SIEM Contract Job Trends in England

Security Information and Event Management (SIEM)
UK > England

The table below provides summary statistics and contractor rates for jobs advertised in England requiring SIEM skills. It covers contract job vacancies from the 6 months leading up to 17 November 2025, with comparisons to the same periods in the previous two years.

6 months to
17 Nov 2025
Same period 2024 Same period 2023
Rank 181 185 158
Rank change year-on-year +4 -27 +151
Contract jobs citing SIEM 500 415 646
As % of all contract jobs in England 1.67% 1.34% 1.62%
As % of the Processes & Methodologies category 1.85% 1.55% 1.83%
Number of daily rates quoted 324 274 491
10th Percentile £400 £415 £450
25th Percentile £463 £513 £525
Median daily rate (50th Percentile) £540 £600 £618
Median % change year-on-year -10.00% -2.83% +2.92%
75th Percentile £650 £700 £725
90th Percentile £750 £800 £825
UK median daily rate £538 £600 £615
% change year-on-year -10.42% -2.44% +2.50%
Number of hourly rates quoted 13 3 3
10th Percentile £42.55 - £65.00
25th Percentile £45.00 £56.25 £68.75
Median hourly rate £65.00 £57.50 £75.00
Median % change year-on-year +13.04% -23.33% +10.29%
75th Percentile £85.00 £67.50 £77.50
90th Percentile £98.75 £72.75 £79.00
UK median hourly rate £65.00 £57.50 £72.50
% change year-on-year +13.04% -20.69% +6.62%

All Process and Methodology Skills
England

SIEM falls under the Processes and Methodologies category. For comparison with the information above, the following table provides summary statistics for all contract job vacancies requiring process or methodology skills in England.

Contract vacancies with a requirement for process or methodology skills 26,975 26,819 35,366
As % of all contract IT jobs advertised in England 90.28% 86.81% 88.69%
Number of daily rates quoted 17,111 16,369 24,234
10th Percentile £300 £313 £313
25th Percentile £405 £413 £425
Median daily rate (50th Percentile) £507 £525 £545
Median % change year-on-year -3.43% -3.67% -0.91%
75th Percentile £625 £643 £650
90th Percentile £725 £750 £750
UK median daily rate £500 £525 £530
% change year-on-year -4.76% -0.94% -3.64%
Number of hourly rates quoted 1,784 960 1,488
10th Percentile £14.75 £15.10 £14.42
25th Percentile £17.87 £20.30 £19.06
Median hourly rate £25.15 £37.25 £44.50
Median % change year-on-year -32.48% -16.29% +27.14%
75th Percentile £46.81 £65.00 £65.00
90th Percentile £68.00 £74.76 £77.50
UK median hourly rate £25.15 £35.00 £43.84
% change year-on-year -28.14% -20.16% +25.24%

SIEM
Job Vacancy Trend in England

Historical trend showing the proportion of contract IT job postings citing SIEM relative to all contract IT jobs advertised in England.

SIEM job vacancy trend in England

SIEM
Daily Rate Trend in England

Contractor daily rate distribution trend for jobs in England citing SIEM.

Contractor daily rate distribution trend for jobs in England citing SIEM

SIEM
Daily Rate Histogram in England

Daily rate distribution for jobs citing SIEM in England over the 6 months to 17 November 2025.

Daily rate histogram for SIEM in England

SIEM
Hourly Rate Trend in England

Contractor hourly rate distribution trend for jobs in England citing SIEM.

Contractor hourly rate distribution trend for jobs in England citing SIEM

SIEM
Hourly Rate Histogram in England

Hourly rate distribution of jobs citing SIEM in England over the 6 months to 17 November 2025.

Hourly rate histogram for SIEM in England

SIEM
Contract Job Locations in England

The table below looks at the demand and provides a guide to the median contractor rates quoted in IT jobs citing SIEM within the England region over the 6 months to 17 November 2025. The 'Rank Change' column provides an indication of the change in demand within each location based on the same 6 month period last year.

Location Rank Change
on Same Period
Last Year
Matching
Contract
IT Job Ads
Median
Daily Rate
Past 6 Months
Median Daily Rate
% Change
on Same Period
Last Year
Live
Jobs
London +19 219 £575 - 123
South East +45 98 £500 -16.67% 81
Midlands -35 50 £520 -18.19% 41
North of England -17 48 £500 -9.09% 27
West Midlands -41 42 £540 -14.96% 35
South West -20 38 £540 -21.74% 19
North West -11 30 £466 -15.23% 18
East of England +6 29 £550 - 12
Yorkshire -24 18 £520 -20.00% 8
East Midlands - 8 £450 - 6
SIEM
UK

SIEM
Co-Occurring Skills & Capabilities in England by Category

The following tables expand on the one above by listing co-occurrences grouped by category. They cover the same employment type, locality and period, with up to 20 co-occurrences shown in each category:

Application Platforms
1 6 (1.20%) Microsoft Exchange
2 3 (0.60%) Confluence
3 1 (0.20%) Jupyter
3 1 (0.20%) OpenStack
Applications
1 2 (0.40%) Microsoft Excel
2 1 (0.20%) 1Password
2 1 (0.20%) Microsoft Office
2 1 (0.20%) Microsoft Project
2 1 (0.20%) MS Visio
Business Applications
1 3 (0.60%) Maximo
2 2 (0.40%) Oracle CRM
Cloud Services
1 178 (35.60%) Azure
2 153 (30.60%) AWS
3 70 (14.00%) Azure Sentinel
4 63 (12.60%) GCP
5 54 (10.80%) Microsoft 365
6 38 (7.60%) Entra ID
7 30 (6.00%) SaaS
8 16 (3.20%) Amazon S3
8 16 (3.20%) Azure Logic Apps
9 15 (3.00%) Amazon EC2
9 15 (3.00%) Microsoft Purview
10 14 (2.80%) Azure Monitor
11 13 (2.60%) GitHub
12 11 (2.20%) Amazon SQS
13 8 (1.60%) GitHub Actions
14 7 (1.40%) AWS CloudFormation
15 6 (1.20%) AWS CloudTrail
15 6 (1.20%) Azure DevOps
15 6 (1.20%) OCI
16 5 (1.00%) Amazon GuardDuty
Communications & Networking
1 133 (26.60%) Firewall
2 94 (18.80%) Network Security
3 32 (6.40%) DNS
4 28 (5.60%) VPN
5 19 (3.80%) Intrusion Detection
5 19 (3.80%) TCP/IP
6 18 (3.60%) SSL
7 15 (3.00%) SMTP
8 14 (2.80%) HTTP
9 13 (2.60%) Internet
10 9 (1.80%) FTP
11 7 (1.40%) LAN
11 7 (1.40%) WAN
12 6 (1.20%) BGP
12 6 (1.20%) DHCP
12 6 (1.20%) SAN
12 6 (1.20%) Wireshark
13 4 (0.80%) Cisco ASA
13 4 (0.80%) SD-WAN
14 3 (0.60%) DKIM
Database & Business Intelligence
1 9 (1.80%) Data Lake
2 3 (0.60%) Elasticsearch
2 3 (0.60%) Power BI
3 2 (0.40%) Snowflake Schema
4 1 (0.20%) Amazon RDS
4 1 (0.20%) DynamoDB
4 1 (0.20%) Oracle Database
4 1 (0.20%) Redis
4 1 (0.20%) SQL Server
Development Applications
1 6 (1.20%) CircleCI
1 6 (1.20%) Snyk
2 5 (1.00%) Git
2 5 (1.00%) GitLab
2 5 (1.00%) JIRA
3 4 (0.80%) Jenkins
3 4 (0.80%) Metasploit
4 2 (0.40%) Burp Suite
4 2 (0.40%) Fiddler
5 1 (0.20%) MLflow
5 1 (0.20%) SonarQube
General
1 161 (32.20%) Social Skills
2 100 (20.00%) Analytical Skills
3 68 (13.60%) Finance
4 60 (12.00%) Public Sector
5 43 (8.60%) Documentation Skills
6 22 (4.40%) Banking
7 17 (3.40%) Legal
8 13 (2.60%) Military
8 13 (2.60%) Presentation Skills
9 12 (2.40%) Inclusion and Diversity
10 8 (1.60%) Telecoms
11 6 (1.20%) Back Office
11 6 (1.20%) Local Government
11 6 (1.20%) Retail
12 4 (0.80%) Investment Banking
13 3 (0.60%) Law
14 2 (0.40%) Aerospace
14 2 (0.40%) Financial Institution
15 1 (0.20%) Games
15 1 (0.20%) Manufacturing
Job Titles
1 113 (22.60%) Security Engineer
2 107 (21.40%) Analyst
3 81 (16.20%) Architect
4 59 (11.80%) Security Architect
5 58 (11.60%) Security Analyst
6 47 (9.40%) SOC Analyst
7 44 (8.80%) Cybersecurity Engineer
8 43 (8.60%) Senior
9 36 (7.20%) SIEM Engineer
10 27 (5.40%) Lead
11 25 (5.00%) Consultant
11 25 (5.00%) Cybersecurity Analyst
12 20 (4.00%) Security Manager
12 20 (4.00%) SOC Engineer
13 19 (3.80%) Security Consultant
14 15 (3.00%) Network Engineer
15 14 (2.80%) Azure Engineer
16 13 (2.60%) Network Security Engineer
16 13 (2.60%) Senior Analyst
16 13 (2.60%) SOC Manager
Libraries, Frameworks & Software Standards
1 23 (4.60%) LDAP
2 8 (1.60%) REST
3 7 (1.40%) Elastic Stack
3 7 (1.40%) SAML
4 6 (1.20%) Loki
5 4 (0.80%) .NET
5 4 (0.80%) JSON
5 4 (0.80%) OAuth
5 4 (0.80%) OpenID
6 3 (0.60%) ARM Templates
6 3 (0.60%) OAuth2
6 3 (0.60%) Regular Expression
7 2 (0.40%) Lightning Web Components
7 2 (0.40%) Oracle Fusion
7 2 (0.40%) PyTorch
7 2 (0.40%) React
7 2 (0.40%) SailPoint
7 2 (0.40%) Streamlit
7 2 (0.40%) TensorFlow
7 2 (0.40%) YAML
Miscellaneous
1 85 (17.00%) Security Operations Centre
2 64 (12.80%) Security Posture
3 58 (11.60%) Cyber Threat
4 45 (9.00%) Onboarding
5 37 (7.40%) CSOC
6 34 (6.80%) Management Information System
7 30 (6.00%) Cyber Defence
8 21 (4.20%) Cloud Native
9 18 (3.60%) Operational Technology
10 16 (3.20%) PKI
11 14 (2.80%) Analytical Mindset
11 14 (2.80%) Cyber Kill Chain
11 14 (2.80%) Hybrid Cloud
12 12 (2.40%) Enterprise Software
13 10 (2.00%) Cyber Security Posture
13 10 (2.00%) Cyberattack
13 10 (2.00%) Data Centre
14 8 (1.60%) Cloud Security Posture
14 8 (1.60%) Public Cloud
15 5 (1.00%) Data Protection Act
Operating Systems
1 86 (17.20%) Windows
2 73 (14.60%) Linux
3 21 (4.20%) Unix
4 20 (4.00%) Windows Server
5 9 (1.80%) Red Hat Enterprise Linux
6 4 (0.80%) Ubuntu
6 4 (0.80%) Windows Server 2016
6 4 (0.80%) Windows Server 2019
7 3 (0.60%) CentOS
7 3 (0.60%) Mac OS X
8 2 (0.40%) Kali Linux
8 2 (0.40%) Mac OS
8 2 (0.40%) Windows Server 2012
9 1 (0.20%) Windows 10
Processes & Methodologies
1 289 (57.80%) Cybersecurity
2 224 (44.80%) Incident Response
3 183 (36.60%) Security Operations
4 132 (26.40%) SOAR
5 110 (22.00%) Threat Detection
6 104 (20.80%) Cloud Security
7 88 (17.60%) Problem-Solving
8 82 (16.40%) Vulnerability Management
9 77 (15.40%) Threat Intelligence
10 64 (12.80%) Security Monitoring
11 63 (12.60%) Threat Modelling
12 62 (12.40%) Use Case
13 61 (12.20%) Information Security
14 58 (11.60%) Cyber Threat Intelligence
15 56 (11.20%) Security Architecture
16 55 (11.00%) DevOps
17 54 (10.80%) Identity Access Management
17 54 (10.80%) MITRE ATT&CK
18 51 (10.20%) Continuous Improvement
19 48 (9.60%) CI/CD
Programming Languages
1 135 (27.00%) Python
2 130 (26.00%) PowerShell
3 57 (11.40%) Kusto Query Language
4 33 (6.60%) Bash
5 10 (2.00%) Bicep
6 8 (1.60%) Java
7 6 (1.20%) Search Processing Language
8 5 (1.00%) JavaScript
9 3 (0.60%) C
9 3 (0.60%) C++
9 3 (0.60%) Shell Script
9 3 (0.60%) SQL
10 2 (0.40%) Apex Code
10 2 (0.40%) Perl
10 2 (0.40%) PHP
10 2 (0.40%) TypeScript
10 2 (0.40%) VBScript
11 1 (0.20%) C#
11 1 (0.20%) Korn
11 1 (0.20%) R
Qualifications
1 185 (37.00%) Security Cleared
2 146 (29.20%) SC Cleared
3 129 (25.80%) CISSP
4 57 (11.40%) CISM
5 51 (10.20%) Degree
6 48 (9.60%) DV Cleared
7 42 (8.40%) CEH
8 39 (7.80%) GIAC
9 36 (7.20%) Cisco Certification
10 34 (6.80%) CompTIA Security+
11 28 (5.60%) GCIH
12 25 (5.00%) GCIA
13 19 (3.80%) (ISC)2 CCSP
14 17 (3.40%) Azure Certification
15 16 (3.20%) CompTIA CySA+
16 14 (2.80%) CCSP
16 14 (2.80%) GCFA
17 13 (2.60%) AWS Certification
17 13 (2.60%) SANS
18 12 (2.40%) OSCP
Quality Assurance & Compliance
1 150 (30.00%) NIST
2 137 (27.40%) ISO/IEC 27001
3 76 (15.20%) GDPR
4 34 (6.80%) PCI DSS
5 29 (5.80%) HIPAA
6 28 (5.60%) NCSC
7 18 (3.60%) Cyber Essentials
8 10 (2.00%) GRC
8 10 (2.00%) NIST 800
8 10 (2.00%) Sarbanes-Oxley
9 9 (1.80%) SLA
10 8 (1.60%) Cyber Essentials PLUS
11 7 (1.40%) PSD2
11 7 (1.40%) SOC 2
12 6 (1.20%) JSP 440
13 5 (1.00%) Actionable Recommendations
13 5 (1.00%) QA
14 3 (0.60%) Government Security Classifications
15 2 (0.40%) HMG Security Policy Framework
16 1 (0.20%) Def Stans
System Software
1 62 (12.40%) Active Directory
2 26 (5.20%) Docker
3 7 (1.40%) Snort
3 7 (1.40%) VMware Infrastructure
4 4 (0.80%) Hyper-V
4 4 (0.80%) Microsoft Virtual Server
4 4 (0.80%) Squid
4 4 (0.80%) Virtual Servers
5 3 (0.60%) Postfix
5 3 (0.60%) Virtual Machines
5 3 (0.60%) VMware NSX
6 1 (0.20%) GPFS
6 1 (0.20%) Lustre
6 1 (0.20%) Slurm Workload Manager
6 1 (0.20%) vSphere
Systems Management
1 34 (6.80%) Terraform
2 31 (6.20%) QRadar
3 30 (6.00%) Kubernetes
4 17 (3.40%) Ansible
5 15 (3.00%) Microsoft Intune
6 12 (2.40%) SCCM
7 10 (2.00%) CSIRT
7 10 (2.00%) WSUS
8 9 (1.80%) Single Sign-On
9 8 (1.60%) Kibana
9 8 (1.60%) Nessus
9 8 (1.60%) Prometheus
10 7 (1.40%) Computer Emergency Response Teams
11 4 (0.80%) logstash
11 4 (0.80%) Nexpose
11 4 (0.80%) Suricata
12 3 (0.60%) Active Directory Federation Services
12 3 (0.60%) FortiGate
12 3 (0.60%) Jamf Pro
13 2 (0.40%) CASB
Vendors
1 176 (35.20%) Microsoft
2 148 (29.60%) Splunk
3 49 (9.80%) CrowdStrike
4 36 (7.20%) Palo Alto
5 29 (5.80%) CyberArk
6 28 (5.60%) Cisco
7 24 (4.80%) BeyondTrust
8 23 (4.60%) Google
9 22 (4.40%) ArcSight
9 22 (4.40%) Qualys
10 21 (4.20%) Zscaler
11 18 (3.60%) Fortinet
11 18 (3.60%) ServiceNow
12 17 (3.40%) LogRhythm
13 16 (3.20%) Forcepoint
13 16 (3.20%) VMware
14 14 (2.80%) Tenable
15 12 (2.40%) FireEye
16 9 (1.80%) IBM
16 9 (1.80%) Rapid7