SIEM Contracts with Hybrid/Remote/WFH Options

Security Information and Event Management (SIEM)
UK > Work from Home

The table below provides summary statistics for remote or hybrid contract work requiring SIEM skills. It includes a benchmarking guide to the contractor rates offered in vacancies that cited SIEM over the 6 months leading up to 1 May 2025, comparing them to the same period in the previous two years.

6 months to
1 May 2025
Same period 2024 Same period 2023
Rank 176 199 165
Rank change year-on-year +23 -34 +134
Contract jobs citing SIEM 129 151 400
As % of all contract jobs with a WFH option 1.30% 0.98% 1.55%
As % of the Processes & Methodologies category 1.43% 1.12% 1.72%
Number of daily rates quoted 95 124 267
10th Percentile £385 £425 £450
25th Percentile £500 £505 £525
Median daily rate (50th Percentile) £551 £600 £623
Median % change year-on-year -8.17% -3.61% +3.75%
75th Percentile £694 £775 £738
90th Percentile £790 £825 £813
UK median daily rate £551 £600 £600
% change year-on-year -8.17% - +4.35%
Number of hourly rates quoted 1 2 1
10th Percentile - - -
25th Percentile £45.75 - £82.00
Median hourly rate £54.50 £40.00 £84.00
Median % change year-on-year +36.25% -52.38% +34.40%
75th Percentile £63.25 - £86.00
90th Percentile - - -
UK median hourly rate £80.68 £40.00 £75.00
% change year-on-year +101.69% -46.67% +13.98%

All Process and Methodology Skills
Work from Home

SIEM falls under the Processes and Methodologies category. For comparison with the information above, the following table provides summary statistics for all contract job vacancies with remote or hybrid options requiring process or methodology skills.

Contract vacancies with a requirement for process or methodology skills 9,021 13,483 23,229
As % of all contract jobs with a WFH option 91.08% 87.87% 89.84%
Number of daily rates quoted 6,191 8,996 16,418
10th Percentile £340 £325 £363
25th Percentile £419 £425 £450
Median daily rate (50th Percentile) £525 £525 £540
Median % change year-on-year - -2.78% +2.86%
75th Percentile £638 £638 £650
90th Percentile £763 £750 £750
UK median daily rate £520 £525 £550
% change year-on-year -0.95% -4.55% +4.76%
Number of hourly rates quoted 224 579 532
10th Percentile £14.20 £15.17 £19.00
25th Percentile £19.56 £25.25 £30.54
Median hourly rate £39.52 £43.00 £55.00
Median % change year-on-year -8.09% -21.82% +57.14%
75th Percentile £66.13 £60.00 £68.75
90th Percentile £75.00 £75.25 £80.23
UK median hourly rate £29.00 £35.65 £37.30
% change year-on-year -18.65% -4.42% +49.20%

SIEM
Trend for Jobs with a WFH Option

Job vacancies with remote working options citing SIEM as a proportion of all IT jobs advertised.

SIEM trend for jobs with Hybrid/Remote/WFH options

SIEM
Daily Rate Trend for Jobs with a WFH Option

3-month moving average daily rate quoted in job vacancies with remote working options citing SIEM.

SIEM daily rate for jobs with a WFH option

SIEM
Daily Rate Histogram for Jobs with a WFH Option

Daily rate distribution for jobs with remote working options citing SIEM over the 6 months to 1 May 2025.

SIEM daily rate histogram for jobs with a WFH option

SIEM
Hourly Rate Trend for Jobs with a WFH Option

3-month moving average hourly rate quoted in job vacancies with remote working options citing SIEM.

SIEM hourly rate for jobs with a WFH option

SIEM
Co-occurring Skills and Capabilities with WFH Options by Category

The follow tables expand on the table above by listing co-occurrences grouped by category. The same employment type, locality and period is covered with up to 20 co-occurrences shown in each of the following categories:

Application Platforms
1 1 (0.78%) Confluence
Cloud Services
1 41 (31.78%) Azure
2 21 (16.28%) AWS
3 18 (13.95%) Azure Sentinel
4 9 (6.98%) Microsoft 365
5 8 (6.20%) GCP
5 8 (6.20%) GitHub
6 7 (5.43%) Entra ID
7 4 (3.10%) Microsoft Purview
8 3 (2.33%) Azure DevOps
8 3 (2.33%) Azure Key Vault
8 3 (2.33%) Azure Monitor
9 2 (1.55%) AWS CloudFormation
9 2 (1.55%) Azure Logic Apps
9 2 (1.55%) Cloud Computing
10 1 (0.78%) Amazon EKS
10 1 (0.78%) Azure ExpressRoute
10 1 (0.78%) Datadog
10 1 (0.78%) OCI
10 1 (0.78%) PaaS
10 1 (0.78%) Power Automate
Communications & Networking
1 38 (29.46%) Firewall
2 14 (10.85%) Network Security
3 10 (7.75%) SMTP
4 9 (6.98%) TCP/IP
5 8 (6.20%) DNS
6 7 (5.43%) HTTP
6 7 (5.43%) Intrusion Detection
7 5 (3.88%) VPN
8 4 (3.10%) DHCP
8 4 (3.10%) SSL
9 3 (2.33%) NGFW
10 2 (1.55%) FTP
11 1 (0.78%) BGP
11 1 (0.78%) BIG-IP
11 1 (0.78%) iSCSI
11 1 (0.78%) LAN
11 1 (0.78%) SAN
11 1 (0.78%) WAN
11 1 (0.78%) Wireless
11 1 (0.78%) Wireless Security
Database & Business Intelligence
1 1 (0.78%) Elasticsearch
1 1 (0.78%) NoSQL
1 1 (0.78%) Relational Database
Development Applications
1 2 (1.55%) Jenkins
2 1 (0.78%) Git
2 1 (0.78%) GitLab
2 1 (0.78%) JIRA
2 1 (0.78%) JMeter
2 1 (0.78%) Postman
2 1 (0.78%) REST Assured
2 1 (0.78%) Selenium
2 1 (0.78%) SonarQube
2 1 (0.78%) TestNG
2 1 (0.78%) Travis CI
General
1 34 (26.36%) Social Skills
2 24 (18.60%) Finance
3 13 (10.08%) Analytical Skills
3 13 (10.08%) Public Sector
4 8 (6.20%) Banking
5 5 (3.88%) Manufacturing
6 4 (3.10%) Electronics
6 4 (3.10%) Legal
6 4 (3.10%) Marketing
6 4 (3.10%) Telecoms
7 3 (2.33%) Fire and Rescue
7 3 (2.33%) Police
7 3 (2.33%) Presentation Skills
8 2 (1.55%) Aviation
8 2 (1.55%) French Language
8 2 (1.55%) Inclusion and Diversity
8 2 (1.55%) Retail
8 2 (1.55%) Swedish Language
9 1 (0.78%) Investment Banking
9 1 (0.78%) Local Government
Job Titles
1 28 (21.71%) Architect
2 23 (17.83%) Analyst
3 20 (15.50%) Security Architect
4 17 (13.18%) Security Engineer
5 13 (10.08%) Lead
6 12 (9.30%) Consultant
6 12 (9.30%) Security Analyst
7 10 (7.75%) Senior
7 10 (7.75%) SOC Analyst
8 8 (6.20%) Operations Analyst
8 8 (6.20%) Security Manager
8 8 (6.20%) Security Operations Analyst
9 7 (5.43%) Automation Engineer
9 7 (5.43%) Operations Engineer
10 6 (4.65%) Incident Analyst
10 6 (4.65%) Incident Responder
10 6 (4.65%) Security Incident Analyst
11 5 (3.88%) Senior Architect
11 5 (3.88%) Senior Security Architect
11 5 (3.88%) Splunk Engineer
Libraries, Frameworks & Software Standards
1 4 (3.10%) .NET
1 4 (3.10%) REST
1 4 (3.10%) SailPoint
2 3 (2.33%) SAML
3 2 (1.55%) LDAP
4 1 (0.78%) ADO
4 1 (0.78%) Elastic Stack
4 1 (0.78%) OAuth
4 1 (0.78%) OAuth2
4 1 (0.78%) OpenID
4 1 (0.78%) React
4 1 (0.78%) YAML
Miscellaneous
1 22 (17.05%) Security Posture
2 20 (15.50%) Security Operations Centre
3 14 (10.85%) Cyber Threat
4 9 (6.98%) Onboarding
5 8 (6.20%) CSOC
6 7 (5.43%) Management Information System
6 7 (5.43%) Operational Technology
6 7 (5.43%) Self-Motivation
7 4 (3.10%) Data Centre
8 3 (2.33%) Cyberattack
8 3 (2.33%) SCADA
9 2 (1.55%) Cloud Native
9 2 (1.55%) Distributed Systems
9 2 (1.55%) Hybrid Cloud
9 2 (1.55%) Legacy Systems
9 2 (1.55%) PKI
9 2 (1.55%) Robotics
10 1 (0.78%) Cyber Security Posture
10 1 (0.78%) Distributed Denial-of-Service
10 1 (0.78%) Insider Threat
Operating Systems
1 27 (20.93%) Windows
2 20 (15.50%) Linux
3 8 (6.20%) Windows Server
4 6 (4.65%) Red Hat Enterprise Linux
4 6 (4.65%) VMS
5 3 (2.33%) Mac OS X
6 1 (0.78%) Mac OS
6 1 (0.78%) Unix
6 1 (0.78%) Windows Server 2016
6 1 (0.78%) Windows Server 2019
Processes & Methodologies
1 55 (42.64%) Incident Response
2 51 (39.53%) Cybersecurity
3 50 (38.76%) Security Operations
4 28 (21.71%) Vulnerability Management
5 26 (20.16%) SOAR
6 23 (17.83%) Problem-Solving
7 22 (17.05%) Threat Intelligence
8 21 (16.28%) Threat Detection
9 20 (15.50%) Cyber Threat Intelligence
10 19 (14.73%) Data Loss Prevention
10 19 (14.73%) Incident Management
11 16 (12.40%) Security Monitoring
12 15 (11.63%) Cloud Security
12 15 (11.63%) DevOps
12 15 (11.63%) Security Architecture
13 14 (10.85%) Threat Modelling
14 13 (10.08%) Identity Access Management
15 12 (9.30%) Event Correlation
16 11 (8.53%) Migration
16 11 (8.53%) Risk Management
Programming Languages
1 22 (17.05%) PowerShell
2 14 (10.85%) Python
3 11 (8.53%) Kusto Query Language
4 6 (4.65%) Bash
5 2 (1.55%) C#
5 2 (1.55%) Java
6 1 (0.78%) Bicep
6 1 (0.78%) C
6 1 (0.78%) PHP
6 1 (0.78%) SQL
6 1 (0.78%) TypeScript
Qualifications
1 29 (22.48%) CISSP
2 26 (20.16%) Security Cleared
3 21 (16.28%) SC Cleared
4 13 (10.08%) CEH
5 12 (9.30%) CISM
6 11 (8.53%) Degree
7 10 (7.75%) Microsoft Certification
8 9 (6.98%) Azure Certification
9 8 (6.20%) GCIH
10 7 (5.43%) Cisco Certification
10 7 (5.43%) CompTIA Security+
11 5 (3.88%) (ISC)2 CCSP
11 5 (3.88%) DV Cleared
11 5 (3.88%) GIAC
12 4 (3.10%) CCNA
12 4 (3.10%) CCSP
12 4 (3.10%) Computer Science Degree
12 4 (3.10%) TOGAF Certification
13 3 (2.33%) CISA
14 2 (1.55%) CCNP
Quality Assurance & Compliance
1 23 (17.83%) NIST
2 16 (12.40%) ISO/IEC 27001
3 12 (9.30%) GDPR
4 6 (4.65%) HIPAA
5 5 (3.88%) PCI DSS
6 3 (2.33%) NIST 800
7 2 (1.55%) Actionable Recommendations
7 2 (1.55%) NCSC
7 2 (1.55%) QA
7 2 (1.55%) SLA
8 1 (0.78%) California Consumer Privacy Act
8 1 (0.78%) GRC
8 1 (0.78%) ISO/IEC 27002 (supersedes ISO/IEC 17799)
8 1 (0.78%) SOC 2
System Software
1 15 (11.63%) Active Directory
2 7 (5.43%) Virtual Machines
3 4 (3.10%) Docker
4 3 (2.33%) VMware Infrastructure
4 3 (2.33%) VMware NSX
5 2 (1.55%) VMware ESXi
6 1 (0.78%) Hyper-V
6 1 (0.78%) NFS
6 1 (0.78%) Virtual Servers
6 1 (0.78%) vSphere
Systems Management
1 11 (8.53%) Single Sign-On
2 10 (7.75%) QRadar
3 8 (6.20%) Ansible
4 4 (3.10%) Kubernetes
4 4 (3.10%) PingFederate
4 4 (3.10%) Terraform
5 3 (2.33%) CSIRT
5 3 (2.33%) Grafana
6 2 (1.55%) Active Directory Federation Services
6 2 (1.55%) FortiGate
7 1 (0.78%) Kibana
7 1 (0.78%) Microsoft Intune
7 1 (0.78%) Nessus
7 1 (0.78%) Prometheus
7 1 (0.78%) SCCM
7 1 (0.78%) vRealize
7 1 (0.78%) vRealize Orchestrator
7 1 (0.78%) WSUS
Vendors
1 41 (31.78%) Microsoft
2 38 (29.46%) Splunk
3 20 (15.50%) Palo Alto
4 11 (8.53%) ServiceNow
5 9 (6.98%) Cisco
5 9 (6.98%) Google
6 8 (6.20%) CyberArk
7 7 (5.43%) F5
7 7 (5.43%) SolarWinds
8 6 (4.65%) Fortinet
8 6 (4.65%) Red Hat
8 6 (4.65%) VMware
9 5 (3.88%) Okta
9 5 (3.88%) Tenable
10 4 (3.10%) Ping Identity
10 4 (3.10%) Rapid7
10 4 (3.10%) SAP
11 3 (2.33%) ArcSight
11 3 (2.33%) Darktrace
11 3 (2.33%) IBM