Period
to 19 June 2018

The following table provides summary statistics for contract job vacancies with a requirement for Threat Intelligence skills. Included is a benchmarking guide to the contractor rates offered in vacancies that have cited Threat Intelligence over the 6 months to 19 June 2018 with a comparison to the same period in the previous 2 years.

Note that daily and hourly rates are treated separately in these statistics. When calculating contractor rate percentiles, daily rates are never derived from quoted hourly rates or vice versa.

Threat Intelligence
UK
6 months to
19 Jun 2018
Same period 2017 Same period 2016
Rank 692 754 807
Rank change year-on-year +62 +53 +52
Contract jobs citing Threat Intelligence 196 74 84
As % of all contract IT jobs advertised in the UK 0.20% 0.081% 0.079%
As % of the Processes & Methodologies category 0.23% 0.096% 0.095%
Number of daily rates quoted 102 50 43
UK median daily rate £506 £475 £455
Median daily rate % change year-on-year +6.58% +4.40% -8.54%
10th Percentile £375 £362 £378
90th Percentile £650 £603 £590
UK excluding London median daily rate £475 £450 £450
% change year-on-year +5.56% - -7.22%
Number of hourly rates quoted 1 0 0
UK median hourly rate £62.50 - -
UK excluding London median hourly rate - - -

Threat Intelligence is in the Processes and Methodologies category. The following table is for comparison with the above and provides summary statistics for all contract job vacancies with a requirement for process or methodology skills.

All Process and Methodology Skills
UK
Contract vacancies with a requirement for process or methodology skills 85,425 77,081 88,855
As % of all contract IT jobs advertised in the UK 85.66% 84.76% 84.02%
Number of daily rates quoted 56,293 50,493 58,499
UK median daily rate £450 £438 £425
Median daily rate % change year-on-year +2.86% +2.94% +6.25%
10th Percentile £300 £275 £263
90th Percentile £638 £625 £606
UK excluding London median daily rate £425 £400 £400
% change year-on-year +6.25% - +6.67%
Number of hourly rates quoted 2,320 2,088 2,246
UK median hourly rate £21.75 £25.00 £25.00
Median hourly rate % change year-on-year -13.00% - +17.37%
10th Percentile £11.18 £11.47 £12.00
90th Percentile £50.00 £52.50 £50.25
UK excluding London median hourly rate £20.00 £25.00 £27.00
% change year-on-year -20.00% -7.41% +25.29%

Threat Intelligence
Job Vacancy Trend

Job postings citing Threat Intelligence as a percentage of all IT jobs advertised.

Job vacancy trend for Threat Intelligence in the UK

Threat Intelligence
Contractor Daily Rate Trend

This chart provides the 3-month moving average for daily rates quoted in contract jobs citing Threat Intelligence.

Contractor daily rate trend for Threat Intelligence in the UK

Threat Intelligence
Contractor Daily Rate Histogram

The daily rate distribution of IT jobs citing Threat Intelligence over the 6 months to 19 June 2018.

Contractor daily rate histogram for Threat Intelligence in the UK

Threat Intelligence
Top 12 Contract Locations

The table below looks at the demand and provides a guide to the median contractor rates quoted in IT jobs citing Threat Intelligence within the UK over the 6 months to 19 June 2018. The 'Rank Change' column provides an indication of the change in demand within each location based on the same 6 month period last year.

Location Rank Change
on Same Period
Last Year
Matching
Contract
IT Job Ads
Median
Daily Rate
Past 6 Months
Median Daily Rate
% Change
on Same Period
Last Year
Live
Job
Vacancies
England +75 183 £519 +9.21% 30
UK excluding London +79 130 £475 +5.56% 18
North of England +22 70 £480 -1.54% 4
London -25 59 £538 +4.88% 13
North West - 38 £480 - 2
Yorkshire -6 32 £525 +10.53% 2
South East -3 25 £500 +29.03% 3
East of England +13 19 £375 +25.00% 5
Midlands +1 9 £394 -24.82% 2
West Midlands -9 8 £394 -24.82% 1
Scotland -35 6 £245 -55.45% 1
South West -2 1 £575 +57.53% 3

For the 6 months to 19 June 2018, IT contractor jobs citing Threat Intelligence also mentioned the following skills in order of popularity. The figures indicate the absolute number co-occurrences and as a proportion of all contract job ads with a requirement for Threat Intelligence.

1 131 (66.84%) Cyber Threat Intelligence
2 116 (59.18%) Cybersecurity
3 108 (55.10%) SIEM
4 82 (41.84%) Firewall
5 81 (41.33%) Security Operations
6 67 (34.18%) Information Security
7 66 (33.67%) Cyberthreat
8 63 (32.14%) Vulnerability Management
9 59 (30.10%) Security Monitoring
10 53 (27.04%) CISSP
11 52 (26.53%) Cyber Intelligence
12 47 (23.98%) Finance
13 37 (18.88%) Security Cleared
14 34 (17.35%) Analytical Skills
15 33 (16.84%) Intrusion Detection
15 33 (16.84%) Stakeholder Management
16 32 (16.33%) Network Security
17 31 (15.82%) ISO/IEC 27001
18 27 (13.78%) Malware Analysis
19 26 (13.27%) Digital Forensics
19 26 (13.27%) SC Cleared
20 25 (12.76%) Banking
20 25 (12.76%) Management Information System
20 25 (12.76%) Python
21 24 (12.24%) Risk Management
22 23 (11.73%) GIAC
22 23 (11.73%) Penetration Testing
23 22 (11.22%) Vulnerability Assessment
23 22 (11.22%) Intel
24 21 (10.71%) Windows

Threat Intelligence
Co-occurring IT Skills by Category

The follow tables expand on the table above by listing co-occurrences grouped by category. The same job type, locality and period is covered with up to 20 co-occurrences shown in each of the following categories:

Application Platforms
1 9 (4.59%) Tomcat
2 3 (1.53%) Elasticsearch
Applications
1 1 (0.51%) Microsoft Office
1 1 (0.51%) MS Visio
Cloud Services
1 8 (4.08%) IaaS
2 4 (2.04%) OpenDNS
3 2 (1.02%) SaaS
4 1 (0.51%) Amazon AWS
4 1 (0.51%) Microsoft Azure
Communications & Networking
1 82 (41.84%) Firewall
2 33 (16.84%) Intrusion Detection
3 32 (16.33%) Network Security
4 11 (5.61%) HTTP
5 10 (5.10%) DNS
6 6 (3.06%) Intranet
7 5 (2.55%) FTP
7 5 (2.55%) TCP/IP
8 4 (2.04%) Internet
9 1 (0.51%) DMZ
9 1 (0.51%) LAN
9 1 (0.51%) MPLS
9 1 (0.51%) NGN
9 1 (0.51%) SSL
9 1 (0.51%) VPN
9 1 (0.51%) WAN
Database & Business Intelligence
1 9 (4.59%) Big Data
2 7 (3.57%) Hadoop
3 6 (3.06%) Maltego
4 3 (1.53%) NoSQL
5 2 (1.02%) Neo4j
5 2 (1.02%) OrientDB
Development Applications
1 7 (3.57%) Metasploit
2 2 (1.02%) Git (software)
2 2 (1.02%) JIRA
3 1 (0.51%) Burp Suite
General
1 47 (23.98%) Finance
2 25 (12.76%) Banking
3 7 (3.57%) Investment Banking
3 7 (3.57%) Telecoms
4 4 (2.04%) Legal
5 3 (1.53%) Retail
6 2 (1.02%) Games
6 2 (1.02%) Spanish Language
7 1 (0.51%) Electronics
7 1 (0.51%) Law
7 1 (0.51%) Manufacturing
7 1 (0.51%) Marketing
7 1 (0.51%) Retail Banking
Job Titles
1 83 (42.35%) Analyst
2 67 (34.18%) Security Analyst
3 30 (15.31%) Operations Analyst
3 30 (15.31%) Security Operations Analyst
4 23 (11.73%) Senior Analyst
5 22 (11.22%) Senior Security Analyst
6 21 (10.71%) Security Manager
7 19 (9.69%) Consultant
8 17 (8.67%) Cybersecurity Analyst
9 15 (7.65%) Information Manager
9 15 (7.65%) Threat Intelligence Analyst
10 12 (6.12%) Information Security Manager
11 11 (5.61%) Architect
11 11 (5.61%) Business Analyst
11 11 (5.61%) Project Manager
11 11 (5.61%) Security Architect
11 11 (5.61%) Security Specialist
12 10 (5.10%) SOC Analyst
13 8 (4.08%) ArcSight Consultant
13 8 (4.08%) Security Consultant
Libraries, Frameworks & Software Standards
1 19 (9.69%) Regular Expression
2 9 (4.59%) Elastic Stack
3 8 (4.08%) JSON
3 8 (4.08%) Node.js
4 3 (1.53%) Akka
4 3 (1.53%) AngularJS
4 3 (1.53%) Middleware
4 3 (1.53%) Play Framework
4 3 (1.53%) REST
4 3 (1.53%) SOAP
4 3 (1.53%) Web Services
5 1 (0.51%) CSS
Miscellaneous
1 66 (33.67%) Cyberthreat
2 34 (17.35%) Analytical Skills
3 25 (12.76%) Management Information System
4 19 (9.69%) Cyberattack
4 19 (9.69%) Security Operations Centre
5 16 (8.16%) Self-Motivation
6 12 (6.12%) Cyber Kill Chain
7 11 (5.61%) Computer Science
7 11 (5.61%) Data Centre
8 8 (4.08%) Client/Server
9 6 (3.06%) CESG
10 5 (2.55%) Driving Licence
11 2 (1.02%) Cybercrime
11 2 (1.02%) Fintech
11 2 (1.02%) PKI
12 1 (0.51%) Greenfield Project
12 1 (0.51%) Public Cloud
Operating Systems
1 21 (10.71%) Windows
2 18 (9.18%) Unix
3 10 (5.10%) Linux
4 2 (1.02%) Apple iOS
4 2 (1.02%) Mac OS X
4 2 (1.02%) Solaris
5 1 (0.51%) AIX
5 1 (0.51%) Android
5 1 (0.51%) Red Hat Enterprise Linux
5 1 (0.51%) VMS
5 1 (0.51%) Windows 2000 Server
5 1 (0.51%) Windows Server
5 1 (0.51%) Windows Server 2003
5 1 (0.51%) Windows Server 2008
5 1 (0.51%) Windows Server 2012
5 1 (0.51%) Windows Vista
Processes & Methodologies
1 131 (66.84%) Cyber Threat Intelligence
2 116 (59.18%) Cybersecurity
3 108 (55.10%) SIEM
4 81 (41.33%) Security Operations
5 67 (34.18%) Information Security
6 63 (32.14%) Vulnerability Management
7 59 (30.10%) Security Monitoring
8 52 (26.53%) Cyber Intelligence
9 33 (16.84%) Stakeholder Management
10 27 (13.78%) Malware Analysis
11 26 (13.27%) Digital Forensics
12 24 (12.24%) Risk Management
13 23 (11.73%) Penetration Testing
14 22 (11.22%) Vulnerability Assessment
15 19 (9.69%) Security Architecture
15 19 (9.69%) Use Case
16 18 (9.18%) Security Testing
17 17 (8.67%) Agile Software Development
18 16 (8.16%) ITIL
18 16 (8.16%) Security Management
Programming Languages
1 25 (12.76%) Python
2 8 (4.08%) C
3 6 (3.06%) COBOL
3 6 (3.06%) Java
4 4 (2.04%) JavaScript
5 3 (1.53%) Scala
6 2 (1.02%) Perl
6 2 (1.02%) VBA
7 1 (0.51%) C++
7 1 (0.51%) Shell Script
Qualifications
1 53 (27.04%) CISSP
2 37 (18.88%) Security Cleared
3 26 (13.27%) SC Cleared
4 23 (11.73%) GIAC
5 19 (9.69%) CEH
5 19 (9.69%) Degree
6 17 (8.67%) SANS
7 16 (8.16%) CISM
8 9 (4.59%) Cisco Certification
8 9 (4.59%) CREST Certified
8 9 (4.59%) GCIH
9 8 (4.08%) DV Cleared
9 8 (4.08%) GCIA
9 8 (4.08%) GSEC
10 7 (3.57%) (ISC)2 CCSP
10 7 (3.57%) CCSP
11 6 (3.06%) CISMP
11 6 (3.06%) Computer Science Degree
11 6 (3.06%) GCFA
12 5 (2.55%) GCED
Quality Assurance & Compliance
1 31 (15.82%) ISO/IEC 27001
2 6 (3.06%) CESG Infosec
2 6 (3.06%) COBIT
2 6 (3.06%) HMG Security Policy Framework
3 5 (2.55%) NIST 800
4 3 (1.53%) PCI DSS
5 2 (1.02%) ISO 9001
6 1 (0.51%) FISMA
6 1 (0.51%) GDPR
6 1 (0.51%) ISO/IEC 27002 (supersedes ISO/IEC 17799)
6 1 (0.51%) SLA
System Software
1 3 (1.53%) Virtual Machines
2 2 (1.02%) Active Directory
Systems Management
1 14 (7.14%) QRadar
2 12 (6.12%) ArcSight ESM
3 8 (4.08%) Host Intrusion Detection System
3 8 (4.08%) Nessus
4 6 (3.06%) IBM BigFix
5 5 (2.55%) CSIRT
6 4 (2.04%) EnCase
6 4 (2.04%) McAfee ePO
6 4 (2.04%) Nmap
7 2 (1.02%) CASB
8 1 (0.51%) Computer Emergency Response Teams
8 1 (0.51%) FTK
Vendors
1 22 (11.22%) Intel
2 20 (10.20%) ArcSight
3 11 (5.61%) HP
4 6 (3.06%) McAfee
4 6 (3.06%) Microsoft
5 4 (2.04%) IBM
5 4 (2.04%) Splunk
6 3 (1.53%) Cisco
6 3 (1.53%) Rapid7
6 3 (1.53%) Red Hat
7 2 (1.02%) Qualys
7 2 (1.02%) SAP
8 1 (0.51%) F5
8 1 (0.51%) Infoblox