Threat Intelligence Contract Job Trends

Threat Intelligence
UK

The table below provides summary statistics and contractor rates for jobs requiring Threat Intelligence skills. It covers contract job vacancies from the 6 months leading up to 26 December 2025, with comparisons to the same periods in the previous two years.

6 months to
26 Dec 2025
Same period 2024 Same period 2023
Rank 395 405 427
Rank change year-on-year +10 +22 +182
Contract jobs citing Threat Intelligence 192 150 163
As % of all contract jobs in the UK 0.52% 0.44% 0.37%
As % of the Processes & Methodologies category 0.59% 0.50% 0.42%
Number of daily rates quoted 102 88 115
10th Percentile £400 £459 £500
25th Percentile £468 £548 £550
Median daily rate (50th Percentile) £553 £600 £615
Median % change year-on-year -7.83% -2.44% -5.38%
75th Percentile £638 £679 £700
90th Percentile £788 £756 £792
UK excluding London median daily rate £531 £625 £616
% change year-on-year -15.00% +1.42% +2.71%
Number of hourly rates quoted 2 3 10
10th Percentile £47.80 £40.25 -
25th Percentile £56.58 £46.25 £62.50
Median hourly rate £72.47 £57.50 £65.00
Median % change year-on-year +26.03% -11.54% +18.18%
75th Percentile £89.61 £75.63 £68.44
90th Percentile £99.14 £85.75 £70.50
UK excluding London median hourly rate £72.47 £57.50 £65.00
% change year-on-year +26.03% -11.54% +18.18%

All Process and Methodology Skills
UK

Threat Intelligence falls under the Processes and Methodologies category. For comparison with the information above, the following table provides summary statistics for all contract job vacancies requiring process or methodology skills.

Contract vacancies with a requirement for process or methodology skills 32,744 29,791 38,561
As % of all contract IT jobs advertised in the UK 88.06% 88.28% 88.10%
Number of daily rates quoted 20,623 18,168 25,704
10th Percentile £300 £308 £306
25th Percentile £406 £413 £419
Median daily rate (50th Percentile) £500 £525 £525
Median % change year-on-year -4.76% - -4.55%
75th Percentile £615 £638 £650
90th Percentile £725 £738 £744
UK excluding London median daily rate £475 £500 £500
% change year-on-year -5.00% - -
Number of hourly rates quoted 2,071 964 1,544
10th Percentile £14.61 £15.62 £14.25
25th Percentile £17.69 £20.30 £18.93
Median hourly rate £25.15 £32.50 £43.50
Median % change year-on-year -22.62% -25.29% +24.29%
75th Percentile £51.23 £62.59 £65.00
90th Percentile £68.75 £74.31 £77.50
UK excluding London median hourly rate £23.58 £31.50 £45.00
% change year-on-year -25.16% -30.00% +40.63%

Threat Intelligence
Job Vacancy Trend

Historical trend showing the proportion of contract IT job postings citing Threat Intelligence relative to all contract IT jobs advertised.

Threat Intelligence job vacancy trend in the UK

Threat Intelligence
Daily Rate Trend

Contractor daily rate distribution trend for jobs in the UK citing Threat Intelligence.

Contractor daily rate distribution trend for jobs in the UK citing Threat Intelligence

Threat Intelligence
Daily Rate Histogram

Daily rate distribution for jobs citing Threat Intelligence over the 6 months to 26 December 2025.

Daily rate histogram for Threat Intelligence in the UK

Threat Intelligence
Hourly Rate Trend

Contractor hourly rate distribution trend for jobs in the UK citing Threat Intelligence.

Contractor hourly rate distribution trend for jobs in the UK citing Threat Intelligence

Threat Intelligence
Hourly Rate Histogram

Hourly rate distribution of jobs citing Threat Intelligence over the 6 months to 26 December 2025.

Hourly rate histogram for Threat Intelligence in the UK

Threat Intelligence
Top 14 Contract Job Locations

The table below looks at the demand and provides a guide to the median contractor rates quoted in IT jobs citing Threat Intelligence within the UK over the 6 months to 26 December 2025. The 'Rank Change' column provides an indication of the change in demand within each location based on the same 6 month period last year.

Location Rank Change
on Same Period
Last Year
Matching
Contract
IT Job Ads
Median
Daily Rate
Past 6 Months
Median Daily Rate
% Change
on Same Period
Last Year
Live
Jobs
England -9 174 £553 -7.83% 267
London +24 93 £600 - 50
UK excluding London -49 76 £531 -15.00% 251
Work from Home +26 55 £570 -5.00% 117
South East -4 22 £458 -23.75% 69
West Midlands -31 16 £500 -21.26% 25
Midlands -45 16 £500 -21.26% 46
East of England -16 14 £553 -7.83% 39
North of England -46 14 £573 -11.92% 49
North West -19 10 £389 -40.19% 25
South West -21 7 £744 +16.67% 28
Yorkshire - 4 £600 - 20
Scotland -3 2 £250 -62.96% 11
Wales 0 1 £575 -4.17% 9

Threat Intelligence
Co-Occurring Skills & Capabilities by Category

The following tables expand on the one above by listing co-occurrences grouped by category. They cover the same employment type, locality and period, with up to 20 co-occurrences shown in each category:

Application Platforms
1 11 (5.73%) Confluence
2 3 (1.56%) SharePoint
Applications
1 6 (3.13%) Microsoft Excel
2 3 (1.56%) Microsoft Project
2 3 (1.56%) Trello
Business Applications
1 1 (0.52%) Remedy ITSM
Cloud Services
1 49 (25.52%) Azure
2 44 (22.92%) AWS
3 17 (8.85%) Azure Sentinel
3 17 (8.85%) GCP
4 6 (3.13%) Microsoft 365
5 4 (2.08%) Entra ID
5 4 (2.08%) Power Platform
6 3 (1.56%) Asana
6 3 (1.56%) Azure Logic Apps
6 3 (1.56%) GitHub
7 2 (1.04%) Miro
7 2 (1.04%) OneDrive
7 2 (1.04%) Virtual Private Cloud
8 1 (0.52%) Akamai
8 1 (0.52%) Amazon GuardDuty
8 1 (0.52%) Amazon Macie
8 1 (0.52%) AWS CloudTrail
8 1 (0.52%) Azure Monitor
8 1 (0.52%) Google Ads
8 1 (0.52%) SaaS
Communications & Networking
1 41 (21.35%) Firewall
2 13 (6.77%) Network Security
3 9 (4.69%) Internet
4 3 (1.56%) DNS
4 3 (1.56%) LAN
4 3 (1.56%) VPN
5 2 (1.04%) Cisco ASA
5 2 (1.04%) DHCP
5 2 (1.04%) SD-WAN
5 2 (1.04%) SNMP
5 2 (1.04%) SSH
5 2 (1.04%) SSL
5 2 (1.04%) WAN
5 2 (1.04%) Wi-Fi
6 1 (0.52%) HTTP
6 1 (0.52%) Intrusion Detection
6 1 (0.52%) Modbus
6 1 (0.52%) tcpdump
6 1 (0.52%) Wireless
6 1 (0.52%) Wireshark
Database & Business Intelligence
1 4 (2.08%) Power BI
2 3 (1.56%) Tableau
3 1 (0.52%) Elasticsearch
Development Applications
1 13 (6.77%) JIRA
2 4 (2.08%) Metasploit
3 2 (1.04%) Git
4 1 (0.52%) Burp Suite
General
1 52 (27.08%) Social Skills
2 40 (20.83%) Analytical Skills
3 19 (9.90%) Finance
4 15 (7.81%) Public Sector
5 9 (4.69%) Legal
5 9 (4.69%) Presentation Skills
6 6 (3.13%) Banking
6 6 (3.13%) Documentation Skills
7 5 (2.60%) Law
7 5 (2.60%) Retail
8 4 (2.08%) Military
8 4 (2.08%) Organisational Skills
9 3 (1.56%) Financial Institution
10 2 (1.04%) Influencing Skills
10 2 (1.04%) Manufacturing
11 1 (0.52%) Electronics
11 1 (0.52%) Marketing
11 1 (0.52%) Telecoms
Job Titles
1 54 (28.13%) Analyst
2 24 (12.50%) Security Engineer
3 21 (10.94%) SOC Analyst
4 20 (10.42%) Security Analyst
4 20 (10.42%) Senior
5 18 (9.38%) Cybersecurity Analyst
6 16 (8.33%) Consultant
7 15 (7.81%) Architect
8 12 (6.25%) Security Architect
9 10 (5.21%) Threat Intelligence Analyst
10 7 (3.65%) Automation Engineer
10 7 (3.65%) Lead
10 7 (3.65%) Senior Analyst
11 6 (3.13%) Cybersecurity Consultant
11 6 (3.13%) Information Assurance Consultant
11 6 (3.13%) Security Officer
11 6 (3.13%) SIEM Engineer
12 5 (2.60%) Microsoft Engineer
12 5 (2.60%) Senior Cybersecurity Analyst
12 5 (2.60%) Threat Intelligence Specialist
Libraries, Frameworks & Software Standards
1 9 (4.69%) REST
2 3 (1.56%) YAML
3 2 (1.04%) SOAP
4 1 (0.52%) Elastic Stack
4 1 (0.52%) Lucene
Miscellaneous
1 52 (27.08%) Cyber Threat
2 32 (16.67%) Security Posture
3 27 (14.06%) Security Operations Centre
4 23 (11.98%) Management Information System
5 20 (10.42%) Cyber Defence
6 15 (7.81%) Cyber Kill Chain
7 7 (3.65%) Onboarding
7 7 (3.65%) Operational Technology
8 6 (3.13%) Cybercrime
9 5 (2.60%) Cloud Native
9 5 (2.60%) PKI
9 5 (2.60%) Public Cloud
10 4 (2.08%) Data Protection Act
11 3 (1.56%) CMDB
11 3 (1.56%) CSOC
11 3 (1.56%) Insider Threat
11 3 (1.56%) STIX
11 3 (1.56%) YARA
12 2 (1.04%) Data Structures
12 2 (1.04%) MISP
Operating Systems
1 39 (20.31%) Windows
2 38 (19.79%) Linux
3 9 (4.69%) Mac OS
4 4 (2.08%) Unix
5 1 (0.52%) CentOS
5 1 (0.52%) Kali Linux
5 1 (0.52%) Mac OS X
5 1 (0.52%) Red Hat Enterprise Linux
5 1 (0.52%) Ubuntu
5 1 (0.52%) Windows Server
Processes & Methodologies
1 140 (72.92%) Cyber Threat Intelligence
2 116 (60.42%) Cybersecurity
3 99 (51.56%) Incident Response
4 72 (37.50%) SIEM
5 63 (32.81%) Security Operations
6 57 (29.69%) Threat Detection
7 49 (25.52%) Vulnerability Management
8 45 (23.44%) MITRE ATT&CK
9 42 (21.88%) Risk Management
10 36 (18.75%) SOAR
11 35 (18.23%) Cloud Security
11 35 (18.23%) Cyber Intelligence
12 32 (16.67%) Continuous Improvement
13 30 (15.63%) Analytics
13 30 (15.63%) Problem-Solving
14 23 (11.98%) Actionable Insight
14 23 (11.98%) Threat Modelling
15 21 (10.94%) Information Security
15 21 (10.94%) Stakeholder Engagement
15 21 (10.94%) Use Case
Programming Languages
1 42 (21.88%) Python
2 29 (15.10%) PowerShell
3 19 (9.90%) Kusto Query Language
4 12 (6.25%) Bash
5 2 (1.04%) C++
5 2 (1.04%) Java
5 2 (1.04%) SQL
6 1 (0.52%) JavaScript
6 1 (0.52%) Korn
Qualifications
1 74 (38.54%) Security Cleared
2 58 (30.21%) SC Cleared
3 46 (23.96%) CISSP
4 18 (9.38%) CEH
4 18 (9.38%) GIAC
5 17 (8.85%) Degree
5 17 (8.85%) DV Cleared
6 16 (8.33%) GCIA
6 16 (8.33%) GCIH
7 14 (7.29%) CISM
8 12 (6.25%) GCFA
9 9 (4.69%) CompTIA Security+
9 9 (4.69%) OSCP
10 8 (4.17%) CESG Certified Professional
10 8 (4.17%) CFCE
10 8 (4.17%) CompTIA CySA+
11 7 (3.65%) Cisco Certification
12 6 (3.13%) GREM
13 5 (2.60%) Computer Science Degree
14 4 (2.08%) AWS Certification
Quality Assurance & Compliance
1 62 (32.29%) NIST
2 48 (25.00%) ISO/IEC 27001
3 29 (15.10%) GDPR
4 13 (6.77%) NCSC
5 9 (4.69%) Cyber Essentials
6 8 (4.17%) PCI DSS
7 7 (3.65%) HIPAA
8 6 (3.13%) Cyber Essentials PLUS
8 6 (3.13%) QA
9 5 (2.60%) GRC
10 3 (1.56%) Actionable Recommendations
10 3 (1.56%) JSP 440
10 3 (1.56%) Sarbanes-Oxley
11 2 (1.04%) COBIT
11 2 (1.04%) FIPS 140-2
11 2 (1.04%) ISO/IEC 27005
11 2 (1.04%) SLA
12 1 (0.52%) GPG13
System Software
1 5 (2.60%) Active Directory
Systems Management
1 5 (2.60%) Computer Emergency Response Teams
1 5 (2.60%) QRadar
2 4 (2.08%) Nessus
3 3 (1.56%) RSA Archer
4 2 (1.04%) Ansible
4 2 (1.04%) Nexpose
4 2 (1.04%) SCCM
5 1 (0.52%) Fluentd
5 1 (0.52%) Jamf Pro
5 1 (0.52%) Kibana
5 1 (0.52%) Kubernetes
5 1 (0.52%) logstash
5 1 (0.52%) Microsoft Intune
5 1 (0.52%) Rsyslog
5 1 (0.52%) Terraform
5 1 (0.52%) WSUS
Vendors
1 66 (34.38%) Microsoft
2 32 (16.67%) Splunk
3 20 (10.42%) CrowdStrike
4 16 (8.33%) ServiceNow
5 12 (6.25%) Palo Alto
6 11 (5.73%) Tenable
7 8 (4.17%) ArcSight
7 8 (4.17%) Google
8 7 (3.65%) Intel
8 7 (3.65%) LogRhythm
9 5 (2.60%) Qualys
10 4 (2.08%) Rapid7
11 3 (1.56%) Cisco
11 3 (1.56%) Computacenter
11 3 (1.56%) SAP
11 3 (1.56%) Zscaler
12 2 (1.04%) Darktrace
12 2 (1.04%) Fortinet
12 2 (1.04%) Thales
12 2 (1.04%) Trend Micro