MITRE ATT&CK
UK

The following table provides summary statistics for permanent job vacancies with a requirement for MITRE ATT&CK skills. Included is a benchmarking guide to the salaries offered in vacancies that have cited MITRE ATT&CK over the 6 months to 9 May 2024 with a comparison to the same period in the previous 2 years.

6 months to
9 May 2024
Same period 2023 Same period 2022
Rank 766 711 952
Rank change year-on-year -55 +241 -124
Permanent jobs citing MITRE ATT&CK 136 265 278
As % of all permanent jobs advertised in the UK 0.14% 0.26% 0.18%
As % of the Processes & Methodologies category 0.16% 0.27% 0.19%
Number of salaries quoted 105 154 217
10th Percentile £47,000 £39,611 £49,700
25th Percentile £47,500 £55,000 £57,500
Median annual salary (50th Percentile) £65,000 £65,000 £65,000
Median % change year-on-year - - +4.00%
75th Percentile £75,000 £81,250 £82,500
90th Percentile £91,991 £103,750 £100,000
UK excluding London median annual salary £47,000 £60,000 £65,000
% change year-on-year -21.67% -7.69% +4.00%

All Process and Methodology Skills
UK

MITRE ATT&CK is in the Processes and Methodologies category. The following table is for comparison with the above and provides summary statistics for all permanent job vacancies with a requirement for process or methodology skills.

Permanent vacancies with a requirement for process or methodology skills 84,809 96,894 150,102
As % of all permanent jobs advertised in the UK 85.57% 95.61% 95.67%
Number of salaries quoted 59,843 56,945 82,179
10th Percentile £29,000 £34,000 £33,500
25th Percentile £40,000 £45,000 £43,750
Median annual salary (50th Percentile) £55,000 £61,180 £60,000
Median % change year-on-year -10.10% +1.97% +9.09%
75th Percentile £72,500 £81,250 £80,000
90th Percentile £92,500 £100,000 £96,550
UK excluding London median annual salary £50,000 £55,000 £52,500
% change year-on-year -9.09% +4.76% +9.38%

MITRE ATT&CK
Job Vacancy Trend

Job postings citing MITRE ATT&CK as a proportion of all IT jobs advertised.

Job vacancy trend for MITRE ATT&CK in the UK

MITRE ATT&CK
Salary Trend

3-month moving average salary quoted in jobs citing MITRE ATT&CK.

Salary trend for MITRE ATT&CK in the UK

MITRE ATT&CK
Salary Histogram

Salary distribution for jobs citing MITRE ATT&CK over the 6 months to 9 May 2024.

Salary histogram for MITRE ATT&CK in the UK

MITRE ATT&CK
Top 13 Job Locations

The table below looks at the demand and provides a guide to the median salaries quoted in IT jobs citing MITRE ATT&CK within the UK over the 6 months to 9 May 2024. The 'Rank Change' column provides an indication of the change in demand within each location based on the same 6 month period last year.

Location Rank Change
on Same Period
Last Year
Matching
Permanent
IT Job Ads
Median Salary
Past 6 Months
Median Salary
% Change
on Same Period
Last Year
Live
Jobs
England -15 111 £65,000 +1.96% 25
Work from Home +59 72 £59,000 -13.24% 5
UK excluding London -1 68 £47,000 -21.67% 11
London 0 57 £69,250 +1.84% 11
South East +4 19 £52,875 +5.75% 1
Scotland -54 18 £47,000 +16.46% 1
North of England +41 17 £47,000 -21.67% 3
North West +2 16 £47,000 -21.67% 1
South West -14 10 £78,750 +95.14% 4
Midlands -17 3 £70,000 +2.94% 1
West Midlands +4 2 £70,000 +2.94% 1
Yorkshire +89 1 £62,500 +4.17% 2
East of England +18 1 £60,000 -14.29% 1

MITRE ATT&CK
Co-occurring Skills and Capabilities by Category

The follow tables expand on the table above by listing co-occurrences grouped by category. The same employment type, locality and period is covered with up to 20 co-occurrences shown in each of the following categories:

Application Platforms
1 6 (4.41%) Microsoft Exchange
2 1 (0.74%) SharePoint
Applications
1 7 (5.15%) Microsoft Office
2 1 (0.74%) Microsoft Excel
2 1 (0.74%) MS Visio
Cloud Services
1 75 (55.15%) Azure
2 43 (31.62%) Microsoft 365
3 16 (11.76%) AWS
3 16 (11.76%) IaaS
3 16 (11.76%) SaaS
4 14 (10.29%) PaaS
5 11 (8.09%) Entra ID
6 8 (5.88%) GCP
7 7 (5.15%) Azure Sentinel
8 6 (4.41%) Azure Service Fabric
9 4 (2.94%) Amazon S3
10 3 (2.21%) Azure AKS
10 3 (2.21%) Google Kubernetes Engine
11 2 (1.47%) Power Platform
12 1 (0.74%) Cloud Computing
Communications & Networking
1 31 (22.79%) Firewall
2 28 (20.59%) DNS
3 26 (19.12%) DKIM
3 26 (19.12%) DMARC
3 26 (19.12%) Internet
4 10 (7.35%) Wireshark
5 9 (6.62%) Intrusion Detection
6 8 (5.88%) Network Security
7 7 (5.15%) TCP/IP
8 4 (2.94%) HTTP
8 4 (2.94%) SMTP
8 4 (2.94%) SSL
9 2 (1.47%) 802.11
9 2 (1.47%) Bluetooth
9 2 (1.47%) ZigBee
10 1 (0.74%) Cisco IPT
10 1 (0.74%) LAN
10 1 (0.74%) tcpdump
10 1 (0.74%) WAN
Database & Business Intelligence
1 6 (4.41%) Azure SQL Database
2 4 (2.94%) SQL Server
3 2 (1.47%) Power BI
4 1 (0.74%) Hadoop
Development Applications
1 8 (5.88%) Metasploit
2 5 (3.68%) Burp Suite
General
1 41 (30.15%) Finance
2 37 (27.21%) Social Skills
3 11 (8.09%) Law
4 10 (7.35%) Analytical Skills
4 10 (7.35%) Inclusion and Diversity
5 9 (6.62%) Legal
6 8 (5.88%) Banking
7 7 (5.15%) Marketing
8 6 (4.41%) Games
9 4 (2.94%) Presentation Skills
10 3 (2.21%) Manufacturing
10 3 (2.21%) Public Sector
10 3 (2.21%) Retail Banking
11 2 (1.47%) Cyber-Physical System
11 2 (1.47%) Organisational Skills
11 2 (1.47%) Retail
12 1 (0.74%) Automotive
12 1 (0.74%) Financial Institution
12 1 (0.74%) Telecoms
Job Titles
1 68 (50.00%) Analyst
2 60 (44.12%) Security Analyst
3 27 (19.85%) Information Analyst
3 27 (19.85%) Information Security Analyst
4 22 (16.18%) Cybersecurity Analyst
4 22 (16.18%) Senior
5 16 (11.76%) Architect
6 15 (11.03%) Lead
7 11 (8.09%) Security Engineer
7 11 (8.09%) Senior Analyst
8 10 (7.35%) Security Manager
8 10 (7.35%) Senior Security Analyst
9 7 (5.15%) IT Analyst
9 7 (5.15%) IT Security Analyst
9 7 (5.15%) Lead Architect
9 7 (5.15%) SOC Manager
10 6 (4.41%) Email Analyst
10 6 (4.41%) SOC Engineer
10 6 (4.41%) Vulnerability Analyst
10 6 (4.41%) Vulnerability Management Analyst
Libraries, Frameworks & Software Standards
1 12 (8.82%) REST
2 10 (7.35%) OAuth
2 10 (7.35%) SAML
3 6 (4.41%) SOAP
3 6 (4.41%) Web Services
4 4 (2.94%) Kafka
5 2 (1.47%) 802.1X
Miscellaneous
1 51 (37.50%) Cyberattack
2 32 (23.53%) Cyber Threat
3 29 (21.32%) Cyber Kill Chain
4 20 (14.71%) Cyber Defence
4 20 (14.71%) Security Operations Centre
5 15 (11.03%) Management Information System
6 11 (8.09%) Public Cloud
7 9 (6.62%) Security Posture
8 6 (4.41%) Distributed Systems
9 5 (3.68%) Operational Technology
10 4 (2.94%) Insider Threat
10 4 (2.94%) SCADA
11 3 (2.21%) Cloud Native
11 3 (2.21%) Self-Motivation
12 2 (1.47%) CAN bus
12 2 (1.47%) IoT
12 2 (1.47%) NHS
13 1 (0.74%) Mobile App
13 1 (0.74%) PKI
13 1 (0.74%) Tandem
Operating Systems
1 11 (8.09%) Windows
2 7 (5.15%) Linux
3 5 (3.68%) Unix
4 4 (2.94%) CentOS
4 4 (2.94%) Solaris
4 4 (2.94%) Ubuntu
4 4 (2.94%) zOS
5 1 (0.74%) Mac OS X
Processes & Methodologies
1 79 (58.09%) Cybersecurity
2 77 (56.62%) SIEM
3 59 (43.38%) Information Security
4 58 (42.65%) Incident Response
5 57 (41.91%) Security Operations
6 47 (34.56%) Cloud Security
7 45 (33.09%) SOAR
8 41 (30.15%) Cyber Threat Intelligence
8 41 (30.15%) Threat Intelligence
9 40 (29.41%) Vulnerability Management
10 32 (23.53%) Vulnerability Remediation
11 27 (19.85%) Application Security
12 23 (16.91%) OWASP
13 21 (15.44%) Threat Modelling
14 19 (13.97%) Cyber Intelligence
15 18 (13.24%) Identity Access Management
16 17 (12.50%) Problem Management
17 16 (11.76%) Continuous Improvement
18 15 (11.03%) Change Management
19 14 (10.29%) Decision-Making
Programming Languages
1 7 (5.15%) SQL
2 3 (2.21%) Kusto Query Language
3 2 (1.47%) Python
4 1 (0.74%) Bash
4 1 (0.74%) C
4 1 (0.74%) Java
4 1 (0.74%) PowerShell
4 1 (0.74%) R
4 1 (0.74%) Scala
Qualifications
1 36 (26.47%) CISSP
2 28 (20.59%) CISM
3 24 (17.65%) GIAC
4 14 (10.29%) Degree
4 14 (10.29%) Security Cleared
5 11 (8.09%) SC Cleared
6 9 (6.62%) SANS
7 8 (5.88%) Computer Science Degree
8 7 (5.15%) CEH
8 7 (5.15%) DV Cleared
9 6 (4.41%) AWS Certified Cloud Practitioner
9 6 (4.41%) Master's Degree
10 5 (3.68%) (ISC)2 CCSP
10 5 (3.68%) CCSP
10 5 (3.68%) Cisco Certification
10 5 (3.68%) CREST Certified
10 5 (3.68%) CRISC
10 5 (3.68%) GCIH
10 5 (3.68%) GPEN
11 4 (2.94%) OSCP
Quality Assurance & Compliance
1 59 (43.38%) NIST
2 31 (22.79%) ISO/IEC 27001
3 20 (14.71%) NCSC
4 17 (12.50%) PCI DSS
5 14 (10.29%) GDPR
6 9 (6.62%) GRC
7 7 (5.15%) COBIT
8 6 (4.41%) ISO/IEC 27002 (supersedes ISO/IEC 17799)
8 6 (4.41%) Web Application Security Consortium
9 4 (2.94%) Cyber Essentials
9 4 (2.94%) Cyber Essentials PLUS
9 4 (2.94%) ISO 9001
10 3 (2.21%) SOC 2
11 2 (1.47%) ISO 31000
11 2 (1.47%) NIST 800
12 1 (0.74%) Actionable Recommendations
12 1 (0.74%) California Consumer Privacy Act
12 1 (0.74%) COSO
12 1 (0.74%) PSD2
12 1 (0.74%) Sarbanes-Oxley
System Software
1 4 (2.94%) Active Directory
2 3 (2.21%) Docker
3 2 (1.47%) Virtual Machines
4 1 (0.74%) Hyper-V
Systems Management
1 26 (19.12%) CASB
2 6 (4.41%) Computer Emergency Response Teams
2 6 (4.41%) CSIRT
2 6 (4.41%) Kubernetes
3 5 (3.68%) Nmap
4 4 (2.94%) Nessus
4 4 (2.94%) QRadar
4 4 (2.94%) Terraform
5 1 (0.74%) Microsoft Intune
Vendors
1 29 (21.32%) Microsoft
2 14 (10.29%) Qualys
3 10 (7.35%) Splunk
4 3 (2.21%) IBM
4 3 (2.21%) Intel
5 1 (0.74%) CrowdStrike
5 1 (0.74%) Darktrace
5 1 (0.74%) Netskope
5 1 (0.74%) Palo Alto
5 1 (0.74%) VMware
5 1 (0.74%) Zscaler