Cyber Threat Intelligence Contract Job Trends in the UK excluding London

Cyber Threat Intelligence
UK > UK excluding London

The table below provides summary statistics and contractor rates for jobs advertised in the UK excluding London requiring Cyber Threat Intelligence skills. It covers contract job vacancies from the 6 months leading up to 5 October 2025, with comparisons to the same periods in the previous two years.

6 months to
5 Oct 2025
Same period 2024 Same period 2023
Rank 313 289 361
Rank change year-on-year -24 +72 +77
Contract jobs citing Cyber Threat Intelligence 65 82 71
As % of all contract jobs in the UK excluding London 0.41% 0.47% 0.33%
As % of the Processes & Methodologies category 0.46% 0.56% 0.37%
Number of daily rates quoted 37 50 45
10th Percentile £431 £538 £518
25th Percentile £463 £563 £555
Median daily rate (50th Percentile) £575 £675 £625
Median % change year-on-year -14.81% +8.00% +4.17%
75th Percentile £700 £763 £750
90th Percentile £781 £828 £800
UK median daily rate £575 £635 £625
% change year-on-year -9.45% +1.60% -
Number of hourly rates quoted 1 3 9
10th Percentile - £40.25 -
25th Percentile £100.50 £46.25 £62.50
Median hourly rate £103.00 £57.50 £65.00
Median % change year-on-year +79.13% -11.54% +18.18%
75th Percentile £105.50 £58.75 £67.50
90th Percentile - - £69.00
UK median hourly rate £103.00 £57.50 £65.00
% change year-on-year +79.13% -11.54% +18.18%

All Process and Methodology Skills
UK excluding London

Cyber Threat Intelligence falls under the Processes and Methodologies category. For comparison with the information above, the following table provides summary statistics for all contract job vacancies requiring process or methodology skills in the UK excluding London.

Contract vacancies with a requirement for process or methodology skills 13,994 14,624 18,950
As % of all contract IT jobs advertised in the UK excluding London 89.18% 83.41% 88.18%
Number of daily rates quoted 8,400 8,272 12,490
10th Percentile £225 £240 £260
25th Percentile £367 £380 £400
Median daily rate (50th Percentile) £475 £500 £500
Median % change year-on-year -5.00% - -
75th Percentile £575 £600 £600
90th Percentile £669 £688 £700
UK median daily rate £500 £525 £540
% change year-on-year -4.76% -2.78% -1.82%
Number of hourly rates quoted 1,529 1,089 1,294
10th Percentile £14.00 £14.84 £14.25
25th Percentile £17.00 £18.19 £17.72
Median hourly rate £22.32 £43.00 £42.50
Median % change year-on-year -48.10% +1.18% +73.47%
75th Percentile £40.46 £65.00 £65.00
90th Percentile £66.50 £73.75 £77.50
UK median hourly rate £25.15 £41.50 £42.50
% change year-on-year -39.40% -2.35% +45.65%

Cyber Threat Intelligence
Job Vacancy Trend in the UK excluding London

Historical trend showing the proportion of contract IT job postings citing Cyber Threat Intelligence relative to all contract IT jobs advertised in the UK excluding London.

Cyber Threat Intelligence job vacancy trend in the UK excluding London

Cyber Threat Intelligence
Daily Rate Trend in the UK excluding London

Contractor daily rate distribution trend for jobs in the UK excluding London citing Cyber Threat Intelligence.

Contractor daily rate distribution trend for jobs in the UK excluding London citing Cyber Threat Intelligence

Cyber Threat Intelligence
Daily Rate Histogram in the UK excluding London

Daily rate distribution for jobs citing Cyber Threat Intelligence in the UK excluding London over the 6 months to 5 October 2025.

Daily rate histogram for Cyber Threat Intelligence in the UK excluding London

Cyber Threat Intelligence
Hourly Rate Trend in the UK excluding London

Contractor hourly rate distribution trend for jobs in the UK excluding London citing Cyber Threat Intelligence.

Contractor hourly rate distribution trend for jobs in the UK excluding London citing Cyber Threat Intelligence

Cyber Threat Intelligence
Contract Job Locations in the UK excluding London

The table below looks at the demand and provides a guide to the median contractor rates quoted in IT jobs citing Cyber Threat Intelligence within the UK excluding London region over the 6 months to 5 October 2025. The 'Rank Change' column provides an indication of the change in demand within each location based on the same 6 month period last year.

Location Rank Change
on Same Period
Last Year
Matching
Contract
IT Job Ads
Median
Daily Rate
Past 6 Months
Median Daily Rate
% Change
on Same Period
Last Year
Live
Jobs
South East +21 20 £465 -19.13% 18
East of England +14 13 £650 +10.64% 3
North of England -24 13 £587 -30.94% 20
South West +4 10 £688 -0.36% 6
North West -14 9 £575 -32.35% 13
Scotland -16 5 £455 -32.59% 2
Yorkshire -17 4 £600 - 5
West Midlands -18 3 £600 -22.33% 1
Midlands -26 3 £600 -22.33% 1
Wales - 1 £575 - 2
Cyber Threat Intelligence
UK

Cyber Threat Intelligence
Co-Occurring Skills & Capabilities in the UK excluding London by Category

The following tables expand on the one above by listing co-occurrences grouped by category. They cover the same employment type, locality and period, with up to 20 co-occurrences shown in each category:

Business Applications
1 1 (1.54%) Dynamics GP
Cloud Services
1 24 (36.92%) Azure
2 19 (29.23%) Azure Sentinel
3 11 (16.92%) AWS
4 10 (15.38%) Microsoft 365
5 7 (10.77%) GCP
6 5 (7.69%) Azure Logic Apps
7 2 (3.08%) SaaS
8 1 (1.54%) Power Platform
Communications & Networking
1 17 (26.15%) Firewall
2 7 (10.77%) Network Security
3 1 (1.54%) Cisco ASA
3 1 (1.54%) DHCP
3 1 (1.54%) DNS
3 1 (1.54%) Internet
3 1 (1.54%) LAN
3 1 (1.54%) SD-WAN
3 1 (1.54%) tcpdump
3 1 (1.54%) VPN
3 1 (1.54%) WAN
3 1 (1.54%) Wi-Fi
3 1 (1.54%) Wireshark
Database & Business Intelligence
1 1 (1.54%) Elasticsearch
General
1 22 (33.85%) Social Skills
2 20 (30.77%) Analytical Skills
3 9 (13.85%) Finance
3 9 (13.85%) Public Sector
4 6 (9.23%) Legal
5 3 (4.62%) Documentation Skills
5 3 (4.62%) Presentation Skills
6 2 (3.08%) Influencing Skills
6 2 (3.08%) Organisational Skills
7 1 (1.54%) Games
7 1 (1.54%) Military
7 1 (1.54%) Retail
7 1 (1.54%) Telecoms
Job Titles
1 25 (38.46%) Analyst
2 15 (23.08%) SOC Analyst
3 11 (16.92%) Security Engineer
4 8 (12.31%) Security Analyst
5 7 (10.77%) Automation Engineer
5 7 (10.77%) Consultant
5 7 (10.77%) Cybersecurity Analyst
6 5 (7.69%) Architect
6 5 (7.69%) Security Architect
6 5 (7.69%) Threat Intelligence Specialist
7 4 (6.15%) Cybersecurity Consultant
7 4 (6.15%) Security Consultant
8 3 (4.62%) Cyber Threat Intelligence Specialist
8 3 (4.62%) Cyber Threat Specialist
8 3 (4.62%) Lead
8 3 (4.62%) Programme Director
8 3 (4.62%) Security Specialist
9 2 (3.08%) Head of Information Security
9 2 (3.08%) Head of Security
9 2 (3.08%) Microsoft Engineer
Libraries, Frameworks & Software Standards
1 2 (3.08%) REST
2 1 (1.54%) Elastic Stack
2 1 (1.54%) Lucene
Miscellaneous
1 32 (49.23%) Cyber Threat
2 16 (24.62%) Security Posture
3 14 (21.54%) Security Operations Centre
4 9 (13.85%) Management Information System
5 8 (12.31%) Cyber Kill Chain
6 7 (10.77%) Cyber Defence
7 6 (9.23%) Onboarding
8 3 (4.62%) PKI
9 2 (3.08%) Analytical Mindset
9 2 (3.08%) Cloud Native
9 2 (3.08%) Cyber Security Posture
9 2 (3.08%) Driving Licence
9 2 (3.08%) Insider Threat
9 2 (3.08%) MISP
9 2 (3.08%) Operational Technology
9 2 (3.08%) Public Cloud
10 1 (1.54%) Cloud Security Posture
10 1 (1.54%) Data Protection Act
10 1 (1.54%) Linux Command Line
10 1 (1.54%) Self-Motivation
Operating Systems
1 18 (27.69%) Linux
1 18 (27.69%) Windows
2 1 (1.54%) Windows Server
Processes & Methodologies
1 65 (100.00%) Threat Intelligence
2 51 (78.46%) Cybersecurity
3 49 (75.38%) Incident Response
4 40 (61.54%) Security Operations
5 38 (58.46%) SIEM
6 21 (32.31%) SOAR
7 20 (30.77%) MITRE ATT&CK
7 20 (30.77%) Threat Detection
8 18 (27.69%) Risk Management
8 18 (27.69%) Vulnerability Management
9 15 (23.08%) Actionable Insight
9 15 (23.08%) Cloud Security
10 14 (21.54%) Cyber Intelligence
10 14 (21.54%) Problem-Solving
11 12 (18.46%) Threat and Vulnerability Management
12 11 (16.92%) OSINT
13 10 (15.38%) Task Automation
14 9 (13.85%) Continuous Improvement
14 9 (13.85%) Security Architecture
14 9 (13.85%) Threat Analysis
Programming Languages
1 22 (33.85%) Python
2 17 (26.15%) PowerShell
3 16 (24.62%) Kusto Query Language
4 2 (3.08%) Bash
4 2 (3.08%) JavaScript
Qualifications
1 21 (32.31%) Security Cleared
2 19 (29.23%) CISSP
3 16 (24.62%) SC Cleared
4 13 (20.00%) Degree
4 13 (20.00%) GCIH
5 12 (18.46%) GCIA
6 7 (10.77%) CEH
6 7 (10.77%) GCFA
7 6 (9.23%) CISM
7 6 (9.23%) DV Cleared
8 5 (7.69%) CFCE
8 5 (7.69%) GIAC
9 4 (6.15%) CASP
9 4 (6.15%) CompTIA CySA+
9 4 (6.15%) Computer Science Degree
10 2 (3.08%) CISA
10 2 (3.08%) CompTIA Security+
10 2 (3.08%) ECSA
10 2 (3.08%) ISO 27001 Lead Implementer
10 2 (3.08%) SANS
Quality Assurance & Compliance
1 28 (43.08%) NIST
2 26 (40.00%) ISO/IEC 27001
3 18 (27.69%) GDPR
4 7 (10.77%) Cyber Essentials
5 4 (6.15%) Cyber Essentials PLUS
5 4 (6.15%) HIPAA
6 3 (4.62%) Actionable Recommendations
7 2 (3.08%) COBIT
7 2 (3.08%) NCSC
8 1 (1.54%) Disclosure Scotland
8 1 (1.54%) GRC
8 1 (1.54%) ISO 22301
System Software
1 2 (3.08%) Active Directory
2 1 (1.54%) Hyper-V
Systems Management
1 4 (6.15%) Computer Emergency Response Teams
2 3 (4.62%) Microsoft Intune
2 3 (4.62%) QRadar
3 1 (1.54%) Fluentd
3 1 (1.54%) Kibana
3 1 (1.54%) logstash
3 1 (1.54%) Nessus
3 1 (1.54%) OpenVAS
3 1 (1.54%) Rsyslog
3 1 (1.54%) SCCM
Vendors
1 29 (44.62%) Microsoft
2 16 (24.62%) Splunk
3 11 (16.92%) ArcSight
4 9 (13.85%) CrowdStrike
5 6 (9.23%) LogRhythm
6 5 (7.69%) Palo Alto
7 4 (6.15%) Google
7 4 (6.15%) Qualys
8 3 (4.62%) IBM
9 2 (3.08%) Fortinet
9 2 (3.08%) Intel
10 1 (1.54%) Carbon Black
10 1 (1.54%) Cisco
10 1 (1.54%) Computacenter
10 1 (1.54%) Cribl.io
10 1 (1.54%) Darktrace
10 1 (1.54%) Rapid7
10 1 (1.54%) ServiceNow
10 1 (1.54%) Zscaler