SIEM Contracts with Hybrid/Remote/WFH Options

Security Information and Event Management (SIEM)
UK > Work from Home

The table below provides summary statistics for remote or hybrid contract work requiring SIEM skills. It includes a benchmarking guide to the contractor rates offered in vacancies that cited SIEM over the 6 months leading up to 7 May 2025, comparing them to the same period in the previous two years.

6 months to
7 May 2025
Same period 2024 Same period 2023
Rank 178 200 166
Rank change year-on-year +22 -34 +124
Contract jobs citing SIEM 130 147 396
As % of all contract jobs with a WFH option 1.32% 0.97% 1.55%
As % of the Processes & Methodologies category 1.45% 1.10% 1.73%
Number of daily rates quoted 96 119 265
10th Percentile £367 £425 £450
25th Percentile £500 £500 £525
Median daily rate (50th Percentile) £551 £600 £623
Median % change year-on-year -8.25% -3.61% +3.75%
75th Percentile £691 £763 £738
90th Percentile £788 £825 £813
UK median daily rate £551 £600 £600
% change year-on-year -8.17% - -
Number of hourly rates quoted 1 2 0
10th Percentile - - -
25th Percentile £45.75 - -
Median hourly rate £54.50 £40.00 -
Median % change year-on-year +36.25% - -
75th Percentile £63.25 - -
90th Percentile - - -
UK median hourly rate £80.68 £40.00 £75.00
% change year-on-year +101.69% -46.67% +13.98%

All Process and Methodology Skills
Work from Home

SIEM falls under the Processes and Methodologies category. For comparison with the information above, the following table provides summary statistics for all contract job vacancies with remote or hybrid options requiring process or methodology skills.

Contract vacancies with a requirement for process or methodology skills 8,994 13,387 22,922
As % of all contract jobs with a WFH option 91.19% 87.93% 89.77%
Number of daily rates quoted 6,179 8,971 16,192
10th Percentile £338 £325 £363
25th Percentile £415 £425 £450
Median daily rate (50th Percentile) £525 £525 £540
Median % change year-on-year - -2.78% +2.86%
75th Percentile £638 £638 £650
90th Percentile £763 £750 £750
UK median daily rate £520 £525 £550
% change year-on-year -0.95% -4.55% +3.77%
Number of hourly rates quoted 221 576 528
10th Percentile £13.85 £15.08 £18.68
25th Percentile £19.00 £24.25 £30.00
Median hourly rate £39.04 £42.50 £55.00
Median % change year-on-year -8.14% -22.73% +57.14%
75th Percentile £66.00 £60.00 £68.81
90th Percentile £75.00 £75.13 £80.25
UK median hourly rate £29.00 £35.96 £36.00
% change year-on-year -19.35% -0.11% +44.00%

SIEM
Trend for Jobs with a WFH Option

Job vacancies with remote working options citing SIEM as a proportion of all IT jobs advertised.

SIEM trend for jobs with Hybrid/Remote/WFH options

SIEM
Daily Rate Trend for Jobs with a WFH Option

3-month moving average daily rate quoted in job vacancies with remote working options citing SIEM.

SIEM daily rate for jobs with a WFH option

SIEM
Daily Rate Histogram for Jobs with a WFH Option

Daily rate distribution for jobs with remote working options citing SIEM over the 6 months to 7 May 2025.

SIEM daily rate histogram for jobs with a WFH option

SIEM
Hourly Rate Trend for Jobs with a WFH Option

3-month moving average hourly rate quoted in job vacancies with remote working options citing SIEM.

SIEM hourly rate for jobs with a WFH option

SIEM
Co-occurring Skills and Capabilities with WFH Options by Category

The follow tables expand on the table above by listing co-occurrences grouped by category. The same employment type, locality and period is covered with up to 20 co-occurrences shown in each of the following categories:

Application Platforms
1 1 (0.77%) Confluence
Cloud Services
1 43 (33.08%) Azure
2 23 (17.69%) AWS
3 18 (13.85%) Azure Sentinel
4 10 (7.69%) Microsoft 365
5 8 (6.15%) GCP
5 8 (6.15%) GitHub
6 7 (5.38%) Entra ID
7 4 (3.08%) Microsoft Purview
8 3 (2.31%) Azure DevOps
8 3 (2.31%) Azure Key Vault
8 3 (2.31%) Azure Monitor
9 2 (1.54%) AWS CloudFormation
9 2 (1.54%) Azure Logic Apps
9 2 (1.54%) Cloud Computing
10 1 (0.77%) Amazon EKS
10 1 (0.77%) Azure ExpressRoute
10 1 (0.77%) Datadog
10 1 (0.77%) OCI
10 1 (0.77%) Power Automate
10 1 (0.77%) SonarCloud
Communications & Networking
1 40 (30.77%) Firewall
2 14 (10.77%) Network Security
3 10 (7.69%) SMTP
4 9 (6.92%) TCP/IP
5 8 (6.15%) DNS
6 7 (5.38%) HTTP
6 7 (5.38%) Intrusion Detection
7 5 (3.85%) VPN
8 4 (3.08%) DHCP
8 4 (3.08%) SSL
9 3 (2.31%) NGFW
10 2 (1.54%) FTP
11 1 (0.77%) BGP
11 1 (0.77%) F5 BIG-IP GTM
11 1 (0.77%) F5 BIG-IP LTM
11 1 (0.77%) LAN
11 1 (0.77%) Modbus
11 1 (0.77%) SAN
11 1 (0.77%) WAN
11 1 (0.77%) Wireless Security
Database & Business Intelligence
1 1 (0.77%) Elasticsearch
1 1 (0.77%) NoSQL
1 1 (0.77%) Relational Database
Development Applications
1 2 (1.54%) Jenkins
2 1 (0.77%) Git
2 1 (0.77%) GitLab
2 1 (0.77%) JIRA
2 1 (0.77%) JMeter
2 1 (0.77%) Postman
2 1 (0.77%) REST Assured
2 1 (0.77%) Selenium
2 1 (0.77%) SonarQube
2 1 (0.77%) TestNG
2 1 (0.77%) Travis CI
General
1 36 (27.69%) Social Skills
2 26 (20.00%) Finance
3 14 (10.77%) Analytical Skills
4 12 (9.23%) Public Sector
5 9 (6.92%) Banking
6 5 (3.85%) Manufacturing
7 4 (3.08%) Electronics
7 4 (3.08%) Legal
7 4 (3.08%) Marketing
7 4 (3.08%) Telecoms
8 3 (2.31%) Fire and Rescue
8 3 (2.31%) Police
8 3 (2.31%) Presentation Skills
9 2 (1.54%) Aviation
9 2 (1.54%) French Language
9 2 (1.54%) Inclusion and Diversity
9 2 (1.54%) Retail
9 2 (1.54%) Swedish Language
10 1 (0.77%) Investment Banking
10 1 (0.77%) Local Government
Job Titles
1 27 (20.77%) Architect
2 24 (18.46%) Analyst
3 20 (15.38%) Security Architect
4 19 (14.62%) Security Engineer
5 13 (10.00%) Lead
5 13 (10.00%) Security Analyst
6 11 (8.46%) Consultant
6 11 (8.46%) Senior
6 11 (8.46%) SOC Analyst
7 9 (6.92%) Operations Analyst
7 9 (6.92%) Security Operations Analyst
8 8 (6.15%) Security Manager
9 7 (5.38%) Automation Engineer
9 7 (5.38%) Operations Engineer
10 6 (4.62%) Incident Analyst
10 6 (4.62%) Incident Responder
10 6 (4.62%) Security Incident Analyst
11 5 (3.85%) Senior Architect
11 5 (3.85%) Senior Security Architect
11 5 (3.85%) Splunk Engineer
Libraries, Frameworks & Software Standards
1 4 (3.08%) .NET
1 4 (3.08%) REST
1 4 (3.08%) SailPoint
2 3 (2.31%) SAML
3 2 (1.54%) LDAP
4 1 (0.77%) ADO
4 1 (0.77%) Elastic Stack
4 1 (0.77%) OAuth
4 1 (0.77%) OAuth2
4 1 (0.77%) OpenID
4 1 (0.77%) React
4 1 (0.77%) YAML
Miscellaneous
1 22 (16.92%) Security Posture
2 21 (16.15%) Security Operations Centre
3 14 (10.77%) Cyber Threat
4 9 (6.92%) Onboarding
5 7 (5.38%) CSOC
5 7 (5.38%) Management Information System
5 7 (5.38%) Operational Technology
5 7 (5.38%) Self-Motivation
6 6 (4.62%) Data Centre
7 3 (2.31%) Cyberattack
7 3 (2.31%) Hybrid Cloud
7 3 (2.31%) SCADA
8 2 (1.54%) Cloud Native
8 2 (1.54%) Distributed Systems
8 2 (1.54%) Legacy Systems
8 2 (1.54%) PKI
8 2 (1.54%) Robotics
9 1 (0.77%) Cyber Defence
9 1 (0.77%) Cyber Security Posture
9 1 (0.77%) Insider Threat
Operating Systems
1 28 (21.54%) Windows
2 20 (15.38%) Linux
3 8 (6.15%) Windows Server
4 6 (4.62%) Red Hat Enterprise Linux
4 6 (4.62%) VMS
5 3 (2.31%) Mac OS X
6 1 (0.77%) Mac OS
6 1 (0.77%) Unix
6 1 (0.77%) Windows Server 2016
6 1 (0.77%) Windows Server 2019
Processes & Methodologies
1 56 (43.08%) Incident Response
2 52 (40.00%) Cybersecurity
3 50 (38.46%) Security Operations
4 28 (21.54%) Vulnerability Management
5 26 (20.00%) SOAR
6 24 (18.46%) Problem-Solving
7 22 (16.92%) Threat Intelligence
8 21 (16.15%) Threat Detection
9 20 (15.38%) Cyber Threat Intelligence
9 20 (15.38%) Incident Management
10 19 (14.62%) Data Loss Prevention
11 17 (13.08%) Cloud Security
12 16 (12.31%) Security Monitoring
13 15 (11.54%) DevOps
13 15 (11.54%) Security Architecture
14 14 (10.77%) Threat Modelling
15 13 (10.00%) Identity Access Management
15 13 (10.00%) Migration
16 12 (9.23%) Event Correlation
17 11 (8.46%) Risk Management
Programming Languages
1 24 (18.46%) PowerShell
2 16 (12.31%) Python
3 11 (8.46%) Kusto Query Language
4 6 (4.62%) Bash
5 2 (1.54%) C#
5 2 (1.54%) Java
6 1 (0.77%) Bicep
6 1 (0.77%) C
6 1 (0.77%) PHP
6 1 (0.77%) SQL
6 1 (0.77%) TypeScript
Qualifications
1 29 (22.31%) CISSP
2 24 (18.46%) Security Cleared
3 20 (15.38%) SC Cleared
4 13 (10.00%) CEH
5 12 (9.23%) CISM
6 11 (8.46%) Degree
6 11 (8.46%) Microsoft Certification
7 9 (6.92%) Azure Certification
8 8 (6.15%) GCIH
9 7 (5.38%) Cisco Certification
9 7 (5.38%) CompTIA Security+
10 5 (3.85%) (ISC)2 CCSP
10 5 (3.85%) GIAC
11 4 (3.08%) CCNA
11 4 (3.08%) CCSP
11 4 (3.08%) Computer Science Degree
11 4 (3.08%) DV Cleared
11 4 (3.08%) TOGAF Certification
12 3 (2.31%) CISA
13 2 (1.54%) CCNP
Quality Assurance & Compliance
1 23 (17.69%) NIST
2 16 (12.31%) ISO/IEC 27001
3 12 (9.23%) GDPR
4 6 (4.62%) HIPAA
5 5 (3.85%) PCI DSS
6 3 (2.31%) NIST 800
7 2 (1.54%) Actionable Recommendations
7 2 (1.54%) NCSC
7 2 (1.54%) QA
7 2 (1.54%) SLA
8 1 (0.77%) California Consumer Privacy Act
8 1 (0.77%) GRC
8 1 (0.77%) ISO/IEC 27002 (supersedes ISO/IEC 17799)
8 1 (0.77%) SOC 2
System Software
1 15 (11.54%) Active Directory
2 7 (5.38%) Virtual Machines
3 4 (3.08%) Docker
4 3 (2.31%) VMware Infrastructure
5 2 (1.54%) VMware NSX
6 1 (0.77%) Hyper-V
6 1 (0.77%) Virtual Servers
6 1 (0.77%) VMware ESXi
6 1 (0.77%) vSphere
Systems Management
1 11 (8.46%) Single Sign-On
2 10 (7.69%) QRadar
3 8 (6.15%) Ansible
4 4 (3.08%) Kubernetes
4 4 (3.08%) PingFederate
4 4 (3.08%) Terraform
5 3 (2.31%) CSIRT
5 3 (2.31%) Grafana
6 2 (1.54%) Active Directory Federation Services
6 2 (1.54%) FortiGate
7 1 (0.77%) Kibana
7 1 (0.77%) Microsoft Intune
7 1 (0.77%) Nessus
7 1 (0.77%) Prometheus
7 1 (0.77%) SCCM
7 1 (0.77%) WSUS
Vendors
1 42 (32.31%) Microsoft
2 38 (29.23%) Splunk
3 20 (15.38%) Palo Alto
4 11 (8.46%) ServiceNow
5 9 (6.92%) Cisco
5 9 (6.92%) Google
6 8 (6.15%) CyberArk
7 7 (5.38%) F5
7 7 (5.38%) SolarWinds
8 6 (4.62%) Fortinet
8 6 (4.62%) Red Hat
9 5 (3.85%) Okta
9 5 (3.85%) Tenable
9 5 (3.85%) VMware
10 4 (3.08%) Darktrace
10 4 (3.08%) Ping Identity
10 4 (3.08%) Rapid7
10 4 (3.08%) SAP
11 3 (2.31%) ArcSight
11 3 (2.31%) IBM