The median contractor rate for a Penetration Tester was £475 per day in advertised job vacancies during the 3 months to 27 March 2017.

The first table below provides contractor rate benchmarking and summary statistics including a comparison to same period in the previous 2 years.

Note that daily and hourly rates are treated separately in these statistics. When calculating contractor rate percentiles, daily rates are never derived from quoted hourly rates or vice versa.

3 months to
27 Mar 2017
Same period 2016 Same period 2015
Penetration Tester
UK
Rank 552 603 613
Rank change year-on-year +51 +10  
Contract jobs requiring a Penetration Tester 31 37 18
As % of all contract IT jobs advertised in the UK 0.069% 0.070% 0.033%
As % of the Job Titles category 0.073% 0.073% 0.035%
Number of daily rates quoted 19 25 15
Median daily rate £475 £500 £480
Median daily rate % change year-on-year -5.00% +4.16%  
90% offered a daily rate of more than £400 £435 £385
10% offered a daily rate of more than £660 £514 £550
UK excluding London median daily rate £440 £494 £459
% change year-on-year -10.88% +7.62%  
Number of hourly rates quoted 0 0 0
Median hourly rate - - -
UK excluding London median hourly rate - - -

The next table is for comparison with the above and includes summary statistics for all job roles in contract job vacancies. Most job vacancies include a discernible job title. As such, the figures in the first row provide an indication of the number of contract jobs in our overall sample.

Contract IT Job Roles
UK
Contract job vacancies with a job title containing a recognized job role 42574 50675 51233
As % of all contract IT job vacancies advertised in the UK 94.79% 95.19% 94.83%
Number of daily rates quoted 27643 32785 30936
Median daily rate £425 £425 £400
Median daily rate % change year-on-year - +6.25%  
90% offered a daily rate of more than £260 £260 £238
10% offered a daily rate of more than £600 £600 £560
UK excluding London median daily rate £400 £388 £375
% change year-on-year +3.22% +3.33%  
Number of hourly rates quoted 1490 1588 2053
Median hourly rate £18.00 £19.00 £17.50
Median hourly rate % change year-on-year -5.26% +8.57%  
90% offered a hourly rate of more than £11.25 £11.50 £11.00
10% offered a hourly rate of more than £47.50 £47.93 £42.50
UK excluding London median hourly rate £17.50 £20.00 £17.00
% change year-on-year -12.50% +17.64%  

Penetration Tester
Job Vacancy Trend

The job posting trend of jobs advertised that featured Penetration Tester in the job title.

Job vacancy trend for Penetration Tester in the UK

Penetration Tester
Contractor Daily Rate Trend

This chart provides the 3-month moving average for daily rates quoted in contract jobs citing Penetration Tester.

Contractor daily rate trend for Penetration Tester in the UK

Penetration Tester
Contractor Daily Rate Histogram

The daily rate distribution of IT jobs citing Penetration Tester over the 3 months to 27 March 2017.

Contractor daily rate histogram for Penetration Tester in the UK

Penetration Tester
Contractor Hourly Rate Trend

This chart provides the 3-month moving average for hourly rates quoted in IT contractor jobs citing Penetration Tester.

Contractor hourly rate trend for Penetration Tester in the UK

Penetration Tester
Top 13 Contract Locations

The table below looks at the demand and provides a guide to the median contractor rates quoted in IT jobs citing Penetration Tester within the UK over the 3 months to 27 March 2017. The 'Rank Change' column provides an indication of the change in demand within each location based on the same 3 month period last year.

Location Rank Change
on Same Period
Last Year
Matching
Contract
IT Job Ads
Median
Daily Rate
Last 3 Months
Median Daily Rate
% Change
on Same Period
Last Year
Live
Job
Vacancies
England +45 31 £475 -5.00% 33
London +33 15 £488 -2.50% 7
South East +26 15 £440 -15.78% 8
Buckinghamshire +2 11 £425 -18.66%
Milton Keynes - 9 £425 -
City of London +4 3 £488 -2.50% 3
Hampshire - 2 £531 - 1
North West +25 1 - - 5
Manchester +11 1 - - 4
Thames Valley - 1 £570 -
Berkshire - 1 - - 3
Reading - 1 - - 2
Basingstoke - 1 £550 -

Penetration Tester Skill Set
Top 30 Related IT Skills

For the 6 months to 27 March 2017, Penetration Tester contract jobs required the following IT skills in order of popularity. The figures indicate the number co-occurrences and its proportion to all contract ads featuring Penetration Tester in the job title.

1 59 (72.84%) Penetration Testing
2 37 (45.68%) CREST Certified
3 27 (33.33%) Ethical Hacking
4 21 (25.93%) Security Testing
5 20 (24.69%) Security Cleared
5 20 (24.69%) OSCP
6 19 (23.46%) Windows
7 18 (22.22%) Finance
7 18 (22.22%) SANS
8 17 (20.99%) OWASP
9 16 (19.75%) Cybersecurity
9 16 (19.75%) Linux
10 15 (18.52%) Vulnerability Assessment
11 14 (17.28%) CISSP
11 14 (17.28%) CHECK Team Member
12 13 (16.05%) CEH
13 11 (13.58%) Mobile App
14 10 (12.35%) CHECK Team Leader
15 9 (11.11%) Metasploit
15 9 (11.11%) SC Cleared
16 8 (9.88%) Retail
16 8 (9.88%) Information Security
16 8 (9.88%) Mac OS X
16 8 (9.88%) Unix
16 8 (9.88%) Python
16 8 (9.88%) Java
17 7 (8.64%) Risk Management
17 7 (8.64%) DV Cleared
17 7 (8.64%) Secure Coding
18 6 (7.41%) Social Engineering

Penetration Tester Skill Set
Top Related IT Skills by Category

The follow tables expand on the table above by listing co-occurrences grouped by category. The same job type, locality and period is covered with up to 20 co-occurrences shown in each of the following categories:

Application Platforms
1 1 (1.23%) nginx
Cloud Services
1 3 (3.70%) PaaS
2 1 (1.23%) Amazon AWS
Communications & Networking
1 6 (7.41%) Wireshark
2 4 (4.94%) Network Security
3 3 (3.70%) Firewall
3 3 (3.70%) HTTP
4 2 (2.47%) DHCP
4 2 (2.47%) DNS
4 2 (2.47%) IPv6
5 1 (1.23%) FTP
5 1 (1.23%) SSL
5 1 (1.23%) Wireless
5 1 (1.23%) Wireless Security
Database & Business Intelligence
1 1 (1.23%) MongoDB
1 1 (1.23%) PostgreSQL
Development Applications
1 9 (11.11%) Metasploit
2 3 (3.70%) Burp Suite
2 3 (3.70%) Jenkins
2 3 (3.70%) JIRA
2 3 (3.70%) Sonatype Nexus
General
1 18 (22.22%) Finance
2 8 (9.88%) Retail
3 3 (3.70%) Banking
4 2 (2.47%) Financial Institution
Libraries, Frameworks & Software Standards
1 2 (2.47%) OAuth
1 2 (2.47%) Web Services
2 1 (1.23%) Elastic Stack
2 1 (1.23%) J2EE
2 1 (1.23%) LAMP
Miscellaneous
1 11 (13.58%) Mobile App
2 3 (3.70%) CESG
2 3 (3.70%) Computer Science
3 2 (2.47%) Algorithms
3 2 (2.47%) Analytical Skills
3 2 (2.47%) Cyber Defence
3 2 (2.47%) Cyberthreat
3 2 (2.47%) Management Information System
4 1 (1.23%) Cyber Attack
4 1 (1.23%) Embedded Systems
4 1 (1.23%) Fintech
4 1 (1.23%) Mobile Banking
Operating Systems
1 19 (23.46%) Windows
2 16 (19.75%) Linux
3 8 (9.88%) Mac OS X
3 8 (9.88%) Unix
4 5 (6.17%) Kali Linux
5 1 (1.23%) Android
5 1 (1.23%) Apple iOS
Processes & Methodologies
1 59 (72.84%) Penetration Testing
2 27 (33.33%) Ethical Hacking
3 21 (25.93%) Security Testing
4 17 (20.99%) OWASP
5 16 (19.75%) Cybersecurity
6 15 (18.52%) Vulnerability Assessment
7 8 (9.88%) Information Security
8 7 (8.64%) Risk Management
8 7 (8.64%) Secure Coding
9 6 (7.41%) Information Assurance
9 6 (7.41%) Network Packet Analysis
9 6 (7.41%) Network Packet Capture
9 6 (7.41%) Security Architecture
9 6 (7.41%) Social Engineering
10 4 (4.94%) Continuous Integration
10 4 (4.94%) Mentoring
10 4 (4.94%) Test Strategy
10 4 (4.94%) Threat Management
11 3 (3.70%) Computer Forensics
11 3 (3.70%) Project Management
Programming Languages
1 8 (9.88%) Java
1 8 (9.88%) Python
2 6 (7.41%) C++
3 4 (4.94%) SQL
4 3 (3.70%) Perl
4 3 (3.70%) Ruby
5 2 (2.47%) C
6 1 (1.23%) Bash Shell
6 1 (1.23%) C#
6 1 (1.23%) PHP
6 1 (1.23%) Shell Script
Qualifications
1 37 (45.68%) CREST Certified
2 20 (24.69%) OSCP
2 20 (24.69%) Security Cleared
3 18 (22.22%) SANS
4 14 (17.28%) CHECK Team Member
4 14 (17.28%) CISSP
5 13 (16.05%) CEH
6 10 (12.35%) CHECK Team Leader
7 9 (11.11%) SC Cleared
8 7 (8.64%) DV Cleared
9 6 (7.41%) Degree
10 5 (6.17%) GIAC
10 5 (6.17%) GPEN
11 3 (3.70%) CISM
12 2 (2.47%) BPSS Clearance
12 2 (2.47%) CISA
12 2 (2.47%) OSCE
12 2 (2.47%) Tigerscheme
Quality Assurance & Compliance
1 2 (2.47%) Disclosure Scotland
1 2 (2.47%) PCI DSS
1 2 (2.47%) QA
2 1 (1.23%) ISO/IEC 27001
Systems Management
1 6 (7.41%) Nmap
2 5 (6.17%) Nessus
Vendors
1 1 (1.23%) WorldPay