Threat Detection Contracts

Threat Detection
UK

The table below provides summary statistics for contract job vacancies requiring Threat Detection skills. It includes a benchmarking guide to the contractor rates offered in vacancies that cited Threat Detection over the 6 months leading up to 24 June 2025, comparing them to the same period in the previous two years.

6 months to
24 Jun 2025
Same period 2024 Same period 2023
Rank 409 487 590
Rank change year-on-year +78 +103 +175
Contract jobs citing Threat Detection 130 90 99
As % of all contract jobs advertised in the UK 0.43% 0.21% 0.18%
As % of the Processes & Methodologies category 0.47% 0.24% 0.20%
Number of daily rates quoted 71 75 63
10th Percentile £413 £510 £488
25th Percentile £469 £556 £550
Median daily rate (50th Percentile) £563 £600 £625
Median % change year-on-year -6.25% -4.00% -
75th Percentile £638 £648 £719
90th Percentile £700 £750 £791
UK excluding London median daily rate £563 £600 £566
% change year-on-year -6.25% +6.09% -9.51%
Number of hourly rates quoted 5 0 0
10th Percentile - - -
25th Percentile £80.34 - -
Median hourly rate £81.35 - -
75th Percentile - - -
90th Percentile £81.80 - -
UK excluding London median hourly rate £81.35 - -

All Process and Methodology Skills
UK

Threat Detection falls under the Processes and Methodologies category. For comparison with the information above, the following table provides summary statistics for all contract job vacancies requiring process or methodology skills.

Contract vacancies with a requirement for process or methodology skills 27,390 36,950 49,738
As % of all contract IT jobs advertised in the UK 91.03% 85.01% 89.58%
Number of daily rates quoted 17,318 23,542 34,326
10th Percentile £300 £300 £325
25th Percentile £406 £413 £438
Median daily rate (50th Percentile) £502 £525 £550
Median % change year-on-year -4.33% -4.55% +1.85%
75th Percentile £625 £638 £650
90th Percentile £738 £750 £750
UK excluding London median daily rate £475 £500 £500
% change year-on-year -5.00% - +1.01%
Number of hourly rates quoted 1,304 2,585 1,699
10th Percentile £14.20 £12.65 £11.45
25th Percentile £17.45 £16.06 £15.83
Median hourly rate £25.15 £37.50 £35.00
Median % change year-on-year -32.93% +7.14% +34.62%
75th Percentile £55.00 £61.30 £64.50
90th Percentile £72.50 £72.50 £75.00
UK excluding London median hourly rate £25.04 £38.12 £32.50
% change year-on-year -34.32% +17.29% +54.76%

Threat Detection
Job Vacancy Trend

Job postings citing Threat Detection as a proportion of all IT jobs advertised.

Job vacancy trend for Threat Detection in the UK

Threat Detection
Contractor Daily Rate Trend

3-month moving average daily rate quoted in jobs citing Threat Detection.

Daily rate trend for Threat Detection in the UK

Threat Detection
Daily Rate Histogram

Daily rate distribution for jobs citing Threat Detection over the 6 months to 24 June 2025.

Daily rate histogram for Threat Detection in the UK

Threat Detection
Contractor Hourly Rate Trend

3-month moving average hourly rates quoted in jobs citing Threat Detection.

Hourly rate trend for Threat Detection in the UK

Threat Detection
Top 13 Contract Locations

The table below looks at the demand and provides a guide to the median contractor rates quoted in IT jobs citing Threat Detection within the UK over the 6 months to 24 June 2025. The 'Rank Change' column provides an indication of the change in demand within each location based on the same 6 month period last year.

Location Rank Change
on Same Period
Last Year
Matching
Contract
IT Job Ads
Median
Daily Rate
Past 6 Months
Median Daily Rate
% Change
on Same Period
Last Year
Live
Jobs
England +107 116 £575 -4.17% 436
UK excluding London +82 56 £563 -6.25% 209
London +65 52 £550 -6.78% 247
Work from Home +42 36 £531 -11.50% 210
South East - 18 £550 - 62
East of England - 13 £600 - 23
North of England - 10 £631 - 40
South West +34 8 £531 -7.61% 32
Midlands +5 6 £650 +1.56% 31
West Midlands +1 6 £650 +1.56% 21
North West - 5 £663 - 27
Yorkshire - 5 £500 - 12
Scotland - 3 £493 - 15

Threat Detection
Co-occurring Skills and Capabilities by Category

The follow tables expand on the table above by listing co-occurrences grouped by category. The same employment type, locality and period is covered with up to 20 co-occurrences shown in each of the following categories:

Application Platforms
1 1 (0.77%) Apache Spark
Business Applications
1 1 (0.77%) Remedy ITSM
Cloud Services
1 40 (30.77%) Azure
2 25 (19.23%) Azure Sentinel
3 24 (18.46%) AWS
4 11 (8.46%) GCP
5 8 (6.15%) Microsoft 365
6 7 (5.38%) Azure Monitor
6 7 (5.38%) Entra ID
7 6 (4.62%) Amazon GuardDuty
7 6 (4.62%) AWS KMS
8 5 (3.85%) Amazon EKS
8 5 (3.85%) GitHub
8 5 (3.85%) Serverless
9 4 (3.08%) Amazon Macie
9 4 (3.08%) AWS CloudTrail
9 4 (3.08%) AWS Lambda
9 4 (3.08%) Azure Logic Apps
9 4 (3.08%) Virtual Private Cloud
10 3 (2.31%) Amazon CloudWatch
10 3 (2.31%) Azure DevOps
10 3 (2.31%) Cloud Computing
Communications & Networking
1 28 (21.54%) Firewall
2 26 (20.00%) Network Security
3 22 (16.92%) DNS
4 16 (12.31%) HTTP
4 16 (12.31%) SMTP
4 16 (12.31%) SSL
5 14 (10.77%) FTP
6 9 (6.92%) TCP/IP
7 6 (4.62%) VPN
8 4 (3.08%) Intrusion Detection
9 3 (2.31%) DHCP
10 2 (1.54%) BGP
10 2 (1.54%) EIGRP
10 2 (1.54%) OSPF
10 2 (1.54%) Wireless
11 1 (0.77%) DSL
11 1 (0.77%) IPsec
11 1 (0.77%) VLAN
11 1 (0.77%) WAN
11 1 (0.77%) Wireless Security
Database & Business Intelligence
1 4 (3.08%) Amazon RDS
2 2 (1.54%) BigQuery
2 2 (1.54%) DynamoDB
3 1 (0.77%) Big Data
3 1 (0.77%) Elasticsearch
3 1 (0.77%) Hadoop
3 1 (0.77%) NoSQL
3 1 (0.77%) Tableau
Development Applications
1 4 (3.08%) Jenkins
2 3 (2.31%) Git
3 2 (1.54%) GitLab
3 2 (1.54%) JIRA
General
1 35 (26.92%) Social Skills
2 25 (19.23%) Analytical Skills
3 10 (7.69%) Finance
4 8 (6.15%) Law
5 7 (5.38%) Banking
5 7 (5.38%) Inclusion and Diversity
5 7 (5.38%) Public Sector
6 5 (3.85%) Documentation Skills
6 5 (3.85%) Legal
7 3 (2.31%) Aviation
8 2 (1.54%) Fire and Rescue
8 2 (1.54%) Local Government
8 2 (1.54%) Military
8 2 (1.54%) Police
8 2 (1.54%) Presentation Skills
8 2 (1.54%) Swedish Language
8 2 (1.54%) Telecoms
9 1 (0.77%) Aerospace
Job Titles
1 31 (23.85%) Analyst
2 25 (19.23%) Security Engineer
3 20 (15.38%) SOC Analyst
4 17 (13.08%) Consultant
5 14 (10.77%) Architect
6 11 (8.46%) Security Architect
7 10 (7.69%) Security Analyst
8 9 (6.92%) Cybersecurity Engineer
8 9 (6.92%) Splunk Consultant
9 8 (6.15%) Cybersecurity Analyst
10 7 (5.38%) Developer
10 7 (5.38%) Senior
11 6 (4.62%) Lead
12 5 (3.85%) SOC Engineer
12 5 (3.85%) Splunk Support
12 5 (3.85%) Support Consultant
13 4 (3.08%) Security Consultant
13 4 (3.08%) Security Specialist
13 4 (3.08%) SIEM Consultant
13 4 (3.08%) SIEM Engineer
Libraries, Frameworks & Software Standards
1 13 (10.00%) LDAP
2 4 (3.08%) Elastic Stack
3 3 (2.31%) .NET
4 2 (1.54%) Node.js
4 2 (1.54%) OAuth
4 2 (1.54%) OpenID
4 2 (1.54%) SAML
5 1 (0.77%) Fluent Bit
5 1 (0.77%) JSON
5 1 (0.77%) OAuth2
5 1 (0.77%) Regular Expression
5 1 (0.77%) RESTful
5 1 (0.77%) Smart Contracts
Miscellaneous
1 31 (23.85%) Cyber Threat
1 31 (23.85%) Security Operations Centre
2 16 (12.31%) Security Posture
3 11 (8.46%) Analytical Mindset
3 11 (8.46%) Management Information System
4 10 (7.69%) CSOC
4 10 (7.69%) Cyberattack
5 7 (5.38%) Cloud Native
5 7 (5.38%) Cyber Kill Chain
6 5 (3.85%) Onboarding
6 5 (3.85%) Virtual Team
6 5 (3.85%) YARA
7 4 (3.08%) PKI
8 3 (2.31%) Cyber Defence
8 3 (2.31%) Data Centre
8 3 (2.31%) Distributed Denial-of-Service
8 3 (2.31%) Distributed Systems
8 3 (2.31%) Insider Threat
8 3 (2.31%) Operational Technology
9 2 (1.54%) Driving Licence
Operating Systems
1 23 (17.69%) Windows
2 18 (13.85%) Linux
3 7 (5.38%) Windows Server
4 5 (3.85%) Mac OS
5 2 (1.54%) Unix
6 1 (0.77%) VMS
6 1 (0.77%) Windows 10
6 1 (0.77%) Windows Server 2016
Processes & Methodologies
1 83 (63.85%) SIEM
2 72 (55.38%) Incident Response
3 66 (50.77%) Cybersecurity
3 66 (50.77%) Security Operations
4 35 (26.92%) Threat Intelligence
5 29 (22.31%) Security Monitoring
5 29 (22.31%) SOAR
6 28 (21.54%) Cloud Security
6 28 (21.54%) Cyber Threat Intelligence
7 23 (17.69%) Problem-Solving
8 21 (16.15%) Vulnerability Management
9 20 (15.38%) Analytics
10 18 (13.85%) DevOps
10 18 (13.85%) MITRE ATT&CK
10 18 (13.85%) Use Case
11 17 (13.08%) Artificial Intelligence
12 16 (12.31%) Information Security
13 14 (10.77%) Migration
13 14 (10.77%) Threat Modelling
14 12 (9.23%) CI/CD
Programming Languages
1 32 (24.62%) Python
2 23 (17.69%) PowerShell
3 16 (12.31%) Kusto Query Language
4 6 (4.62%) Bash
5 5 (3.85%) C#
5 5 (3.85%) Shell Script
6 4 (3.08%) C++
6 4 (3.08%) Java
6 4 (3.08%) JavaScript
7 3 (2.31%) C
7 3 (2.31%) SQL
8 2 (1.54%) Kotlin
8 2 (1.54%) Rust
8 2 (1.54%) Search Processing Language
9 1 (0.77%) R
Qualifications
1 47 (36.15%) Security Cleared
2 42 (32.31%) SC Cleared
3 21 (16.15%) CISSP
4 13 (10.00%) DV Cleared
5 12 (9.23%) GCIA
5 12 (9.23%) GCIH
6 10 (7.69%) CompTIA Security+
7 9 (6.92%) CISM
8 8 (6.15%) GIAC
9 7 (5.38%) Degree
10 6 (4.62%) CEH
10 6 (4.62%) Cisco Certification
10 6 (4.62%) GCFA
11 5 (3.85%) AWS Certification
12 3 (2.31%) CCNA
12 3 (2.31%) CompTIA CySA+
13 2 (1.54%) AWS Certified DevOps Engineer
13 2 (1.54%) AWS Certified Solutions Architect
13 2 (1.54%) ECSA
13 2 (1.54%) ISO 27001 Lead Auditor
Quality Assurance & Compliance
1 19 (14.62%) NIST
2 16 (12.31%) ISO/IEC 27001
3 15 (11.54%) GDPR
4 7 (5.38%) NCSC
5 5 (3.85%) HIPAA
6 4 (3.08%) NIST 800
6 4 (3.08%) PCI DSS
7 3 (2.31%) Actionable Recommendations
7 3 (2.31%) GRC
7 3 (2.31%) SOC 2
8 2 (1.54%) California Consumer Privacy Act
9 1 (0.77%) Cyber Essentials
9 1 (0.77%) Def Stans
9 1 (0.77%) QA
9 1 (0.77%) RMADS
System Software
1 11 (8.46%) Active Directory
2 5 (3.85%) Virtual Machines
3 4 (3.08%) Docker
4 1 (0.77%) Hyper-V
4 1 (0.77%) VMware Infrastructure
4 1 (0.77%) VMware NSX
4 1 (0.77%) vSphere
Systems Management
1 10 (7.69%) Terraform
2 8 (6.15%) Kubernetes
3 5 (3.85%) Grafana
3 5 (3.85%) QRadar
4 4 (3.08%) Single Sign-On
5 3 (2.31%) Ansible
5 3 (2.31%) Microsoft Intune
5 3 (2.31%) Prometheus
6 2 (1.54%) CSIRT
6 2 (1.54%) FortiGate
6 2 (1.54%) Kustomize
6 2 (1.54%) Puppet
6 2 (1.54%) SCCM
7 1 (0.77%) Demisto
7 1 (0.77%) Fluentd
7 1 (0.77%) Jamf Pro
7 1 (0.77%) Kibana
7 1 (0.77%) logstash
Vendors
1 33 (25.38%) Microsoft
2 30 (23.08%) Splunk
3 10 (7.69%) CrowdStrike
4 6 (4.62%) Google
5 5 (3.85%) IBM
6 4 (3.08%) ArcSight
6 4 (3.08%) Cisco
6 4 (3.08%) Rapid7
6 4 (3.08%) ServiceNow
7 3 (2.31%) Palo Alto
8 2 (1.54%) Alibaba
8 2 (1.54%) LogRhythm
8 2 (1.54%) McAfee
8 2 (1.54%) Oracle
8 2 (1.54%) Ribbon
8 2 (1.54%) Salesforce
8 2 (1.54%) SAP
8 2 (1.54%) Symantec
8 2 (1.54%) Tenable
8 2 (1.54%) Trend Micro