Penetration Testing Contract Job Trends

Penetration Testing
UK

The table below provides summary statistics and contractor rates for jobs requiring Penetration Testing skills. It covers contract job vacancies from the 6 months leading up to 11 September 2026, with comparisons to the same periods in the previous two years.

6 months to
11 Sep 2026
Same period 2025 Same period 2024
Rank 486 364 354
Rank change year-on-year -122 -10 +63
Contract jobs citing Penetration Testing 185 205 218
As % of all contract jobs in the UK 0.34% 0.62% 0.57%
As % of the Processes & Methodologies category 0.40% 0.69% 0.66%
Number of daily rates quoted 140 138 161
10th Percentile £413 £400 £450
25th Percentile £500 £496 £510
Median daily rate (50th Percentile) £570 £550 £578
Median % change year-on-year +3.64% -4.76% +5.00%
75th Percentile £688 £613 £675
90th Percentile £775 £688 £738
UK excluding London median daily rate £575 £500 £550
% change year-on-year +15.00% -9.09% -
Number of hourly rates quoted 2 2 1
10th Percentile £83.25 - -
25th Percentile £84.38 £51.25 £81.75
Median hourly rate £87.50 £52.50 £83.50
Median % change year-on-year +66.67% -37.13% +4.38%
75th Percentile £89.38 £53.75 £85.25
90th Percentile £89.75 - -
UK excluding London median hourly rate £87.50 £52.50 £83.50
% change year-on-year +66.67% -37.13% -

All Process & Methodology Skills
UK

Penetration Testing falls under the Processes and Methodologies category. For comparison with the information above, the following table provides summary statistics for all contract job vacancies requiring process or methodology skills.

Contract vacancies with a requirement for process or methodology skills 46,202 29,871 32,996
As % of all contract IT jobs advertised in the UK 84.62% 90.47% 85.56%
Number of daily rates quoted 28,118 18,549 20,447
10th Percentile £325 £300 £311
25th Percentile £425 £403 £413
Median daily rate (50th Percentile) £525 £500 £525
Median % change year-on-year +5.00% -4.76% -2.78%
75th Percentile £625 £625 £638
90th Percentile £725 £725 £750
UK excluding London median daily rate £500 £475 £500
% change year-on-year +5.26% -5.00% -
Number of hourly rates quoted 3,059 1,786 1,512
10th Percentile £13.85 £14.23 £14.71
25th Percentile £17.36 £17.30 £20.09
Median hourly rate £40.00 £25.15 £43.00
Median % change year-on-year +59.05% -41.51% +3.61%
75th Percentile £67.50 £45.00 £65.00
90th Percentile £80.00 £67.00 £75.00
UK excluding London median hourly rate £40.00 £22.63 £43.00
% change year-on-year +76.76% -47.37% +8.72%

Penetration Testing
Job Vacancy Trend

Historical trend showing the proportion of contract IT job postings citing Penetration Testing relative to all contract IT jobs advertised.

Penetration Testing job vacancy trend in the UK

Penetration Testing
Daily Rate Trend

Contractor daily rate distribution trend for jobs in the UK citing Penetration Testing.

Contractor daily rate distribution trend for jobs in the UK citing Penetration Testing

Penetration Testing
Daily Rate Histogram

Daily rate distribution for jobs citing Penetration Testing over the 6 months to 11 September 2026.

Daily rate histogram for Penetration Testing in the UK

Penetration Testing
Hourly Rate Trend

Contractor hourly rate distribution trend for jobs in the UK citing Penetration Testing.

Contractor hourly rate distribution trend for jobs in the UK citing Penetration Testing

Penetration Testing
Top 15 Contract Job Locations

The table below looks at the demand and provides a guide to the median contractor rates quoted in IT jobs citing Penetration Testing within the UK over the 6 months to 11 September 2026. The 'Rank Change' column provides an indication of the change in demand within each location based on the same 6 month period last year.

Location Rank Change
on Same Period
Last Year
Matching
Contract
IT Job Ads
Median
Daily Rate
Past 6 Months
Median Daily Rate
% Change
on Same Period
Last Year
Live
Jobs
England -143 156 £556 +1.14% 190
UK excluding London -90 85 £575 +15.00% 129
London -113 73 £525 -8.70% 84
Work from Home -91 56 £550 -8.33% 80
North of England -67 24 £581 +11.71% 26
South East -49 21 £581 +11.78% 39
South West -38 17 £550 +12.82% 19
North West -42 17 £582 +14.42% 15
Midlands -53 15 £575 +43.75% 20
West Midlands -40 14 £575 +39.39% 10
Scotland -14 10 £545 +17.20% 9
Yorkshire -35 6 £460 -13.41% 8
East of England -32 2 - - 9
East Midlands -25 1 £533 +33.13% 10
North East - 1 - - 3

Penetration Testing
Co-Occurring Skills & Capabilities by Category

The following tables expand on the one above by listing co-occurrences grouped by category. They cover the same employment type, locality and period, with up to 20 co-occurrences shown in each category:

Application Platforms
1 6 (3.24%) Confluence
2 1 (0.54%) ArcGIS
2 1 (0.54%) Camunda
2 1 (0.54%) Moodle
2 1 (0.54%) SharePoint
2 1 (0.54%) Strapi
Applications
1 5 (2.70%) Microsoft Office
2 3 (1.62%) Microsoft Excel
2 3 (1.62%) Microsoft PowerPoint
3 1 (0.54%) Adobe XD
3 1 (0.54%) Microsoft Project
Business Applications
1 6 (3.24%) Oracle ERP
2 2 (1.08%) Dynamics GP
2 2 (1.08%) SAP GRC
2 2 (1.08%) SAP S/4HANA
3 1 (0.54%) Sparx Enterprise Architect
Cloud Services
1 83 (44.86%) Azure
2 60 (32.43%) AWS
3 17 (9.19%) SaaS
4 15 (8.11%) Microsoft 365
5 11 (5.95%) Entra ID
6 10 (5.41%) GCP
7 9 (4.86%) OCI
8 7 (3.78%) Azure DevOps
9 6 (3.24%) GitHub
10 5 (2.70%) Azure Sentinel
10 5 (2.70%) GitHub Actions
10 5 (2.70%) Power Platform
11 4 (2.16%) IaaS
11 4 (2.16%) PaaS
12 2 (1.08%) Akamai
12 2 (1.08%) Azure AI
12 2 (1.08%) Azure Stack
12 2 (1.08%) IBM Watson
12 2 (1.08%) Serverless
12 2 (1.08%) Vertex AI
Communications & Networking
1 22 (11.89%) Network Security
2 21 (11.35%) Firewall
3 5 (2.70%) VPN
4 4 (2.16%) Internet
5 3 (1.62%) DNS
5 3 (1.62%) HTTP
6 2 (1.08%) Broadband
6 2 (1.08%) Software-Defined Networking
6 2 (1.08%) SSL
6 2 (1.08%) TCP/IP
6 2 (1.08%) Wireless
7 1 (0.54%) BGP
7 1 (0.54%) Cisco Wireless
7 1 (0.54%) DHCP
7 1 (0.54%) LAN
7 1 (0.54%) Modbus
7 1 (0.54%) OSPF
7 1 (0.54%) SAN
7 1 (0.54%) Spanning Tree
7 1 (0.54%) WAN
Database & Business Intelligence
1 6 (3.24%) SQL Server
2 4 (2.16%) Oracle Reports
3 1 (0.54%) Azure SQL Database
3 1 (0.54%) GIS
3 1 (0.54%) Power BI
3 1 (0.54%) SAP HANA
Development Applications
1 13 (7.03%) JIRA
2 6 (3.24%) Burp Suite
3 4 (2.16%) Jenkins
4 3 (1.62%) GitLab
4 3 (1.62%) Snyk
5 2 (1.08%) Metasploit
5 2 (1.08%) SoapUI
6 1 (0.54%) fastlane
6 1 (0.54%) Git
6 1 (0.54%) JMeter
6 1 (0.54%) LoadRunner
6 1 (0.54%) Postman
6 1 (0.54%) Rational Performance Tester
6 1 (0.54%) SonarQube
6 1 (0.54%) Xcode
6 1 (0.54%) XCTest
6 1 (0.54%) XCUITest
General
1 56 (30.27%) Social Skills
2 36 (19.46%) Public Sector
3 30 (16.22%) Finance
4 21 (11.35%) Analytical Skills
5 9 (4.86%) Inclusion and Diversity
6 8 (4.32%) Banking
7 6 (3.24%) Documentation Skills
7 6 (3.24%) Influencing Skills
7 6 (3.24%) Retail
8 5 (2.70%) Legal
8 5 (2.70%) Manufacturing
9 4 (2.16%) Military
10 3 (1.62%) Aerospace
10 3 (1.62%) Digital Health
10 3 (1.62%) Digital Healthcare
10 3 (1.62%) Local Government
10 3 (1.62%) Organisational Skills
11 1 (0.54%) Police
Job Titles
1 34 (18.38%) Consultant
2 26 (14.05%) Architect
3 25 (13.51%) Security Engineer
3 25 (13.51%) Tester
4 23 (12.43%) Penetration Tester
4 23 (12.43%) Security Architect
4 23 (12.43%) Security Consultant
5 18 (9.73%) Lead
6 16 (8.65%) Senior
7 10 (5.41%) Analyst
8 9 (4.86%) Security Analyst
9 8 (4.32%) Security Specialist
10 7 (3.78%) Cybersecurity Specialist
11 6 (3.24%) Cybersecurity Consultant
11 6 (3.24%) Principal Engineer
11 6 (3.24%) Senior Security Engineer
12 5 (2.70%) Cloud Engineer
12 5 (2.70%) Mobile Engineer
12 5 (2.70%) Project Manager
12 5 (2.70%) Security Officer
Libraries, Frameworks & Software Standards
1 9 (4.86%) Terraform
2 5 (2.70%) REST
3 4 (2.16%) OpenID
4 3 (1.62%) .NET
4 3 (1.62%) HTML
4 3 (1.62%) LangChain
4 3 (1.62%) LDAP
4 3 (1.62%) OAuth
4 3 (1.62%) OAuth2
4 3 (1.62%) PyTorch
4 3 (1.62%) SAML
4 3 (1.62%) scikit-learn
5 2 (1.08%) PySpark
5 2 (1.08%) React
5 2 (1.08%) SAP Fiori
6 1 (0.54%) AngularJS
6 1 (0.54%) Keycloak
6 1 (0.54%) Laravel
6 1 (0.54%) Pulumi
6 1 (0.54%) Vue
Miscellaneous
1 41 (22.16%) Security Posture
2 16 (8.65%) Management Information System
3 14 (7.57%) Mobile App
3 14 (7.57%) Onboarding
4 13 (7.03%) Cyber Threat
5 12 (6.49%) Cloud Native
6 10 (5.41%) Security Operations Centre
7 8 (4.32%) Operational Technology
8 7 (3.78%) PKI
9 5 (2.70%) NHS
10 4 (2.16%) Cloud Security Posture
10 4 (2.16%) Enterprise Cloud
11 3 (1.62%) Analytical Mindset
11 3 (1.62%) Data Centre
12 2 (1.08%) BYOD
12 2 (1.08%) CESG
12 2 (1.08%) Cyber Defence
12 2 (1.08%) Cyberattack
12 2 (1.08%) Self-Motivation
12 2 (1.08%) Social Media
Operating Systems
1 30 (16.22%) Windows
2 15 (8.11%) Linux
3 10 (5.41%) Windows Server
4 7 (3.78%) Apple iOS
5 6 (3.24%) Android
6 3 (1.62%) Red Hat Enterprise Linux
7 2 (1.08%) Windows Server 2019
8 1 (0.54%) Unix
Processes & Methodologies
1 89 (48.11%) Cybersecurity
2 71 (38.38%) Vulnerability Management
3 52 (28.11%) Cloud Security
4 43 (23.24%) Threat Modelling
5 42 (22.70%) Application Security
5 42 (22.70%) DevSecOps
6 40 (21.62%) Security Testing
7 37 (20.00%) Stakeholder Management
8 36 (19.46%) Information Security
9 35 (18.92%) Security Operations
10 34 (18.38%) Incident Response
10 34 (18.38%) Security Architecture
10 34 (18.38%) SIEM
11 32 (17.30%) Vulnerability Remediation
12 31 (16.76%) CI/CD
12 31 (16.76%) SDLC
13 28 (15.14%) Risk Management
14 24 (12.97%) Stakeholder Engagement
15 23 (12.43%) Continuous Improvement
16 22 (11.89%) DevOps
Programming Languages
1 18 (9.73%) Python
2 8 (4.32%) PowerShell
3 6 (3.24%) Search Processing Language
3 6 (3.24%) SQL
4 5 (2.70%) Java
5 4 (2.16%) JavaScript
6 3 (1.62%) Go
7 2 (1.08%) Kusto Query Language
7 2 (1.08%) PHP
8 1 (0.54%) Bicep
8 1 (0.54%) C#
8 1 (0.54%) Swift
8 1 (0.54%) TypeScript
Qualifications
1 64 (34.59%) Security Cleared
2 42 (22.70%) SC Cleared
3 36 (19.46%) CISSP
4 34 (18.38%) DV Cleared
5 25 (13.51%) CISM
6 19 (10.27%) Cisco Certification
6 19 (10.27%) OSCP
7 16 (8.65%) (ISC)2 CCSP
8 15 (8.11%) Degree
9 14 (7.57%) CHECK Team Leader
10 13 (7.03%) CHECK Team Member
10 13 (7.03%) CREST Certified
11 9 (4.86%) AWS Certification
11 9 (4.86%) CEH
12 8 (4.32%) CompTIA Security+
13 7 (3.78%) CompTIA CySA+
13 7 (3.78%) GCIA
13 7 (3.78%) GCIH
14 6 (3.24%) BPSS Clearance
14 6 (3.24%) CCSP
Quality Assurance & Compliance
1 42 (22.70%) NCSC
2 39 (21.08%) NIST
3 38 (20.54%) ISO/IEC 27001
4 24 (12.97%) GDPR
5 17 (9.19%) PCI DSS
6 10 (5.41%) Cyber Essentials
6 10 (5.41%) NIST 800
7 6 (3.24%) Cyber Essentials PLUS
7 6 (3.24%) GRC
7 6 (3.24%) ISO/IEC 27002 (supersedes ISO/IEC 17799)
7 6 (3.24%) SLA
8 5 (2.70%) COBIT
9 4 (2.16%) Def Stans
9 4 (2.16%) HMG Security Policy Framework
9 4 (2.16%) JSP 440
9 4 (2.16%) QA
10 3 (1.62%) Accessibility
11 2 (1.08%) Government Security Classifications
11 2 (1.08%) ISO/IEC 27005
11 2 (1.08%) Sarbanes-Oxley
System Software
1 11 (5.95%) Active Directory
2 4 (2.16%) Docker
2 4 (2.16%) Hyper-V
2 4 (2.16%) Virtual Desktop
2 4 (2.16%) Virtual Machines
3 2 (1.08%) Firmware
3 2 (1.08%) VMware Infrastructure
Systems Management
1 23 (12.43%) Kubernetes
2 7 (3.78%) Microsoft Intune
3 5 (2.70%) Single Sign-On
4 4 (2.16%) SCCM
5 3 (1.62%) Active Directory Federation Services
5 3 (1.62%) Oracle Identity Management
5 3 (1.62%) Oracle Identity Manager
6 2 (1.08%) Nmap
7 1 (0.54%) HP Fortify
7 1 (0.54%) QRadar
Vendors
1 39 (21.08%) Microsoft
2 17 (9.19%) Splunk
3 12 (6.49%) Oracle
4 10 (5.41%) Tenable
5 9 (4.86%) CrowdStrike
5 9 (4.86%) Qualys
6 6 (3.24%) SolarWinds
7 4 (2.16%) ServiceNow
7 4 (2.16%) Veracode
8 3 (1.62%) Google
8 3 (1.62%) Ivanti
8 3 (1.62%) OutSystems
8 3 (1.62%) Rapid7
9 2 (1.08%) Citrix
9 2 (1.08%) CyberArk
9 2 (1.08%) Databricks
9 2 (1.08%) IBM
9 2 (1.08%) Palo Alto
9 2 (1.08%) SAP
9 2 (1.08%) VMware