SIEM Contract Job Trends

Security Information and Event Management (SIEM)
UK

The table below provides summary statistics and contractor rates for jobs requiring SIEM skills. It covers contract job vacancies from the 6 months leading up to 10 October 2025, with comparisons to the same periods in the previous two years.

6 months to
10 Oct 2025
Same period 2024 Same period 2023
Rank 177 207 161
Rank change year-on-year +30 -46 +143
Contract jobs citing SIEM 539 459 774
As % of all contract jobs in the UK 1.63% 1.21% 1.61%
As % of the Processes & Methodologies category 1.80% 1.41% 1.81%
Number of daily rates quoted 347 306 550
10th Percentile £400 £425 £450
25th Percentile £463 £513 £513
Median daily rate (50th Percentile) £550 £600 £603
Median % change year-on-year -8.33% -0.50% +0.50%
75th Percentile £650 £725 £725
90th Percentile £775 £828 £813
UK excluding London median daily rate £538 £650 £600
% change year-on-year -17.31% +8.33% +4.62%
Number of hourly rates quoted 11 3 4
10th Percentile £45.00 - £63.25
25th Percentile £45.38 £56.25 £64.38
Median hourly rate £65.00 £57.50 £72.50
Median % change year-on-year +13.04% -20.69% +11.11%
75th Percentile £85.00 £67.50 £76.25
90th Percentile £100.00 £72.75 £78.50
UK excluding London median hourly rate £65.00 £57.50 £75.00
% change year-on-year +13.04% -23.33% +22.45%

All Process and Methodology Skills
UK

SIEM falls under the Processes and Methodologies category. For comparison with the information above, the following table provides summary statistics for all contract job vacancies requiring process or methodology skills.

Contract vacancies with a requirement for process or methodology skills 29,973 32,628 42,779
As % of all contract IT jobs advertised in the UK 90.49% 86.03% 88.88%
Number of daily rates quoted 18,608 19,666 29,053
10th Percentile £294 £308 £313
25th Percentile £404 £413 £425
Median daily rate (50th Percentile) £500 £525 £540
Median % change year-on-year -4.76% -2.78% -1.82%
75th Percentile £623 £638 £650
90th Percentile £725 £750 £750
UK excluding London median daily rate £475 £500 £500
% change year-on-year -5.00% - -
Number of hourly rates quoted 1,884 1,294 1,571
10th Percentile £14.35 £15.00 £14.25
25th Percentile £17.30 £20.03 £18.64
Median hourly rate £25.15 £40.16 £43.84
Median % change year-on-year -37.38% -8.38% +39.16%
75th Percentile £43.00 £65.00 £65.00
90th Percentile £65.00 £73.93 £77.50
UK excluding London median hourly rate £22.27 £41.50 £42.50
% change year-on-year -46.35% -2.35% +70.00%

SIEM
Job Vacancy Trend

Historical trend showing the proportion of contract IT job postings citing SIEM relative to all contract IT jobs advertised.

SIEM job vacancy trend in the UK

SIEM
Daily Rate Trend

Contractor daily rate distribution trend for jobs in the UK citing SIEM.

Contractor daily rate distribution trend for jobs in the UK citing SIEM

SIEM
Daily Rate Histogram

Daily rate distribution for jobs citing SIEM over the 6 months to 10 October 2025.

Daily rate histogram for SIEM in the UK

SIEM
Hourly Rate Trend

Contractor hourly rate distribution trend for jobs in the UK citing SIEM.

Contractor hourly rate distribution trend for jobs in the UK citing SIEM

SIEM
Hourly Rate Histogram

Hourly rate distribution of jobs citing SIEM over the 6 months to 10 October 2025.

Hourly rate histogram for SIEM in the UK

SIEM
Top 16 Contract Job Locations

The table below looks at the demand and provides a guide to the median contractor rates quoted in IT jobs citing SIEM within the UK over the 6 months to 10 October 2025. The 'Rank Change' column provides an indication of the change in demand within each location based on the same 6 month period last year.

Location Rank Change
on Same Period
Last Year
Matching
Contract
IT Job Ads
Median
Daily Rate
Past 6 Months
Median Daily Rate
% Change
on Same Period
Last Year
Live
Jobs
England +31 471 £550 -8.33% 251
UK excluding London +18 267 £538 -17.31% 195
London +32 214 £575 +0.44% 109
Work from Home +32 156 £575 - 135
South East +33 78 £513 -12.77% 78
Midlands -23 52 £515 -20.77% 28
West Midlands -29 47 £519 -20.15% 19
East of England +37 43 £550 - 19
North of England -18 43 £520 -13.33% 41
North West +1 31 £466 -15.23% 22
Scotland +6 30 £500 -28.57% 13
South West -29 27 £600 -13.04% 18
Yorkshire -27 12 £538 -23.21% 12
East Midlands - 5 £463 - 9
Wales +2 3 £600 - 3
Northern Ireland - 1 £625 - 2

SIEM
Co-Occurring Skills & Capabilities by Category

The following tables expand on the one above by listing co-occurrences grouped by category. They cover the same employment type, locality and period, with up to 20 co-occurrences shown in each category:

Application Platforms
1 3 (0.56%) Confluence
2 2 (0.37%) Microsoft Exchange
2 2 (0.37%) OpenStack
3 1 (0.19%) Apache
3 1 (0.19%) Jupyter
3 1 (0.19%) nginx
Applications
1 2 (0.37%) Microsoft Excel
2 1 (0.19%) 1Password
2 1 (0.19%) Chatbot
2 1 (0.19%) Microsoft Office
2 1 (0.19%) Microsoft Project
2 1 (0.19%) MS Visio
Business Applications
1 2 (0.37%) Dynamics GP
1 2 (0.37%) Oracle CRM
2 1 (0.19%) Maximo
2 1 (0.19%) Remedy ITSM
Cloud Services
1 173 (32.10%) Azure
2 138 (25.60%) AWS
3 78 (14.47%) Azure Sentinel
4 49 (9.09%) GCP
5 47 (8.72%) Microsoft 365
6 40 (7.42%) SaaS
7 26 (4.82%) Entra ID
8 25 (4.64%) Amazon S3
9 24 (4.45%) Amazon EC2
10 21 (3.90%) Amazon SQS
11 20 (3.71%) Cohesity
12 17 (3.15%) GitHub
13 13 (2.41%) GitHub Actions
14 11 (2.04%) Azure Logic Apps
15 8 (1.48%) Amazon CloudWatch
15 8 (1.48%) AWS CloudFormation
15 8 (1.48%) AWS CloudTrail
16 7 (1.30%) Amazon GuardDuty
16 7 (1.30%) AWS KMS
16 7 (1.30%) Virtual Private Cloud
Communications & Networking
1 160 (29.68%) Firewall
2 106 (19.67%) Network Security
3 54 (10.02%) DNS
4 40 (7.42%) VPN
5 33 (6.12%) TCP/IP
6 27 (5.01%) SSL
7 23 (4.27%) Intrusion Detection
8 21 (3.90%) SAN
9 19 (3.53%) BGP
10 18 (3.34%) HTTP
11 15 (2.78%) OSPF
11 15 (2.78%) VLAN
12 13 (2.41%) Internet
13 11 (2.04%) SMTP
14 9 (1.67%) FTP
15 8 (1.48%) DHCP
16 7 (1.30%) IPsec
17 6 (1.11%) WAN
18 5 (0.93%) LAN
18 5 (0.93%) Wireshark
Database & Business Intelligence
1 9 (1.67%) Data Lake
2 8 (1.48%) Elasticsearch
3 4 (0.74%) Amazon RDS
4 3 (0.56%) BigQuery
4 3 (0.56%) Power BI
4 3 (0.56%) SQL Server
5 2 (0.37%) DynamoDB
5 2 (0.37%) Snowflake Schema
6 1 (0.19%) Big Data
6 1 (0.19%) MySQL
6 1 (0.19%) Redis
Development Applications
1 10 (1.86%) Jenkins
2 8 (1.48%) CircleCI
2 8 (1.48%) Snyk
3 7 (1.30%) Git
4 6 (1.11%) GitLab
4 6 (1.11%) JIRA
5 3 (0.56%) Metasploit
6 2 (0.37%) SonarQube
7 1 (0.19%) Bitbucket
7 1 (0.19%) Burp Suite
7 1 (0.19%) MLflow
7 1 (0.19%) Sonatype Nexus
General
1 146 (27.09%) Social Skills
2 108 (20.04%) Analytical Skills
3 72 (13.36%) Public Sector
4 67 (12.43%) Finance
5 36 (6.68%) Documentation Skills
6 21 (3.90%) Banking
7 16 (2.97%) Legal
8 15 (2.78%) Telecoms
9 13 (2.41%) Military
10 10 (1.86%) Inclusion and Diversity
10 10 (1.86%) Presentation Skills
11 9 (1.67%) Local Government
12 7 (1.30%) Back Office
13 5 (0.93%) Retail
14 4 (0.74%) Law
15 3 (0.56%) Investment Banking
15 3 (0.56%) Organisational Skills
16 2 (0.37%) Aerospace
16 2 (0.37%) Financial Institution
16 2 (0.37%) Marketing
Job Titles
1 110 (20.41%) Security Engineer
2 104 (19.29%) Analyst
3 100 (18.55%) Architect
4 75 (13.91%) Security Architect
5 54 (10.02%) SOC Analyst
6 52 (9.65%) Security Analyst
7 46 (8.53%) Cybersecurity Engineer
8 38 (7.05%) Senior
9 37 (6.86%) SIEM Engineer
10 34 (6.31%) Lead
11 32 (5.94%) Cybersecurity Analyst
12 27 (5.01%) Consultant
13 21 (3.90%) SOC Engineer
14 20 (3.71%) Network Engineer
15 16 (2.97%) Developer
15 16 (2.97%) Security Manager
16 15 (2.78%) Security Consultant
17 14 (2.60%) Network Security Engineer
17 14 (2.60%) Operations Analyst
18 13 (2.41%) Security Operations Analyst
Libraries, Frameworks & Software Standards
1 9 (1.67%) Elastic Stack
1 9 (1.67%) LDAP
2 8 (1.48%) Loki
2 8 (1.48%) REST
3 7 (1.30%) .NET
4 5 (0.93%) SAML
5 4 (0.74%) React
5 4 (0.74%) SOAP
6 3 (0.56%) 802.1X
6 3 (0.56%) JSON
6 3 (0.56%) Kafka
6 3 (0.56%) Regular Expression
7 2 (0.37%) eBPF
7 2 (0.37%) OAuth
7 2 (0.37%) OAuth2
7 2 (0.37%) OpenID
7 2 (0.37%) Oracle Fusion
7 2 (0.37%) RabbitMQ
7 2 (0.37%) Web Services
7 2 (0.37%) YAML
Miscellaneous
1 97 (18.00%) Security Operations Centre
2 71 (13.17%) Cyber Threat
3 67 (12.43%) Security Posture
4 51 (9.46%) Onboarding
5 46 (8.53%) CSOC
6 39 (7.24%) Management Information System
7 27 (5.01%) Cloud Native
8 20 (3.71%) Cyber Kill Chain
9 19 (3.53%) PKI
10 17 (3.15%) Cyber Defence
11 13 (2.41%) Analytical Mindset
11 13 (2.41%) Data Centre
12 11 (2.04%) Cyber Security Posture
13 10 (1.86%) Cyberattack
14 9 (1.67%) Cloud Security Posture
15 8 (1.48%) Operational Technology
15 8 (1.48%) Public Cloud
16 7 (1.30%) Enterprise Software
16 7 (1.30%) Linux Command Line
16 7 (1.30%) YARA
Operating Systems
1 118 (21.89%) Windows
2 90 (16.70%) Linux
3 39 (7.24%) Windows Server
4 30 (5.57%) Unix
5 21 (3.90%) Windows Server 2016
6 20 (3.71%) Windows Server 2019
7 7 (1.30%) Red Hat Enterprise Linux
8 6 (1.11%) Check Point GAiA
9 4 (0.74%) Mac OS
10 3 (0.56%) Mac OS X
11 1 (0.19%) Android
11 1 (0.19%) CentOS
11 1 (0.19%) Kali Linux
11 1 (0.19%) Ubuntu
11 1 (0.19%) Windows 10
11 1 (0.19%) Windows Server 2012
Processes & Methodologies
1 285 (52.88%) Cybersecurity
2 226 (41.93%) Incident Response
3 202 (37.48%) Security Operations
4 135 (25.05%) SOAR
5 112 (20.78%) Threat Detection
6 111 (20.59%) Cloud Security
7 83 (15.40%) Threat Intelligence
8 82 (15.21%) Security Monitoring
9 81 (15.03%) Vulnerability Management
10 78 (14.47%) Use Case
11 77 (14.29%) Problem-Solving
12 69 (12.80%) Threat Modelling
13 65 (12.06%) Information Security
14 62 (11.50%) MITRE ATT&CK
15 61 (11.32%) Cyber Threat Intelligence
16 59 (10.95%) Security Architecture
17 49 (9.09%) DevOps
17 49 (9.09%) Infrastructure as Code
18 48 (8.91%) Analytics
19 47 (8.72%) Identity Access Management
Programming Languages
1 140 (25.97%) Python
2 132 (24.49%) PowerShell
3 57 (10.58%) Kusto Query Language
4 40 (7.42%) Bash
5 11 (2.04%) Java
6 10 (1.86%) Search Processing Language
7 8 (1.48%) Shell Script
8 5 (0.93%) JavaScript
9 4 (0.74%) Bicep
9 4 (0.74%) C
9 4 (0.74%) C++
9 4 (0.74%) PHP
9 4 (0.74%) SQL
9 4 (0.74%) TypeScript
10 3 (0.56%) C#
10 3 (0.56%) Perl
11 2 (0.37%) VBScript
12 1 (0.19%) Apex Code
12 1 (0.19%) Korn
12 1 (0.19%) R
Qualifications
1 195 (36.18%) Security Cleared
2 140 (25.97%) SC Cleared
3 108 (20.04%) CISSP
4 64 (11.87%) DV Cleared
5 48 (8.91%) Degree
6 45 (8.35%) Cisco Certification
7 41 (7.61%) CISM
8 40 (7.42%) CEH
9 34 (6.31%) GCIH
10 33 (6.12%) GIAC
11 31 (5.75%) CompTIA Security+
11 31 (5.75%) GCIA
12 20 (3.71%) CCNP
13 17 (3.15%) (ISC)2 CCSP
14 15 (2.78%) AWS Certification
15 14 (2.60%) CompTIA CySA+
16 13 (2.41%) Azure Certification
17 12 (2.23%) CCSE
17 12 (2.23%) Computer Science Degree
18 11 (2.04%) GCFA
Quality Assurance & Compliance
1 127 (23.56%) NIST
2 108 (20.04%) ISO/IEC 27001
3 62 (11.50%) GDPR
4 33 (6.12%) HIPAA
4 33 (6.12%) PCI DSS
5 21 (3.90%) NCSC
6 17 (3.15%) Cyber Essentials
7 11 (2.04%) GRC
8 10 (1.86%) SLA
8 10 (1.86%) SOC 2
9 8 (1.48%) Sarbanes-Oxley
10 7 (1.30%) Cyber Essentials PLUS
11 6 (1.11%) Actionable Recommendations
12 4 (0.74%) JSP 440
12 4 (0.74%) NIST 800
12 4 (0.74%) PSD2
12 4 (0.74%) QA
13 3 (0.56%) Disclosure Scotland
14 2 (0.37%) Data Quality
14 2 (0.37%) Government Security Classifications
System Software
1 67 (12.43%) Active Directory
2 33 (6.12%) Docker
3 24 (4.45%) VMware Infrastructure
4 20 (3.71%) Microsoft Virtual Server
4 20 (3.71%) Virtual Servers
5 7 (1.30%) Snort
6 5 (0.93%) Hyper-V
7 4 (0.74%) Squid
8 3 (0.56%) Virtual Machines
8 3 (0.56%) vSphere
9 1 (0.19%) vCloud
9 1 (0.19%) VMware NSX
9 1 (0.19%) VMware Workstation
Systems Management
1 42 (7.79%) Ansible
2 38 (7.05%) Terraform
3 37 (6.86%) Kubernetes
4 34 (6.31%) QRadar
5 31 (5.75%) SCCM
6 25 (4.64%) WSUS
7 17 (3.15%) Microsoft Intune
8 11 (2.04%) Prometheus
9 9 (1.67%) CSIRT
9 9 (1.67%) Nessus
10 8 (1.48%) FortiGate
11 6 (1.11%) Computer Emergency Response Teams
11 6 (1.11%) Kibana
12 5 (0.93%) Single Sign-On
13 4 (0.74%) logstash
13 4 (0.74%) Nexpose
13 4 (0.74%) Suricata
14 3 (0.56%) Grafana
14 3 (0.56%) Jamf Pro
15 2 (0.37%) Fluentd
Vendors
1 191 (35.44%) Microsoft
2 173 (32.10%) Splunk
3 47 (8.72%) CrowdStrike
4 44 (8.16%) Palo Alto
5 38 (7.05%) Cisco
6 37 (6.86%) ArcSight
7 33 (6.12%) VMware
8 25 (4.64%) Fortinet
9 24 (4.45%) Google
10 23 (4.27%) Qualys
11 21 (3.90%) Zscaler
12 20 (3.71%) NetApp
13 18 (3.34%) ServiceNow
14 16 (2.97%) LogRhythm
15 15 (2.78%) Forcepoint
16 14 (2.60%) CheckPoint
16 14 (2.60%) CyberArk
17 10 (1.86%) Oracle
18 9 (1.67%) BeyondTrust
18 9 (1.67%) Citrix