SIEM Engineer Contract Job Trends in the City of London

SIEM Engineer
Central London > City of London

The median SIEM Engineer daily rate in the City of London is £700, according to job vacancies posted in the 6 months leading up to 23 December 2025.

The table below compares current contractor rates and summary statistics with the previous two years.

6 months to
23 Dec 2025
Same period 2024 Same period 2023
Rank 126 - 131
Rank change year-on-year - - -
Contract jobs requiring a SIEM Engineer 2 0 4
As % of all contract jobs in the City of London 0.11% - 0.16%
As % of the Job Titles category 0.12% - 0.17%
Number of daily rates quoted 2 0 3
10th Percentile £639 - £675
25th Percentile £653 - £713
Median daily rate (50th Percentile) £700 - £850
75th Percentile £743 - £925
90th Percentile £753 - -
Central London median daily rate £700 £550 £850
% change year-on-year +27.27% -35.29% +30.77%

All Contract IT Job Vacancies
City of London

For comparison with the information above, the following table provides summary statistics for all contract IT job vacancies in the City of London. Most job vacancies include a discernible job title that can be normalized. As such, the figures in the second row provide an indication of the number of contract jobs in our overall sample.

Contract vacancies in the City of London with a recognized job title 1,722 1,912 2,358
% of contract IT jobs with a recognized job title 93.54% 93.00% 94.02%
Number of daily rates quoted 1,206 1,174 1,695
10th Percentile £325 £363 £350
25th Percentile £420 £463 £459
Median daily rate (50th Percentile) £540 £575 £575
Median % change year-on-year -6.09% - -
75th Percentile £675 £683 £688
90th Percentile £775 £788 £800
Central London median daily rate £543 £575 £566
% change year-on-year -5.65% +1.59% -1.57%
Number of hourly rates quoted 16 13 13
10th Percentile £19.98 £15.60 £17.00
25th Percentile £24.36 £22.00 £18.93
Median hourly rate £31.00 £57.50 £25.00
Median % change year-on-year -46.09% +130.00% -28.57%
75th Percentile £43.33 £112.00 £46.75
90th Percentile £55.25 £132.40 £68.75
Central London median hourly rate £26.11 £35.00 £25.00
% change year-on-year -25.40% +40.00% -23.08%

SIEM Engineer
Job Vacancy Trend in the City of London

Historical trend showing the proportion of contract IT job postings featuring 'SIEM Engineer' in the job title relative to all contract IT jobs advertised in the City of London.

SIEM Engineer job vacancy trend in the City of London

SIEM Engineer
Daily Rate Trend in the City of London

Contractor daily rate distribution trend for SIEM Engineer job vacancies in the City of London.

Contractor daily rate distribution trend for SIEM Engineer job vacancies in the City of London

SIEM Engineer Skill Set
Top 30 Co-Occurring Skills & Capabilities in the City of London

For the 6 months to 23 December 2025, SIEM Engineer contract job roles required the following skills and capabilities in order of popularity. The figures indicate the absolute number of co-occurrences and as a proportion of all contract job ads across the City of London region featuring SIEM Engineer in the job title.

1 2 (100.00%) Incident Response
1 2 (100.00%) NIST
1 2 (100.00%) SIEM
1 2 (100.00%) Threat Detection
1 2 (100.00%) Use Case
2 1 (50.00%) (ISC)2 CCSP
2 1 (50.00%) Active Directory
2 1 (50.00%) Analytics
2 1 (50.00%) AWS
2 1 (50.00%) Azure
2 1 (50.00%) Azure Sentinel
2 1 (50.00%) Cisco Certification
2 1 (50.00%) CISSP
2 1 (50.00%) CompTIA Security+
2 1 (50.00%) Cyber Resilience
2 1 (50.00%) Cybersecurity
2 1 (50.00%) Data Loss Prevention
2 1 (50.00%) DV Cleared
2 1 (50.00%) Firewall
2 1 (50.00%) GCFA
2 1 (50.00%) GCIA
2 1 (50.00%) GCIH
2 1 (50.00%) GCP
2 1 (50.00%) ISO/IEC 27001
2 1 (50.00%) Kalman Filter
2 1 (50.00%) Kusto Query Language
2 1 (50.00%) Linux
2 1 (50.00%) Microsoft
2 1 (50.00%) MITRE ATT&CK
2 1 (50.00%) Operational Acceptance Criteria

SIEM Engineer Skill Set
Co-Occurring Skills & Capabilities in the City of London by Category

The following tables expand on the one above by listing co-occurrences grouped by category. They cover the same employment type, locality and period, with up to 20 co-occurrences shown in each category:

Cloud Services
1 1 (50.00%) AWS
1 1 (50.00%) Azure
1 1 (50.00%) Azure Sentinel
1 1 (50.00%) GCP
Communications & Networking
1 1 (50.00%) Firewall
Libraries, Frameworks & Software Standards
1 1 (50.00%) YAML
Miscellaneous
1 1 (50.00%) Cyber Kill Chain
1 1 (50.00%) Cyber Threat
1 1 (50.00%) Onboarding
1 1 (50.00%) STIX
1 1 (50.00%) YARA
Operating Systems
1 1 (50.00%) Linux
1 1 (50.00%) Windows
Processes & Methodologies
1 2 (100.00%) Incident Response
1 2 (100.00%) SIEM
1 2 (100.00%) Threat Detection
1 2 (100.00%) Use Case
2 1 (50.00%) Analytics
2 1 (50.00%) Cyber Resilience
2 1 (50.00%) Cybersecurity
2 1 (50.00%) Data Loss Prevention
2 1 (50.00%) Kalman Filter
2 1 (50.00%) MITRE ATT&CK
2 1 (50.00%) Operational Acceptance Criteria
2 1 (50.00%) Protective Monitoring
2 1 (50.00%) Purple Team
2 1 (50.00%) Red Team
2 1 (50.00%) Security Monitoring
2 1 (50.00%) Security Operations
2 1 (50.00%) SOAR
2 1 (50.00%) Threat Intelligence
Programming Languages
1 1 (50.00%) Kusto Query Language
1 1 (50.00%) PowerShell
1 1 (50.00%) Python
Qualifications
1 1 (50.00%) (ISC)2 CCSP
1 1 (50.00%) Cisco Certification
1 1 (50.00%) CISSP
1 1 (50.00%) CompTIA Security+
1 1 (50.00%) DV Cleared
1 1 (50.00%) GCFA
1 1 (50.00%) GCIA
1 1 (50.00%) GCIH
1 1 (50.00%) SC Cleared
1 1 (50.00%) Security Cleared
Quality Assurance & Compliance
1 2 (100.00%) NIST
2 1 (50.00%) ISO/IEC 27001
System Software
1 1 (50.00%) Active Directory
Vendors
1 1 (50.00%) Microsoft
1 1 (50.00%) Splunk