Period
to 19 December 2018

The following table provides summary statistics for contract job vacancies with a requirement for Threat Intelligence skills. Included is a benchmarking guide to the contractor rates offered in vacancies that have cited Threat Intelligence over the 6 months to 19 December 2018 with a comparison to the same period in the previous 2 years.

Note that daily and hourly rates are treated separately in these statistics. When calculating contractor rate percentiles, daily rates are never derived from quoted hourly rates or vice versa.

Threat Intelligence
UK
6 months to
19 Dec 2018
Same period 2017 Same period 2016
Rank 721 706 784
Rank change year-on-year -15 +78 +75
Contract jobs citing Threat Intelligence 175 189 99
As % of all contract IT jobs advertised in the UK 0.17% 0.18% 0.097%
As % of the Processes & Methodologies category 0.19% 0.21% 0.11%
Number of daily rates quoted 93 116 58
UK median daily rate £525 £530 £481
Median daily rate % change year-on-year -0.94% +10.13% +13.24%
10th Percentile £399 £418 £375
90th Percentile £845 £675 £690
UK excluding London median daily rate £500 £528 £450
% change year-on-year -5.21% +17.22% +9.09%
Number of hourly rates quoted 0 0 0
UK median hourly rate - - -
UK excluding London median hourly rate - - -

Threat Intelligence is in the Processes and Methodologies category. The following table is for comparison with the above and provides summary statistics for all contract job vacancies with a requirement for process or methodology skills.

All Process and Methodology Skills
UK
Contract vacancies with a requirement for process or methodology skills 90,884 88,673 87,415
As % of all contract IT jobs advertised in the UK 86.82% 85.91% 85.30%
Number of daily rates quoted 60,160 59,203 57,616
UK median daily rate £465 £450 £425
Median daily rate % change year-on-year +3.33% +5.88% +2.16%
10th Percentile £300 £278 £263
90th Percentile £638 £638 £603
UK excluding London median daily rate £425 £401 £400
% change year-on-year +6.12% +0.13% +3.23%
Number of hourly rates quoted 2,333 2,075 2,461
UK median hourly rate £22.50 £24.00 £22.84
Median hourly rate % change year-on-year -6.25% +5.10% +3.80%
10th Percentile £11.25 £11.25 £11.21
90th Percentile £50.25 £49.50 £48.75
UK excluding London median hourly rate £21.50 £25.00 £22.50
% change year-on-year -14.00% +11.11% -

Threat Intelligence
Job Vacancy Trend

Job postings citing Threat Intelligence as a percentage of all IT jobs advertised.

Job vacancy trend for Threat Intelligence in the UK

Threat Intelligence
Contractor Daily Rate Trend

This chart provides the 3-month moving average for daily rates quoted in contract jobs citing Threat Intelligence.

Contractor daily rate trend for Threat Intelligence in the UK

Threat Intelligence
Contractor Daily Rate Histogram

The daily rate distribution of IT jobs citing Threat Intelligence over the 6 months to 19 December 2018.

Contractor daily rate histogram for Threat Intelligence in the UK

Threat Intelligence
Top 13 Contract Locations

The table below looks at the demand and provides a guide to the median contractor rates quoted in IT jobs citing Threat Intelligence within the UK over the 6 months to 19 December 2018. The 'Rank Change' column provides an indication of the change in demand within each location based on the same 6 month period last year.

Location Rank Change
on Same Period
Last Year
Matching
Contract
IT Job Ads
Median
Daily Rate
Past 6 Months
Median Daily Rate
% Change
on Same Period
Last Year
Live
Job
Vacancies
England -10 165 £525 -0.94% 54
UK excluding London -22 91 £500 -5.21% 38
London -3 82 £550 - 23
South East -7 36 £550 -5.17% 9
North of England -72 17 £450 -7.69% 8
Midlands -1 15 £500 - 6
Yorkshire -34 15 £450 -18.18% 5
East of England +9 12 £446 - 5
West Midlands +2 12 £500 - 6
Scotland -20 7 - - 2
South West -27 3 £463 -11.90% 3
North West -37 2 £350 -27.08% 3
Northern Ireland - 1 - - 1

For the 6 months to 19 December 2018, IT contractor jobs citing Threat Intelligence also mentioned the following skills in order of popularity. The figures indicate the absolute number co-occurrences and as a proportion of all contract job ads with a requirement for Threat Intelligence.

1 103 (58.86%) Cyber Threat Intelligence
2 92 (52.57%) Cybersecurity
3 79 (45.14%) SIEM
4 68 (38.86%) Security Operations
5 59 (33.71%) Cyberthreat
6 54 (30.86%) Vulnerability Management
7 49 (28.00%) Information Security
8 44 (25.14%) Cyber Intelligence
9 39 (22.29%) Python
10 38 (21.71%) Linux
10 38 (21.71%) Penetration Testing
11 34 (19.43%) ISO/IEC 27001
11 34 (19.43%) Finance
11 34 (19.43%) Security Cleared
12 31 (17.71%) Firewall
12 31 (17.71%) Amazon AWS
13 30 (17.14%) Patch Management
13 30 (17.14%) Vulnerability Scanning
14 29 (16.57%) Incident Management
14 29 (16.57%) VPN
14 29 (16.57%) Intel
15 28 (16.00%) Bash Shell
16 26 (14.86%) Security Architecture
17 25 (14.29%) Splunk
18 24 (13.71%) ArcSight
18 24 (13.71%) Network Security
19 23 (13.14%) Ruby
20 22 (12.57%) Nessus
20 22 (12.57%) Degree
20 22 (12.57%) Security Monitoring

Threat Intelligence
Co-occurring IT Skills by Category

The follow tables expand on the table above by listing co-occurrences grouped by category. The same job type, locality and period is covered with up to 20 co-occurrences shown in each of the following categories:

Application Platforms
1 14 (8.00%) OpenStack
2 3 (1.71%) Tomcat
3 2 (1.14%) Apache
4 1 (0.57%) Apache Spark
Cloud Services
1 31 (17.71%) Amazon AWS
2 17 (9.71%) Microsoft Azure
3 5 (2.86%) IaaS
3 5 (2.86%) PaaS
3 5 (2.86%) SaaS
4 4 (2.29%) Google Cloud Platform
5 2 (1.14%) Office 365
6 1 (0.57%) Cloudflare
6 1 (0.57%) GitHub
6 1 (0.57%) Mimecast
Communications & Networking
1 31 (17.71%) Firewall
2 29 (16.57%) VPN
3 24 (13.71%) Network Security
4 18 (10.29%) Intrusion Detection
5 14 (8.00%) HTTP
6 13 (7.43%) 802.11
6 13 (7.43%) SNMP
7 12 (6.86%) Wireless
8 11 (6.29%) VoIP
9 5 (2.86%) SAN
10 3 (1.71%) DNS
11 2 (1.14%) Internet
11 2 (1.14%) TCP/IP
12 1 (0.57%) 3G
12 1 (0.57%) 4G
12 1 (0.57%) DMZ
12 1 (0.57%) Wireless Security
Database & Business Intelligence
1 14 (8.00%) Big Data
2 13 (7.43%) Hadoop
3 4 (2.29%) Data Lake
4 2 (1.14%) Cloudera CDH
5 1 (0.57%) Apache Hive
5 1 (0.57%) HBase
5 1 (0.57%) Impala
Development Applications
1 14 (8.00%) Burp Suite
1 14 (8.00%) Metasploit
2 2 (1.14%) Jenkins
3 1 (0.57%) Atlassian Bamboo
3 1 (0.57%) Bitbucket
3 1 (0.57%) Git (software)
3 1 (0.57%) gulp
3 1 (0.57%) JIRA
3 1 (0.57%) Maven
3 1 (0.57%) Subversion
3 1 (0.57%) TeamCity
3 1 (0.57%) Travis CI
General
1 34 (19.43%) Finance
2 15 (8.57%) Financial Institution
3 9 (5.14%) Banking
4 4 (2.29%) Retail Banking
5 2 (1.14%) Electronics
5 2 (1.14%) Law
5 2 (1.14%) Local Government
6 1 (0.57%) Retail
6 1 (0.57%) Russian Language
6 1 (0.57%) Swedish Language
Job Titles
1 40 (22.86%) Analyst
2 32 (18.29%) Security Analyst
3 28 (16.00%) Consultant
4 22 (12.57%) Security Engineer
5 17 (9.71%) Security Manager
5 17 (9.71%) Tester
6 14 (8.00%) Penetration Tester
7 12 (6.86%) ArcSight Consultant
8 10 (5.71%) Architect
8 10 (5.71%) Security Consultant
8 10 (5.71%) SOC Analyst
9 9 (5.14%) Security Architect
10 8 (4.57%) Cloud Engineer
10 8 (4.57%) Information Analyst
10 8 (4.57%) Information Security Analyst
10 8 (4.57%) IT Analyst
10 8 (4.57%) IT Security Analyst
11 7 (4.00%) Project Manager
11 7 (4.00%) Security Project Manager
12 6 (3.43%) Security Operations Analyst
Libraries, Frameworks & Software Standards
1 13 (7.43%) 802.1X
2 11 (6.29%) Regular Expression
3 10 (5.71%) JSON
4 3 (1.71%) Elastic Stack
5 1 (0.57%) .NET
5 1 (0.57%) .NET Framework
5 1 (0.57%) AngularJS
5 1 (0.57%) CSS
5 1 (0.57%) HTML
5 1 (0.57%) LESS
5 1 (0.57%) OAuth
5 1 (0.57%) OAuth2
5 1 (0.57%) OpenID
5 1 (0.57%) React
5 1 (0.57%) REST
5 1 (0.57%) RESTful
5 1 (0.57%) Sass
5 1 (0.57%) SOAP
5 1 (0.57%) Spring
5 1 (0.57%) Web Services
Miscellaneous
1 59 (33.71%) Cyberthreat
2 22 (12.57%) Security Operations Centre
3 16 (9.14%) Analytical Skills
4 15 (8.57%) Management Information System
5 14 (8.00%) SCADA
6 11 (6.29%) Mobile App
6 11 (6.29%) Wiki
7 9 (5.14%) Distributed Denial-of-Service
8 8 (4.57%) Data Centre
8 8 (4.57%) Enterprise Cloud
8 8 (4.57%) Self-Motivation
9 5 (2.86%) PKI
10 3 (1.71%) BYOD
10 3 (1.71%) Cyber Defence
11 2 (1.14%) Cyberattack
11 2 (1.14%) Cybercrime
12 1 (0.57%) Analytical Mindset
12 1 (0.57%) Data Protection Act
12 1 (0.57%) Internet of Things
12 1 (0.57%) Smart Energy
Operating Systems
1 38 (21.71%) Linux
2 14 (8.00%) Kali Linux
3 11 (6.29%) Windows
4 5 (2.86%) Unix
5 3 (1.71%) Red Hat Enterprise Linux
5 3 (1.71%) Solaris
6 2 (1.14%) CentOS
7 1 (0.57%) Apple iOS
7 1 (0.57%) SUSE Linux Enterprise Server
7 1 (0.57%) Windows Server 2003
7 1 (0.57%) Windows Server 2008
Processes & Methodologies
1 103 (58.86%) Cyber Threat Intelligence
2 92 (52.57%) Cybersecurity
3 79 (45.14%) SIEM
4 68 (38.86%) Security Operations
5 54 (30.86%) Vulnerability Management
6 49 (28.00%) Information Security
7 44 (25.14%) Cyber Intelligence
8 38 (21.71%) Penetration Testing
9 30 (17.14%) Patch Management
9 30 (17.14%) Vulnerability Scanning
10 29 (16.57%) Incident Management
11 26 (14.86%) Security Architecture
12 22 (12.57%) Security Monitoring
12 22 (12.57%) Threat Management
13 21 (12.00%) Risk Management
14 19 (10.86%) Agile Software Development
14 19 (10.86%) Open Source
15 18 (10.29%) Remediation Plan
16 16 (9.14%) Analytics
16 16 (9.14%) Computer Science
Programming Languages
1 39 (22.29%) Python
2 28 (16.00%) Bash Shell
3 23 (13.14%) Ruby
4 16 (9.14%) Java
5 15 (8.57%) PowerShell
6 14 (8.00%) C
6 14 (8.00%) Lua
7 13 (7.43%) C#
8 8 (4.57%) Perl
9 5 (2.86%) JavaScript
10 1 (0.57%) Scala
10 1 (0.57%) SQL
Qualifications
1 34 (19.43%) Security Cleared
2 22 (12.57%) Degree
3 21 (12.00%) SC Cleared
4 17 (9.71%) CISSP
5 14 (8.00%) OSCE
6 9 (5.14%) AWS Certification
7 8 (4.57%) CISM
7 8 (4.57%) SANS
8 7 (4.00%) CISA
9 6 (3.43%) CREST Certified
9 6 (3.43%) GCIH
10 5 (2.86%) CRISC
10 5 (2.86%) GPEN
10 5 (2.86%) OSCP
10 5 (2.86%) Tigerscheme
11 4 (2.29%) BPSS Clearance
11 4 (2.29%) CISMP
11 4 (2.29%) DV Cleared
11 4 (2.29%) GIAC
11 4 (2.29%) ISSMP
Quality Assurance & Compliance
1 34 (19.43%) ISO/IEC 27001
2 13 (7.43%) PCI DSS
3 12 (6.86%) GDPR
3 12 (6.86%) ISO/IEC 27002 (supersedes ISO/IEC 17799)
4 5 (2.86%) QA
5 3 (1.71%) COBIT
5 3 (1.71%) Sarbanes-Oxley
6 2 (1.14%) NIST 800
7 1 (0.57%) Cyber Essentials
System Software
1 2 (1.14%) HDFS
1 2 (1.14%) Virtual Machines
2 1 (0.57%) Docker
2 1 (0.57%) ProxySG
Systems Management
1 22 (12.57%) Nessus
2 15 (8.57%) ArcSight ESM
3 14 (8.00%) Nmap
4 9 (5.14%) Suricata
5 7 (4.00%) QRadar
6 4 (2.29%) Kubernetes
6 4 (2.29%) McAfee ePO
7 2 (1.14%) Ansible
7 2 (1.14%) EnCase
7 2 (1.14%) FTK
7 2 (1.14%) Host Intrusion Detection System
7 2 (1.14%) SCCM
7 2 (1.14%) WSUS
8 1 (0.57%) CSIRT
8 1 (0.57%) Hadoop YARN
8 1 (0.57%) IBM BigFix
8 1 (0.57%) Oozie
8 1 (0.57%) Opscode Chef
8 1 (0.57%) Puppet
8 1 (0.57%) RSA enVision
Vendors
1 29 (16.57%) Intel
2 25 (14.29%) Splunk
3 24 (13.71%) ArcSight
4 13 (7.43%) Qualys
5 11 (6.29%) HP
5 11 (6.29%) McAfee
6 6 (3.43%) AlienVault
6 6 (3.43%) Darktrace
7 4 (2.29%) FireEye
7 4 (2.29%) Google
7 4 (2.29%) Microsoft
8 2 (1.14%) Blue Coat
8 2 (1.14%) CheckPoint
8 2 (1.14%) Cisco
8 2 (1.14%) CyberArk
8 2 (1.14%) Dell
8 2 (1.14%) Fortinet
8 2 (1.14%) LogRhythm
8 2 (1.14%) Red Hat
8 2 (1.14%) SolarWinds