Period
to 13 December 2019

The following table provides summary statistics for contract job vacancies advertised in London with a requirement for OWASP skills. Included is a benchmarking guide to the contractor rates offered in vacancies that have cited OWASP over the 6 months to 13 December 2019 with a comparison to the same period in the previous 2 years.

Note that daily and hourly rates are treated separately in these statistics. When calculating contractor rate percentiles, daily rates are never derived from quoted hourly rates or vice versa.

Open Web Application Security Project (OWASP)
England > London
6 months to
13 Dec 2019
Same period 2018 Same period 2017
Rank 412 460 515
Rank change year-on-year +48 +55 +2
Contract jobs citing OWASP 136 175 133
As % of all contract IT jobs advertised in London 0.40% 0.37% 0.28%
As % of the Processes & Methodologies category 0.46% 0.42% 0.32%
Number of daily rates quoted 98 122 100
London median daily rate £575 £600 £513
Median daily rate % change year-on-year -4.17% +17.07% +2.50%
10th Percentile £425 £463 £413
90th Percentile £675 £774 £714
England median daily rate £561 £525 £488
% change year-on-year +6.90% +7.69% +2.90%
Number of hourly rates quoted 0 0 0
London median hourly rate - - -
England median hourly rate - - £47.50

OWASP is in the Processes and Methodologies category. The following table is for comparison with the above and provides summary statistics for all contract job vacancies advertised in London with a requirement for process or methodology skills.

All Process and Methodology Skills
London
Contract vacancies with a requirement for process or methodology skills 29,671 41,424 42,040
As % of all contract IT jobs advertised in London 87.61% 88.25% 88.39%
Number of daily rates quoted 21,225 29,880 30,548
London median daily rate £513 £500 £500
Median daily rate % change year-on-year +2.50% - +5.26%
10th Percentile £325 £325 £313
90th Percentile £688 £675 £675
England median daily rate £475 £475 £450
% change year-on-year - +5.56% +5.88%
Number of hourly rates quoted 409 465 393
London median hourly rate £24.66 £24.08 £22.50
Median hourly rate % change year-on-year +2.41% +7.02% +2.27%
10th Percentile £12.44 £13.05 £13.26
90th Percentile £53.75 £54.41 £48.75
England median hourly rate £23.50 £22.00 £25.00
% change year-on-year +6.82% -12.00% +8.70%

OWASP
Job Vacancy Trend in London

Job postings citing OWASP as a percentage of all IT jobs advertised in London.

Job vacancy trend for OWASP in London

OWASP
Contractor Daily Rate Trend in London

This chart provides the 3-month moving average for daily rates quoted in contract jobs citing OWASP in London.

Contractor daily rate trend for OWASP in London

OWASP
Contractor Daily Rate Histogram in London

The daily rate distribution of IT jobs citing OWASP in London over the 6 months to 13 December 2019.

Contractor daily rate histogram for OWASP in London

OWASP
Contract Job Locations in London

The table below looks at the demand and provides a guide to the median contractor rates quoted in IT jobs citing OWASP within the London region over the 6 months to 13 December 2019. The 'Rank Change' column provides an indication of the change in demand within each location based on the same 6 month period last year.

Location Rank Change
on Same Period
Last Year
Matching
Contract
IT Job Ads
Median
Daily Rate
Past 6 Months
Median Daily Rate
% Change
on Same Period
Last Year
Live
Job
Vacancies
Central London +12 31 £625 +7.53% 7
South London +39 4 £425 -26.09%
West London - 1 £475 - 1
OWASP
England

For the 6 months to 13 December 2019, IT contractor jobs citing OWASP also mentioned the following skills in order of popularity. The figures indicate the absolute number co-occurrences and as a proportion of all contract job ads across the London region with a requirement for OWASP.

1 53 (38.97%) Agile Software Development
2 46 (33.82%) Information Security
3 42 (30.88%) Linux
4 40 (29.41%) JavaScript
5 37 (27.21%) AWS
6 36 (26.47%) Java
7 35 (25.74%) Finance
8 33 (24.26%) Azure
8 33 (24.26%) OAuth
8 33 (24.26%) NIST
9 32 (23.53%) DevOps
10 30 (22.06%) ISO/IEC 27001
11 29 (21.32%) Docker
11 29 (21.32%) Node.js
11 29 (21.32%) AngularJS
11 29 (21.32%) Threat Modelling
12 28 (20.59%) Microservices
12 28 (20.59%) Git (software)
13 26 (19.12%) Python
14 25 (18.38%) Windows
14 25 (18.38%) REST
15 23 (16.91%) Microsoft
16 21 (15.44%) COBIT
17 20 (14.71%) Penetration Testing
17 20 (14.71%) PCI DSS
17 20 (14.71%) Banking
17 20 (14.71%) Firewall
17 20 (14.71%) GitLab
18 19 (13.97%) Kubernetes
18 19 (13.97%) SABSA

OWASP
Co-occurring IT Skills in London by Category

The follow tables expand on the table above by listing co-occurrences grouped by category. The same job type, locality and period is covered with up to 20 co-occurrences shown in each of the following categories:

Application Platforms
1 12 (8.82%) Elasticsearch
2 10 (7.35%) nginx
3 6 (4.41%) Apache
3 6 (4.41%) IIS
4 2 (1.47%) Confluence
4 2 (1.47%) SharePoint
5 1 (0.74%) Apache Solr
5 1 (0.74%) ArcGIS
5 1 (0.74%) CMS
5 1 (0.74%) JBoss
5 1 (0.74%) WebLogic
5 1 (0.74%) WebSphere
Applications
1 1 (0.74%) Microsoft Excel
1 1 (0.74%) Microsoft Office
Business Applications
1 2 (1.47%) Dynamics AX
1 2 (1.47%) Dynamics CRM
1 2 (1.47%) Dynamics NAV
Cloud Services
1 37 (27.21%) AWS
2 33 (24.26%) Azure
3 7 (5.15%) GCP
3 7 (5.15%) Power Platform
4 5 (3.68%) Azure Data Factory
4 5 (3.68%) Datadog
5 4 (2.94%) npm
5 4 (2.94%) OpenShift
5 4 (2.94%) Yarn
6 3 (2.21%) SaaS
7 2 (1.47%) Akamai
7 2 (1.47%) Amazon SQS
7 2 (1.47%) Dynamics 365
7 2 (1.47%) IaaS
7 2 (1.47%) Office 365
7 2 (1.47%) PaaS
8 1 (0.74%) Azure Functions
8 1 (0.74%) CloudFront
8 1 (0.74%) G Suite
8 1 (0.74%) Serverless
Communications & Networking
1 20 (14.71%) Firewall
2 18 (13.24%) HTTP
3 12 (8.82%) DNS
3 12 (8.82%) TCP/IP
4 9 (6.62%) FTP
4 9 (6.62%) SSL
5 7 (5.15%) Network Security
6 4 (2.94%) Cisco Firepower
6 4 (2.94%) Reverse Proxy
6 4 (2.94%) tcpdump
7 2 (1.47%) Cisco IOS
7 2 (1.47%) Wireshark
8 1 (0.74%) HTTPS
8 1 (0.74%) Internet
8 1 (0.74%) Intrusion Detection
Database & Business Intelligence
1 13 (9.56%) MongoDB
2 11 (8.09%) PostgreSQL
3 10 (7.35%) SQL Server
4 9 (6.62%) Big Data
5 7 (5.15%) Power BI
6 6 (4.41%) Data Lake
6 6 (4.41%) Data Warehouse
7 5 (3.68%) Apache Cassandra
7 5 (3.68%) InfluxDB
7 5 (3.68%) Microsoft Analysis Services
7 5 (3.68%) Redis
8 4 (2.94%) NoSQL
8 4 (2.94%) SQL Server 2014
8 4 (2.94%) SQL Server 2017
8 4 (2.94%) SQL Server Analysis Services
9 1 (0.74%) Azure SQL Database
9 1 (0.74%) Cosmos DB
Development Applications
1 28 (20.59%) Git (software)
2 20 (14.71%) GitLab
3 17 (12.50%) Jenkins
4 13 (9.56%) gulp
5 10 (7.35%) Gatling
5 10 (7.35%) SonarQube
6 9 (6.62%) Geb
6 9 (6.62%) Gradle
6 9 (6.62%) Spock
7 8 (5.88%) Burp Suite
7 8 (5.88%) Visual Studio Team System
8 7 (5.15%) JIRA
9 6 (4.41%) webpack
10 5 (3.68%) Team Foundation Server
11 4 (2.94%) CircleCI
12 3 (2.21%) Atlassian Bamboo
12 3 (2.21%) Visual Studio
13 2 (1.47%) JMeter
13 2 (1.47%) NUnit
13 2 (1.47%) Subversion
General
1 35 (25.74%) Finance
2 20 (14.71%) Banking
3 7 (5.15%) Public Sector
4 4 (2.94%) Games
5 3 (2.21%) Retail
6 2 (1.47%) Investment Banking
7 1 (0.74%) Front Office
7 1 (0.74%) German Language
7 1 (0.74%) Legal
Job Titles
1 34 (25.00%) Developer
2 29 (21.32%) Security Engineer
3 16 (11.76%) Consultant
3 16 (11.76%) Security Consultant
4 14 (10.29%) Applications Engineer
5 12 (8.82%) Senior Developer
6 10 (7.35%) Applications Consultant
6 10 (7.35%) DevOps Engineer
6 10 (7.35%) Java Developer
7 8 (5.88%) Agile Developer
7 8 (5.88%) Agile Java Developer
7 8 (5.88%) Architect
7 8 (5.88%) Penetration Tester
8 7 (5.15%) Senior Security Engineer
9 6 (4.41%) Senior Applications Engineer
10 5 (3.68%) Angular Developer
10 5 (3.68%) C# Developer
10 5 (3.68%) Front End Developer (Client-Side Developer)
10 5 (3.68%) Kubernetes Engineer
10 5 (3.68%) Tester
Libraries, Frameworks & Software Standards
1 33 (24.26%) OAuth
2 29 (21.32%) AngularJS
2 29 (21.32%) Node.js
3 25 (18.38%) REST
4 19 (13.97%) CSS
4 19 (13.97%) HTML
5 17 (12.50%) Spring
6 16 (11.76%) OAuth2
6 16 (11.76%) Spring Boot
7 15 (11.03%) GraphQL
7 15 (11.03%) Kafka
7 15 (11.03%) Web Services
8 14 (10.29%) HTML5
8 14 (10.29%) Twitter Bootstrap
9 10 (7.35%) JSON
9 10 (7.35%) React
9 10 (7.35%) SAML
9 10 (7.35%) Swagger
10 9 (6.62%) .NET
10 9 (6.62%) SOAP
Miscellaneous
1 11 (8.09%) Online Banking
2 10 (7.35%) User Experience
3 9 (6.62%) Mobile App
4 8 (5.88%) Public Cloud
5 7 (5.15%) Greenfield Project
6 5 (3.68%) W3C
6 5 (3.68%) Wiki
7 4 (2.94%) Cloud Native
7 4 (2.94%) IVR
7 4 (2.94%) Linux Command Line
7 4 (2.94%) PKI
8 3 (2.21%) Cyberattack
8 3 (2.21%) FMCG
9 2 (1.47%) Distributed Denial-of-Service
9 2 (1.47%) Management Information System
9 2 (1.47%) PMI
9 2 (1.47%) Self-Motivation
10 1 (0.74%) Analytical Skills
10 1 (0.74%) Data Centre
10 1 (0.74%) Private Cloud
Operating Systems
1 42 (30.88%) Linux
2 25 (18.38%) Windows
3 13 (9.56%) Red Hat Enterprise Linux
4 11 (8.09%) Android
4 11 (8.09%) Debian
4 11 (8.09%) openSUSE
4 11 (8.09%) Ubuntu
4 11 (8.09%) Windows Server
5 9 (6.62%) Apple iOS
5 9 (6.62%) Mac OS X
6 3 (2.21%) Windows 10
7 2 (1.47%) CentOS
7 2 (1.47%) Unix
8 1 (0.74%) Kali Linux
8 1 (0.74%) VMS
Processes & Methodologies
1 53 (38.97%) Agile Software Development
2 46 (33.82%) Information Security
3 32 (23.53%) DevOps
4 29 (21.32%) Threat Modelling
5 28 (20.59%) Microservices
6 20 (14.71%) Penetration Testing
7 19 (13.97%) ITIL
7 19 (13.97%) SABSA
7 19 (13.97%) TDD
8 18 (13.24%) Open Source
8 18 (13.24%) Scrum
9 17 (12.50%) Problem-Solving
9 17 (12.50%) Security Architecture
9 17 (12.50%) Stakeholder Management
9 17 (12.50%) Test Automation
10 16 (11.76%) Kanban
11 15 (11.03%) Continuous Integration
11 15 (11.03%) Vulnerability Management
12 14 (10.29%) BDD
12 14 (10.29%) SIEM
Programming Languages
1 40 (29.41%) JavaScript
2 36 (26.47%) Java
3 26 (19.12%) Python
4 17 (12.50%) Ruby
5 15 (11.03%) C#
6 13 (9.56%) TypeScript
7 12 (8.82%) PowerShell
7 12 (8.82%) SQL
8 10 (7.35%) Java 8
9 9 (6.62%) PHP
10 8 (5.88%) Bash Shell
11 6 (4.41%) ES6
12 3 (2.21%) Scala
13 2 (1.47%) C
13 2 (1.47%) C++
13 2 (1.47%) XQuery
14 1 (0.74%) Go
14 1 (0.74%) T-SQL
Qualifications
1 17 (12.50%) SANS
2 16 (11.76%) Security Cleared
3 14 (10.29%) CISSP
3 14 (10.29%) SC Cleared
4 11 (8.09%) (ISC)2 CCSP
4 11 (8.09%) Cisco Certification
5 10 (7.35%) CISM
6 8 (5.88%) CCSP
6 8 (5.88%) OSCP
7 7 (5.15%) CEH
8 6 (4.41%) CISA
9 5 (3.68%) CHECK Team Member
10 4 (2.94%) CRISC
10 4 (2.94%) Degree
11 3 (2.21%) BPSS Clearance
11 3 (2.21%) DV Cleared
12 2 (1.47%) PMI Certification
13 1 (0.74%) GIAC
13 1 (0.74%) GSEC
13 1 (0.74%) Microsoft Certification
Quality Assurance & Compliance
1 33 (24.26%) NIST
2 30 (22.06%) ISO/IEC 27001
3 21 (15.44%) COBIT
4 20 (14.71%) PCI DSS
5 13 (9.56%) Sarbanes-Oxley
6 11 (8.09%) HIPAA
7 5 (3.68%) GDPR
7 5 (3.68%) WCAG
8 3 (2.21%) PMO
8 3 (2.21%) QA
8 3 (2.21%) Web Application Security Consortium
9 2 (1.47%) SLA
10 1 (0.74%) Cyber Essentials
10 1 (0.74%) ISO/IEC 27002 (supersedes ISO/IEC 17799)
10 1 (0.74%) JSP 440
10 1 (0.74%) NCSC
10 1 (0.74%) NIST 800
System Software
1 29 (21.32%) Docker
2 3 (2.21%) Active Directory
3 1 (0.74%) Apache ZooKeeper
Systems Management
1 19 (13.97%) Kubernetes
2 15 (11.03%) Terraform
3 14 (10.29%) Nessus
4 10 (7.35%) Docker Swarm
4 10 (7.35%) HP Fortify
5 8 (5.88%) Ansible
6 5 (3.68%) Consul
6 5 (3.68%) Grafana
6 5 (3.68%) Graphite
6 5 (3.68%) Kibana
6 5 (3.68%) logstash
6 5 (3.68%) Puppet
6 5 (3.68%) ZABBIX
7 4 (2.94%) Hadoop YARN
8 3 (2.21%) Single Sign-On
9 2 (1.47%) Microsoft Intune
9 2 (1.47%) Opscode Chef
10 1 (0.74%) Computer Emergency Response Teams
10 1 (0.74%) Fluentd
10 1 (0.74%) Nmap
Vendors
1 23 (16.91%) Microsoft
2 12 (8.82%) Adobe
3 9 (6.62%) Qualys
3 9 (6.62%) Salesforce.com
4 7 (5.15%) Cisco
5 5 (3.68%) Oracle
5 5 (3.68%) SaltStack
5 5 (3.68%) ServiceNow
5 5 (3.68%) Splunk
6 4 (2.94%) Databricks
6 4 (2.94%) F5
6 4 (2.94%) Imperva
6 4 (2.94%) Incapsula
6 4 (2.94%) Tableau
7 3 (2.21%) Google
7 3 (2.21%) Veracode
8 2 (1.47%) Netsparker
8 2 (1.47%) Red Hat
9 1 (0.74%) CheckPoint
9 1 (0.74%) IBM