Threat Detection Contract Job Trends in England

Threat Detection
UK > England

The table below provides summary statistics and contractor rates for jobs advertised in England requiring Threat Detection skills. It covers contract job vacancies from the 6 months leading up to 19 December 2025, with comparisons to the same periods in the previous two years.

6 months to
19 Dec 2025
Same period 2024 Same period 2023
Rank 320 422 513
Rank change year-on-year +102 +91 +155
Contract jobs citing Threat Detection 226 82 50
As % of all contract jobs in England 0.72% 0.28% 0.13%
As % of the Processes & Methodologies category 0.81% 0.32% 0.15%
Number of daily rates quoted 135 59 36
10th Percentile £380 £349 £471
25th Percentile £440 £513 £525
Median daily rate (50th Percentile) £538 £575 £608
Median % change year-on-year -6.52% -5.35% -10.00%
75th Percentile £600 £636 £717
90th Percentile £738 £700 £791
UK median daily rate £525 £585 £635
% change year-on-year -10.26% -7.87% -5.93%
Number of hourly rates quoted 12 1 0
10th Percentile £45.53 - -
25th Percentile £50.25 £40.50 -
Median hourly rate £65.00 £41.00 -
Median % change year-on-year +58.54% - -
75th Percentile £75.00 £41.50 -
90th Percentile £82.88 - -
UK median hourly rate £65.00 £41.00 -
% change year-on-year +58.54% - -

All Process and Methodology Skills
England

Threat Detection falls under the Processes and Methodologies category. For comparison with the information above, the following table provides summary statistics for all contract job vacancies requiring process or methodology skills in England.

Contract vacancies with a requirement for process or methodology skills 27,932 25,643 33,123
As % of all contract IT jobs advertised in England 88.81% 88.51% 88.67%
Number of daily rates quoted 17,758 15,859 22,544
10th Percentile £300 £310 £313
25th Percentile £406 £413 £425
Median daily rate (50th Percentile) £505 £525 £544
Median % change year-on-year -3.81% -3.49% -1.09%
75th Percentile £625 £650 £650
90th Percentile £725 £750 £750
UK median daily rate £500 £525 £530
% change year-on-year -4.76% -0.94% -3.64%
Number of hourly rates quoted 1,818 849 1,407
10th Percentile £15.00 £15.62 £14.68
25th Percentile £17.88 £20.75 £19.06
Median hourly rate £25.15 £35.00 £44.50
Median % change year-on-year -28.14% -21.35% +19.70%
75th Percentile £54.56 £65.00 £65.00
90th Percentile £68.90 £74.89 £77.50
UK median hourly rate £25.15 £32.50 £43.33
% change year-on-year -22.62% -24.99% +23.80%

Threat Detection
Job Vacancy Trend in England

Historical trend showing the proportion of contract IT job postings citing Threat Detection relative to all contract IT jobs advertised in England.

Threat Detection job vacancy trend in England

Threat Detection
Daily Rate Trend in England

Contractor daily rate distribution trend for jobs in England citing Threat Detection.

Contractor daily rate distribution trend for jobs in England citing Threat Detection

Threat Detection
Daily Rate Histogram in England

Daily rate distribution for jobs citing Threat Detection in England over the 6 months to 19 December 2025.

Daily rate histogram for Threat Detection in England

Threat Detection
Hourly Rate Trend in England

Contractor hourly rate distribution trend for jobs in England citing Threat Detection.

Contractor hourly rate distribution trend for jobs in England citing Threat Detection

Threat Detection
Hourly Rate Histogram in England

Hourly rate distribution of jobs citing Threat Detection in England over the 6 months to 19 December 2025.

Hourly rate histogram for Threat Detection in England

Threat Detection
Contract Job Locations in England

The table below looks at the demand and provides a guide to the median contractor rates quoted in IT jobs citing Threat Detection within the England region over the 6 months to 19 December 2025. The 'Rank Change' column provides an indication of the change in demand within each location based on the same 6 month period last year.

Location Rank Change
on Same Period
Last Year
Matching
Contract
IT Job Ads
Median
Daily Rate
Past 6 Months
Median Daily Rate
% Change
on Same Period
Last Year
Live
Jobs
London +33 94 £575 +2.22% 19
South East +11 38 £445 -27.35% 19
Midlands -26 27 £493 -22.44% 9
East of England +3 24 £575 - 9
West Midlands -22 23 £513 -19.29% 8
North of England -37 20 £500 +11.11% 6
Yorkshire -31 13 £500 +0.70% 1
South West -2 10 £444 -40.83% 13
North West -24 6 £575 +4.55% 5
East Midlands - 4 £378 - 1
North East -6 1 £400 +14.29%
Threat Detection
UK

Threat Detection
Co-Occurring Skills & Capabilities in England by Category

The following tables expand on the one above by listing co-occurrences grouped by category. They cover the same employment type, locality and period, with up to 20 co-occurrences shown in each category:

Application Platforms
1 1 (0.44%) Confluence
1 1 (0.44%) OpenStack
Applications
1 1 (0.44%) Microsoft Office
Cloud Services
1 70 (30.97%) AWS
1 70 (30.97%) Azure
2 37 (16.37%) GCP
3 33 (14.60%) Azure Sentinel
4 23 (10.18%) Microsoft 365
5 21 (9.29%) Entra ID
6 11 (4.87%) AWS CloudTrail
6 11 (4.87%) Azure Monitor
7 10 (4.42%) Amazon GuardDuty
8 9 (3.98%) AWS CloudFormation
8 9 (3.98%) AWS KMS
9 8 (3.54%) Virtual Private Cloud
10 7 (3.10%) Azure Logic Apps
10 7 (3.10%) Microsoft Purview
11 6 (2.65%) AWS Control Tower
12 5 (2.21%) Akamai
13 4 (1.77%) Amazon CloudWatch
13 4 (1.77%) SaaS
13 4 (1.77%) Serverless
14 3 (1.33%) Azure Key Vault
Communications & Networking
1 39 (17.26%) Network Security
2 37 (16.37%) Firewall
3 25 (11.06%) DNS
4 14 (6.19%) SSL
5 13 (5.75%) FTP
5 13 (5.75%) HTTP
5 13 (5.75%) SMTP
6 8 (3.54%) TCP/IP
7 6 (2.65%) DHCP
8 4 (1.77%) Kerberos
8 4 (1.77%) VPN
9 2 (0.88%) Internet
9 2 (0.88%) Intrusion Detection
9 2 (0.88%) Wireshark
10 1 (0.44%) BGP
10 1 (0.44%) InfiniBand
10 1 (0.44%) IPsec
10 1 (0.44%) Modbus
Database & Business Intelligence
1 3 (1.33%) BigQuery
1 3 (1.33%) Elasticsearch
2 2 (0.88%) Data Lake
3 1 (0.44%) Amazon Athena
3 1 (0.44%) Amazon RDS
3 1 (0.44%) Amazon Redshift
3 1 (0.44%) Big Data
3 1 (0.44%) DB2
3 1 (0.44%) MongoDB
Development Applications
1 3 (1.33%) JIRA
2 2 (0.88%) Git
3 1 (0.44%) Burp Suite
3 1 (0.44%) Metasploit
3 1 (0.44%) Snyk
General
1 80 (35.40%) Social Skills
2 54 (23.89%) Analytical Skills
3 34 (15.04%) Finance
4 24 (10.62%) Public Sector
5 9 (3.98%) Documentation Skills
5 9 (3.98%) Financial Institution
6 7 (3.10%) Presentation Skills
7 6 (2.65%) Banking
7 6 (2.65%) Military
8 5 (2.21%) Legal
9 4 (1.77%) Organisational Skills
10 2 (0.88%) Manufacturing
11 1 (0.44%) Electronics
11 1 (0.44%) Influencing Skills
11 1 (0.44%) Law
11 1 (0.44%) Local Government
11 1 (0.44%) Marketing
11 1 (0.44%) Retail
11 1 (0.44%) Telecoms
Job Titles
1 67 (29.65%) Analyst
2 42 (18.58%) Security Engineer
3 38 (16.81%) SOC Analyst
4 35 (15.49%) Architect
5 27 (11.95%) SIEM Engineer
6 25 (11.06%) Security Analyst
7 18 (7.96%) Security Architect
8 17 (7.52%) Senior
9 10 (4.42%) Consultant
9 10 (4.42%) Cybersecurity Analyst
10 9 (3.98%) Lead
10 9 (3.98%) Monitoring Analyst
10 9 (3.98%) Threat Hunter
11 8 (3.54%) Cloud Architect
11 8 (3.54%) Cybersecurity Engineer
11 8 (3.54%) Senior Analyst
12 6 (2.65%) Azure Engineer
12 6 (2.65%) Operations Engineer
12 6 (2.65%) Security Consultant
13 5 (2.21%) SOC Engineer
Libraries, Frameworks & Software Standards
1 16 (7.08%) LDAP
2 5 (2.21%) JSON
2 5 (2.21%) REST
3 3 (1.33%) OAuth
3 3 (1.33%) OpenID
3 3 (1.33%) SAML
3 3 (1.33%) YAML
4 2 (0.88%) Elastic Stack
4 2 (0.88%) Regular Expression
5 1 (0.44%) ARM Templates
5 1 (0.44%) eBPF
5 1 (0.44%) Kafka
5 1 (0.44%) OpenTelemetry
5 1 (0.44%) PyTorch
5 1 (0.44%) SOAP
5 1 (0.44%) TensorFlow
Miscellaneous
1 41 (18.14%) Security Operations Centre
2 36 (15.93%) Cyber Threat
3 32 (14.16%) Security Posture
4 28 (12.39%) Onboarding
5 20 (8.85%) CSOC
6 19 (8.41%) Cyber Defence
7 18 (7.96%) Management Information System
8 16 (7.08%) Analytical Mindset
9 13 (5.75%) Cyber Security Posture
9 13 (5.75%) Cyberattack
10 12 (5.31%) Cyber Kill Chain
11 11 (4.87%) Cloud Native
11 11 (4.87%) Operational Technology
12 6 (2.65%) PKI
13 3 (1.33%) Cloud Security Posture
13 3 (1.33%) Data Protection Act
13 3 (1.33%) Hybrid Cloud
13 3 (1.33%) STIX
13 3 (1.33%) YARA
14 2 (0.88%) Insider Threat
Operating Systems
1 31 (13.72%) Windows
2 26 (11.50%) Linux
3 9 (3.98%) Red Hat Enterprise Linux
4 5 (2.21%) Unix
5 2 (0.88%) Mac OS
5 2 (0.88%) VMS
6 1 (0.44%) Android
6 1 (0.44%) Apple iOS
6 1 (0.44%) Kali Linux
6 1 (0.44%) Mac OS X
6 1 (0.44%) Windows Server
Processes & Methodologies
1 134 (59.29%) SIEM
2 132 (58.41%) Incident Response
3 110 (48.67%) Cybersecurity
4 88 (38.94%) Security Operations
5 60 (26.55%) SOAR
6 51 (22.57%) Threat Intelligence
7 41 (18.14%) Analytics
7 41 (18.14%) MITRE ATT&CK
8 39 (17.26%) Continuous Improvement
9 38 (16.81%) Threat Modelling
10 37 (16.37%) Information Security
11 35 (15.49%) Cyber Threat Intelligence
12 33 (14.60%) Cloud Security
13 32 (14.16%) Use Case
14 28 (12.39%) Security Monitoring
15 27 (11.95%) Problem-Solving
15 27 (11.95%) Security Architecture
16 25 (11.06%) Runbook
17 24 (10.62%) AI
17 24 (10.62%) Vulnerability Management
Programming Languages
1 60 (26.55%) Python
2 59 (26.11%) PowerShell
3 30 (13.27%) Kusto Query Language
4 8 (3.54%) Bash
5 4 (1.77%) Java
6 3 (1.33%) Bicep
7 2 (0.88%) C++
7 2 (0.88%) SQL
8 1 (0.44%) C
8 1 (0.44%) C#
8 1 (0.44%) JavaScript
8 1 (0.44%) Korn
8 1 (0.44%) Search Processing Language
8 1 (0.44%) Shell Script
Qualifications
1 87 (38.50%) Security Cleared
2 73 (32.30%) SC Cleared
3 41 (18.14%) CISSP
4 21 (9.29%) DV Cleared
5 20 (8.85%) CEH
6 19 (8.41%) GIAC
7 14 (6.19%) AWS Certification
7 14 (6.19%) Degree
8 12 (5.31%) CISM
9 10 (4.42%) GCIH
10 9 (3.98%) CompTIA Security+
10 9 (3.98%) GCIA
11 8 (3.54%) Azure Certification
12 7 (3.10%) OSCP
13 6 (2.65%) AWS Certified Solutions Architect
13 6 (2.65%) Cisco Certification
13 6 (2.65%) Computer Science Degree
14 5 (2.21%) CompTIA CySA+
14 5 (2.21%) GCFA
14 5 (2.21%) Microsoft Certification
Quality Assurance & Compliance
1 49 (21.68%) NIST
2 46 (20.35%) ISO/IEC 27001
3 22 (9.73%) GDPR
4 18 (7.96%) NCSC
5 16 (7.08%) Cyber Essentials
6 6 (2.65%) JSP 440
6 6 (2.65%) PCI DSS
7 5 (2.21%) Actionable Recommendations
7 5 (2.21%) Cyber Essentials PLUS
8 4 (1.77%) HIPAA
8 4 (1.77%) QA
9 2 (0.88%) GRC
9 2 (0.88%) PMO
9 2 (0.88%) SOC 2
10 1 (0.44%) Def Stans
10 1 (0.44%) GPG13
10 1 (0.44%) NIST 800
System Software
1 19 (8.41%) Active Directory
2 7 (3.10%) Virtual Machines
3 6 (2.65%) Virtual Desktop
4 4 (1.77%) Snort
5 3 (1.33%) Docker
6 2 (0.88%) Squid
7 1 (0.44%) GPFS
7 1 (0.44%) Lustre
7 1 (0.44%) Slurm Workload Manager
Systems Management
1 15 (6.64%) Terraform
2 12 (5.31%) Kibana
2 12 (5.31%) Kubernetes
2 12 (5.31%) QRadar
3 8 (3.54%) Microsoft Intune
4 7 (3.10%) SCCM
5 6 (2.65%) Active Directory Federation Services
5 6 (2.65%) WSUS
6 4 (1.77%) Nessus
7 3 (1.33%) CSIRT
8 2 (0.88%) Ansible
8 2 (0.88%) logstash
8 2 (0.88%) Nexpose
8 2 (0.88%) Suricata
9 1 (0.44%) CASB
9 1 (0.44%) Jamf Pro
9 1 (0.44%) SELinux
Vendors
1 71 (31.42%) Splunk
2 64 (28.32%) Microsoft
3 20 (8.85%) CrowdStrike
4 15 (6.64%) Google
5 12 (5.31%) Darktrace
5 12 (5.31%) FireEye
6 11 (4.87%) Tanium
6 11 (4.87%) Tenable
7 10 (4.42%) CyberArk
7 10 (4.42%) ServiceNow
8 8 (3.54%) ArcSight
8 8 (3.54%) Qualys
9 7 (3.10%) LogRhythm
9 7 (3.10%) Sophos
10 6 (2.65%) Citrix
10 6 (2.65%) CloudEndure
10 6 (2.65%) Palo Alto
11 5 (2.21%) F5
11 5 (2.21%) Zscaler
12 4 (1.77%) Cisco