SIEM Contract Job Trends in England

Security Information and Event Management (SIEM)
UK > England

The table below provides summary statistics and contractor rates for jobs advertised in England requiring SIEM skills. It covers contract job vacancies from the 6 months leading up to 6 December 2025, with comparisons to the same periods in the previous two years.

6 months to
6 Dec 2025
Same period 2024 Same period 2023
Rank 173 193 154
Rank change year-on-year +20 -39 +154
Contract jobs citing SIEM 507 414 645
As % of all contract jobs in England 1.63% 1.35% 1.68%
As % of the Processes & Methodologies category 1.82% 1.54% 1.90%
Number of daily rates quoted 333 277 489
10th Percentile £400 £409 £450
25th Percentile £463 £510 £525
Median daily rate (50th Percentile) £538 £600 £618
Median % change year-on-year -10.42% -2.83% +2.92%
75th Percentile £643 £700 £725
90th Percentile £750 £800 £825
UK median daily rate £538 £600 £615
% change year-on-year -10.42% -2.44% +2.50%
Number of hourly rates quoted 14 2 3
10th Percentile £42.86 - £65.00
25th Percentile £45.19 £56.25 £68.75
Median hourly rate £65.00 £57.50 £75.00
Median % change year-on-year +13.04% -23.33% +14.50%
75th Percentile £85.00 £58.75 £77.50
90th Percentile £91.43 - £79.00
UK median hourly rate £70.00 £57.50 £72.50
% change year-on-year +21.74% -20.69% +10.69%

All Process and Methodology Skills
England

SIEM falls under the Processes and Methodologies category. For comparison with the information above, the following table provides summary statistics for all contract job vacancies requiring process or methodology skills in England.

Contract vacancies with a requirement for process or methodology skills 27,812 26,873 34,017
As % of all contract IT jobs advertised in England 89.40% 87.89% 88.75%
Number of daily rates quoted 17,725 16,531 23,197
10th Percentile £300 £313 £313
25th Percentile £406 £415 £425
Median daily rate (50th Percentile) £503 £525 £548
Median % change year-on-year -4.29% -4.11% -0.45%
75th Percentile £625 £645 £650
90th Percentile £725 £750 £750
UK median daily rate £500 £525 £533
% change year-on-year -4.76% -1.50% -3.09%
Number of hourly rates quoted 1,799 953 1,442
10th Percentile £15.00 £15.23 £14.78
25th Percentile £17.87 £20.24 £19.06
Median hourly rate £25.15 £35.00 £44.25
Median % change year-on-year -28.14% -20.90% +18.00%
75th Percentile £50.00 £65.00 £65.00
90th Percentile £68.00 £75.00 £77.50
UK median hourly rate £25.15 £32.75 £42.50
% change year-on-year -23.21% -22.94% +21.43%

SIEM
Job Vacancy Trend in England

Historical trend showing the proportion of contract IT job postings citing SIEM relative to all contract IT jobs advertised in England.

SIEM job vacancy trend in England

SIEM
Daily Rate Trend in England

Contractor daily rate distribution trend for jobs in England citing SIEM.

Contractor daily rate distribution trend for jobs in England citing SIEM

SIEM
Daily Rate Histogram in England

Daily rate distribution for jobs citing SIEM in England over the 6 months to 6 December 2025.

Daily rate histogram for SIEM in England

SIEM
Hourly Rate Trend in England

Contractor hourly rate distribution trend for jobs in England citing SIEM.

Contractor hourly rate distribution trend for jobs in England citing SIEM

SIEM
Hourly Rate Histogram in England

Hourly rate distribution of jobs citing SIEM in England over the 6 months to 6 December 2025.

Hourly rate histogram for SIEM in England

SIEM
Contract Job Locations in England

The table below looks at the demand and provides a guide to the median contractor rates quoted in IT jobs citing SIEM within the England region over the 6 months to 6 December 2025. The 'Rank Change' column provides an indication of the change in demand within each location based on the same 6 month period last year.

Location Rank Change
on Same Period
Last Year
Matching
Contract
IT Job Ads
Median
Daily Rate
Past 6 Months
Median Daily Rate
% Change
on Same Period
Last Year
Live
Jobs
London +5 217 £575 - 59
South East +54 111 £492 -18.00% 76
Midlands -33 58 £525 -17.32% 42
West Midlands -29 52 £539 -15.20% 31
North of England -33 43 £510 -8.31% 36
South West -20 37 £545 -16.15% 25
East of England +6 25 £613 +11.36% 26
North West -17 25 £475 -13.64% 27
Yorkshire -28 17 £529 -20.19% 7
East Midlands - 6 £450 - 10
North East -3 1 £545 +28.24% 2
SIEM
UK

SIEM
Co-Occurring Skills & Capabilities in England by Category

The following tables expand on the one above by listing co-occurrences grouped by category. They cover the same employment type, locality and period, with up to 20 co-occurrences shown in each category:

Application Platforms
1 8 (1.58%) Microsoft Exchange
2 5 (0.99%) OpenStack
3 2 (0.39%) Confluence
4 1 (0.20%) Jupyter
Applications
1 2 (0.39%) Microsoft Excel
2 1 (0.20%) Microsoft Office
2 1 (0.20%) Microsoft Project
2 1 (0.20%) MS Visio
Business Applications
1 3 (0.59%) Maximo
2 1 (0.20%) Oracle CRM
Cloud Services
1 194 (38.26%) Azure
2 161 (31.76%) AWS
3 76 (14.99%) Azure Sentinel
4 74 (14.60%) GCP
5 55 (10.85%) Microsoft 365
6 39 (7.69%) Entra ID
7 22 (4.34%) SaaS
8 17 (3.35%) Azure Monitor
9 16 (3.16%) Microsoft Purview
10 14 (2.76%) Azure Logic Apps
11 13 (2.56%) GitHub
12 11 (2.17%) AWS CloudFormation
12 11 (2.17%) GitHub Actions
13 7 (1.38%) Amazon S3
14 6 (1.18%) Amazon EC2
14 6 (1.18%) Azure DevOps
14 6 (1.18%) Cloudflare
14 6 (1.18%) OCI
15 5 (0.99%) Azure ExpressRoute
15 5 (0.99%) OpenDNS
Communications & Networking
1 135 (26.63%) Firewall
2 94 (18.54%) Network Security
3 35 (6.90%) DNS
4 28 (5.52%) VPN
5 24 (4.73%) TCP/IP
6 17 (3.35%) Intrusion Detection
7 16 (3.16%) SMTP
8 15 (2.96%) SSL
9 14 (2.76%) HTTP
10 13 (2.56%) DHCP
10 13 (2.56%) Internet
11 9 (1.78%) FTP
12 8 (1.58%) LAN
12 8 (1.58%) WAN
13 6 (1.18%) BGP
13 6 (1.18%) Wireshark
14 4 (0.79%) DKIM
14 4 (0.79%) DMARC
14 4 (0.79%) SD-WAN
15 3 (0.59%) Software-Defined Networking
Database & Business Intelligence
1 9 (1.78%) Data Lake
2 8 (1.58%) Elasticsearch
3 3 (0.59%) Power BI
4 2 (0.39%) SQL Server
5 1 (0.20%) Oracle Database
5 1 (0.20%) Redis
Development Applications
1 9 (1.78%) JIRA
2 8 (1.58%) CircleCI
3 6 (1.18%) GitLab
3 6 (1.18%) Snyk
4 4 (0.79%) Git
4 4 (0.79%) Jenkins
4 4 (0.79%) Metasploit
5 2 (0.39%) Burp Suite
5 2 (0.39%) Fiddler
6 1 (0.20%) MLflow
6 1 (0.20%) SonarQube
General
1 169 (33.33%) Social Skills
2 99 (19.53%) Analytical Skills
3 63 (12.43%) Finance
4 57 (11.24%) Public Sector
5 45 (8.88%) Documentation Skills
6 21 (4.14%) Banking
7 16 (3.16%) Legal
8 14 (2.76%) Military
8 14 (2.76%) Presentation Skills
9 11 (2.17%) Inclusion and Diversity
10 8 (1.58%) Retail
10 8 (1.58%) Telecoms
11 6 (1.18%) Back Office
11 6 (1.18%) Local Government
12 4 (0.79%) Investment Banking
13 2 (0.39%) Aerospace
13 2 (0.39%) Financial Institution
13 2 (0.39%) Law
14 1 (0.20%) Games
14 1 (0.20%) Manufacturing
Job Titles
1 117 (23.08%) Security Engineer
2 108 (21.30%) Analyst
3 72 (14.20%) Architect
4 60 (11.83%) Security Analyst
5 50 (9.86%) Security Architect
6 48 (9.47%) Senior
7 46 (9.07%) Cybersecurity Engineer
7 46 (9.07%) SOC Analyst
8 44 (8.68%) SIEM Engineer
9 29 (5.72%) Lead
10 27 (5.33%) Cybersecurity Analyst
11 23 (4.54%) Consultant
12 20 (3.94%) SOC Engineer
13 17 (3.35%) Security Consultant
13 17 (3.35%) Security Manager
14 15 (2.96%) Network Engineer
15 14 (2.76%) Azure Engineer
16 13 (2.56%) Network Security Engineer
16 13 (2.56%) Senior Analyst
16 13 (2.56%) SOC Manager
Libraries, Frameworks & Software Standards
1 29 (5.72%) LDAP
2 14 (2.76%) Elastic Stack
3 11 (2.17%) REST
4 7 (1.38%) SAML
5 6 (1.18%) JSON
5 6 (1.18%) Loki
6 5 (0.99%) .NET
6 5 (0.99%) Kafka
7 4 (0.79%) OAuth
7 4 (0.79%) OpenID
7 4 (0.79%) RabbitMQ
7 4 (0.79%) Regular Expression
8 3 (0.59%) ARM Templates
8 3 (0.59%) Lightning Web Components
8 3 (0.59%) OAuth2
9 2 (0.39%) eBPF
9 2 (0.39%) OpenTelemetry
9 2 (0.39%) PyTorch
9 2 (0.39%) React
9 2 (0.39%) TensorFlow
Miscellaneous
1 77 (15.19%) Security Operations Centre
2 64 (12.62%) Security Posture
3 54 (10.65%) Cyber Threat
4 42 (8.28%) Onboarding
5 32 (6.31%) Cyber Defence
6 31 (6.11%) Management Information System
7 27 (5.33%) CSOC
8 26 (5.13%) Cloud Native
9 23 (4.54%) Operational Technology
10 18 (3.55%) PKI
11 15 (2.96%) Hybrid Cloud
12 13 (2.56%) Cyber Kill Chain
13 12 (2.37%) Analytical Mindset
14 11 (2.17%) Cloud Security Posture
14 11 (2.17%) Cyberattack
14 11 (2.17%) Enterprise Software
15 10 (1.97%) Data Centre
16 9 (1.78%) Cyber Security Posture
17 8 (1.58%) Public Cloud
18 6 (1.18%) Product Ownership
Operating Systems
1 84 (16.57%) Windows
2 79 (15.58%) Linux
3 21 (4.14%) Unix
4 15 (2.96%) Windows Server
5 11 (2.17%) Red Hat Enterprise Linux
6 5 (0.99%) Ubuntu
7 4 (0.79%) CentOS
8 3 (0.59%) Mac OS X
9 2 (0.39%) Kali Linux
9 2 (0.39%) Mac OS
10 1 (0.20%) Windows 10
10 1 (0.20%) Windows Server 2012
Processes & Methodologies
1 281 (55.42%) Cybersecurity
2 225 (44.38%) Incident Response
3 171 (33.73%) Security Operations
4 127 (25.05%) SOAR
5 117 (23.08%) Threat Detection
6 100 (19.72%) Cloud Security
7 94 (18.54%) Problem-Solving
8 80 (15.78%) Vulnerability Management
9 73 (14.40%) Threat Intelligence
10 64 (12.62%) CI/CD
11 62 (12.23%) DevOps
11 62 (12.23%) Security Monitoring
12 61 (12.03%) Threat Modelling
13 58 (11.44%) Security Architecture
14 57 (11.24%) Cyber Threat Intelligence
14 57 (11.24%) Information Security
15 56 (11.05%) DevSecOps
15 56 (11.05%) Infrastructure as Code
16 55 (10.85%) Use Case
17 54 (10.65%) Continuous Improvement
Programming Languages
1 152 (29.98%) Python
2 140 (27.61%) PowerShell
3 54 (10.65%) Kusto Query Language
4 36 (7.10%) Bash
5 12 (2.37%) Bicep
6 9 (1.78%) Java
6 9 (1.78%) JavaScript
7 6 (1.18%) Search Processing Language
8 4 (0.79%) Go
8 4 (0.79%) SQL
9 3 (0.59%) Apex Code
9 3 (0.59%) C
9 3 (0.59%) C++
10 2 (0.39%) Perl
10 2 (0.39%) PHP
10 2 (0.39%) Shell Script
10 2 (0.39%) TypeScript
10 2 (0.39%) VBScript
11 1 (0.20%) C#
11 1 (0.20%) R
Qualifications
1 187 (36.88%) Security Cleared
2 150 (29.59%) SC Cleared
3 128 (25.25%) CISSP
4 61 (12.03%) CISM
5 51 (10.06%) Degree
6 46 (9.07%) DV Cleared
7 41 (8.09%) CEH
8 37 (7.30%) GIAC
9 36 (7.10%) Cisco Certification
10 33 (6.51%) CompTIA Security+
11 26 (5.13%) GCIH
12 24 (4.73%) GCIA
13 19 (3.75%) Azure Certification
14 18 (3.55%) (ISC)2 CCSP
14 18 (3.55%) AWS Certification
15 15 (2.96%) CompTIA CySA+
16 14 (2.76%) CCSP
17 13 (2.56%) GCFA
18 12 (2.37%) OSCP
18 12 (2.37%) SANS
Quality Assurance & Compliance
1 154 (30.37%) NIST
2 140 (27.61%) ISO/IEC 27001
3 80 (15.78%) GDPR
4 39 (7.69%) PCI DSS
5 31 (6.11%) HIPAA
6 27 (5.33%) NCSC
7 16 (3.16%) Cyber Essentials
8 10 (1.97%) GRC
8 10 (1.97%) NIST 800
8 10 (1.97%) Sarbanes-Oxley
9 8 (1.58%) Cyber Essentials PLUS
9 8 (1.58%) SLA
10 7 (1.38%) PSD2
10 7 (1.38%) SOC 2
11 6 (1.18%) JSP 440
12 5 (0.99%) QA
13 4 (0.79%) Actionable Recommendations
14 2 (0.39%) HMG Security Policy Framework
15 1 (0.20%) Def Stans
15 1 (0.20%) ISO/IEC 27002 (supersedes ISO/IEC 17799)
System Software
1 67 (13.21%) Active Directory
2 35 (6.90%) Docker
3 9 (1.78%) Hyper-V
3 9 (1.78%) VMware Infrastructure
4 8 (1.58%) Snort
5 5 (0.99%) Squid
5 5 (0.99%) Virtual Machines
5 5 (0.99%) VMware NSX
6 4 (0.79%) Postfix
7 1 (0.20%) GPFS
7 1 (0.20%) Lustre
7 1 (0.20%) NFS
7 1 (0.20%) Slurm Workload Manager
7 1 (0.20%) VMware ESXi
7 1 (0.20%) vSphere
Systems Management
1 45 (8.88%) Terraform
2 43 (8.48%) Kubernetes
3 31 (6.11%) QRadar
4 20 (3.94%) Ansible
5 15 (2.96%) Microsoft Intune
6 13 (2.56%) Kibana
7 10 (1.97%) CSIRT
7 10 (1.97%) Nessus
7 10 (1.97%) SCCM
7 10 (1.97%) Single Sign-On
8 9 (1.78%) logstash
9 8 (1.58%) WSUS
10 7 (1.38%) Prometheus
11 6 (1.18%) Computer Emergency Response Teams
12 5 (0.99%) Grafana
12 5 (0.99%) Nexpose
12 5 (0.99%) Suricata
13 3 (0.59%) Argo
13 3 (0.59%) Fluentd
13 3 (0.59%) FortiGate
Vendors
1 179 (35.31%) Microsoft
2 136 (26.82%) Splunk
3 48 (9.47%) CrowdStrike
4 36 (7.10%) Palo Alto
5 34 (6.71%) CyberArk
6 29 (5.72%) BeyondTrust
6 29 (5.72%) Cisco
7 26 (5.13%) Google
8 24 (4.73%) Qualys
9 23 (4.54%) Zscaler
10 20 (3.94%) ArcSight
11 18 (3.55%) Fortinet
11 18 (3.55%) LogRhythm
11 18 (3.55%) VMware
12 17 (3.35%) ServiceNow
13 16 (3.16%) Forcepoint
13 16 (3.16%) Tenable
14 14 (2.76%) FireEye
15 9 (1.78%) Rapid7
16 8 (1.58%) Citrix