Incident Response Contracts in England

Incident Response
UK > England

The following table provides summary statistics for contract job vacancies advertised in England with a requirement for Incident Response skills. Included is a benchmarking guide to the contractor rates offered in vacancies that have cited Incident Response over the 6 months to 26 April 2024 with a comparison to the same period in the previous 2 years.

6 months to
26 Apr 2024
Same period 2023 Same period 2022
Rank 230 357 505
Rank change year-on-year +127 +148 -61
Contract jobs citing Incident Response 385 331 268
As % of all contract jobs advertised in England 1.04% 0.65% 0.38%
As % of the Processes & Methodologies category 1.20% 0.72% 0.42%
Number of daily rates quoted 278 254 206
10th Percentile £413 £382 £400
25th Percentile £453 £500 £495
Median daily rate (50th Percentile) £550 £586 £550
Median % change year-on-year -6.06% +6.45% -
75th Percentile £675 £733 £675
90th Percentile £750 £799 £791
UK median daily rate £567 £575 £550
% change year-on-year -1.39% +4.55% -
Number of hourly rates quoted 6 0 4
10th Percentile £35.06 - £15.86
25th Percentile - - £16.21
Median hourly rate £40.00 - £16.82
75th Percentile - - £17.33
90th Percentile - - £17.52
UK median hourly rate £40.00 - £17.23
% change year-on-year - - -60.62%

All Process and Methodology Skills
England

Incident Response is in the Processes and Methodologies category. The following table is for comparison with the above and provides summary statistics for all contract job vacancies advertised in England with a requirement for process or methodology skills.

Contract vacancies with a requirement for process or methodology skills 32,171 45,739 64,432
As % of all contract IT jobs advertised in England 86.55% 90.26% 90.74%
Number of daily rates quoted 21,096 32,069 45,706
10th Percentile £300 £325 £330
25th Percentile £413 £444 £425
Median daily rate (50th Percentile) £525 £550 £535
Median % change year-on-year -4.55% +2.80% +9.18%
75th Percentile £650 £675 £650
90th Percentile £750 £769 £744
UK median daily rate £525 £550 £525
% change year-on-year -4.55% +4.76% +8.25%
Number of hourly rates quoted 2,236 1,617 1,773
10th Percentile £12.89 £11.00 £12.50
25th Percentile £16.00 £16.38 £15.25
Median hourly rate £35.65 £37.50 £24.00
Median % change year-on-year -4.93% +56.25% -
75th Percentile £60.00 £65.00 £49.25
90th Percentile £72.50 £75.00 £63.23
UK median hourly rate £35.00 £37.00 £25.00
% change year-on-year -5.41% +48.00% -

Incident Response
Job Vacancy Trend in England

Job postings citing Incident Response as a proportion of all IT jobs advertised in England.

Job vacancy trend for Incident Response in England

Incident Response
Contractor Daily Rate Trend in England

3-month moving average daily rate quoted in jobs citing Incident Response in England.

Daily rate trend for Incident Response in England

Incident Response
Daily Rate Histogram in England

Daily rate distribution for jobs citing Incident Response in England over the 6 months to 26 April 2024.

Daily rate histogram for Incident Response in England

Incident Response
Contractor Hourly Rate Trend in England

3-month moving average hourly rates quoted in jobs citing Incident Response in England.

Hourly rate trend for Incident Response in England

Incident Response
Contract Job Locations in England

The table below looks at the demand and provides a guide to the median contractor rates quoted in IT jobs citing Incident Response within the England region over the 6 months to 26 April 2024. The 'Rank Change' column provides an indication of the change in demand within each location based on the same 6 month period last year.

Location Rank Change
on Same Period
Last Year
Matching
Contract
IT Job Ads
Median
Daily Rate
Past 6 Months
Median Daily Rate
% Change
on Same Period
Last Year
Live
Jobs
South West +107 107 £575 -8.00% 25
London +35 101 £544 -9.38% 90
South East +74 65 £482 -16.17% 62
North of England +22 49 £525 -4.55% 100
Midlands +41 42 £625 -3.85% 39
West Midlands +47 39 £630 -3.08% 27
Yorkshire +20 25 £582 +10.86% 23
East of England +10 25 £600 +51.90% 20
North West +16 24 £525 -4.55% 71
East Midlands +23 3 £567 -6.01% 12
Incident Response
UK

Incident Response
Co-occurring Skills and Capabilities in England by Category

The follow tables expand on the table above by listing co-occurrences grouped by category. The same employment type, locality and period is covered with up to 20 co-occurrences shown in each of the following categories:

Application Platforms
1 16 (4.16%) CMS
2 10 (2.60%) NetWeaver
3 4 (1.04%) Microsoft Exchange
4 2 (0.52%) Apache Spark
4 2 (0.52%) Confluence
4 2 (0.52%) nginx
5 1 (0.26%) IBM Notes
5 1 (0.26%) SharePoint
Applications
1 3 (0.78%) Microsoft Excel
2 1 (0.26%) Microsoft Office
2 1 (0.26%) Microsoft Project
2 1 (0.26%) Spreadsheet
Business Applications
1 10 (2.60%) SAP IBP
Cloud Services
1 73 (18.96%) Azure
2 41 (10.65%) AWS
3 28 (7.27%) Azure Sentinel
4 12 (3.12%) Microsoft 365
5 9 (2.34%) Entra ID
5 9 (2.34%) GCP
6 8 (2.08%) Virtual Private Cloud
7 6 (1.56%) AWS CloudTrail
7 6 (1.56%) Azure Monitor
7 6 (1.56%) Microsoft Purview
7 6 (1.56%) OpenShift
8 5 (1.30%) Amazon CloudWatch
8 5 (1.30%) Amazon S3
8 5 (1.30%) CloudFront
9 4 (1.04%) AWS CloudFormation
9 4 (1.04%) Google Kubernetes Engine
10 3 (0.78%) Mimecast
10 3 (0.78%) PaaS
11 2 (0.52%) GitHub
11 2 (0.52%) SaaS
Communications & Networking
1 48 (12.47%) Firewall
2 28 (7.27%) Network Security
3 17 (4.42%) Intrusion Detection
4 13 (3.38%) DNS
5 10 (2.60%) TCP/IP
6 9 (2.34%) VPN
7 5 (1.30%) HTTP
7 5 (1.30%) LAN
8 4 (1.04%) Cisco Nexus
8 4 (1.04%) DHCP
8 4 (1.04%) FTP
8 4 (1.04%) SMTP
8 4 (1.04%) SSL
8 4 (1.04%) WAN
9 2 (0.52%) Reverse Proxy
9 2 (0.52%) tcpdump
9 2 (0.52%) Wi-Fi
9 2 (0.52%) Wireshark
10 1 (0.26%) Cisco IOS
10 1 (0.26%) IP Telephony
Database & Business Intelligence
1 14 (3.64%) Elasticsearch
2 10 (2.60%) SAP BW
2 10 (2.60%) SAP HANA
3 6 (1.56%) PostgreSQL
4 4 (1.04%) Data Lake
4 4 (1.04%) MongoDB
5 3 (0.78%) Apache Hive
5 3 (0.78%) BigQuery
5 3 (0.78%) Hadoop
5 3 (0.78%) SQL Server
6 2 (0.52%) Big Data
6 2 (0.52%) Bigtable
6 2 (0.52%) Data Warehouse
6 2 (0.52%) DynamoDB
6 2 (0.52%) HBase
6 2 (0.52%) IBM BigInsights
6 2 (0.52%) NoSQL
6 2 (0.52%) Parquet
6 2 (0.52%) Power BI
6 2 (0.52%) Sqoop
Development Applications
1 13 (3.38%) JIRA
2 6 (1.56%) Jenkins
3 4 (1.04%) Git
4 2 (0.52%) GitLab
4 2 (0.52%) Liquibase
5 1 (0.26%) IDA Disassembler
5 1 (0.26%) Subversion
General
1 110 (28.57%) Social Skills
2 46 (11.95%) Analytical Skills
3 43 (11.17%) Finance
4 26 (6.75%) Public Sector
5 19 (4.94%) Banking
5 19 (4.94%) Legal
6 14 (3.64%) Telecoms
7 9 (2.34%) Law
8 8 (2.08%) Inclusion and Diversity
8 8 (2.08%) Retail
9 5 (1.30%) Financial Institution
10 4 (1.04%) Documentation Skills
11 3 (0.78%) Influencing Skills
11 3 (0.78%) Manufacturing
12 2 (0.52%) Advertising
12 2 (0.52%) Aerospace
12 2 (0.52%) Electronics
12 2 (0.52%) Games
12 2 (0.52%) Marketing
12 2 (0.52%) Retail Banking
Job Titles
1 132 (34.29%) Analyst
2 77 (20.00%) SOC Analyst
3 32 (8.31%) Lead
3 32 (8.31%) Senior
4 31 (8.05%) Security Engineer
5 30 (7.79%) Consultant
6 27 (7.01%) SOC Engineer
7 26 (6.75%) Security Analyst
8 21 (5.45%) Architect
8 21 (5.45%) Senior Analyst
9 16 (4.16%) Cyber Defence Analyst
10 14 (3.64%) Security Architect
10 14 (3.64%) Security Manager
11 12 (3.12%) Cybersecurity Analyst
11 12 (3.12%) Security Specialist
12 10 (2.60%) Cloud Engineer
12 10 (2.60%) IT Security Specialist
12 10 (2.60%) SAP Basis Consultant
12 10 (2.60%) SAP Consultant
12 10 (2.60%) Security Operations Specialist
Libraries, Frameworks & Software Standards
1 10 (2.60%) Kafka
1 10 (2.60%) SAP Basis
1 10 (2.60%) SAP Fiori
2 8 (2.08%) Elastic Stack
3 6 (1.56%) OAuth
3 6 (1.56%) OAuth2
3 6 (1.56%) SAML
4 3 (0.78%) LDAP
4 3 (0.78%) SailPoint
5 2 (0.52%) Apache Avro
5 2 (0.52%) Apache NiFi
6 1 (0.26%) .NET
6 1 (0.26%) .NET Core
6 1 (0.26%) ASP.NET Web API
6 1 (0.26%) JSON
6 1 (0.26%) OLE
6 1 (0.26%) XML
6 1 (0.26%) YAML
Miscellaneous
1 95 (24.68%) Management Information System
2 86 (22.34%) Security Operations Centre
3 77 (20.00%) Cyber Threat
4 63 (16.36%) Cyber Kill Chain
5 60 (15.58%) Cyber Defence
6 42 (10.91%) Security Posture
7 39 (10.13%) CSOC
8 27 (7.01%) Cyberattack
9 16 (4.16%) Cloud Native
10 15 (3.90%) Onboarding
11 14 (3.64%) Distributed Denial-of-Service
12 11 (2.86%) Public Cloud
13 6 (1.56%) CMDB
14 5 (1.30%) Analytical Mindset
15 4 (1.04%) Cloud Security Posture
15 4 (1.04%) Hedge funds
16 3 (0.78%) Data Protection Act
16 3 (0.78%) Insider Threat
17 2 (0.52%) Greenfield Project
17 2 (0.52%) Self-Motivation
Operating Systems
1 54 (14.03%) Linux
1 54 (14.03%) Windows
2 14 (3.64%) Unix
3 5 (1.30%) Windows Server
4 3 (0.78%) Mac OS
4 3 (0.78%) zOS
5 2 (0.52%) Red Hat Enterprise Linux
6 1 (0.26%) Android
6 1 (0.26%) Apple iOS
6 1 (0.26%) Mac OS X
6 1 (0.26%) Windows 10
Processes & Methodologies
1 231 (60.00%) Cybersecurity
2 178 (46.23%) SIEM
3 165 (42.86%) Security Operations
4 108 (28.05%) Information Security
5 97 (25.19%) Use Case
6 87 (22.60%) Threat Intelligence
7 83 (21.56%) Incident Management
8 76 (19.74%) MITRE ATT&CK
9 65 (16.88%) SOAR
10 64 (16.62%) Vulnerability Management
11 62 (16.10%) Cyber Threat Intelligence
12 59 (15.32%) Problem-Solving
12 59 (15.32%) Root Cause Analysis
13 57 (14.81%) Mentoring
14 54 (14.03%) Protective Monitoring
15 47 (12.21%) Analytics
15 47 (12.21%) Case Management
16 44 (11.43%) Data Security
17 38 (9.87%) CRM
18 37 (9.61%) ITIL
Programming Languages
1 25 (6.49%) PowerShell
2 21 (5.45%) Kusto Query Language
3 18 (4.68%) Python
4 7 (1.82%) SQL
5 6 (1.56%) Bash
6 5 (1.30%) JavaScript
6 5 (1.30%) Search Processing Language
7 2 (0.52%) Go
7 2 (0.52%) Perl
7 2 (0.52%) Shell Script
7 2 (0.52%) U-SQL
8 1 (0.26%) Bicep
8 1 (0.26%) C#
8 1 (0.26%) Java
8 1 (0.26%) Ruby
Qualifications
1 156 (40.52%) Security Cleared
2 93 (24.16%) DV Cleared
3 52 (13.51%) CISSP
3 52 (13.51%) SC Cleared
4 49 (12.73%) Degree
5 26 (6.75%) SANS
6 24 (6.23%) CISM
7 19 (4.94%) Computer Science Degree
8 18 (4.68%) CompTIA Security+
9 14 (3.64%) Cisco Certification
10 13 (3.38%) CEH
11 10 (2.60%) CCNP
12 8 (2.08%) CCNA
12 8 (2.08%) SAP Certification
13 7 (1.82%) AWS Certification
13 7 (1.82%) Azure Certification
13 7 (1.82%) BPSS Clearance
13 7 (1.82%) GIAC
13 7 (1.82%) Microsoft Certification
14 6 (1.56%) CISA
Quality Assurance & Compliance
1 87 (22.60%) NIST
2 44 (11.43%) NIST 800
3 43 (11.17%) ISO/IEC 27001
4 39 (10.13%) GDPR
5 25 (6.49%) NCSC
6 13 (3.38%) PCI DSS
7 9 (2.34%) GRC
8 6 (1.56%) Cyber Essentials
8 6 (1.56%) HIPAA
9 4 (1.04%) ISO/IEC 27002 (supersedes ISO/IEC 17799)
9 4 (1.04%) SLA
10 3 (0.78%) COBIT
10 3 (0.78%) Cyber Essentials PLUS
10 3 (0.78%) GPG13
11 2 (0.52%) Data Quality
11 2 (0.52%) Sarbanes-Oxley
12 1 (0.26%) GLBA
12 1 (0.26%) ISAE 3402
12 1 (0.26%) SOC 2
System Software
1 18 (4.68%) Active Directory
2 11 (2.86%) Docker
3 5 (1.30%) Virtual Machines
4 4 (1.04%) VMware Infrastructure
5 2 (0.52%) XenApp
6 1 (0.26%) Snort
Systems Management
1 13 (3.38%) Kibana
2 12 (3.12%) Kubernetes
3 10 (2.60%) Prometheus
4 8 (2.08%) Istio
4 8 (2.08%) Nessus
5 7 (1.82%) CSIRT
5 7 (1.82%) Grafana
5 7 (1.82%) Terraform
6 6 (1.56%) Argo
6 6 (1.56%) logstash
7 5 (1.30%) Ansible
8 4 (1.04%) Computer Emergency Response Teams
8 4 (1.04%) Trend Micro Deep Security
9 3 (0.78%) FortiGate
9 3 (0.78%) QRadar
10 2 (0.52%) Ambari
10 2 (0.52%) Nagios
10 2 (0.52%) Network Intrusion Detection System
10 2 (0.52%) Oozie
10 2 (0.52%) ZABBIX
Vendors
1 151 (39.22%) Microsoft
2 53 (13.77%) Splunk
3 32 (8.31%) LogRhythm
4 24 (6.23%) Qualys
5 22 (5.71%) Darktrace
5 22 (5.71%) Varonis
6 16 (4.16%) FireEye
6 16 (4.16%) Forcepoint
7 14 (3.64%) Cisco
8 13 (3.38%) SAP
9 9 (2.34%) Rapid7
10 8 (2.08%) CrowdStrike
11 7 (1.82%) Google
11 7 (1.82%) Virgin Media
12 6 (1.56%) Palo Alto
13 5 (1.30%) Sophos
14 4 (1.04%) CheckPoint
14 4 (1.04%) Oracle
14 4 (1.04%) Symantec
14 4 (1.04%) VMware