SIEM Contracts

Security Information and Event Management (SIEM)
UK

The table below provides summary statistics for contract job vacancies requiring SIEM skills. It includes a benchmarking guide to the contractor rates offered in vacancies that cited SIEM over the 6 months leading up to 30 April 2025, comparing them to the same period in the previous two years.

6 months to
30 Apr 2025
Same period 2024 Same period 2023
Rank 215 161 171
Rank change year-on-year -54 +10 +169
Contract jobs citing SIEM 372 670 901
As % of all contract jobs advertised in the UK 1.27% 1.54% 1.51%
As % of the Processes & Methodologies category 1.40% 1.78% 1.68%
Number of daily rates quoted 241 489 621
10th Percentile £406 £425 £438
25th Percentile £475 £513 £500
Median daily rate (50th Percentile) £551 £600 £600
Median % change year-on-year -8.17% - +4.35%
75th Percentile £650 £700 £688
90th Percentile £750 £825 £775
UK excluding London median daily rate £550 £590 £550
% change year-on-year -6.78% +7.27% -4.35%
Number of hourly rates quoted 3 6 12
10th Percentile £52.67 - -
25th Percentile £63.04 - £62.75
Median hourly rate £80.68 £40.00 £75.00
Median % change year-on-year +101.69% -46.67% +13.98%
75th Percentile £81.01 £63.44 £78.31
90th Percentile - £74.63 £85.40
UK excluding London median hourly rate £80.68 £40.00 £75.00
% change year-on-year +101.69% -46.67% +13.98%

All Process and Methodology Skills
UK

SIEM falls under the Processes and Methodologies category. For comparison with the information above, the following table provides summary statistics for all contract job vacancies requiring process or methodology skills.

Contract vacancies with a requirement for process or methodology skills 26,551 37,621 53,662
As % of all contract IT jobs advertised in the UK 90.82% 86.30% 89.91%
Number of daily rates quoted 17,137 24,254 37,244
10th Percentile £308 £300 £325
25th Percentile £413 £413 £438
Median daily rate (50th Percentile) £521 £525 £550
Median % change year-on-year -0.86% -4.55% +4.76%
75th Percentile £630 £638 £650
90th Percentile £744 £750 £750
UK excluding London median daily rate £481 £500 £500
% change year-on-year -3.80% - +5.26%
Number of hourly rates quoted 1,071 2,437 1,746
10th Percentile £14.70 £12.75 £11.00
25th Percentile £18.50 £16.00 £16.25
Median hourly rate £29.00 £35.50 £37.30
Median % change year-on-year -18.31% -4.83% +49.20%
75th Percentile £62.00 £59.95 £65.00
90th Percentile £75.00 £72.50 £75.00
UK excluding London median hourly rate £27.94 £36.50 £36.00
% change year-on-year -23.45% +1.39% +80.00%

SIEM
Job Vacancy Trend

Job postings citing SIEM as a proportion of all IT jobs advertised.

Job vacancy trend for SIEM in the UK

SIEM
Contractor Daily Rate Trend

3-month moving average daily rate quoted in jobs citing SIEM.

Daily rate trend for SIEM in the UK

SIEM
Daily Rate Histogram

Daily rate distribution for jobs citing SIEM over the 6 months to 30 April 2025.

Daily rate histogram for SIEM in the UK

SIEM
Contractor Hourly Rate Trend

3-month moving average hourly rates quoted in jobs citing SIEM.

Hourly rate trend for SIEM in the UK

SIEM
Hourly Rate Histogram

Hourly rate distribution of jobs citing SIEM over the 6 months to 30 April 2025.

Hourly rate histogram for SIEM in the UK

SIEM
Top 13 Contract Locations

The table below looks at the demand and provides a guide to the median contractor rates quoted in IT jobs citing SIEM within the UK over the 6 months to 30 April 2025. The 'Rank Change' column provides an indication of the change in demand within each location based on the same 6 month period last year.

Location Rank Change
on Same Period
Last Year
Matching
Contract
IT Job Ads
Median
Daily Rate
Past 6 Months
Median Daily Rate
% Change
on Same Period
Last Year
Live
Jobs
England -56 332 £551 -8.17% 331
UK excluding London -72 162 £550 -6.78% 223
London +8 158 £586 -2.29% 140
Work from Home +30 129 £551 -8.17% 198
South East -8 68 £525 -16.00% 60
West Midlands -18 43 £551 -8.17% 23
Midlands -21 43 £551 -8.17% 33
North of England +21 21 £580 -10.77% 45
East of England +41 14 £600 - 29
Yorkshire +9 13 £613 -23.44% 15
Scotland +4 12 £500 -3.85% 30
North West +10 8 £525 -17.65% 29
South West -72 7 £575 +0.88% 27

SIEM
Co-occurring Skills and Capabilities by Category

The follow tables expand on the table above by listing co-occurrences grouped by category. The same employment type, locality and period is covered with up to 20 co-occurrences shown in each of the following categories:

Application Platforms
1 3 (0.81%) Apache
1 3 (0.81%) Confluence
2 1 (0.27%) Microsoft Exchange
2 1 (0.27%) nginx
Applications
1 3 (0.81%) Microsoft PowerPoint
2 2 (0.54%) 1Password
3 1 (0.27%) Microsoft Office
3 1 (0.27%) Microsoft Project
Business Applications
1 1 (0.27%) NetSuite
1 1 (0.27%) Remedy ITSM
Cloud Services
1 122 (32.80%) Azure
2 68 (18.28%) AWS
3 43 (11.56%) Azure Sentinel
4 34 (9.14%) GCP
5 27 (7.26%) Microsoft 365
6 19 (5.11%) GitHub
7 17 (4.57%) Entra ID
8 7 (1.88%) Azure DevOps
8 7 (1.88%) Azure Monitor
9 6 (1.61%) SaaS
10 5 (1.34%) AWS CloudFormation
10 5 (1.34%) Serverless
11 4 (1.08%) Amazon GuardDuty
11 4 (1.08%) AWS KMS
11 4 (1.08%) Microsoft Purview
11 4 (1.08%) PaaS
12 3 (0.81%) Amazon CloudWatch
12 3 (0.81%) AWS CloudTrail
12 3 (0.81%) Cloud Computing
12 3 (0.81%) Virtual Private Cloud
Communications & Networking
1 97 (26.08%) Firewall
2 67 (18.01%) Network Security
3 31 (8.33%) DNS
4 30 (8.06%) SMTP
5 26 (6.99%) TCP/IP
6 21 (5.65%) SSL
7 19 (5.11%) HTTP
8 18 (4.84%) VPN
9 12 (3.23%) DHCP
9 12 (3.23%) FTP
9 12 (3.23%) Intrusion Detection
10 10 (2.69%) BGP
10 10 (2.69%) VLAN
11 9 (2.42%) NGFW
11 9 (2.42%) OSPF
12 5 (1.34%) WAN
13 4 (1.08%) IPsec
13 4 (1.08%) iSCSI
13 4 (1.08%) SD-WAN
14 3 (0.81%) Cisco Firepower
Database & Business Intelligence
1 8 (2.15%) Elasticsearch
2 6 (1.61%) Data Lake
3 5 (1.34%) Big Data
4 4 (1.08%) SQL Server
5 2 (0.54%) Oracle Reports
6 1 (0.27%) DB2
6 1 (0.27%) Hadoop
6 1 (0.27%) MongoDB
6 1 (0.27%) NoSQL
6 1 (0.27%) Relational Database
Development Applications
1 9 (2.42%) Jenkins
2 8 (2.15%) JIRA
3 7 (1.88%) GitLab
4 6 (1.61%) Git
5 4 (1.08%) SonarQube
6 3 (0.81%) Bitbucket
6 3 (0.81%) JMeter
6 3 (0.81%) Postman
6 3 (0.81%) REST Assured
6 3 (0.81%) Selenium
6 3 (0.81%) Sonatype Nexus
6 3 (0.81%) TestNG
6 3 (0.81%) Travis CI
7 1 (0.27%) CircleCI
General
1 97 (26.08%) Social Skills
2 64 (17.20%) Analytical Skills
3 58 (15.59%) Finance
4 34 (9.14%) Public Sector
5 22 (5.91%) Telecoms
6 18 (4.84%) Banking
7 16 (4.30%) Legal
8 13 (3.49%) Manufacturing
9 10 (2.69%) Electronics
9 10 (2.69%) Marketing
10 6 (1.61%) Law
11 5 (1.34%) Financial Institution
11 5 (1.34%) Inclusion and Diversity
11 5 (1.34%) Pharmaceutical
12 4 (1.08%) Documentation Skills
12 4 (1.08%) Investment Banking
12 4 (1.08%) Retail
13 3 (0.81%) Local Government
13 3 (0.81%) Organisational Skills
13 3 (0.81%) Retail Banking
Job Titles
1 72 (19.35%) Analyst
2 59 (15.86%) Security Engineer
3 57 (15.32%) Architect
4 40 (10.75%) Security Architect
4 40 (10.75%) SOC Analyst
5 31 (8.33%) Security Analyst
6 30 (8.06%) Lead
7 22 (5.91%) Consultant
7 22 (5.91%) Senior
8 16 (4.30%) Cybersecurity Analyst
9 15 (4.03%) Cybersecurity Engineer
9 15 (4.03%) Security Manager
10 14 (3.76%) Operations Engineer
10 14 (3.76%) SIEM Engineer
11 10 (2.69%) Automation Engineer
11 10 (2.69%) Operations Analyst
12 9 (2.42%) Security Operations Analyst
12 9 (2.42%) Senior Architect
12 9 (2.42%) SOC Engineer
13 8 (2.15%) Splunk Engineer
Libraries, Frameworks & Software Standards
1 19 (5.11%) REST
2 10 (2.69%) .NET
2 10 (2.69%) JSON
2 10 (2.69%) LDAP
3 8 (2.15%) SAML
4 7 (1.88%) SailPoint
5 6 (1.61%) Elastic Stack
6 4 (1.08%) HTML
6 4 (1.08%) XML
7 3 (0.81%) Apache NiFi
7 3 (0.81%) ASP.NET
7 3 (0.81%) ASP.NET Core
7 3 (0.81%) CSS
7 3 (0.81%) RabbitMQ
8 2 (0.54%) Kafka
8 2 (0.54%) Node.js
8 2 (0.54%) OAuth
8 2 (0.54%) OpenID
8 2 (0.54%) React
9 1 (0.27%) OAuth2
Miscellaneous
1 57 (15.32%) Cyber Threat
2 53 (14.25%) Security Posture
3 50 (13.44%) Security Operations Centre
4 34 (9.14%) Management Information System
5 26 (6.99%) CSOC
6 22 (5.91%) Onboarding
7 12 (3.23%) Cyberattack
7 12 (3.23%) Self-Motivation
8 11 (2.96%) Data Centre
8 11 (2.96%) Operational Technology
9 10 (2.69%) Cyber Defence
9 10 (2.69%) Public Cloud
10 9 (2.42%) Analytical Mindset
11 8 (2.15%) Cloud Native
12 5 (1.34%) Cyber Kill Chain
13 4 (1.08%) PKI
13 4 (1.08%) Replication
13 4 (1.08%) SCADA
14 3 (0.81%) Client/Server
14 3 (0.81%) Private Cloud
Operating Systems
1 75 (20.16%) Windows
2 54 (14.52%) Linux
3 23 (6.18%) Windows Server
4 17 (4.57%) Red Hat Enterprise Linux
5 10 (2.69%) VMS
6 5 (1.34%) Mac OS
7 4 (1.08%) Check Point GAiA
8 3 (0.81%) CentOS
8 3 (0.81%) Mac OS X
8 3 (0.81%) Unix
8 3 (0.81%) Windows Server 2016
9 2 (0.54%) Windows 10
9 2 (0.54%) Windows Server 2019
Processes & Methodologies
1 155 (41.67%) Cybersecurity
2 138 (37.10%) Incident Response
3 134 (36.02%) Security Operations
4 79 (21.24%) Vulnerability Management
5 70 (18.82%) Problem-Solving
5 70 (18.82%) Threat Detection
6 59 (15.86%) SOAR
7 54 (14.52%) Threat Intelligence
8 53 (14.25%) Cloud Security
9 43 (11.56%) Information Security
10 42 (11.29%) DevOps
11 41 (11.02%) Data Loss Prevention
12 40 (10.75%) Cyber Threat Intelligence
12 40 (10.75%) Security Architecture
13 39 (10.48%) Security Monitoring
14 35 (9.41%) Risk Management
15 32 (8.60%) Migration
16 30 (8.06%) MITRE ATT&CK
17 28 (7.53%) Incident Management
17 28 (7.53%) Threat Modelling
Programming Languages
1 63 (16.94%) PowerShell
2 61 (16.40%) Python
3 24 (6.45%) Kusto Query Language
4 20 (5.38%) Bash
5 6 (1.61%) C#
5 6 (1.61%) Java
5 6 (1.61%) SQL
6 4 (1.08%) JavaScript
7 2 (0.54%) Go
7 2 (0.54%) PHP
7 2 (0.54%) TypeScript
8 1 (0.27%) Bicep
8 1 (0.27%) C
8 1 (0.27%) Ruby
8 1 (0.27%) Rust
8 1 (0.27%) VBScript
Qualifications
1 96 (25.81%) Security Cleared
2 73 (19.62%) CISSP
3 66 (17.74%) SC Cleared
4 42 (11.29%) Degree
5 34 (9.14%) CISM
6 32 (8.60%) DV Cleared
7 27 (7.26%) CEH
8 26 (6.99%) Cisco Certification
9 22 (5.91%) CompTIA Security+
10 21 (5.65%) GIAC
11 20 (5.38%) GCIH
12 16 (4.30%) Microsoft Certification
13 15 (4.03%) Azure Certification
14 14 (3.76%) (ISC)2 CCSP
15 13 (3.49%) CCSP
16 11 (2.96%) CCNA
16 11 (2.96%) Computer Science Degree
17 10 (2.69%) CISA
17 10 (2.69%) GCIA
18 8 (2.15%) CCSE
Quality Assurance & Compliance
1 56 (15.05%) NIST
2 49 (13.17%) ISO/IEC 27001
3 30 (8.06%) GDPR
4 16 (4.30%) PCI DSS
5 15 (4.03%) HIPAA
6 12 (3.23%) SLA
7 8 (2.15%) NIST 800
8 7 (1.88%) QA
9 6 (1.61%) Data Quality
10 4 (1.08%) Sarbanes-Oxley
11 3 (0.81%) NCSC
11 3 (0.81%) SOC 2
12 2 (0.54%) Actionable Recommendations
12 2 (0.54%) Cyber Essentials
12 2 (0.54%) Cyber Essentials PLUS
12 2 (0.54%) GRC
12 2 (0.54%) ISO/IEC 27002 (supersedes ISO/IEC 17799)
13 1 (0.27%) California Consumer Privacy Act
13 1 (0.27%) Government Security Classifications
13 1 (0.27%) ISO 9001
System Software
1 36 (9.68%) Active Directory
2 15 (4.03%) Virtual Machines
2 15 (4.03%) VMware Infrastructure
3 14 (3.76%) Docker
4 7 (1.88%) VMware ESXi
4 7 (1.88%) VMware NSX
5 4 (1.08%) Hyper-V
5 4 (1.08%) NFS
5 4 (1.08%) vSphere
6 3 (0.81%) FreeRADIUS
6 3 (0.81%) iptables
6 3 (0.81%) vCloud
6 3 (0.81%) VMware Workstation
7 2 (0.54%) Virtual Servers
8 1 (0.27%) Microsoft Virtual Server
Systems Management
1 30 (8.06%) Ansible
2 21 (5.65%) QRadar
3 19 (5.11%) Kubernetes
4 16 (4.30%) Terraform
5 14 (3.76%) Single Sign-On
6 9 (2.42%) FortiGate
7 8 (2.15%) SCCM
8 7 (1.88%) CASB
8 7 (1.88%) Grafana
8 7 (1.88%) Kibana
8 7 (1.88%) Microsoft Intune
8 7 (1.88%) PingFederate
9 6 (1.61%) Active Directory Federation Services
10 5 (1.34%) CSIRT
10 5 (1.34%) WSUS
11 4 (1.08%) vRealize
11 4 (1.08%) vRealize Orchestrator
12 3 (0.81%) Nessus
12 3 (0.81%) Prometheus
12 3 (0.81%) Proxmox
Vendors
1 103 (27.69%) Microsoft
2 87 (23.39%) Splunk
3 42 (11.29%) Palo Alto
4 29 (7.80%) Cisco
4 29 (7.80%) ServiceNow
4 29 (7.80%) VMware
5 23 (6.18%) Google
6 18 (4.84%) CrowdStrike
6 18 (4.84%) SolarWinds
7 17 (4.57%) Fortinet
8 14 (3.76%) CyberArk
9 12 (3.23%) Rapid7
9 12 (3.23%) Red Hat
10 11 (2.96%) ArcSight
10 11 (2.96%) F5
10 11 (2.96%) Tenable
11 10 (2.69%) CheckPoint
11 10 (2.69%) SAP
12 9 (2.42%) LogRhythm
12 9 (2.42%) Okta