Threat Intelligence Contracts

Threat Intelligence
UK

The table below provides summary statistics for contract job vacancies requiring Threat Intelligence skills. It includes a benchmarking guide to the contractor rates offered in vacancies that cited Threat Intelligence over the 6 months leading up to 1 May 2025, comparing them to the same period in the previous two years.

6 months to
1 May 2025
Same period 2024 Same period 2023
Rank 423 350 540
Rank change year-on-year -73 +190 +192
Contract jobs citing Threat Intelligence 97 240 178
As % of all contract jobs advertised in the UK 0.33% 0.55% 0.30%
As % of the Processes & Methodologies category 0.36% 0.64% 0.33%
Number of daily rates quoted 72 168 102
10th Percentile £414 £500 £450
25th Percentile £475 £557 £538
Median daily rate (50th Percentile) £550 £600 £625
Median % change year-on-year -8.33% -4.00% +20.48%
75th Percentile £638 £763 £747
90th Percentile £725 £850 £838
UK excluding London median daily rate £550 £600 £625
% change year-on-year -8.33% -4.00% +23.46%
Number of hourly rates quoted 1 1 0
10th Percentile - - -
25th Percentile £77.50 - -
Median hourly rate £85.00 £80.00 -
Median % change year-on-year +6.25% - -
75th Percentile £92.50 - -
90th Percentile - - -
UK excluding London median hourly rate £85.00 £80.00 -
% change year-on-year +6.25% - -

All Process and Methodology Skills
UK

Threat Intelligence falls under the Processes and Methodologies category. For comparison with the information above, the following table provides summary statistics for all contract job vacancies requiring process or methodology skills.

Contract vacancies with a requirement for process or methodology skills 26,594 37,597 53,655
As % of all contract IT jobs advertised in the UK 90.84% 86.31% 89.91%
Number of daily rates quoted 17,149 24,227 37,238
10th Percentile £308 £300 £325
25th Percentile £413 £413 £438
Median daily rate (50th Percentile) £520 £525 £550
Median % change year-on-year -0.95% -4.55% +4.76%
75th Percentile £630 £638 £650
90th Percentile £743 £750 £750
UK excluding London median daily rate £483 £500 £500
% change year-on-year -3.50% - +5.26%
Number of hourly rates quoted 1,071 2,443 1,746
10th Percentile £14.41 £12.75 £11.00
25th Percentile £18.21 £16.00 £16.25
Median hourly rate £29.00 £35.65 £37.30
Median % change year-on-year -18.65% -4.42% +49.20%
75th Percentile £60.38 £59.98 £65.00
90th Percentile £75.00 £72.50 £75.00
UK excluding London median hourly rate £27.50 £37.34 £36.00
% change year-on-year -26.35% +3.72% +80.00%

Threat Intelligence
Job Vacancy Trend

Job postings citing Threat Intelligence as a proportion of all IT jobs advertised.

Job vacancy trend for Threat Intelligence in the UK

Threat Intelligence
Contractor Daily Rate Trend

3-month moving average daily rate quoted in jobs citing Threat Intelligence.

Daily rate trend for Threat Intelligence in the UK

Threat Intelligence
Daily Rate Histogram

Daily rate distribution for jobs citing Threat Intelligence over the 6 months to 1 May 2025.

Daily rate histogram for Threat Intelligence in the UK

Threat Intelligence
Contractor Hourly Rate Trend

3-month moving average hourly rates quoted in jobs citing Threat Intelligence.

Hourly rate trend for Threat Intelligence in the UK

Threat Intelligence
Top 14 Contract Locations

The table below looks at the demand and provides a guide to the median contractor rates quoted in IT jobs citing Threat Intelligence within the UK over the 6 months to 1 May 2025. The 'Rank Change' column provides an indication of the change in demand within each location based on the same 6 month period last year.

Location Rank Change
on Same Period
Last Year
Matching
Contract
IT Job Ads
Median
Daily Rate
Past 6 Months
Median Daily Rate
% Change
on Same Period
Last Year
Live
Jobs
England -71 85 £550 -8.33% 157
London +42 44 £550 -4.35% 63
UK excluding London -68 37 £550 -8.33% 112
Work from Home +33 31 £575 -14.81% 82
South East +53 21 £550 +10.00% 40
South West -35 5 £550 -3.51% 14
East of England +31 3 £745 +35.45% 14
Midlands +2 3 £600 -2.44% 16
West Midlands -2 3 £600 -2.64% 8
Scotland +8 2 £475 -17.39% 7
North of England -40 2 £625 -26.47% 27
Wales - 2 £600 - 4
North West -29 1 - - 11
North East - 1 £625 - 4

Threat Intelligence
Co-occurring Skills and Capabilities by Category

The follow tables expand on the table above by listing co-occurrences grouped by category. The same employment type, locality and period is covered with up to 20 co-occurrences shown in each of the following categories:

Applications
1 3 (3.09%) Microsoft PowerPoint
2 1 (1.03%) Microsoft Project
Cloud Services
1 30 (30.93%) Azure
2 18 (18.56%) AWS
3 16 (16.49%) Azure Sentinel
4 12 (12.37%) Microsoft 365
5 8 (8.25%) GCP
6 5 (5.15%) Cloud Computing
7 4 (4.12%) Entra ID
8 3 (3.09%) Amazon CloudWatch
8 3 (3.09%) Amazon GuardDuty
8 3 (3.09%) AWS CloudTrail
8 3 (3.09%) Azure Logic Apps
9 2 (2.06%) Amazon Macie
9 2 (2.06%) AWS KMS
9 2 (2.06%) Microsoft Purview
9 2 (2.06%) SaaS
9 2 (2.06%) Serverless
10 1 (1.03%) Azure DevOps
10 1 (1.03%) Azure Key Vault
10 1 (1.03%) OCI
10 1 (1.03%) Sumo Logic
Communications & Networking
1 18 (18.56%) Firewall
2 9 (9.28%) Network Security
3 4 (4.12%) Intrusion Detection
4 3 (3.09%) VPN
5 2 (2.06%) Cisco Nexus
5 2 (2.06%) TCP/IP
6 1 (1.03%) Cisco ISE
6 1 (1.03%) DNS
6 1 (1.03%) HTTP
6 1 (1.03%) SMTP
6 1 (1.03%) tcpdump
6 1 (1.03%) VSAN
6 1 (1.03%) Wireshark
Database & Business Intelligence
1 2 (2.06%) Big Data
2 1 (1.03%) NoSQL
Development Applications
1 2 (2.06%) JIRA
2 1 (1.03%) CircleCI
2 1 (1.03%) GitLab
2 1 (1.03%) Jenkins
General
1 25 (25.77%) Social Skills
2 21 (21.65%) Analytical Skills
3 12 (12.37%) Public Sector
4 10 (10.31%) Finance
5 6 (6.19%) Legal
6 3 (3.09%) Military
6 3 (3.09%) Presentation Skills
7 2 (2.06%) Documentation Skills
7 2 (2.06%) Law
7 2 (2.06%) Telecoms
8 1 (1.03%) Influencing Skills
8 1 (1.03%) Manufacturing
8 1 (1.03%) Retail
Job Titles
1 22 (22.68%) Analyst
2 14 (14.43%) Lead
3 12 (12.37%) Architect
3 12 (12.37%) SOC Analyst
4 9 (9.28%) Security Architect
5 8 (8.25%) Consultant
6 7 (7.22%) Security Engineer
7 5 (5.15%) Security Manager
8 4 (4.12%) Security Analyst
8 4 (4.12%) Senior
9 3 (3.09%) QA Leader
9 3 (3.09%) Security Consultant
9 3 (3.09%) Security Specialist
9 3 (3.09%) SIEM Engineer
10 2 (2.06%) Cybersecurity Architect
10 2 (2.06%) Cybersecurity Engineer
10 2 (2.06%) Cybersecurity Manager
10 2 (2.06%) Head of Security
10 2 (2.06%) Security Technical Architect
10 2 (2.06%) Senior Architect
Libraries, Frameworks & Software Standards
1 1 (1.03%) Ajax
1 1 (1.03%) HTML
1 1 (1.03%) SOAP
1 1 (1.03%) Web Services
1 1 (1.03%) XML
Miscellaneous
1 33 (34.02%) Cyber Threat
2 24 (24.74%) Security Posture
3 21 (21.65%) Security Operations Centre
4 10 (10.31%) Management Information System
5 9 (9.28%) Cyber Defence
6 5 (5.15%) Cloud Native
6 5 (5.15%) Onboarding
6 5 (5.15%) Operational Technology
7 4 (4.12%) Insider Threat
8 3 (3.09%) Cyber Kill Chain
9 2 (2.06%) Analytical Mindset
9 2 (2.06%) Cloud Security Posture
9 2 (2.06%) Cyberattack
9 2 (2.06%) Legacy Systems
9 2 (2.06%) MISP
9 2 (2.06%) SCADA
9 2 (2.06%) Shadow IT
10 1 (1.03%) CMDB
10 1 (1.03%) Life Science
10 1 (1.03%) PMI
Operating Systems
1 8 (8.25%) Windows
2 5 (5.15%) Linux
3 2 (2.06%) Windows Server
4 1 (1.03%) Mac OS
Processes & Methodologies
1 74 (76.29%) Cyber Threat Intelligence
2 61 (62.89%) Incident Response
3 59 (60.82%) Cybersecurity
4 55 (56.70%) SIEM
5 47 (48.45%) Security Operations
6 46 (47.42%) Vulnerability Management
7 27 (27.84%) Cloud Security
8 24 (24.74%) Threat Detection
9 22 (22.68%) MITRE ATT&CK
10 21 (21.65%) Problem-Solving
11 19 (19.59%) Security Monitoring
12 18 (18.56%) Threat and Vulnerability Management
13 15 (15.46%) Continuous Improvement
13 15 (15.46%) SOAR
14 13 (13.40%) Incident Management
14 13 (13.40%) Risk Management
15 12 (12.37%) Cyber Intelligence
15 12 (12.37%) Roadmaps
16 11 (11.34%) Decision-Making
17 10 (10.31%) Analytics
Programming Languages
1 19 (19.59%) PowerShell
2 16 (16.49%) Python
3 8 (8.25%) Kusto Query Language
4 2 (2.06%) Bash
5 1 (1.03%) C
5 1 (1.03%) JavaScript
5 1 (1.03%) SQL
Qualifications
1 28 (28.87%) CISSP
2 26 (26.80%) Security Cleared
3 23 (23.71%) SC Cleared
4 16 (16.49%) CISM
5 11 (11.34%) Degree
5 11 (11.34%) GCIH
6 10 (10.31%) CEH
6 10 (10.31%) CompTIA Security+
6 10 (10.31%) GIAC
7 5 (5.15%) GCIA
7 5 (5.15%) SSCP
8 4 (4.12%) CISA
8 4 (4.12%) Cisco Certification
8 4 (4.12%) CREST Certified
8 4 (4.12%) GCFA
8 4 (4.12%) Microsoft Certification
9 3 (3.09%) Azure Certification
9 3 (3.09%) CESG Certified Professional
9 3 (3.09%) ISO 27001 Lead Implementer
9 3 (3.09%) ISSEP
Quality Assurance & Compliance
1 23 (23.71%) ISO/IEC 27001
2 20 (20.62%) NIST
3 6 (6.19%) NIST 800
4 5 (5.15%) GDPR
4 5 (5.15%) NCSC
5 4 (4.12%) PCI DSS
6 3 (3.09%) QA
7 2 (2.06%) Cyber Essentials
7 2 (2.06%) Cyber Essentials PLUS
7 2 (2.06%) GRC
7 2 (2.06%) HIPAA
8 1 (1.03%) Actionable Recommendations
8 1 (1.03%) EU AI Act
8 1 (1.03%) FedRAMP
8 1 (1.03%) ISO 9001
8 1 (1.03%) ISO/IEC 27002 (supersedes ISO/IEC 17799)
8 1 (1.03%) JSP 440
8 1 (1.03%) SOC 2
System Software
1 2 (2.06%) Active Directory
2 1 (1.03%) Docker
2 1 (1.03%) Firmware
2 1 (1.03%) Hyper-V
2 1 (1.03%) VMware Infrastructure
2 1 (1.03%) VMware NSX
2 1 (1.03%) vSphere
Systems Management
1 8 (8.25%) QRadar
2 3 (3.09%) Kubernetes
2 3 (3.09%) SCCM
3 2 (2.06%) CSIRT
3 2 (2.06%) Grafana
3 2 (2.06%) McAfee ePO
3 2 (2.06%) Norton AntiVirus
3 2 (2.06%) Prometheus
3 2 (2.06%) Symantec Endpoint Protection
3 2 (2.06%) Terraform
4 1 (1.03%) Ansible
4 1 (1.03%) CASB
4 1 (1.03%) Computer Emergency Response Teams
4 1 (1.03%) Nessus
4 1 (1.03%) OpenVAS
4 1 (1.03%) Single Sign-On
Vendors
1 27 (27.84%) Microsoft
2 19 (19.59%) Splunk
3 6 (6.19%) CrowdStrike
3 6 (6.19%) Google
4 5 (5.15%) ArcSight
4 5 (5.15%) Cisco
4 5 (5.15%) Palo Alto
4 5 (5.15%) ServiceNow
5 4 (4.12%) IBM
5 4 (4.12%) Rapid7
6 3 (3.09%) VMware
7 2 (2.06%) Databricks
7 2 (2.06%) LogRhythm
7 2 (2.06%) McAfee
7 2 (2.06%) Proofpoint
7 2 (2.06%) Qualys
7 2 (2.06%) Symantec
8 1 (1.03%) Carbon Black
8 1 (1.03%) Darktrace
8 1 (1.03%) Kenna