SIEM Contract Job Trends in England

Security Information and Event Management (SIEM)
UK > England

The table below provides summary statistics and contractor rates for jobs advertised in England requiring SIEM skills. It covers contract job vacancies from the 6 months leading up to 26 November 2025, with comparisons to the same periods in the previous two years.

6 months to
26 Nov 2025
Same period 2024 Same period 2023
Rank 164 182 157
Rank change year-on-year +18 -25 +155
Contract jobs citing SIEM 520 426 636
As % of all contract jobs in England 1.70% 1.37% 1.64%
As % of the Processes & Methodologies category 1.89% 1.57% 1.85%
Number of daily rates quoted 334 281 485
10th Percentile £400 £413 £450
25th Percentile £463 £513 £525
Median daily rate (50th Percentile) £539 £600 £620
Median % change year-on-year -10.21% -3.23% +3.33%
75th Percentile £648 £700 £725
90th Percentile £750 £800 £825
UK median daily rate £538 £600 £618
% change year-on-year -10.42% -2.83% +2.92%
Number of hourly rates quoted 15 3 3
10th Percentile £43.16 - £65.00
25th Percentile £45.38 £56.25 £68.75
Median hourly rate £65.00 £57.50 £75.00
Median % change year-on-year +13.04% -23.33% +10.05%
75th Percentile £85.50 £67.50 £77.50
90th Percentile £97.50 £72.75 £79.00
UK median hourly rate £70.00 £57.50 £72.50
% change year-on-year +21.74% -20.69% +6.38%

All Process and Methodology Skills
England

SIEM falls under the Processes and Methodologies category. For comparison with the information above, the following table provides summary statistics for all contract job vacancies requiring process or methodology skills in England.

Contract vacancies with a requirement for process or methodology skills 27,581 27,123 34,426
As % of all contract IT jobs advertised in England 89.93% 87.40% 88.75%
Number of daily rates quoted 17,503 16,556 23,537
10th Percentile £300 £313 £313
25th Percentile £405 £419 £425
Median daily rate (50th Percentile) £505 £525 £545
Median % change year-on-year -3.81% -3.67% -0.91%
75th Percentile £625 £649 £650
90th Percentile £725 £750 £750
UK median daily rate £500 £525 £533
% change year-on-year -4.76% -1.41% -3.18%
Number of hourly rates quoted 1,803 997 1,447
10th Percentile £15.00 £15.22 £14.62
25th Percentile £17.87 £20.26 £19.25
Median hourly rate £25.15 £36.00 £45.00
Median % change year-on-year -30.14% -20.00% +25.00%
75th Percentile £50.00 £65.00 £65.00
90th Percentile £68.75 £75.00 £77.50
UK median hourly rate £25.15 £35.00 £44.50
% change year-on-year -28.14% -21.35% +27.14%

SIEM
Job Vacancy Trend in England

Historical trend showing the proportion of contract IT job postings citing SIEM relative to all contract IT jobs advertised in England.

SIEM job vacancy trend in England

SIEM
Daily Rate Trend in England

Contractor daily rate distribution trend for jobs in England citing SIEM.

Contractor daily rate distribution trend for jobs in England citing SIEM

SIEM
Daily Rate Histogram in England

Daily rate distribution for jobs citing SIEM in England over the 6 months to 26 November 2025.

Daily rate histogram for SIEM in England

SIEM
Hourly Rate Trend in England

Contractor hourly rate distribution trend for jobs in England citing SIEM.

Contractor hourly rate distribution trend for jobs in England citing SIEM

SIEM
Hourly Rate Histogram in England

Hourly rate distribution of jobs citing SIEM in England over the 6 months to 26 November 2025.

Hourly rate histogram for SIEM in England

SIEM
Contract Job Locations in England

The table below looks at the demand and provides a guide to the median contractor rates quoted in IT jobs citing SIEM within the England region over the 6 months to 26 November 2025. The 'Rank Change' column provides an indication of the change in demand within each location based on the same 6 month period last year.

Location Rank Change
on Same Period
Last Year
Matching
Contract
IT Job Ads
Median
Daily Rate
Past 6 Months
Median Daily Rate
% Change
on Same Period
Last Year
Live
Jobs
London +15 229 £575 - 69
South East +50 109 £490 -18.38% 69
Midlands -32 55 £525 -17.32% 24
West Midlands -30 48 £545 -14.17% 20
North of England -27 46 £520 -5.45% 27
South West -28 38 £540 -20.08% 23
North West -10 28 £466 -15.23% 18
East of England +3 25 £600 +9.09% 11
Yorkshire -24 17 £529 -21.08% 6
East Midlands - 7 £450 - 4
North East -8 1 £545 +28.24% 3
SIEM
UK

SIEM
Co-Occurring Skills & Capabilities in England by Category

The following tables expand on the one above by listing co-occurrences grouped by category. They cover the same employment type, locality and period, with up to 20 co-occurrences shown in each category:

Application Platforms
1 8 (1.54%) Microsoft Exchange
2 4 (0.77%) OpenStack
3 3 (0.58%) Confluence
4 1 (0.19%) Jupyter
Applications
1 2 (0.38%) Microsoft Excel
2 1 (0.19%) 1Password
2 1 (0.19%) Microsoft Office
2 1 (0.19%) Microsoft Project
2 1 (0.19%) MS Visio
Business Applications
1 3 (0.58%) Maximo
2 2 (0.38%) Oracle CRM
Cloud Services
1 193 (37.12%) Azure
2 165 (31.73%) AWS
3 73 (14.04%) Azure Sentinel
4 70 (13.46%) GCP
5 57 (10.96%) Microsoft 365
6 39 (7.50%) Entra ID
7 31 (5.96%) SaaS
8 17 (3.27%) Microsoft Purview
9 16 (3.08%) GitHub
10 15 (2.88%) Azure Logic Apps
11 14 (2.69%) Amazon S3
11 14 (2.69%) Azure Monitor
12 13 (2.50%) Amazon EC2
13 11 (2.12%) AWS CloudFormation
13 11 (2.12%) GitHub Actions
14 9 (1.73%) Amazon SQS
15 7 (1.35%) Azure DevOps
15 7 (1.35%) OCI
16 5 (0.96%) Cloudflare
16 5 (0.96%) OpenDNS
Communications & Networking
1 137 (26.35%) Firewall
2 95 (18.27%) Network Security
3 33 (6.35%) DNS
4 26 (5.00%) VPN
5 23 (4.42%) TCP/IP
6 18 (3.46%) Intrusion Detection
7 16 (3.08%) SMTP
7 16 (3.08%) SSL
8 14 (2.69%) HTTP
9 13 (2.50%) Internet
10 11 (2.12%) DHCP
11 9 (1.73%) FTP
12 8 (1.54%) LAN
12 8 (1.54%) WAN
13 6 (1.15%) BGP
13 6 (1.15%) Wireshark
14 4 (0.77%) Cisco ASA
14 4 (0.77%) DKIM
14 4 (0.77%) DMARC
14 4 (0.77%) SD-WAN
Database & Business Intelligence
1 9 (1.73%) Data Lake
2 3 (0.58%) Elasticsearch
2 3 (0.58%) Power BI
3 1 (0.19%) Oracle Database
3 1 (0.19%) Redis
3 1 (0.19%) Snowflake Schema
3 1 (0.19%) SQL Server
Development Applications
1 9 (1.73%) JIRA
2 8 (1.54%) CircleCI
2 8 (1.54%) GitLab
3 6 (1.15%) Jenkins
3 6 (1.15%) Snyk
4 5 (0.96%) Git
5 4 (0.77%) Metasploit
6 2 (0.38%) Burp Suite
6 2 (0.38%) Fiddler
7 1 (0.19%) MLflow
7 1 (0.19%) SonarQube
General
1 175 (33.65%) Social Skills
2 105 (20.19%) Analytical Skills
3 68 (13.08%) Finance
4 60 (11.54%) Public Sector
5 50 (9.62%) Documentation Skills
6 21 (4.04%) Banking
7 16 (3.08%) Legal
8 14 (2.69%) Military
8 14 (2.69%) Presentation Skills
9 13 (2.50%) Inclusion and Diversity
10 10 (1.92%) Telecoms
11 7 (1.35%) Retail
12 6 (1.15%) Back Office
12 6 (1.15%) Local Government
13 4 (0.77%) Investment Banking
14 3 (0.58%) Aerospace
14 3 (0.58%) Law
15 2 (0.38%) Financial Institution
16 1 (0.19%) Games
16 1 (0.19%) Manufacturing
Job Titles
1 117 (22.50%) Security Engineer
2 110 (21.15%) Analyst
3 80 (15.38%) Architect
4 61 (11.73%) Security Analyst
5 57 (10.96%) Security Architect
6 48 (9.23%) Senior
6 48 (9.23%) SOC Analyst
7 46 (8.85%) Cybersecurity Engineer
8 39 (7.50%) SIEM Engineer
9 28 (5.38%) Cybersecurity Analyst
9 28 (5.38%) Lead
10 25 (4.81%) Consultant
11 20 (3.85%) Security Manager
11 20 (3.85%) SOC Engineer
12 19 (3.65%) Security Consultant
13 15 (2.88%) Network Engineer
14 14 (2.69%) Azure Engineer
14 14 (2.69%) Senior Analyst
15 13 (2.50%) Network Security Engineer
15 13 (2.50%) Operations Analyst
Libraries, Frameworks & Software Standards
1 29 (5.58%) LDAP
2 11 (2.12%) REST
3 10 (1.92%) Elastic Stack
4 7 (1.35%) SAML
5 6 (1.15%) JSON
5 6 (1.15%) Loki
6 5 (0.96%) .NET
6 5 (0.96%) Kafka
7 4 (0.77%) OAuth
7 4 (0.77%) OpenID
7 4 (0.77%) RabbitMQ
7 4 (0.77%) Regular Expression
8 3 (0.58%) ARM Templates
8 3 (0.58%) Lightning Web Components
8 3 (0.58%) OAuth2
9 2 (0.38%) gRPC
9 2 (0.38%) PyTorch
9 2 (0.38%) React
9 2 (0.38%) TensorFlow
9 2 (0.38%) YAML
Miscellaneous
1 84 (16.15%) Security Operations Centre
2 65 (12.50%) Security Posture
3 58 (11.15%) Cyber Threat
4 48 (9.23%) Onboarding
5 35 (6.73%) CSOC
6 33 (6.35%) Cyber Defence
6 33 (6.35%) Management Information System
7 22 (4.23%) Cloud Native
8 21 (4.04%) Operational Technology
9 20 (3.85%) PKI
10 14 (2.69%) Hybrid Cloud
11 13 (2.50%) Cyber Kill Chain
12 12 (2.31%) Analytical Mindset
12 12 (2.31%) Enterprise Software
13 10 (1.92%) Cyber Security Posture
13 10 (1.92%) Cyberattack
13 10 (1.92%) Data Centre
14 9 (1.73%) Cloud Security Posture
15 8 (1.54%) Public Cloud
16 5 (0.96%) Data Protection Act
Operating Systems
1 88 (16.92%) Windows
2 82 (15.77%) Linux
3 21 (4.04%) Unix
4 14 (2.69%) Windows Server
5 11 (2.12%) Red Hat Enterprise Linux
6 5 (0.96%) Ubuntu
7 4 (0.77%) CentOS
8 3 (0.58%) Mac OS X
9 2 (0.38%) Kali Linux
9 2 (0.38%) Mac OS
9 2 (0.38%) Windows Server 2012
10 1 (0.19%) Windows 10
Processes & Methodologies
1 298 (57.31%) Cybersecurity
2 225 (43.27%) Incident Response
3 182 (35.00%) Security Operations
4 134 (25.77%) SOAR
5 116 (22.31%) Threat Detection
6 104 (20.00%) Cloud Security
7 100 (19.23%) Problem-Solving
8 84 (16.15%) Vulnerability Management
9 76 (14.62%) Threat Intelligence
10 66 (12.69%) Security Monitoring
11 64 (12.31%) Threat Modelling
12 62 (11.92%) CI/CD
12 62 (11.92%) Information Security
13 61 (11.73%) DevOps
14 60 (11.54%) Use Case
15 59 (11.35%) Cyber Threat Intelligence
16 58 (11.15%) Security Architecture
17 55 (10.58%) DevSecOps
17 55 (10.58%) Identity Access Management
18 53 (10.19%) MITRE ATT&CK
Programming Languages
1 154 (29.62%) Python
2 142 (27.31%) PowerShell
3 57 (10.96%) Kusto Query Language
4 39 (7.50%) Bash
5 10 (1.92%) Bicep
6 9 (1.73%) Java
6 9 (1.73%) JavaScript
7 6 (1.15%) Search Processing Language
8 4 (0.77%) Go
8 4 (0.77%) SQL
9 3 (0.58%) Apex Code
9 3 (0.58%) C
9 3 (0.58%) C++
10 2 (0.38%) Perl
10 2 (0.38%) PHP
10 2 (0.38%) Shell Script
10 2 (0.38%) TypeScript
10 2 (0.38%) VBScript
11 1 (0.19%) C#
11 1 (0.19%) R
Qualifications
1 193 (37.12%) Security Cleared
2 155 (29.81%) SC Cleared
3 137 (26.35%) CISSP
4 63 (12.12%) CISM
5 51 (9.81%) Degree
6 45 (8.65%) DV Cleared
7 43 (8.27%) CEH
8 39 (7.50%) GIAC
9 37 (7.12%) Cisco Certification
10 35 (6.73%) CompTIA Security+
11 27 (5.19%) GCIH
12 24 (4.62%) GCIA
13 20 (3.85%) (ISC)2 CCSP
14 17 (3.27%) Azure Certification
15 16 (3.08%) AWS Certification
15 16 (3.08%) CompTIA CySA+
16 15 (2.88%) CCSP
17 13 (2.50%) GCFA
17 13 (2.50%) OSCP
17 13 (2.50%) SANS
Quality Assurance & Compliance
1 154 (29.62%) NIST
2 141 (27.12%) ISO/IEC 27001
3 80 (15.38%) GDPR
4 35 (6.73%) PCI DSS
5 29 (5.58%) NCSC
6 28 (5.38%) HIPAA
7 17 (3.27%) Cyber Essentials
8 11 (2.12%) GRC
9 10 (1.92%) NIST 800
9 10 (1.92%) Sarbanes-Oxley
10 9 (1.73%) SLA
11 8 (1.54%) Cyber Essentials PLUS
12 7 (1.35%) PSD2
13 6 (1.15%) JSP 440
13 6 (1.15%) QA
13 6 (1.15%) SOC 2
14 4 (0.77%) Actionable Recommendations
15 3 (0.58%) Government Security Classifications
16 2 (0.38%) HMG Security Policy Framework
17 1 (0.19%) Def Stans
System Software
1 68 (13.08%) Active Directory
2 35 (6.73%) Docker
3 8 (1.54%) Hyper-V
3 8 (1.54%) Snort
3 8 (1.54%) VMware Infrastructure
4 5 (0.96%) Squid
5 4 (0.77%) Postfix
5 4 (0.77%) Virtual Machines
6 3 (0.58%) VMware NSX
7 1 (0.19%) GPFS
7 1 (0.19%) Lustre
7 1 (0.19%) Slurm Workload Manager
7 1 (0.19%) vSphere
Systems Management
1 42 (8.08%) Terraform
2 40 (7.69%) Kubernetes
3 31 (5.96%) QRadar
4 19 (3.65%) Ansible
5 17 (3.27%) Microsoft Intune
6 9 (1.73%) CSIRT
6 9 (1.73%) Kibana
6 9 (1.73%) Nessus
6 9 (1.73%) SCCM
6 9 (1.73%) Single Sign-On
7 7 (1.35%) Prometheus
7 7 (1.35%) WSUS
8 6 (1.15%) Computer Emergency Response Teams
9 5 (0.96%) Grafana
9 5 (0.96%) logstash
9 5 (0.96%) Nexpose
9 5 (0.96%) Suricata
10 3 (0.58%) Argo
10 3 (0.58%) FortiGate
10 3 (0.58%) Jamf Pro
Vendors
1 180 (34.62%) Microsoft
2 146 (28.08%) Splunk
3 50 (9.62%) CrowdStrike
4 37 (7.12%) Palo Alto
5 34 (6.54%) CyberArk
6 29 (5.58%) BeyondTrust
6 29 (5.58%) Cisco
7 26 (5.00%) Google
8 23 (4.42%) Qualys
9 22 (4.23%) ArcSight
9 22 (4.23%) Zscaler
10 18 (3.46%) Fortinet
10 18 (3.46%) ServiceNow
11 17 (3.27%) LogRhythm
11 17 (3.27%) VMware
12 16 (3.08%) Forcepoint
12 16 (3.08%) Tenable
13 14 (2.69%) FireEye
14 10 (1.92%) Rapid7
15 8 (1.54%) Citrix