MITRE ATT&CK Contracts

MITRE ATT&CK
UK

The table below provides summary statistics for contract job vacancies requiring MITRE ATT&CK skills. It includes a benchmarking guide to the contractor rates offered in vacancies that cited MITRE ATT&CK over the 6 months leading up to 29 June 2025, comparing them to the same period in the previous two years.

6 months to
29 Jun 2025
Same period 2024 Same period 2023
Rank 444 426 575
Rank change year-on-year -18 +149 +200
Contract jobs citing MITRE ATT&CK 94 162 112
As % of all contract jobs advertised in the UK 0.31% 0.37% 0.20%
As % of the Processes & Methodologies category 0.34% 0.44% 0.22%
Number of daily rates quoted 51 117 80
10th Percentile £350 £500 £425
25th Percentile £501 £550 £480
Median daily rate (50th Percentile) £585 £582 £586
Median % change year-on-year +0.52% -0.68% +9.02%
75th Percentile £721 £700 £675
90th Percentile £838 £850 £728
UK excluding London median daily rate £588 £583 £586
% change year-on-year +0.86% -0.51% +11.52%

All Process and Methodology Skills
UK

MITRE ATT&CK falls under the Processes and Methodologies category. For comparison with the information above, the following table provides summary statistics for all contract job vacancies requiring process or methodology skills.

Contract vacancies with a requirement for process or methodology skills 27,830 37,031 49,845
As % of all contract IT jobs advertised in the UK 90.93% 85.26% 89.55%
Number of daily rates quoted 17,557 23,594 34,329
10th Percentile £300 £300 £325
25th Percentile £405 £413 £438
Median daily rate (50th Percentile) £504 £525 £550
Median % change year-on-year -4.00% -4.55% +1.85%
75th Percentile £625 £638 £650
90th Percentile £738 £750 £750
UK excluding London median daily rate £475 £500 £500
% change year-on-year -5.00% - +0.50%
Number of hourly rates quoted 1,353 2,557 1,699
10th Percentile £14.20 £12.75 £11.87
25th Percentile £17.33 £16.06 £16.25
Median hourly rate £25.15 £37.50 £36.25
Median % change year-on-year -32.93% +3.45% +39.42%
75th Percentile £53.95 £61.30 £65.00
90th Percentile £70.00 £72.50 £75.00
UK excluding London median hourly rate £24.66 £38.12 £35.00
% change year-on-year -35.31% +8.91% +66.67%

MITRE ATT&CK
Job Vacancy Trend

Job postings citing MITRE ATT&CK as a proportion of all IT jobs advertised.

Job vacancy trend for MITRE ATT&CK in the UK

MITRE ATT&CK
Contractor Daily Rate Trend

3-month moving average daily rate quoted in jobs citing MITRE ATT&CK.

Daily rate trend for MITRE ATT&CK in the UK

MITRE ATT&CK
Daily Rate Histogram

Daily rate distribution for jobs citing MITRE ATT&CK over the 6 months to 29 June 2025.

Daily rate histogram for MITRE ATT&CK in the UK

MITRE ATT&CK
Top 12 Contract Locations

The table below looks at the demand and provides a guide to the median contractor rates quoted in IT jobs citing MITRE ATT&CK within the UK over the 6 months to 29 June 2025. The 'Rank Change' column provides an indication of the change in demand within each location based on the same 6 month period last year.

Location Rank Change
on Same Period
Last Year
Matching
Contract
IT Job Ads
Median
Daily Rate
Past 6 Months
Median Daily Rate
% Change
on Same Period
Last Year
Live
Jobs
England -31 68 £585 -1.10% 177
Work from Home +60 48 £600 +9.09% 123
London +73 35 £580 +5.45% 62
UK excluding London -47 30 £588 +0.86% 126
North of England -11 8 £588 -17.54% 29
South East +24 7 £550 -18.55% 33
North West +6 7 £575 -2.13% 18
West Midlands -1 7 £800 +48.70% 10
Midlands -3 7 £800 +48.70% 19
South West -21 7 £550 -5.50% 15
Yorkshire -13 1 £600 -20.00% 10
Scotland - 1 - - 7

MITRE ATT&CK
Co-occurring Skills and Capabilities by Category

The follow tables expand on the table above by listing co-occurrences grouped by category. The same employment type, locality and period is covered with up to 20 co-occurrences shown in each of the following categories:

Cloud Services
1 47 (50.00%) Azure
2 36 (38.30%) AWS
3 31 (32.98%) GCP
4 14 (14.89%) Azure Sentinel
5 10 (10.64%) Microsoft 365
6 6 (6.38%) SaaS
7 4 (4.26%) GitHub
8 3 (3.19%) Azure Logic Apps
8 3 (3.19%) Google Kubernetes Engine
9 2 (2.13%) Amazon EC2
9 2 (2.13%) Amazon S3
9 2 (2.13%) Amazon SQS
9 2 (2.13%) Slack
10 1 (1.06%) Amazon CloudWatch
10 1 (1.06%) Cloudflare
10 1 (1.06%) Entra ID
10 1 (1.06%) OpenDNS
10 1 (1.06%) Power Automate
10 1 (1.06%) Stackdriver
10 1 (1.06%) Sumo Logic
Communications & Networking
1 16 (17.02%) Firewall
2 13 (13.83%) Network Security
3 3 (3.19%) DNS
3 3 (3.19%) TCP/IP
4 2 (2.13%) HTTP
4 2 (2.13%) Intrusion Detection
4 2 (2.13%) SMTP
4 2 (2.13%) VPN
5 1 (1.06%) Cisco ASA
5 1 (1.06%) Cisco Firepower
5 1 (1.06%) Cisco Nexus
5 1 (1.06%) DSL
5 1 (1.06%) Internet
5 1 (1.06%) tcpdump
5 1 (1.06%) Wireshark
Database & Business Intelligence
1 3 (3.19%) BigQuery
2 1 (1.06%) Elasticsearch
Development Applications
1 3 (3.19%) JIRA
2 2 (2.13%) Jenkins
3 1 (1.06%) CircleCI
3 1 (1.06%) Git
3 1 (1.06%) GitLab
3 1 (1.06%) Snyk
3 1 (1.06%) SonarQube
General
1 23 (24.47%) Social Skills
2 16 (17.02%) Analytical Skills
3 15 (15.96%) Finance
4 9 (9.57%) Legal
5 7 (7.45%) Public Sector
6 4 (4.26%) Documentation Skills
6 4 (4.26%) Law
7 3 (3.19%) Banking
7 3 (3.19%) Inclusion and Diversity
7 3 (3.19%) Military
8 2 (2.13%) Financial Institution
8 2 (2.13%) Telecoms
9 1 (1.06%) Games
9 1 (1.06%) Manufacturing
9 1 (1.06%) Organisational Skills
9 1 (1.06%) Retail
Job Titles
1 23 (24.47%) Analyst
2 20 (21.28%) Architect
2 20 (21.28%) Security Architect
3 16 (17.02%) SOC Analyst
4 11 (11.70%) Consultant
4 11 (11.70%) Security Analyst
5 6 (6.38%) Cybersecurity Analyst
5 6 (6.38%) Security Engineer
6 5 (5.32%) Lead
6 5 (5.32%) Security Consultant
6 5 (5.32%) Security Solutions Architect
6 5 (5.32%) Solutions Architect
7 4 (4.26%) SOC Consultant
8 3 (3.19%) IT Architect
8 3 (3.19%) IT Security Architect
8 3 (3.19%) Network Security Architect
8 3 (3.19%) Security Specialist
8 3 (3.19%) SIEM Engineer
9 2 (2.13%) IT Security Manager
9 2 (2.13%) Security Manager
Libraries, Frameworks & Software Standards
1 1 (1.06%) ADO
1 1 (1.06%) Elastic Stack
1 1 (1.06%) Fluent Bit
1 1 (1.06%) JSON
1 1 (1.06%) Regular Expression
1 1 (1.06%) RESTful
Miscellaneous
1 18 (19.15%) Security Operations Centre
2 17 (18.09%) Cyber Threat
2 17 (18.09%) Security Posture
3 11 (11.70%) Cyber Kill Chain
4 9 (9.57%) Cloud Native
4 9 (9.57%) Onboarding
4 9 (9.57%) Operational Technology
5 7 (7.45%) SCADA
6 4 (4.26%) Cyber Defence
6 4 (4.26%) Management Information System
6 4 (4.26%) YARA
7 3 (3.19%) Analytical Mindset
7 3 (3.19%) CSOC
7 3 (3.19%) MISP
7 3 (3.19%) Public Cloud
8 2 (2.13%) Cloud Security Posture
8 2 (2.13%) Enterprise Software
8 2 (2.13%) Legacy Systems
9 1 (1.06%) Cyber Security Posture
9 1 (1.06%) Renewable Energy
Operating Systems
1 7 (7.45%) Windows
2 6 (6.38%) Linux
3 1 (1.06%) Windows Server 2012
Processes & Methodologies
1 57 (60.64%) Incident Response
1 57 (60.64%) Security Operations
2 50 (53.19%) Cybersecurity
3 44 (46.81%) SIEM
4 38 (40.43%) Cloud Security
4 38 (40.43%) Threat Intelligence
5 34 (36.17%) Cyber Threat Intelligence
6 31 (32.98%) SOAR
7 22 (23.40%) Threat Detection
8 21 (22.34%) Threat Modelling
9 18 (19.15%) Vulnerability Management
10 17 (18.09%) Problem-Solving
10 17 (18.09%) Security Architecture
11 13 (13.83%) Information Security
11 13 (13.83%) Security Monitoring
12 10 (10.64%) Analytics
12 10 (10.64%) Continuous Improvement
12 10 (10.64%) Digital Forensics
12 10 (10.64%) Zero Trust
13 9 (9.57%) Root Cause Analysis
Programming Languages
1 33 (35.11%) Python
2 29 (30.85%) PowerShell
3 13 (13.83%) Kusto Query Language
4 9 (9.57%) Bash
5 1 (1.06%) Go
Qualifications
1 27 (28.72%) CISSP
2 22 (23.40%) GIAC
3 14 (14.89%) GCIH
3 14 (14.89%) SANS
3 14 (14.89%) Security Cleared
4 13 (13.83%) SC Cleared
5 12 (12.77%) GCIA
6 10 (10.64%) CISM
6 10 (10.64%) CompTIA Security+
6 10 (10.64%) Degree
7 6 (6.38%) CEH
8 4 (4.26%) Azure Certification
8 4 (4.26%) Computer Science Degree
8 4 (4.26%) GCFA
8 4 (4.26%) SSCP
9 3 (3.19%) CCSP
9 3 (3.19%) Cisco Certification
9 3 (3.19%) OSCP
10 2 (2.13%) CCNA
10 2 (2.13%) GSEC
Quality Assurance & Compliance
1 53 (56.38%) NIST
2 25 (26.60%) PCI DSS
3 18 (19.15%) ISO/IEC 27001
4 16 (17.02%) GDPR
5 15 (15.96%) HIPAA
6 6 (6.38%) NIST 800
7 5 (5.32%) Sarbanes-Oxley
8 4 (4.26%) GRC
8 4 (4.26%) SOC 2
9 2 (2.13%) NCSC
9 2 (2.13%) QA
9 2 (2.13%) SLA
10 1 (1.06%) Actionable Recommendations
10 1 (1.06%) Cyber Essentials
10 1 (1.06%) Cyber Essentials PLUS
10 1 (1.06%) ISO 22301
10 1 (1.06%) ISO 9001
10 1 (1.06%) ISO/IEC 27002 (supersedes ISO/IEC 17799)
System Software
1 2 (2.13%) Active Directory
1 2 (2.13%) Docker
2 1 (1.06%) Snort
2 1 (1.06%) Squid
Systems Management
1 8 (8.51%) Kubernetes
2 7 (7.45%) QRadar
3 4 (4.26%) Terraform
4 2 (2.13%) logstash
4 2 (2.13%) Microsoft Intune
4 2 (2.13%) Nessus
4 2 (2.13%) SCCM
5 1 (1.06%) Ansible
5 1 (1.06%) Computer Emergency Response Teams
5 1 (1.06%) CSIRT
5 1 (1.06%) Demisto
5 1 (1.06%) Fluentd
5 1 (1.06%) Kibana
5 1 (1.06%) Nexpose
5 1 (1.06%) OpenVAS
5 1 (1.06%) Suricata
Vendors
1 25 (26.60%) Microsoft
2 22 (23.40%) Splunk
3 15 (15.96%) Palo Alto
4 11 (11.70%) CrowdStrike
5 8 (8.51%) ServiceNow
6 7 (7.45%) Google
7 5 (5.32%) Qualys
7 5 (5.32%) Rapid7
8 4 (4.26%) Cisco
8 4 (4.26%) LogRhythm
9 3 (3.19%) Carbon Black
9 3 (3.19%) Oracle
9 3 (3.19%) Salesforce
9 3 (3.19%) SAP
10 2 (2.13%) Atlassian
10 2 (2.13%) CheckPoint
10 2 (2.13%) IBM
10 2 (2.13%) Tenable
11 1 (1.06%) Blue Coat
11 1 (1.06%) McAfee