SIEM Contract Job Trends in England

Security Information and Event Management (SIEM)
UK > England

The table below provides summary statistics and contractor rates for jobs advertised in England requiring SIEM skills. It covers contract job vacancies from the 6 months leading up to 14 December 2025, with comparisons to the same periods in the previous two years.

6 months to
14 Dec 2025
Same period 2024 Same period 2023
Rank 167 192 153
Rank change year-on-year +25 -39 +138
Contract jobs citing SIEM 533 407 624
As % of all contract jobs in England 1.71% 1.39% 1.65%
As % of the Processes & Methodologies category 1.93% 1.57% 1.86%
Number of daily rates quoted 349 271 470
10th Percentile £400 £406 £463
25th Percentile £461 £504 £525
Median daily rate (50th Percentile) £538 £588 £625
Median % change year-on-year -8.51% -6.00% +4.17%
75th Percentile £638 £700 £725
90th Percentile £750 £800 £825
UK median daily rate £538 £600 £625
% change year-on-year -10.42% -4.00% +4.17%
Number of hourly rates quoted 19 1 2
10th Percentile £44.39 - £63.75
25th Percentile £48.00 £56.25 £65.63
Median hourly rate £65.00 £57.50 £68.75
Median % change year-on-year +13.04% -16.36% +4.96%
75th Percentile £84.38 £58.75 £71.88
90th Percentile £87.55 - £73.75
UK median hourly rate £65.50 £57.50 £70.00
% change year-on-year +13.91% -17.86% +6.87%

All Process and Methodology Skills
England

SIEM falls under the Processes and Methodologies category. For comparison with the information above, the following table provides summary statistics for all contract job vacancies requiring process or methodology skills in England.

Contract vacancies with a requirement for process or methodology skills 27,668 25,905 33,491
As % of all contract IT jobs advertised in England 89.00% 88.32% 88.79%
Number of daily rates quoted 17,615 15,999 22,793
10th Percentile £300 £310 £313
25th Percentile £406 £418 £425
Median daily rate (50th Percentile) £506 £525 £545
Median % change year-on-year -3.62% -3.67% -0.91%
75th Percentile £625 £650 £650
90th Percentile £725 £750 £750
UK median daily rate £500 £525 £531
% change year-on-year -4.76% -1.13% -3.45%
Number of hourly rates quoted 1,810 882 1,400
10th Percentile £15.00 £15.54 £14.74
25th Percentile £17.87 £20.30 £19.06
Median hourly rate £25.15 £35.00 £44.25
Median % change year-on-year -28.14% -20.90% +18.63%
75th Percentile £53.75 £65.00 £65.00
90th Percentile £69.26 £74.99 £77.50
UK median hourly rate £25.15 £33.00 £42.50
% change year-on-year -23.79% -22.35% +21.43%

SIEM
Job Vacancy Trend in England

Historical trend showing the proportion of contract IT job postings citing SIEM relative to all contract IT jobs advertised in England.

SIEM job vacancy trend in England

SIEM
Daily Rate Trend in England

Contractor daily rate distribution trend for jobs in England citing SIEM.

Contractor daily rate distribution trend for jobs in England citing SIEM

SIEM
Daily Rate Histogram in England

Daily rate distribution for jobs citing SIEM in England over the 6 months to 14 December 2025.

Daily rate histogram for SIEM in England

SIEM
Hourly Rate Trend in England

Contractor hourly rate distribution trend for jobs in England citing SIEM.

Contractor hourly rate distribution trend for jobs in England citing SIEM

SIEM
Hourly Rate Histogram in England

Hourly rate distribution of jobs citing SIEM in England over the 6 months to 14 December 2025.

Hourly rate histogram for SIEM in England

SIEM
Contract Job Locations in England

The table below looks at the demand and provides a guide to the median contractor rates quoted in IT jobs citing SIEM within the England region over the 6 months to 14 December 2025. The 'Rank Change' column provides an indication of the change in demand within each location based on the same 6 month period last year.

Location Rank Change
on Same Period
Last Year
Matching
Contract
IT Job Ads
Median
Daily Rate
Past 6 Months
Median Daily Rate
% Change
on Same Period
Last Year
Live
Jobs
London +18 225 £575 - 59
South East +57 117 £488 -12.16% 85
Midlands -35 59 £525 -14.98% 49
West Midlands -37 53 £545 -11.74% 32
North of England -16 45 £500 -18.37% 55
South West -22 40 £540 -16.92% 41
East of England 0 30 £613 +11.36% 31
North West -7 25 £475 -15.56% 38
Yorkshire -37 17 £529 -20.19% 13
East Midlands - 6 £450 - 15
North East -9 3 £400 -5.88% 4
SIEM
UK

SIEM
Co-Occurring Skills & Capabilities in England by Category

The following tables expand on the one above by listing co-occurrences grouped by category. They cover the same employment type, locality and period, with up to 20 co-occurrences shown in each category:

Application Platforms
1 9 (1.69%) Microsoft Exchange
2 5 (0.94%) OpenStack
3 1 (0.19%) Confluence
3 1 (0.19%) Jupyter
3 1 (0.19%) nginx
Applications
1 2 (0.38%) Microsoft Excel
2 1 (0.19%) Microsoft Office
2 1 (0.19%) MS Visio
Business Applications
1 3 (0.56%) Maximo
2 1 (0.19%) Oracle CRM
Cloud Services
1 209 (39.21%) Azure
2 172 (32.27%) AWS
3 82 (15.38%) Azure Sentinel
4 79 (14.82%) GCP
5 57 (10.69%) Microsoft 365
6 39 (7.32%) Entra ID
7 21 (3.94%) SaaS
8 18 (3.38%) Azure Monitor
9 16 (3.00%) Microsoft Purview
10 14 (2.63%) Azure Logic Apps
11 13 (2.44%) GitHub
12 12 (2.25%) AWS CloudFormation
13 11 (2.06%) GitHub Actions
14 9 (1.69%) Azure DevOps
15 7 (1.31%) IaaS
15 7 (1.31%) OCI
15 7 (1.31%) PaaS
16 6 (1.13%) AWS CloudTrail
16 6 (1.13%) Cloudflare
17 5 (0.94%) Amazon GuardDuty
Communications & Networking
1 137 (25.70%) Firewall
2 109 (20.45%) Network Security
3 43 (8.07%) DNS
4 31 (5.82%) VPN
5 28 (5.25%) TCP/IP
6 21 (3.94%) SMTP
7 20 (3.75%) SSL
8 19 (3.56%) HTTP
9 16 (3.00%) Intrusion Detection
10 15 (2.81%) DHCP
11 14 (2.63%) FTP
12 13 (2.44%) Internet
13 8 (1.50%) LAN
13 8 (1.50%) WAN
14 6 (1.13%) BGP
14 6 (1.13%) Wireshark
15 4 (0.75%) DKIM
15 4 (0.75%) DMARC
15 4 (0.75%) SD-WAN
16 3 (0.56%) SAN
Database & Business Intelligence
1 9 (1.69%) Data Lake
1 9 (1.69%) Elasticsearch
2 3 (0.56%) SQL Server
3 2 (0.38%) Oracle Database
3 2 (0.38%) Power BI
4 1 (0.19%) Amazon Athena
4 1 (0.19%) Amazon RDS
4 1 (0.19%) Amazon Redshift
4 1 (0.19%) Redis
Development Applications
1 8 (1.50%) CircleCI
2 7 (1.31%) GitLab
2 7 (1.31%) JIRA
2 7 (1.31%) Snyk
3 5 (0.94%) Jenkins
4 4 (0.75%) Metasploit
5 3 (0.56%) Git
6 2 (0.38%) Burp Suite
6 2 (0.38%) Fiddler
7 1 (0.19%) MLflow
7 1 (0.19%) SonarQube
General
1 187 (35.08%) Social Skills
2 109 (20.45%) Analytical Skills
3 63 (11.82%) Finance
4 56 (10.51%) Public Sector
5 45 (8.44%) Documentation Skills
6 22 (4.13%) Banking
7 15 (2.81%) Legal
8 14 (2.63%) Presentation Skills
9 12 (2.25%) Military
10 11 (2.06%) Inclusion and Diversity
11 8 (1.50%) Retail
12 6 (1.13%) Back Office
12 6 (1.13%) Local Government
12 6 (1.13%) Telecoms
13 4 (0.75%) Investment Banking
14 2 (0.38%) Aerospace
14 2 (0.38%) Financial Institution
15 1 (0.19%) Games
15 1 (0.19%) Law
15 1 (0.19%) Manufacturing
Job Titles
1 124 (23.26%) Security Engineer
2 113 (21.20%) Analyst
3 83 (15.57%) Architect
4 60 (11.26%) Security Analyst
5 52 (9.76%) SOC Analyst
6 50 (9.38%) Cybersecurity Engineer
6 50 (9.38%) Security Architect
7 49 (9.19%) SIEM Engineer
8 48 (9.01%) Senior
9 29 (5.44%) Lead
10 26 (4.88%) Cybersecurity Analyst
11 22 (4.13%) Consultant
12 19 (3.56%) SOC Engineer
13 17 (3.19%) Security Consultant
13 17 (3.19%) Security Manager
14 15 (2.81%) Azure Engineer
14 15 (2.81%) Network Engineer
15 13 (2.44%) Infrastructure Engineer
15 13 (2.44%) Network Security Engineer
15 13 (2.44%) SOC Manager
Libraries, Frameworks & Software Standards
1 41 (7.69%) LDAP
2 17 (3.19%) Elastic Stack
2 17 (3.19%) REST
3 8 (1.50%) SAML
4 6 (1.13%) JSON
4 6 (1.13%) Kafka
4 6 (1.13%) Loki
5 5 (0.94%) .NET
5 5 (0.94%) OpenID
5 5 (0.94%) SOAP
6 4 (0.75%) OAuth
6 4 (0.75%) RabbitMQ
6 4 (0.75%) Regular Expression
7 3 (0.56%) ARM Templates
7 3 (0.56%) Lightning Web Components
7 3 (0.56%) Node.js
7 3 (0.56%) OAuth2
7 3 (0.56%) YAML
8 2 (0.38%) eBPF
8 2 (0.38%) OpenTelemetry
Miscellaneous
1 81 (15.20%) Security Operations Centre
2 64 (12.01%) Security Posture
3 58 (10.88%) Cyber Threat
4 44 (8.26%) Onboarding
5 34 (6.38%) Management Information System
6 31 (5.82%) CSOC
6 31 (5.82%) Cyber Defence
7 28 (5.25%) Cloud Native
8 23 (4.32%) Operational Technology
9 18 (3.38%) Analytical Mindset
9 18 (3.38%) PKI
10 16 (3.00%) Cyberattack
10 16 (3.00%) Enterprise Software
10 16 (3.00%) Hybrid Cloud
11 13 (2.44%) Cyber Security Posture
12 12 (2.25%) Cyber Kill Chain
13 11 (2.06%) Cloud Security Posture
14 10 (1.88%) Data Centre
15 8 (1.50%) Public Cloud
16 6 (1.13%) Product Ownership
Operating Systems
1 93 (17.45%) Windows
2 89 (16.70%) Linux
3 21 (3.94%) Unix
4 18 (3.38%) Windows Server
5 17 (3.19%) Red Hat Enterprise Linux
6 5 (0.94%) Ubuntu
7 4 (0.75%) CentOS
8 3 (0.56%) Mac OS X
9 2 (0.38%) Kali Linux
9 2 (0.38%) Mac OS
10 1 (0.19%) Windows 10
10 1 (0.19%) Windows Server 2012
Processes & Methodologies
1 289 (54.22%) Cybersecurity
2 230 (43.15%) Incident Response
3 176 (33.02%) Security Operations
4 137 (25.70%) SOAR
5 135 (25.33%) Threat Detection
6 103 (19.32%) Cloud Security
6 103 (19.32%) Problem-Solving
7 81 (15.20%) Vulnerability Management
8 71 (13.32%) CI/CD
9 70 (13.13%) DevOps
9 70 (13.13%) Threat Intelligence
10 64 (12.01%) Security Monitoring
11 63 (11.82%) Threat Modelling
12 61 (11.44%) Information Security
13 60 (11.26%) Infrastructure as Code
14 59 (11.07%) Continuous Improvement
15 58 (10.88%) Security Architecture
16 57 (10.69%) DevSecOps
17 54 (10.13%) Cyber Threat Intelligence
17 54 (10.13%) Zero Trust
Programming Languages
1 174 (32.65%) Python
2 167 (31.33%) PowerShell
3 62 (11.63%) Kusto Query Language
4 39 (7.32%) Bash
5 13 (2.44%) Bicep
6 10 (1.88%) Java
6 10 (1.88%) JavaScript
7 6 (1.13%) Search Processing Language
8 5 (0.94%) SQL
9 4 (0.75%) Go
10 3 (0.56%) Apex Code
10 3 (0.56%) C
10 3 (0.56%) C++
11 2 (0.38%) PHP
11 2 (0.38%) Shell Script
11 2 (0.38%) TypeScript
11 2 (0.38%) VBScript
12 1 (0.19%) C#
12 1 (0.19%) Korn
12 1 (0.19%) R
Qualifications
1 205 (38.46%) Security Cleared
2 169 (31.71%) SC Cleared
3 133 (24.95%) CISSP
4 61 (11.44%) CISM
5 52 (9.76%) Degree
6 50 (9.38%) DV Cleared
7 44 (8.26%) CEH
8 42 (7.88%) GIAC
9 36 (6.75%) Cisco Certification
10 34 (6.38%) CompTIA Security+
11 26 (4.88%) GCIH
12 24 (4.50%) Azure Certification
13 23 (4.32%) GCIA
14 19 (3.56%) (ISC)2 CCSP
14 19 (3.56%) AWS Certification
15 14 (2.63%) CCSP
15 14 (2.63%) CompTIA CySA+
16 13 (2.44%) GCFA
17 11 (2.06%) CCNP
17 11 (2.06%) OSCP
Quality Assurance & Compliance
1 157 (29.46%) NIST
2 143 (26.83%) ISO/IEC 27001
3 83 (15.57%) GDPR
4 39 (7.32%) PCI DSS
5 31 (5.82%) HIPAA
6 28 (5.25%) NCSC
7 16 (3.00%) Cyber Essentials
8 11 (2.06%) NIST 800
9 10 (1.88%) GRC
9 10 (1.88%) Sarbanes-Oxley
10 8 (1.50%) Cyber Essentials PLUS
11 7 (1.31%) PSD2
11 7 (1.31%) SOC 2
12 6 (1.13%) JSP 440
13 5 (0.94%) Actionable Recommendations
13 5 (0.94%) QA
13 5 (0.94%) SLA
14 2 (0.38%) HMG Security Policy Framework
15 1 (0.19%) Def Stans
15 1 (0.19%) ISO/IEC 27002 (supersedes ISO/IEC 17799)
System Software
1 75 (14.07%) Active Directory
2 36 (6.75%) Docker
3 10 (1.88%) Hyper-V
3 10 (1.88%) VMware Infrastructure
4 8 (1.50%) Snort
5 6 (1.13%) Virtual Machines
6 5 (0.94%) Squid
6 5 (0.94%) VMware NSX
7 4 (0.75%) Postfix
8 1 (0.19%) GPFS
8 1 (0.19%) Lustre
8 1 (0.19%) NFS
8 1 (0.19%) Slurm Workload Manager
8 1 (0.19%) VMware ESXi
8 1 (0.19%) vSphere
Systems Management
1 49 (9.19%) Terraform
2 44 (8.26%) Kubernetes
3 29 (5.44%) QRadar
4 20 (3.75%) Ansible
5 18 (3.38%) Kibana
6 17 (3.19%) Microsoft Intune
7 11 (2.06%) SCCM
8 10 (1.88%) Nessus
8 10 (1.88%) Single Sign-On
8 10 (1.88%) WSUS
9 9 (1.69%) CSIRT
9 9 (1.69%) logstash
10 7 (1.31%) Prometheus
11 5 (0.94%) Computer Emergency Response Teams
11 5 (0.94%) Grafana
11 5 (0.94%) Nexpose
11 5 (0.94%) Suricata
12 3 (0.56%) Fluentd
12 3 (0.56%) FortiGate
12 3 (0.56%) Icinga
Vendors
1 190 (35.65%) Microsoft
2 134 (25.14%) Splunk
3 48 (9.01%) CrowdStrike
4 42 (7.88%) CyberArk
5 35 (6.57%) Palo Alto
6 34 (6.38%) BeyondTrust
7 30 (5.63%) Cisco
8 29 (5.44%) Qualys
9 26 (4.88%) Google
10 23 (4.32%) Zscaler
11 21 (3.94%) LogRhythm
12 20 (3.75%) ArcSight
13 19 (3.56%) Tenable
13 19 (3.56%) VMware
14 18 (3.38%) FireEye
14 18 (3.38%) Fortinet
14 18 (3.38%) ServiceNow
15 16 (3.00%) Forcepoint
16 12 (2.25%) Tanium
17 9 (1.69%) Sophos