (0.94%) IIS
4 6 (0.63%) Apache
5 1 (0.10%) Confluence
5 1 (0.10%) nginx
Applications
1 55 (5.77%) Microsoft Office
2 39 (4.09%) Microsoft Excel
3 38 (3.98%) Microsoft PowerPoint
4 3 (0.31%) Microsoft Project
4 3 (0.31%) MS Visio
Business Applications
1 6 (0.63%) Dynamics CRM
2 1 (0.10%) Payment Gateway
2 1 (0.10%) SAP S/4HANA
Cloud Services
1 261 (27.36%) Azure
2 153 (16.04%) Microsoft 365
3 130 (13.63%) AWS
4 65 (6.81%) SaaS
5 42 (4.40%) Azure Sentinel
6 34 (3.56%) GCP
7 22 (2.31%) Entra ID
8 19 (1.99%) PaaS
9 18 (1.89%) IaaS
10 14 (1.47%) Cloud Computing
11 11 (1.15%) Amazon CloudWatch
11 11 (1.15%) Power Platform
12 10 (1.05%) Amazon S3
13 9 (0.94%) Amazon ECS
13 9 (0.94%) Amazon GuardDuty
13 9 (0.94%) AWS CloudTrail
13 9 (0.94%) Serverless
14 8 (0.84%) Cloudflare
15 7 (0.73%) AWS CloudFormation
16 6 (0.63%) Mimecast
Communications & Networking
1 241 (25.26%) Firewall
2 85 (8.91%) Intrusion Detection
3 59 (6.18%) Network Security
4 45 (4.72%) TCP/IP
5 33 (3.46%) VPN
6 31 (3.25%) Internet
7 20 (2.10%) DNS
8 18 (1.89%) LAN
8 18 (1.89%) WAN
9 13 (1.36%) SAN
10 12 (1.26%) Wireshark
11 7 (0.73%) HTTP
11 7 (0.73%) SMTP
12 6 (0.63%) DHCP
13 5 (0.52%) SSL
13 5 (0.52%) VLAN
14 4 (0.42%) DMZ
14 4 (0.42%) NetScaler
14 4 (0.42%) Wireless
14 4 (0.42%) Wireless Security
Database & Business Intelligence
1 36 (3.77%) SQL Server
2 22 (2.31%) MySQL
3 16 (1.68%) RDBMS
3 16 (1.68%) Relational Database
4 13 (1.36%) MongoDB
5 12 (1.26%) BigQuery
5 12 (1.26%) Data Hub
5 12 (1.26%) DB2
5 12 (1.26%) Enterprise Data Warehouse
6 6 (0.63%) Amazon RDS
6 6 (0.63%) Azure SQL Database
6 6 (0.63%) SQL Server Reporting Services
7 4 (0.42%) PostgreSQL
7 4 (0.42%) Power BI
8 2 (0.21%) Metabase
8 2 (0.21%) Oracle Database
8 2 (0.21%) Redis
9 1 (0.10%) Hadoop
9 1 (0.10%) MariaDB
Development Applications
1 6 (0.63%) Burp Suite
1 6 (0.63%) Metasploit
1 6 (0.63%) Visual Studio
2 3 (0.31%) Jenkins
3 2 (0.21%) GitLab
3 2 (0.21%) JIRA
3 2 (0.21%) Snyk
3 2 (0.21%) sqlmap
4 1 (0.10%) Bitbucket
4 1 (0.10%) TeamCity
General
1 318 (33.33%) Social Skills
2 202 (21.17%) Finance
3 144 (15.09%) Analytical Skills
4 79 (8.28%) Legal
5 76 (7.97%) Law
6 50 (5.24%) Public Sector
7 43 (4.51%) Military
8 41 (4.30%) Banking
8 41 (4.30%) Manufacturing
9 26 (2.73%) Marketing
10 23 (2.41%) Inclusion and Diversity
11 21 (2.20%) Documentation Skills
11 21 (2.20%) Games
12 20 (2.10%) Presentation Skills
13 16 (1.68%) Spanish Language
14 15 (1.57%) Financial Institution
14 15 (1.57%) Retail
15 11 (1.15%) French Language
16 10 (1.05%) Influencing Skills
17 8 (0.84%) Pharmaceutical
Job Titles
1 264 (27.67%) Analyst
2 149 (15.62%) Security Analyst
3 139 (14.57%) Senior
4 87 (9.12%) Lead
5 86 (9.01%) Security Engineer
6 81 (8.49%) Cybersecurity Analyst
7 80 (8.39%) Senior Analyst
8 71 (7.44%) Security Manager
9 57 (5.97%) SOC Analyst
10 52 (5.45%) Consultant
11 48 (5.03%) Senior Security Analyst
12 46 (4.82%) IT Analyst
13 45 (4.72%) Architect
14 44 (4.61%) Security Consultant
15 40 (4.19%) IT Security Analyst
16 38 (3.98%) Security Architect
17 37 (3.88%) Security Specialist
18 35 (3.67%) Incident Manager
19 33 (3.46%) Cybersecurity Consultant
20 32 (3.35%) Information Manager
Libraries, Frameworks & Software Standards
1 15 (1.57%) .NET
2 9 (0.94%) Web Services
3 8 (0.84%) Laravel
4 7 (0.73%) XML
5 6 (0.63%) .NET Framework
6 4 (0.42%) Kafka
6 4 (0.42%) Node.js
7 3 (0.31%) EDI
7 3 (0.31%) HTML
7 3 (0.31%) Vue
7 3 (0.31%) web3js
8 2 (0.21%) CSS
8 2 (0.21%) D3.js
8 2 (0.21%) React
8 2 (0.21%) Sass
9 1 (0.10%) JSON
9 1 (0.10%) OAuth
9 1 (0.10%) OAuth2
9 1 (0.10%) OpenID
9 1 (0.10%) REST
Miscellaneous
1 168 (17.61%) Cyber Threat
2 142 (14.88%) Management Information System
3 97 (10.17%) Cyberattack
3 97 (10.17%) Security Posture
4 75 (7.86%) Security Operations Centre
5 65 (6.81%) Operational Technology
6 40 (4.19%) Cyber Kill Chain
7 39 (4.09%) Driving Licence
8 33 (3.46%) Industrial Internet of Things
9 25 (2.62%) Public Cloud
10 24 (2.52%) Cyber Defence
11 21 (2.20%) Analytical Mindset
12 20 (2.10%) Data Centre
13 19 (1.99%) Client/Server
14 16 (1.68%) SCADA
15 13 (1.36%) Cloud Security Posture
16 12 (1.26%) Cloud Native
16 12 (1.26%) Data Fabric
17 11 (1.15%) Data Protection Act
18 8 (0.84%) Self-Motivation
Operating Systems
1 200 (20.96%) Windows
2 122 (12.79%) Linux
3 54 (5.66%) Unix
4 45 (4.72%) Windows Server
5 18 (1.89%) Mac OS X
6 16 (1.68%) zOS
7 10 (1.05%) Kali Linux
8 8 (0.84%) Ubuntu
9 7 (0.73%) Windows Server 2012
10 5 (0.52%) Windows 10
10 5 (0.52%) Windows Server 2016
11 4 (0.42%) CentOS
11 4 (0.42%) Solaris
12 3 (0.31%) Mac OS
13 2 (0.21%) Apple iOS
13 2 (0.21%) Windows 7
14 1 (0.10%) AIX
14 1 (0.10%) Android
14 1 (0.10%) Data ONTAP
14 1 (0.10%) Windows Server 2019
Processes & Methodologies
1 664 (69.60%) Cybersecurity
2 284 (29.77%) Information Security
3 279 (29.25%) Security Operations
4 253 (26.52%) SIEM
5 196 (20.55%) Problem-Solving
6 173 (18.13%) Incident Management
7 170 (17.82%) Threat Intelligence
8 164 (17.19%) Cyber Threat Intelligence
9 153 (16.04%) Risk Management
10 146 (15.30%) Vulnerability Management
11 102 (10.69%) Computer Science
12 100 (10.48%) Penetration Testing
13 97 (10.17%) Cloud Security
14 95 (9.96%) Disaster Recovery
15 82 (8.60%) Vulnerability Assessment
16 81 (8.49%) Change Management
17 76 (7.97%) Security Architecture
18 75 (7.86%) ITIL
19 72 (7.55%) Roadmaps
20 70 (7.34%) Service Delivery
Programming Languages
1 66 (6.92%) PowerShell
2 61 (6.39%) Python
3 29 (3.04%) SQL
4 27 (2.83%) Bash
5 13 (1.36%) C#
6 11 (1.15%) Java
6 11 (1.15%) PHP
7 8 (0.84%) JavaScript
7 8 (0.84%) Rust
8 6 (0.63%) T-SQL
9 5 (0.52%) C++
10 3 (0.31%) Go
11 2 (0.21%) Kusto Query Language
11 2 (0.21%) Lisp
11 2 (0.21%) Shell Script
12 1 (0.10%) Ruby
12 1 (0.10%) TypeScript
Qualifications
1 265 (27.78%) Degree
2 261 (27.36%) CISSP
3 143 (14.99%) CISM
4 113 (11.84%) Security Cleared
5 61 (6.39%) Cisco Certification
6 55 (5.77%) Computer Science Degree
6 55 (5.77%) SC Cleared
7 54 (5.66%) CEH
8 50 (5.24%) CompTIA Security+
9 45 (4.72%) GIAC
10 42 (4.40%) (ISC)2 CCSP
11 40 (4.19%) CISA
12 37 (3.88%) CCSP
13 35 (3.67%) Master's Degree
14 26 (2.73%) CREST Certified
15 24 (2.52%) GCIH
16 22 (2.31%) OSCP
17 21 (2.20%) AWS Certification
18 20 (2.10%) GCIA
19 19 (1.99%) Microsoft Certification
Quality Assurance & Compliance
1 245 (25.68%) ISO/IEC 27001
2 142 (14.88%) NIST
3 98 (10.27%) Cyber Essentials
4 73 (7.65%) GDPR
5 62 (6.50%) PCI DSS
6 41 (4.30%) ISO 9001
7 40 (4.19%) ISO/IEC 27002 (supersedes ISO/IEC 17799)
8 39 (4.09%) ISO/IEC 17025
9 36 (3.77%) GRC
10 35 (3.67%) NCSC
11 20 (2.10%) JSP 440
12 17 (1.78%) Cyber Essentials PLUS
13 11 (1.15%) SLA
14 9 (0.94%) Accessibility
15 8 (0.84%) QA
16 7 (0.73%) COBIT
16 7 (0.73%) HIPAA
16 7 (0.73%) Sarbanes-Oxley
16 7 (0.73%) SOC 2
17 6 (0.63%) NIST 800
System Software
1 75 (7.86%) Active Directory
2 29 (3.04%) VMware Infrastructure
3 13 (1.36%) Hyper-V
4 9 (0.94%) Docker
5 5 (0.52%) VMware NSX
6 3 (0.31%) Terminal Services
6 3 (0.31%) Virtual Machines
6 3 (0.31%) VMware ESXi
7 2 (0.21%) Virtual Servers
8 1 (0.10%) BitLocker
8 1 (0.10%) Virtual Desktop
8 1 (0.10%) XenApp
Systems Management
1 37 (3.88%) EnCase
2 23 (2.41%) QRadar
3 18 (1.89%) CSIRT
4 17 (1.78%) Terraform
5 16 (1.68%) Microsoft Intune
6 12 (1.26%) Kubernetes
7 9 (0.94%) CASB
7 9 (0.94%) Single Sign-On
8 8 (0.84%) SCCM
9 7 (0.73%) Ansible
10 5 (0.52%) Nmap
11 4 (0.42%) Cacti
11 4 (0.42%) Computer Emergency Response Teams
12 3 (0.31%) Nessus
12 3 (0.31%) Prometheus
12 3 (0.31%) SELinux
12 3 (0.31%) Suricata
13 2 (0.21%) Data Guard
13 2 (0.21%) Grafana
13 2 (0.21%) Host Intrusion Detection System
Vendors
1 295 (30.92%) Microsoft
2 54 (5.66%) VMware
3 39 (4.09%) Dell
4 38 (3.98%) Splunk
5 35 (3.67%) Oracle
6 33 (3.46%) Qualys
7 26 (2.73%) Cisco
7 26 (2.73%) CrowdStrike
8 18 (1.89%) IBM
9 14 (1.47%) Darktrace
9 14 (1.47%) Google
10 13 (1.36%) Databricks
11 12 (1.26%) Citrix
11 12 (1.26%) F5
11 12 (1.26%) ServiceNow
12 10 (1.05%) Sun
13 9 (0.94%) Datto
14 8 (0.84%) CyberArk
14 8 (0.84%) Veeam
14 8 (0.84%) Xero