The following table provides summary statistics for contract job vacancies advertised in the City of London with a requirement for Penetration Testing skills. Included is a benchmarking guide to the contractor rates offered in vacancies that have cited Penetration Testing over the 3 months to 28 June 2017 with a comparison to the same period in the previous 2 years.

Note that daily and hourly rates are treated separately in these statistics. When calculating contractor rate percentiles, daily rates are never derived from quoted hourly rates or vice versa.

Penetration Testing
London / City of London
3 months to
28 Jun 2017
Same period 2016 Same period 2015
Rank 156 161 198
Rank change year-on-year +5 +37  
Contract jobs citing Penetration Testing 10 4 7
As % of all contract IT jobs advertised in the City of London 0.31% 0.12% 0.12%
As % of the Processes & Methodologies category 0.35% 0.14% 0.15%
Number of daily rates quoted 9 2 6
Median daily rate £550 £431 £388
Median daily rate % change year-on-year +27.53% +11.29%  
90% offered a daily rate of more than £390 £383 £255
10% offered a daily rate of more than £825 £464 £563
UK excluding London median daily rate £490 £475 £400
% change year-on-year +3.15% +18.75%  
Number of hourly rates quoted 0 0 0
Median hourly rate - - -
UK excluding London median hourly rate £60.00 - £45.00

Penetration Testing is in the process and methodology skills category. The next table is for comparison with the above and provides summary statistics for all contract job vacancies advertised in the City of London with a requirement for process and methodology skills.

Contract Process & Methodology Skills
City of London
Contract job vacancies with a requirement for process and methodology skills 2879 2886 4657
As % of all contract IT job vacancies advertised in the City of London 88.23% 85.71% 81.12%
Number of daily rates quoted 8879 9203 12866
Median daily rate £500 £475 £465
Median daily rate % change year-on-year +5.26% +2.15%  
90% offered a daily rate of more than £340 £319 £313
10% offered a daily rate of more than £675 £656 £650
UK excluding London median daily rate £415 £400 £380
% change year-on-year +3.75% +5.26%  
Number of hourly rates quoted 55 90 126
Median hourly rate £20.00 £19.00 £24.50
Median hourly rate % change year-on-year +5.26% -22.44%  
90% offered a hourly rate of more than £14.00 £11.25 £14.71
10% offered a hourly rate of more than £43.00 £34.53 £55.75
UK excluding London median hourly rate £34.00 £28.50 £30.00
% change year-on-year +19.29% -5.00%  

Penetration Testing
Job Vacancy Trend in the City of London

Job postings citing Penetration Testing as a percentage of all IT jobs advertised in the City of London.

Job vacancy trend for Penetration Testing in the City of London

Penetration Testing
Contractor Daily Rate Trend in the City of London

This chart provides the 3-month moving average for daily rates quoted in contract jobs citing Penetration Testing in the City of London.

Contractor daily rate trend for Penetration Testing in the City of London

Penetration Testing
Contractor Daily Rate Histogram in the City of London

The daily rate distribution of IT jobs citing Penetration Testing in the City of London over the 3 months to 28 June 2017.

Contractor daily rate histogram for Penetration Testing in the City of London

For the 6 months to 28 June 2017, IT contractor jobs citing Penetration Testing also mentioned the following skills in order of popularity. The figures indicate the number co-occurrences and its proportion to all contract ads across the City of London region with a requirement for Penetration Testing.

1 7 (43.75%) Cybersecurity
2 6 (37.50%) Security Cleared
2 6 (37.50%) Information Security
2 6 (37.50%) Agile Software Development
3 5 (31.25%) Finance
4 4 (25.00%) Ethical Hacking
4 4 (25.00%) CEH
4 4 (25.00%) Linux
4 4 (25.00%) ISO/IEC 27001
4 4 (25.00%) Network Security
4 4 (25.00%) SC Cleared
4 4 (25.00%) Static Code Analysis
4 4 (25.00%) SDLC
4 4 (25.00%) Cyberthreat
4 4 (25.00%) CREST Certified
5 3 (18.75%) SANS
5 3 (18.75%) Vulnerability Management
5 3 (18.75%) Secure Coding
5 3 (18.75%) DevOps
5 3 (18.75%) SIEM
5 3 (18.75%) IaaS
5 3 (18.75%) Java
5 3 (18.75%) Windows
5 3 (18.75%) CISSP
5 3 (18.75%) PKI
5 3 (18.75%) CESG
6 2 (12.50%) Data Security
6 2 (12.50%) VMware
6 2 (12.50%) Risk Assessment
6 2 (12.50%) Nessus

Penetration Testing
Co-occurring IT Skills in the City of London by Category

The follow tables expand on the table above by listing co-occurrences grouped by category. The same job type, locality and period is covered with up to 20 co-occurrences shown in each of the following categories:

Application Platforms
1 1 (6.25%) nginx
Cloud Services
1 3 (18.75%) IaaS
2 2 (12.50%) PaaS
2 2 (12.50%) SaaS
3 1 (6.25%) Amazon AWS
Communications & Networking
1 4 (25.00%) Network Security
2 2 (12.50%) DMZ
2 2 (12.50%) HTTP
3 1 (6.25%) Firewall
3 1 (6.25%) HTTPS
3 1 (6.25%) IPsec
3 1 (6.25%) TCP/IP
Database & Business Intelligence
1 1 (6.25%) MongoDB
1 1 (6.25%) PostgreSQL
Development Applications
1 1 (6.25%) IDA Disassembler
General
1 5 (31.25%) Finance
2 2 (12.50%) Financial Institution
Job Titles
1 3 (18.75%) Analyst
1 3 (18.75%) Penetration Tester
1 3 (18.75%) Tester
2 2 (12.50%) Architect
2 2 (12.50%) Business Analyst
2 2 (12.50%) Cybersecurity Architect
2 2 (12.50%) Data Analyst
2 2 (12.50%) Data Business Analyst
2 2 (12.50%) Security Architect
2 2 (12.50%) Security Engineer
2 2 (12.50%) Security Manager
3 1 (6.25%) Applications Engineer
3 1 (6.25%) Cybersecurity Analyst
3 1 (6.25%) Ethical Hacker
3 1 (6.25%) Operations Engineer
3 1 (6.25%) Security Penetration Tester
3 1 (6.25%) Security Tester
3 1 (6.25%) Senior Data Warehouse Specialist
3 1 (6.25%) Senior Security Specialist
3 1 (6.25%) Web Team Leader
Libraries, Frameworks & Software Standards
1 2 (12.50%) .NET
2 1 (6.25%) Elastic Stack
2 1 (6.25%) Web Services
Miscellaneous
1 4 (25.00%) Cyberthreat
2 3 (18.75%) CESG
2 3 (18.75%) PKI
3 2 (12.50%) Analytical Skills
3 2 (12.50%) Cyber Defence
3 2 (12.50%) Fintech
3 2 (12.50%) Hedge funds
4 1 (6.25%) Greenfield Project
4 1 (6.25%) Management Information System
4 1 (6.25%) Mobile App
Operating Systems
1 4 (25.00%) Linux
2 3 (18.75%) Windows
3 1 (6.25%) Unix
Processes & Methodologies
1 7 (43.75%) Cybersecurity
2 6 (37.50%) Agile Software Development
2 6 (37.50%) Information Security
3 4 (25.00%) Ethical Hacking
3 4 (25.00%) SDLC
3 4 (25.00%) Static Code Analysis
4 3 (18.75%) DevOps
4 3 (18.75%) Secure Coding
4 3 (18.75%) SIEM
4 3 (18.75%) Vulnerability Management
5 2 (12.50%) Analytics
5 2 (12.50%) BDD
5 2 (12.50%) Black-Box Testing
5 2 (12.50%) Coaching
5 2 (12.50%) Malware Analysis
5 2 (12.50%) Malware Detection/Protection
5 2 (12.50%) Risk Assessment
5 2 (12.50%) SABSA
5 2 (12.50%) Security Architecture
5 2 (12.50%) Waterfall
Programming Languages
1 3 (18.75%) Java
2 2 (12.50%) Python
2 2 (12.50%) Ruby
3 1 (6.25%) Assembly Language
3 1 (6.25%) Bash Shell
3 1 (6.25%) C
3 1 (6.25%) C#
3 1 (6.25%) C++
3 1 (6.25%) C-shell
3 1 (6.25%) Korn
3 1 (6.25%) PHP
3 1 (6.25%) SQL
Qualifications
1 6 (37.50%) Security Cleared
2 4 (25.00%) CEH
2 4 (25.00%) CREST Certified
2 4 (25.00%) SC Cleared
3 3 (18.75%) CISSP
3 3 (18.75%) SANS
4 2 (12.50%) CISM
5 1 (6.25%) CHECK Team Leader
5 1 (6.25%) CHECK Team Member
5 1 (6.25%) Degree
5 1 (6.25%) DV Cleared
5 1 (6.25%) GIAC
5 1 (6.25%) MAPM
Quality Assurance & Compliance
1 4 (25.00%) ISO/IEC 27001
2 2 (12.50%) COBIT
2 2 (12.50%) Cyber Essentials
2 2 (12.50%) PCI DSS
Systems Management
1 2 (12.50%) Nessus
2 1 (6.25%) HP Fortify
2 1 (6.25%) Opscode Chef
2 1 (6.25%) Puppet
Vendors
1 2 (12.50%) Bloomberg
1 2 (12.50%) CheckPoint
1 2 (12.50%) Citrix
1 2 (12.50%) Microsoft
1 2 (12.50%) Oracle
1 2 (12.50%) Qualys
1 2 (12.50%) SAP
1 2 (12.50%) VMware
1 2 (12.50%) WorldPay
2 1 (6.25%) ArcSight
2 1 (6.25%) HP
2 1 (6.25%) Splunk