Threat Intelligence Contracts in the UK excluding London

Threat Intelligence
UK > UK excluding London

The table below provides summary statistics for contract job vacancies advertised in the UK excluding London requiring Threat Intelligence skills. It includes a benchmarking guide to the contractor rates offered in vacancies that cited Threat Intelligence over the 6 months leading up to 24 August 2025, comparing them to the same period in the previous two years.

6 months to
24 Aug 2025
Same period 2024 Same period 2023
Rank 283 234 335
Rank change year-on-year -49 +101 +93
DemandTrendContract jobs citing Threat Intelligence 79 135 96
As % of all contract jobs advertised in the UK excluding London 0.51% 0.74% 0.44%
As % of the Processes & Methodologies category 0.57% 0.90% 0.50%
Number of daily rates quoted 47 84 64
10th Percentile £448 £485 £525
25th Percentile £500 £550 £575
Median daily rate (50th Percentile) £550 £690 £625
Median % change year-on-year -20.29% +10.40% +4.17%
75th Percentile £658 £850 £650
90th Percentile £776 - £797
UK median daily rate £550 £635 £625
% change year-on-year -13.39% +1.60% -
Number of hourly rates quoted 1 4 5
10th Percentile - £42.25 -
25th Percentile £100.50 £51.25 £62.50
Median hourly rate £103.00 £57.50 £65.00
Median % change year-on-year +79.13% -11.54% +18.18%
75th Percentile £105.50 £64.06 £68.75
90th Percentile - £73.63 £69.50
UK median hourly rate £76.50 £57.50 £66.25
% change year-on-year +33.04% -13.21% +20.45%

All Process and Methodology Skills
UK excluding London

Threat Intelligence falls under the Processes and Methodologies category. For comparison with the information above, the following table provides summary statistics for all contract job vacancies requiring process or methodology skills in the UK excluding London.

DemandTrendContract vacancies with a requirement for process or methodology skills 13,796 15,032 19,177
As % of all contract IT jobs advertised in the UK excluding London 89.18% 82.68% 88.29%
Number of daily rates quoted 8,282 8,951 12,794
10th Percentile £238 £250 £260
25th Percentile £366 £388 £400
Median daily rate (50th Percentile) £475 £500 £500
Median % change year-on-year -5.00% - -
75th Percentile £575 £600 £600
90th Percentile £650 £688 £694
UK median daily rate £500 £525 £545
% change year-on-year -4.76% -3.67% -0.91%
Number of hourly rates quoted 1,399 1,433 1,218
10th Percentile £13.81 £13.69 £14.25
25th Percentile £16.95 £16.30 £17.72
Median hourly rate £22.63 £42.50 £39.58
Median % change year-on-year -46.75% +7.39% +79.89%
75th Percentile £44.05 £65.00 £65.00
90th Percentile £68.93 £75.00 £77.00
UK median hourly rate £25.15 £40.94 £42.50
% change year-on-year -38.57% -3.67% +57.41%

Threat Intelligence
Job Vacancy Trend in the UK excluding London

Job postings citing Threat Intelligence as a proportion of all IT jobs advertised in the UK excluding London.

Job vacancy trend for Threat Intelligence in the UK excluding London

Threat Intelligence
Daily Rate Trend in the UK excluding London

Contractor daily rate distribution trend for jobs in the UK excluding London citing Threat Intelligence.

Contractor daily rate distribution trend for jobs in the UK excluding London citing Threat Intelligence

Threat Intelligence
Daily Rate Histogram in the UK excluding London

Daily rate distribution for jobs citing Threat Intelligence in the UK excluding London over the 6 months to 24 August 2025.

Daily rate histogram for Threat Intelligence in the UK excluding London

Threat Intelligence
Hourly Rate Trend in the UK excluding London

Contractor hourly rate distribution trend for jobs in the UK excluding London citing Threat Intelligence.

Contractor hourly rate distribution trend for jobs in the UK excluding London citing Threat Intelligence

Threat Intelligence
DemandTrendContract Job Locations in the UK excluding London

The table below looks at the demand and provides a guide to the median contractor rates quoted in IT jobs citing Threat Intelligence within the UK excluding London region over the 6 months to 24 August 2025. The 'Rank Change' column provides an indication of the change in demand within each location based on the same 6 month period last year.

Location Rank Change
on Same Period
Last Year
Matching
DemandTrendContract
IT Job Ads
Median
Daily Rate
Past 6 Months
Median Daily Rate
% Change
on Same Period
Last Year
Live
Jobs
South East +24 28 £500 -7.41% 43
North of England -61 16 £587 -30.94% 32
South West 0 12 £688 +1.80% 13
Midlands -18 10 £688 +8.27% 10
North West -44 9 £575 -32.35% 18
East of England +11 8 £698 - 11
West Midlands -13 8 £688 +8.27% 7
Yorkshire -11 6 £599 - 13
Scotland -11 6 £455 -32.59% 7
East Midlands -9 2 - - 1
North East - 1 £625 - 1
Threat Intelligence
UK

Threat Intelligence
Co-occurring Skills and Capabilities in the UK excluding London by Category

The follow tables expand on the table above by listing co-occurrences grouped by category. The same employment type, locality and period is covered with up to 20 co-occurrences shown in each of the following categories:

Application Platforms
1 1 (1.27%) Apache Spark
Business Applications
1 1 (1.27%) Dynamics GP
Cloud Services
1 29 (36.71%) Azure
2 22 (27.85%) Azure Sentinel
3 16 (20.25%) AWS
4 13 (16.46%) Microsoft 365
5 8 (10.13%) Azure Logic Apps
6 6 (7.59%) GCP
7 3 (3.80%) Amazon GuardDuty
8 2 (2.53%) Amazon CloudWatch
8 2 (2.53%) Amazon ECS
8 2 (2.53%) Amazon EKS
8 2 (2.53%) Amazon ElastiCache
8 2 (2.53%) Amazon Macie
8 2 (2.53%) Amazon SQS
8 2 (2.53%) AWS CloudFormation
8 2 (2.53%) AWS Direct Connect
8 2 (2.53%) AWS KMS
8 2 (2.53%) GitHub
8 2 (2.53%) GitHub Actions
8 2 (2.53%) SaaS
8 2 (2.53%) Virtual Private Cloud
Communications & Networking
1 24 (30.38%) Firewall
2 12 (15.19%) Network Security
3 4 (5.06%) Intrusion Detection
4 3 (3.80%) DNS
4 3 (3.80%) VPN
5 2 (2.53%) SSL
5 2 (2.53%) TCP/IP
6 1 (1.27%) Cisco ASA
6 1 (1.27%) DHCP
6 1 (1.27%) LAN
6 1 (1.27%) SD-WAN
6 1 (1.27%) tcpdump
6 1 (1.27%) WAN
6 1 (1.27%) Wi-Fi
6 1 (1.27%) Wireshark
Database & Business Intelligence
1 2 (2.53%) Amazon RDS
1 2 (2.53%) DynamoDB
2 1 (1.27%) Big Data
2 1 (1.27%) Elasticsearch
2 1 (1.27%) Hadoop
Development Applications
1 2 (2.53%) Git
1 2 (2.53%) GitLab
1 2 (2.53%) Jenkins
2 1 (1.27%) JIRA
General
1 20 (25.32%) Social Skills
2 18 (22.78%) Analytical Skills
3 9 (11.39%) Finance
3 9 (11.39%) Public Sector
4 7 (8.86%) Legal
5 4 (5.06%) Documentation Skills
6 2 (2.53%) Influencing Skills
6 2 (2.53%) Presentation Skills
6 2 (2.53%) Telecoms
7 1 (1.27%) Games
7 1 (1.27%) Manufacturing
7 1 (1.27%) Military
7 1 (1.27%) Retail
Job Titles
1 33 (41.77%) Analyst
2 18 (22.78%) SOC Analyst
3 15 (18.99%) Security Engineer
4 12 (15.19%) Security Analyst
5 7 (8.86%) Cybersecurity Analyst
6 6 (7.59%) Architect
6 6 (7.59%) Automation Engineer
6 6 (7.59%) Lead
6 6 (7.59%) Security Architect
7 5 (6.33%) Consultant
8 4 (5.06%) Security Specialist
9 3 (3.80%) Cybersecurity Engineer
9 3 (3.80%) Programme Director
9 3 (3.80%) SOC Consultant
10 2 (2.53%) Lead DevOps
10 2 (2.53%) Microsoft Engineer
10 2 (2.53%) Operations Director
10 2 (2.53%) SIEM Engineer
10 2 (2.53%) SIEM Specialist
10 2 (2.53%) SOC Engineer
Libraries, Frameworks & Software Standards
1 3 (3.80%) Elastic Stack
2 1 (1.27%) Lucene
2 1 (1.27%) REST
Miscellaneous
1 33 (41.77%) Cyber Threat
2 21 (26.58%) Security Operations Centre
2 21 (26.58%) Security Posture
3 9 (11.39%) Cyber Defence
3 9 (11.39%) Management Information System
4 6 (7.59%) Onboarding
5 5 (6.33%) Cyber Kill Chain
6 3 (3.80%) Cloud Native
6 3 (3.80%) Cyber Security Posture
6 3 (3.80%) Operational Technology
6 3 (3.80%) PKI
7 2 (2.53%) Analytical Mindset
7 2 (2.53%) Data Protection Act
7 2 (2.53%) Distributed Denial-of-Service
7 2 (2.53%) Driving Licence
7 2 (2.53%) MISP
8 1 (1.27%) Cloud Security Posture
8 1 (1.27%) Data Centre
8 1 (1.27%) FMCG
8 1 (1.27%) Linux Command Line
Operating Systems
1 19 (24.05%) Windows
2 18 (22.78%) Linux
3 1 (1.27%) Windows Server
Processes & Methodologies
1 69 (87.34%) Cyber Threat Intelligence
2 63 (79.75%) Incident Response
3 60 (75.95%) Cybersecurity
4 56 (70.89%) SIEM
5 50 (63.29%) Security Operations
6 26 (32.91%) Threat Detection
7 24 (30.38%) SOAR
8 23 (29.11%) Vulnerability Management
9 21 (26.58%) MITRE ATT&CK
10 20 (25.32%) Cloud Security
11 19 (24.05%) Problem-Solving
11 19 (24.05%) Security Monitoring
12 17 (21.52%) Risk Management
13 16 (20.25%) Threat and Vulnerability Management
14 13 (16.46%) Analytics
14 13 (16.46%) Continuous Improvement
15 11 (13.92%) Mentoring
15 11 (13.92%) Task Automation
15 11 (13.92%) Threat Analysis
16 10 (12.66%) Actionable Insight
Programming Languages
1 30 (37.97%) Python
2 23 (29.11%) PowerShell
3 21 (26.58%) Kusto Query Language
4 4 (5.06%) Bash
5 2 (2.53%) JavaScript
5 2 (2.53%) Shell Script
6 1 (1.27%) Korn
6 1 (1.27%) R
6 1 (1.27%) SQL
Qualifications
1 25 (31.65%) CISSP
2 23 (29.11%) Security Cleared
3 18 (22.78%) SC Cleared
4 17 (21.52%) GCIH
5 13 (16.46%) Degree
5 13 (16.46%) GCIA
6 9 (11.39%) CEH
7 8 (10.13%) CISM
7 8 (10.13%) GCFA
8 6 (7.59%) DV Cleared
9 5 (6.33%) CFCE
9 5 (6.33%) Computer Science Degree
9 5 (6.33%) GIAC
10 4 (5.06%) CASP
10 4 (5.06%) CompTIA CySA+
10 4 (5.06%) CompTIA Security+
11 3 (3.80%) CISA
11 3 (3.80%) Cisco Certification
12 2 (2.53%) MCSE
12 2 (2.53%) Microsoft Certification
Quality Assurance & Compliance
1 28 (35.44%) NIST
2 26 (32.91%) ISO/IEC 27001
3 14 (17.72%) GDPR
4 3 (3.80%) Actionable Recommendations
4 3 (3.80%) Cyber Essentials
4 3 (3.80%) HIPAA
4 3 (3.80%) NCSC
5 2 (2.53%) COBIT
5 2 (2.53%) Cyber Essentials PLUS
5 2 (2.53%) NIST 800
5 2 (2.53%) PCI DSS
5 2 (2.53%) SLA
5 2 (2.53%) SOC 2
6 1 (1.27%) Disclosure Scotland
6 1 (1.27%) GRC
6 1 (1.27%) ISO 22301
6 1 (1.27%) ISO 9001
System Software
1 2 (2.53%) Active Directory
1 2 (2.53%) Docker
2 1 (1.27%) Hyper-V
Systems Management
1 6 (7.59%) QRadar
2 4 (5.06%) Computer Emergency Response Teams
3 3 (3.80%) Microsoft Intune
4 2 (2.53%) Ansible
4 2 (2.53%) Grafana
4 2 (2.53%) Kubernetes
4 2 (2.53%) Kustomize
4 2 (2.53%) Prometheus
4 2 (2.53%) Puppet
4 2 (2.53%) SCCM
4 2 (2.53%) Terraform
5 1 (1.27%) CSIRT
5 1 (1.27%) Fluentd
5 1 (1.27%) Kibana
5 1 (1.27%) logstash
5 1 (1.27%) Nessus
5 1 (1.27%) OpenVAS
5 1 (1.27%) Rsyslog
Vendors
1 38 (48.10%) Microsoft
2 25 (31.65%) Splunk
3 12 (15.19%) CrowdStrike
4 11 (13.92%) ArcSight
5 6 (7.59%) Palo Alto
6 5 (6.33%) LogRhythm
7 4 (5.06%) Google
7 4 (5.06%) Qualys
8 3 (3.80%) Fortinet
8 3 (3.80%) IBM
8 3 (3.80%) Rapid7
9 2 (2.53%) Cisco
9 2 (2.53%) Proofpoint
9 2 (2.53%) ServiceNow
10 1 (1.27%) Carbon Black
10 1 (1.27%) Cribl.io
10 1 (1.27%) Darktrace
10 1 (1.27%) Intel
10 1 (1.27%) Kenna
10 1 (1.27%) Zscaler