Threat Intelligence Contracts in the UK excluding London

Threat Intelligence
UK > UK excluding London

The table below provides summary statistics for contract job vacancies advertised in the UK excluding London requiring Threat Intelligence skills. It includes a benchmarking guide to the contractor rates offered in vacancies that cited Threat Intelligence over the 6 months leading up to 2 May 2025, comparing them to the same period in the previous two years.

6 months to
2 May 2025
Same period 2024 Same period 2023
Rank 302 228 366
Rank change year-on-year -74 +138 +91
Contract jobs citing Threat Intelligence 37 174 81
As % of all contract jobs advertised in the UK excluding London 0.29% 0.84% 0.34%
As % of the Processes & Methodologies category 0.32% 0.99% 0.38%
Number of daily rates quoted 27 118 51
10th Percentile £458 £513 £520
25th Percentile £500 £559 £575
Median daily rate (50th Percentile) £550 £600 £625
Median % change year-on-year -8.33% -4.00% +23.46%
75th Percentile £638 £825 £680
90th Percentile £725 £850 £963
UK median daily rate £550 £600 £625
% change year-on-year -8.33% -4.00% +20.48%
Number of hourly rates quoted 1 1 0
10th Percentile - - -
25th Percentile £77.50 - -
Median hourly rate £85.00 £80.00 -
Median % change year-on-year +6.25% - -
75th Percentile £92.50 - -
90th Percentile - - -
UK median hourly rate £85.00 £80.00 -
% change year-on-year +6.25% - -

All Process and Methodology Skills
UK excluding London

Threat Intelligence falls under the Processes and Methodologies category. For comparison with the information above, the following table provides summary statistics for all contract job vacancies requiring process or methodology skills in the UK excluding London.

Contract vacancies with a requirement for process or methodology skills 11,562 17,588 21,473
As % of all contract IT jobs advertised in the UK excluding London 90.38% 84.75% 89.50%
Number of daily rates quoted 7,253 10,507 14,891
10th Percentile £235 £250 £255
25th Percentile £375 £380 £400
Median daily rate (50th Percentile) £483 £500 £500
Median % change year-on-year -3.50% - +5.26%
75th Percentile £588 £600 £600
90th Percentile £663 £688 £688
UK median daily rate £520 £525 £550
% change year-on-year -0.95% -4.55% +4.76%
Number of hourly rates quoted 821 2,055 1,305
10th Percentile £14.20 £12.32 £11.00
25th Percentile £17.30 £15.22 £15.81
Median hourly rate £27.50 £36.50 £35.00
Median % change year-on-year -24.66% +4.29% +75.00%
75th Percentile £64.52 £60.00 £65.00
90th Percentile £75.00 £72.50 £72.98
UK median hourly rate £29.00 £35.50 £36.42
% change year-on-year -18.31% -2.53% +45.69%

Threat Intelligence
Job Vacancy Trend in the UK excluding London

Job postings citing Threat Intelligence as a proportion of all IT jobs advertised in the UK excluding London.

Job vacancy trend for Threat Intelligence in the UK excluding London

Threat Intelligence
Contractor Daily Rate Trend in the UK excluding London

3-month moving average daily rate quoted in jobs citing Threat Intelligence in the UK excluding London.

Daily rate trend for Threat Intelligence in the UK excluding London

Threat Intelligence
Daily Rate Histogram in the UK excluding London

Daily rate distribution for jobs citing Threat Intelligence in the UK excluding London over the 6 months to 2 May 2025.

Daily rate histogram for Threat Intelligence in the UK excluding London

Threat Intelligence
Contractor Hourly Rate Trend in the UK excluding London

3-month moving average hourly rates quoted in jobs citing Threat Intelligence in the UK excluding London.

Hourly rate trend for Threat Intelligence in the UK excluding London

Threat Intelligence
Contract Job Locations in the UK excluding London

The table below looks at the demand and provides a guide to the median contractor rates quoted in IT jobs citing Threat Intelligence within the UK excluding London region over the 6 months to 2 May 2025. The 'Rank Change' column provides an indication of the change in demand within each location based on the same 6 month period last year.

Location Rank Change
on Same Period
Last Year
Matching
Contract
IT Job Ads
Median
Daily Rate
Past 6 Months
Median Daily Rate
% Change
on Same Period
Last Year
Live
Jobs
South East +53 21 £550 +10.00% 44
South West -38 5 £550 -3.51% 17
East of England +30 3 £745 +35.45% 14
West Midlands -1 3 £600 -2.64% 6
Midlands -1 3 £600 -2.44% 13
Scotland +8 2 £475 -17.39% 7
North of England -37 2 £625 -26.47% 25
Wales - 2 £600 - 4
North West -32 1 - - 11
North East - 1 £625 - 3
Threat Intelligence
UK

Threat Intelligence
Co-occurring Skills and Capabilities in the UK excluding London by Category

The follow tables expand on the table above by listing co-occurrences grouped by category. The same employment type, locality and period is covered with up to 20 co-occurrences shown in each of the following categories:

Applications
1 1 (2.70%) Microsoft Project
Cloud Services
1 16 (43.24%) Azure
2 10 (27.03%) AWS
2 10 (27.03%) Azure Sentinel
3 9 (24.32%) Microsoft 365
4 4 (10.81%) GCP
5 3 (8.11%) Entra ID
6 2 (5.41%) Microsoft Purview
7 1 (2.70%) Amazon GuardDuty
7 1 (2.70%) Azure Logic Apps
7 1 (2.70%) Cloud Computing
7 1 (2.70%) OCI
7 1 (2.70%) Power Automate
7 1 (2.70%) Sumo Logic
Communications & Networking
1 6 (16.22%) Firewall
2 3 (8.11%) Network Security
3 2 (5.41%) Intrusion Detection
4 1 (2.70%) tcpdump
4 1 (2.70%) Wireshark
Development Applications
1 2 (5.41%) JIRA
General
1 13 (35.14%) Social Skills
2 10 (27.03%) Analytical Skills
3 4 (10.81%) Public Sector
4 2 (5.41%) Legal
4 2 (5.41%) Presentation Skills
5 1 (2.70%) Finance
5 1 (2.70%) Influencing Skills
5 1 (2.70%) Military
5 1 (2.70%) Telecoms
Job Titles
1 10 (27.03%) Analyst
2 6 (16.22%) Security Engineer
3 5 (13.51%) SOC Analyst
4 4 (10.81%) Lead
5 3 (8.11%) Security Analyst
6 2 (5.41%) Administrator
6 2 (5.41%) Architect
6 2 (5.41%) Consultant
6 2 (5.41%) Cybersecurity Engineer
6 2 (5.41%) Penetration Tester
6 2 (5.41%) Security Architect
6 2 (5.41%) Security Specialist
6 2 (5.41%) SIEM Engineer
6 2 (5.41%) SOC Consultant
6 2 (5.41%) Tester
7 1 (2.70%) Audit Consultant
7 1 (2.70%) Automation Engineer
7 1 (2.70%) Azure Consultant
7 1 (2.70%) SIEM Consultant
7 1 (2.70%) SIEM Specialist
Miscellaneous
1 18 (48.65%) Cyber Threat
2 14 (37.84%) Security Posture
3 7 (18.92%) Security Operations Centre
4 6 (16.22%) Cyber Defence
5 4 (10.81%) Management Information System
6 3 (8.11%) Onboarding
7 2 (5.41%) Cyberattack
7 2 (5.41%) Operational Technology
8 1 (2.70%) Analytical Mindset
8 1 (2.70%) Cloud Native
8 1 (2.70%) Cloud Security Posture
8 1 (2.70%) Cyber Kill Chain
8 1 (2.70%) Cyber Security Posture
8 1 (2.70%) Distributed Systems
8 1 (2.70%) Legacy Systems
8 1 (2.70%) MISP
8 1 (2.70%) PMI
8 1 (2.70%) SCADA
Operating Systems
1 6 (16.22%) Windows
2 4 (10.81%) Linux
3 2 (5.41%) Windows Server
4 1 (2.70%) Mac OS
Processes & Methodologies
1 32 (86.49%) Cyber Threat Intelligence
2 29 (78.38%) Cybersecurity
3 26 (70.27%) Incident Response
4 24 (64.86%) SIEM
5 18 (48.65%) Security Operations
6 16 (43.24%) Vulnerability Management
7 13 (35.14%) Cloud Security
8 12 (32.43%) Security Monitoring
9 10 (27.03%) Problem-Solving
9 10 (27.03%) Threat Detection
10 9 (24.32%) Continuous Improvement
11 8 (21.62%) Incident Management
11 8 (21.62%) MITRE ATT&CK
11 8 (21.62%) Threat Analysis
11 8 (21.62%) Threat and Vulnerability Management
12 6 (16.22%) Roadmaps
12 6 (16.22%) SOAR
13 5 (13.51%) Analytics
13 5 (13.51%) Event Correlation
13 5 (13.51%) Process Improvement
Programming Languages
1 10 (27.03%) PowerShell
2 8 (21.62%) Python
3 5 (13.51%) Kusto Query Language
4 1 (2.70%) Bash
Qualifications
1 14 (37.84%) CISSP
2 8 (21.62%) CISM
2 8 (21.62%) Security Cleared
3 7 (18.92%) Degree
4 6 (16.22%) CompTIA Security+
5 5 (13.51%) CEH
5 5 (13.51%) SC Cleared
6 4 (10.81%) Microsoft Certification
6 4 (10.81%) SSCP
7 3 (8.11%) Azure Certification
7 3 (8.11%) CISA
7 3 (8.11%) CREST Certified
7 3 (8.11%) GCIH
7 3 (8.11%) ISSEP
8 2 (5.41%) CCNA
8 2 (5.41%) Cisco Certification
8 2 (5.41%) Cyber Scheme
8 2 (5.41%) DV Cleared
8 2 (5.41%) ISO 27001 Lead Auditor
9 1 (2.70%) PMP
Quality Assurance & Compliance
1 10 (27.03%) ISO/IEC 27001
1 10 (27.03%) NIST
2 4 (10.81%) NIST 800
3 3 (8.11%) GDPR
3 3 (8.11%) PCI DSS
4 2 (5.41%) Cyber Essentials
4 2 (5.41%) Cyber Essentials PLUS
4 2 (5.41%) NCSC
5 1 (2.70%) Actionable Recommendations
5 1 (2.70%) ISO 9001
5 1 (2.70%) JSP 440
System Software
1 1 (2.70%) Firmware
Systems Management
1 4 (10.81%) QRadar
2 3 (8.11%) SCCM
3 2 (5.41%) McAfee ePO
3 2 (5.41%) Norton AntiVirus
3 2 (5.41%) Symantec Endpoint Protection
4 1 (2.70%) CASB
4 1 (2.70%) Computer Emergency Response Teams
4 1 (2.70%) CSIRT
4 1 (2.70%) Nessus
4 1 (2.70%) OpenVAS
Vendors
1 17 (45.95%) Microsoft
2 10 (27.03%) Splunk
3 3 (8.11%) ArcSight
3 3 (8.11%) CrowdStrike
3 3 (8.11%) Google
3 3 (8.11%) Palo Alto
3 3 (8.11%) Rapid7
4 2 (5.41%) McAfee
4 2 (5.41%) Proofpoint
4 2 (5.41%) ServiceNow
4 2 (5.41%) Symantec
5 1 (2.70%) AlienVault
5 1 (2.70%) Carbon Black
5 1 (2.70%) Cisco
5 1 (2.70%) Forcepoint
5 1 (2.70%) Fortinet
5 1 (2.70%) IBM
5 1 (2.70%) Kenna
5 1 (2.70%) LogRhythm
5 1 (2.70%) Qualys