Period
to 22 November 2017

The following table provides summary statistics for contract job vacancies with a requirement for SIEM skills. Included is a benchmarking guide to the contractor rates offered in vacancies that have cited SIEM over the 6 months to 22 November 2017 with a comparison to the same period in the previous 2 years.

Note that daily and hourly rates are treated separately in these statistics. When calculating contractor rate percentiles, daily rates are never derived from quoted hourly rates or vice versa.

Security Information and Event Management (SIEM)
UK
6 months to
22 Nov 2017
Same period 2016 Same period 2015
Rank 380 375 460
Rank change year-on-year -5 +85 +155
Contract jobs citing SIEM 636 653 512
As % of all contract IT jobs advertised in the UK 0.62% 0.62% 0.45%
As % of the Processes & Methodologies category 0.73% 0.74% 0.56%
Number of daily rates quoted 397 436 321
UK median daily rate £500 £475 £475
Median daily rate % change year-on-year +5.26% - -5.00%
10th Percentile £368 £357 £343
90th Percentile £638 £650 £625
UK excluding London median daily rate £500 £475 £450
% change year-on-year +5.26% +5.56% -8.16%
Number of hourly rates quoted 0 1 0
UK median hourly rate - £27.60 -
UK excluding London median hourly rate - £27.60 -

SIEM is in the Processes and Methodologies category. The following table is for comparison with the above and provides summary statistics for all contract job vacancies with a requirement for process or methodology skills.

All Process and Methodology Skills
UK
Contract vacancies with a requirement for process or methodology skills 87155 88463 92228
As % of all contract IT jobs advertised in the UK 84.47% 83.90% 81.79%
Number of daily rates quoted 58071 58482 59737
UK median daily rate £450 £425 £413
Median daily rate % change year-on-year +5.88% +2.91% +3.25%
10th Percentile £281 £263 £263
90th Percentile £631 £600 £600
UK excluding London median daily rate £400 £400 £385
% change year-on-year - +3.90% +2.67%
Number of hourly rates quoted 2066 2352 2726
UK median hourly rate £23.63 £24.00 £22.50
Median hourly rate % change year-on-year -1.56% +6.67% +18.42%
10th Percentile £11.50 £11.25 £11.33
90th Percentile £49.88 £48.75 £47.61
UK excluding London median hourly rate £24.00 £24.50 £23.75
% change year-on-year -2.04% +3.16% +18.75%

SIEM
Job Vacancy Trend

Job postings citing SIEM as a percentage of all IT jobs advertised.

Job vacancy trend for SIEM in the UK

SIEM
Contractor Daily Rate Trend

This chart provides the 3-month moving average for daily rates quoted in contract jobs citing SIEM.

Contractor daily rate trend for SIEM in the UK

SIEM
Contractor Daily Rate Histogram

The daily rate distribution of IT jobs citing SIEM over the 6 months to 22 November 2017.

Contractor daily rate histogram for SIEM in the UK

SIEM
Contractor Hourly Rate Trend

This chart provides the 3-month moving average for contractor hourly rates quoted in IT jobs citing SIEM.

Contractor hourly rate trend for SIEM in the UK

SIEM
Top 14 Contract Locations

The table below looks at the demand and provides a guide to the median contractor rates quoted in IT jobs citing SIEM within the UK over the 6 months to 22 November 2017. The 'Rank Change' column provides an indication of the change in demand within each location based on the same 6 month period last year.

Location Rank Change
on Same Period
Last Year
Matching
Contract
IT Job Ads
Median
Daily Rate
Past 6 Months
Median Daily Rate
% Change
on Same Period
Last Year
Live
Job
Vacancies
England -23 576 £495 +4.21% 88
UK excluding London +7 321 £500 +5.26% 51
London -11 305 £498 -0.50% 39
South East +13 109 £525 +10.53% 10
North of England +58 90 £480 +9.71% 19
Yorkshire +35 54 £525 +17.32% 10
Scotland +17 41 £550 +3.53%
North West -9 36 £465 +9.41% 7
South West -13 31 £500 +25.00% 6
East of England -29 23 £490 -8.84% 3
Midlands -5 17 £475 +2.70% 11
West Midlands +2 12 £475 +2.70% 9
Wales +25 10 £575 +35.29% 2
East Midlands -3 5 £425 +41.67% 1

For the 6 months to 22 November 2017, IT contractor jobs citing SIEM also mentioned the following skills in order of popularity. The figures indicate the number co-occurrences and its proportion to all contract ads with a requirement for SIEM.

1 226 (35.53%) Information Security
2 217 (34.12%) Cybersecurity
3 212 (33.33%) Firewall
4 198 (31.13%) CISSP
5 188 (29.56%) Windows
6 182 (28.62%) Linux
7 149 (23.43%) Vulnerability Management
8 141 (22.17%) Finance
9 140 (22.01%) Security Operations
10 139 (21.86%) Splunk
11 122 (19.18%) ISO/IEC 27001
12 107 (16.82%) Network Security
13 104 (16.35%) Unix
14 91 (14.31%) Penetration Testing
15 90 (14.15%) CISM
16 85 (13.36%) Intrusion Detection
17 83 (13.05%) Threat Intelligence
18 80 (12.58%) PKI
19 78 (12.26%) PCI DSS
19 78 (12.26%) TCP/IP
20 75 (11.79%) McAfee
21 70 (11.01%) Security Monitoring
22 69 (10.85%) Management Information System
23 68 (10.69%) Vulnerability Scanning
24 66 (10.38%) Cisco
25 65 (10.22%) ITIL
26 64 (10.06%) Incident Management
26 64 (10.06%) Degree
27 63 (9.91%) Python
28 61 (9.59%) Active Directory

SIEM
Co-occurring IT Skills by Category

The follow tables expand on the table above by listing co-occurrences grouped by category. The same job type, locality and period is covered with up to 20 co-occurrences shown in each of the following categories:

Application Platforms
1 18 (2.83%) Tomcat
2 14 (2.20%) IIS
3 13 (2.04%) Apache Spark
4 10 (1.57%) Apache
5 7 (1.10%) OpenStack
6 6 (0.94%) JBoss
7 4 (0.63%) Adobe Experience Manager
7 4 (0.63%) Drupal
7 4 (0.63%) Elasticsearch
7 4 (0.63%) WebSphere
7 4 (0.63%) WordPress
8 3 (0.47%) Apache Solr
9 2 (0.31%) Mule
9 2 (0.31%) Skype for Business
10 1 (0.16%) Apache Pig
10 1 (0.16%) ArcGIS
10 1 (0.16%) Exchange Server 2010
10 1 (0.16%) MS Exchange
10 1 (0.16%) nginx
10 1 (0.16%) SharePoint
Applications
1 4 (0.63%) MS Visio
2 3 (0.47%) Microsoft Office
3 1 (0.16%) Microsoft Excel
3 1 (0.16%) Microsoft Project
Business Applications
1 3 (0.47%) Remedy ITSM
Cloud Services
1 52 (8.18%) Amazon AWS
2 48 (7.55%) Microsoft Azure
3 20 (3.14%) SaaS
4 14 (2.20%) IaaS
4 14 (2.20%) Office 365
5 13 (2.04%) Cloud Computing
5 13 (2.04%) PaaS
6 9 (1.42%) OpenDNS
7 6 (0.94%) Mimecast
8 5 (0.79%) Akamai
8 5 (0.79%) Cloudflare
9 4 (0.63%) GitHub
10 3 (0.47%) Amazon ELB
11 1 (0.16%) Amazon CloudWatch
11 1 (0.16%) Azure Active Directory
11 1 (0.16%) Google Cloud Platform
11 1 (0.16%) Virtual Private Cloud
Communications & Networking
1 212 (33.33%) Firewall
2 107 (16.82%) Network Security
3 85 (13.36%) Intrusion Detection
4 78 (12.26%) TCP/IP
5 47 (7.39%) DNS
6 34 (5.35%) WAN
7 32 (5.03%) SAN
8 31 (4.87%) LAN
9 30 (4.72%) HTTP
9 30 (4.72%) VPN
10 25 (3.93%) Internet
11 24 (3.77%) VLAN
12 22 (3.46%) Cisco ASA
13 18 (2.83%) IPsec
13 18 (2.83%) NAS
14 16 (2.52%) MPLS
15 15 (2.36%) HTTPS
16 14 (2.20%) LDAP
17 12 (1.89%) DHCP
17 12 (1.89%) SSL
Database & Business Intelligence
1 23 (3.62%) Big Data
2 18 (2.83%) SQL Server
3 12 (1.89%) Parquet
4 9 (1.42%) Maltego
5 7 (1.10%) Data Mining
6 5 (0.79%) DB2
6 5 (0.79%) PostgreSQL
7 4 (0.63%) Hadoop
7 4 (0.63%) Oracle Reports
8 3 (0.47%) DataStax
8 3 (0.47%) MongoDB
8 3 (0.47%) Power BI
8 3 (0.47%) Relational Database
9 2 (0.31%) Apache Hive
9 2 (0.31%) MySQL
9 2 (0.31%) Oracle Database
9 2 (0.31%) Redis
10 1 (0.16%) GIS
10 1 (0.16%) SQL Server 2005
10 1 (0.16%) Sqoop
Development Applications
1 24 (3.77%) JIRA
2 16 (2.52%) Git (software)
3 12 (1.89%) Metasploit
4 8 (1.26%) Burp Suite
5 2 (0.31%) Jenkins
5 2 (0.31%) Team Foundation Server
6 1 (0.16%) AppScan
6 1 (0.16%) Hudson
6 1 (0.16%) Maven
6 1 (0.16%) Octopus Deploy
6 1 (0.16%) Sonatype Nexus
6 1 (0.16%) TeamCity
6 1 (0.16%) Visual Studio Team System
General
1 141 (22.17%) Finance
2 40 (6.29%) Banking
3 35 (5.50%) Telecoms
4 13 (2.04%) Law
4 13 (2.04%) Retail
5 12 (1.89%) Financial Institution
6 9 (1.42%) Marketing
7 8 (1.26%) Legal
8 7 (1.10%) Advertising
8 7 (1.10%) Billing
9 6 (0.94%) Spanish Language
10 5 (0.79%) Electronics
10 5 (0.79%) Manufacturing
10 5 (0.79%) Pharmaceutical
10 5 (0.79%) Retail Banking
11 4 (0.63%) Aerospace
11 4 (0.63%) Publishing
12 3 (0.47%) Automotive
12 3 (0.47%) Back Office
13 2 (0.31%) Investment Banking
Job Titles
1 235 (36.95%) Analyst
2 180 (28.30%) Security Analyst
3 92 (14.47%) Security Engineer
4 83 (13.05%) Consultant
5 68 (10.69%) Security Consultant
6 61 (9.59%) Architect
7 42 (6.60%) Security Architect
7 42 (6.60%) Security Specialist
7 42 (6.60%) Senior Analyst
8 41 (6.45%) SOC Analyst
9 36 (5.66%) Operations Analyst
10 35 (5.50%) Security Operations Analyst
11 30 (4.72%) Security Manager
12 29 (4.56%) SIEM Analyst
13 28 (4.40%) Splunk Engineer
14 26 (4.09%) Network Engineer
15 25 (3.93%) Information Analyst
15 25 (3.93%) Information Security Analyst
15 25 (3.93%) IT Analyst
15 25 (3.93%) IT Security Analyst
Libraries, Frameworks & Software Standards
1 27 (4.25%) Regular Expression
2 23 (3.62%) Elastic Stack
3 12 (1.89%) Grok
3 12 (1.89%) Kafka
4 7 (1.10%) REST
4 7 (1.10%) Web Services
5 6 (0.94%) .NET
5 6 (0.94%) Middleware
5 6 (0.94%) SAML
6 5 (0.79%) XML
7 3 (0.47%) DOM
7 3 (0.47%) SailPoint
7 3 (0.47%) SAX
7 3 (0.47%) WAP
7 3 (0.47%) XSD
7 3 (0.47%) XSLT
8 2 (0.31%) AngularJS
8 2 (0.31%) CSS3
8 2 (0.31%) RESTful
8 2 (0.31%) WebSphere MQ
Miscellaneous
1 80 (12.58%) PKI
2 69 (10.85%) Management Information System
3 57 (8.96%) Analytical Skills
4 44 (6.92%) Distributed Denial-of-Service
5 41 (6.45%) Security Operations Centre
6 39 (6.13%) Cyberthreat
7 27 (4.25%) Data Centre
8 16 (2.52%) Cyber Attack
9 13 (2.04%) Linux Command Line
9 13 (2.04%) Public Cloud
10 12 (1.89%) Client/Server
11 11 (1.73%) Algorithms
12 10 (1.57%) Cyber Kill Chain
12 10 (1.57%) Data Protection Act
12 10 (1.57%) Virtual Team
13 9 (1.42%) Cyber Defence
14 7 (1.10%) BYOD
14 7 (1.10%) Enterprise Software
14 7 (1.10%) Hybrid Cloud
15 6 (0.94%) Private Cloud
Operating Systems
1 188 (29.56%) Windows
2 182 (28.62%) Linux
3 104 (16.35%) Unix
4 34 (5.35%) Windows Server
5 22 (3.46%) Red Hat Enterprise Linux
6 10 (1.57%) Windows Server 2012
7 7 (1.10%) Windows 10
7 7 (1.10%) Windows 7
8 6 (0.94%) CentOS
9 5 (0.79%) Apple iOS
9 5 (0.79%) HPUX
9 5 (0.79%) VMS
10 3 (0.47%) Solaris
11 2 (0.31%) Android
11 2 (0.31%) Mac OS X
11 2 (0.31%) Windows NT
11 2 (0.31%) Windows Server 2008
12 1 (0.16%) AIX
12 1 (0.16%) SUSE
Processes & Methodologies
1 226 (35.53%) Information Security
2 217 (34.12%) Cybersecurity
3 149 (23.43%) Vulnerability Management
4 140 (22.01%) Security Operations
5 91 (14.31%) Penetration Testing
6 83 (13.05%) Threat Intelligence
7 70 (11.01%) Security Monitoring
8 68 (10.69%) Vulnerability Scanning
9 65 (10.22%) ITIL
10 64 (10.06%) Incident Management
11 54 (8.49%) Use Case
12 52 (8.18%) Analytics
13 46 (7.23%) Security Architecture
14 44 (6.92%) Identity Access Management
15 43 (6.76%) Data Protection
16 41 (6.45%) Risk Management
16 41 (6.45%) Vulnerability Assessment
17 39 (6.13%) Agile Software Development
17 39 (6.13%) Security Management
18 35 (5.50%) Patch Management
Programming Languages
1 63 (9.91%) Python
2 45 (7.08%) Java
3 42 (6.60%) Bash Shell
4 24 (3.77%) Perl
5 22 (3.46%) SQL
6 19 (2.99%) Ruby
7 15 (2.36%) PowerShell
8 13 (2.04%) C-shell
8 13 (2.04%) Korn
9 5 (0.79%) C
10 4 (0.63%) JavaScript
10 4 (0.63%) PHP
11 2 (0.31%) Shell Script
12 1 (0.16%) C++
12 1 (0.16%) Dart
Qualifications
1 198 (31.13%) CISSP
2 90 (14.15%) CISM
3 64 (10.06%) Degree
4 58 (9.12%) Cisco Certification
5 52 (8.18%) Security Cleared
6 39 (6.13%) SANS
7 38 (5.97%) CEH
8 35 (5.50%) CISA
9 33 (5.19%) SC Cleared
10 25 (3.93%) CRISC
11 22 (3.46%) GCIH
11 22 (3.46%) GIAC
12 21 (3.30%) (ISC)2 CCSP
13 20 (3.14%) GCIA
14 19 (2.99%) CCNP
15 15 (2.36%) CompTIA Security+
15 15 (2.36%) Security+ Certification
16 12 (1.89%) CCIE
16 12 (1.89%) CCSP
16 12 (1.89%) CISMP
Quality Assurance & Compliance
1 122 (19.18%) ISO/IEC 27001
2 78 (12.26%) PCI DSS
3 36 (5.66%) GDPR
4 26 (4.09%) ISO/IEC 27002 (supersedes ISO/IEC 17799)
5 23 (3.62%) Sarbanes-Oxley
6 20 (3.14%) COBIT
7 16 (2.52%) QA
8 11 (1.73%) NIST 800
9 8 (1.26%) RMADS
10 5 (0.79%) FedRAMP
11 4 (0.63%) Disclosure Scotland
11 4 (0.63%) ISO 9001
12 3 (0.47%) Cyber Essentials
13 2 (0.31%) PMO
14 1 (0.16%) GCP
14 1 (0.16%) HIPAA
14 1 (0.16%) ISO/IEC 27005
14 1 (0.16%) JSP 440
14 1 (0.16%) SLA
System Software
1 61 (9.59%) Active Directory
2 32 (5.03%) VMware Infrastructure
3 15 (2.36%) vSphere
4 13 (2.04%) Virtual Machines
5 11 (1.73%) Hyper-V
6 9 (1.42%) ProxySG
7 8 (1.26%) XenApp
8 4 (0.63%) Snort
8 4 (0.63%) VMware ESXi
9 3 (0.47%) Apache Flume
9 3 (0.47%) VMware NSX
9 3 (0.47%) XenDesktop
10 2 (0.31%) Docker
10 2 (0.31%) Microsoft App-V
10 2 (0.31%) Virtual Servers
11 1 (0.16%) BitLocker
11 1 (0.16%) HDFS
Systems Management
1 45 (7.08%) Nessus
2 30 (4.72%) QRadar
3 22 (3.46%) Ansible
4 21 (3.30%) Puppet
5 19 (2.99%) SCCM
6 18 (2.83%) McAfee ePO
7 14 (2.20%) Host Intrusion Detection System
7 14 (2.20%) Network Intrusion Detection System
7 14 (2.20%) Norton AntiVirus
8 13 (2.04%) logstash
8 13 (2.04%) Nmap
9 12 (1.89%) Red Hat Satellite
10 11 (1.73%) CSIRT
10 11 (1.73%) Opscode Chef
11 7 (1.10%) SCOM
11 7 (1.10%) Terraform
12 6 (0.94%) Computer Emergency Response Teams
12 6 (0.94%) EnCase
13 5 (0.79%) Kibana
13 5 (0.79%) OSSEC
Vendors
1 139 (21.86%) Splunk
2 75 (11.79%) McAfee
3 66 (10.38%) Cisco
4 57 (8.96%) ArcSight
5 52 (8.18%) LogRhythm
5 52 (8.18%) VMware
6 51 (8.02%) Qualys
7 49 (7.70%) Microsoft
8 47 (7.39%) CheckPoint
9 40 (6.29%) AlienVault
9 40 (6.29%) Citrix
10 30 (4.72%) HP
11 29 (4.56%) Palo Alto
12 28 (4.40%) Blue Coat
12 28 (4.40%) Juniper
13 27 (4.25%) Oracle
14 24 (3.77%) Red Hat
15 22 (3.46%) Intel
15 22 (3.46%) Symantec
16 21 (3.30%) Varonis