Threat Detection Contracts with Hybrid/Remote/WFH Options

Threat Detection
UK > Work from Home

The table below provides summary statistics for remote or hybrid contract work requiring Threat Detection skills. It includes a benchmarking guide to the contractor rates offered in vacancies that cited Threat Detection over the 6 months leading up to 1 May 2025, comparing them to the same period in the previous two years.

6 months to
1 May 2025
Same period 2024 Same period 2023
Rank 271 315 432
Rank change year-on-year +44 +117 +171
Contract jobs citing Threat Detection 33 30 45
As % of all contract jobs with a WFH option 0.33% 0.20% 0.17%
As % of the Processes & Methodologies category 0.37% 0.22% 0.19%
Number of daily rates quoted 25 30 34
10th Percentile £355 £498 £541
25th Percentile £450 £550 £623
Median daily rate (50th Percentile) £500 £600 £650
Median % change year-on-year -16.67% -7.69% +8.33%
75th Percentile £600 £638 £738
90th Percentile £650 £706 £779
UK median daily rate £575 £618 £566
% change year-on-year -6.88% +9.18% -12.99%
Number of hourly rates quoted 3 0 0
10th Percentile - - -
25th Percentile £40.50 - -
Median hourly rate £41.00 - -
75th Percentile £41.50 - -
90th Percentile - - -
UK median hourly rate £80.68 - -

All Process and Methodology Skills
Work from Home

Threat Detection falls under the Processes and Methodologies category. For comparison with the information above, the following table provides summary statistics for all contract job vacancies with remote or hybrid options requiring process or methodology skills.

Contract vacancies with a requirement for process or methodology skills 9,021 13,483 23,229
As % of all contract jobs with a WFH option 91.08% 87.87% 89.84%
Number of daily rates quoted 6,191 8,996 16,418
10th Percentile £340 £325 £363
25th Percentile £419 £425 £450
Median daily rate (50th Percentile) £525 £525 £540
Median % change year-on-year - -2.78% +2.86%
75th Percentile £638 £638 £650
90th Percentile £763 £750 £750
UK median daily rate £520 £525 £550
% change year-on-year -0.95% -4.55% +4.76%
Number of hourly rates quoted 224 579 532
10th Percentile £14.20 £15.17 £19.00
25th Percentile £19.56 £25.25 £30.54
Median hourly rate £39.52 £43.00 £55.00
Median % change year-on-year -8.09% -21.82% +57.14%
75th Percentile £66.13 £60.00 £68.75
90th Percentile £75.00 £75.25 £80.23
UK median hourly rate £29.00 £35.65 £37.30
% change year-on-year -18.65% -4.42% +49.20%

Threat Detection
Trend for Jobs with a WFH Option

Job vacancies with remote working options citing Threat Detection as a proportion of all IT jobs advertised.

Threat Detection trend for jobs with Hybrid/Remote/WFH options

Threat Detection
Daily Rate Trend for Jobs with a WFH Option

3-month moving average daily rate quoted in job vacancies with remote working options citing Threat Detection.

Threat Detection daily rate for jobs with a WFH option

Threat Detection
Daily Rate Histogram for Jobs with a WFH Option

Daily rate distribution for jobs with remote working options citing Threat Detection over the 6 months to 1 May 2025.

Threat Detection daily rate histogram for jobs with a WFH option

Threat Detection
Co-occurring Skills and Capabilities with WFH Options by Category

The follow tables expand on the table above by listing co-occurrences grouped by category. The same employment type, locality and period is covered with up to 20 co-occurrences shown in each of the following categories:

Cloud Services
1 12 (36.36%) Azure
2 8 (24.24%) Azure Sentinel
3 4 (12.12%) AWS
4 3 (9.09%) Azure Monitor
4 3 (9.09%) Entra ID
4 3 (9.09%) GCP
5 2 (6.06%) Azure DevOps
5 2 (6.06%) Azure Logic Apps
5 2 (6.06%) GitHub
6 1 (3.03%) Amazon EKS
6 1 (3.03%) AWS CloudFormation
6 1 (3.03%) Azure ExpressRoute
6 1 (3.03%) Azure Key Vault
6 1 (3.03%) Cloud Computing
6 1 (3.03%) Datadog
6 1 (3.03%) Microsoft Purview
6 1 (3.03%) Power Automate
Communications & Networking
1 10 (30.30%) Firewall
2 5 (15.15%) SMTP
3 4 (12.12%) Network Security
4 3 (9.09%) IMAP
4 3 (9.09%) Intrusion Detection
4 3 (9.09%) POP3
5 2 (6.06%) DNS
5 2 (6.06%) FTP
5 2 (6.06%) HTTP
5 2 (6.06%) SSL
5 2 (6.06%) TCP/IP
6 1 (3.03%) Modbus
6 1 (3.03%) VPN
6 1 (3.03%) VSAN
6 1 (3.03%) Wireless
6 1 (3.03%) Wireless Security
Database & Business Intelligence
1 1 (3.03%) NoSQL
Development Applications
1 1 (3.03%) GitLab
1 1 (3.03%) Jenkins
1 1 (3.03%) SonarQube
General
1 12 (36.36%) Social Skills
2 3 (9.09%) Analytical Skills
2 3 (9.09%) Finance
2 3 (9.09%) Presentation Skills
3 2 (6.06%) Aviation
3 2 (6.06%) Fire and Rescue
3 2 (6.06%) Inclusion and Diversity
3 2 (6.06%) Police
3 2 (6.06%) Swedish Language
4 1 (3.03%) Banking
Job Titles
1 7 (21.21%) Consultant
2 6 (18.18%) Security Engineer
3 3 (9.09%) Cybersecurity Engineer
3 3 (9.09%) SOC Consultant
3 3 (9.09%) Splunk Consultant
3 3 (9.09%) Support Engineer
4 2 (6.06%) Architect
4 2 (6.06%) Azure Consultant
4 2 (6.06%) DevSecOps Engineer
4 2 (6.06%) Lead
4 2 (6.06%) Microsoft Consultant
4 2 (6.06%) Operations Engineer
4 2 (6.06%) Remote Support Engineer
4 2 (6.06%) Security Architect
4 2 (6.06%) Security Consultant
4 2 (6.06%) Senior
4 2 (6.06%) SOC Engineer
5 1 (3.03%) Cloud Architect
5 1 (3.03%) Security Advisor
5 1 (3.03%) Vulnerability Management Engineer
Libraries, Frameworks & Software Standards
1 2 (6.06%) .NET
2 1 (3.03%) Elastic Stack
2 1 (3.03%) LDAP
2 1 (3.03%) OAuth
2 1 (3.03%) OAuth2
2 1 (3.03%) OpenID
2 1 (3.03%) SAML
Miscellaneous
1 7 (21.21%) Security Operations Centre
1 7 (21.21%) Security Posture
2 3 (9.09%) Foreign Exchange (FX)
3 2 (6.06%) Cyber Threat
3 2 (6.06%) Data Centre
3 2 (6.06%) Distributed Systems
3 2 (6.06%) Hybrid Cloud
3 2 (6.06%) Management Information System
3 2 (6.06%) Robotics
4 1 (3.03%) Algorithms
4 1 (3.03%) Analytical Mindset
4 1 (3.03%) Cloud Native
4 1 (3.03%) Insider Threat
4 1 (3.03%) Operational Technology
4 1 (3.03%) PKI
4 1 (3.03%) Renewable Energy
4 1 (3.03%) SCADA
4 1 (3.03%) Self-Motivation
Operating Systems
1 8 (24.24%) Linux
2 4 (12.12%) Windows
3 3 (9.09%) Unix
4 2 (6.06%) Windows Server
5 1 (3.03%) Mac OS
Processes & Methodologies
1 21 (63.64%) SIEM
2 19 (57.58%) Incident Response
3 13 (39.39%) Security Operations
4 12 (36.36%) Cybersecurity
5 11 (33.33%) Security Monitoring
5 11 (33.33%) Vulnerability Management
6 9 (27.27%) Cyber Threat Intelligence
6 9 (27.27%) SOAR
6 9 (27.27%) Threat Intelligence
7 7 (21.21%) Problem-Solving
8 6 (18.18%) Cloud Security
8 6 (18.18%) Vulnerability Assessment
9 5 (15.15%) DevOps
9 5 (15.15%) Incident Management
9 5 (15.15%) Migration
10 4 (12.12%) Artificial Intelligence
10 4 (12.12%) CI/CD
10 4 (12.12%) Mentoring
10 4 (12.12%) OWASP
10 4 (12.12%) Use Case
Programming Languages
1 7 (21.21%) PowerShell
2 6 (18.18%) Python
3 3 (9.09%) Kusto Query Language
4 2 (6.06%) Bash
4 2 (6.06%) C#
5 1 (3.03%) C
5 1 (3.03%) SQL
Qualifications
1 8 (24.24%) CISSP
2 5 (15.15%) CISM
3 4 (12.12%) CEH
3 4 (12.12%) SC Cleared
3 4 (12.12%) Security Cleared
4 3 (9.09%) GCIH
4 3 (9.09%) GIAC
5 2 (6.06%) CISA
6 1 (3.03%) Azure Certification
6 1 (3.03%) CCNA
6 1 (3.03%) Cisco Certification
6 1 (3.03%) Degree
6 1 (3.03%) GCFA
6 1 (3.03%) GCIA
6 1 (3.03%) ISO 27001 Lead Auditor
6 1 (3.03%) Microsoft Certification
Quality Assurance & Compliance
1 7 (21.21%) NIST
2 5 (15.15%) ISO/IEC 27001
3 4 (12.12%) GDPR
4 1 (3.03%) Actionable Recommendations
4 1 (3.03%) California Consumer Privacy Act
4 1 (3.03%) HIPAA
4 1 (3.03%) NCSC
4 1 (3.03%) NIST 800
4 1 (3.03%) PCI DSS
System Software
1 3 (9.09%) Active Directory
2 1 (3.03%) Docker
2 1 (3.03%) Hyper-V
2 1 (3.03%) Virtual Machines
2 1 (3.03%) VMware Infrastructure
2 1 (3.03%) VMware NSX
2 1 (3.03%) vSphere
Systems Management
1 3 (9.09%) Grafana
1 3 (9.09%) QRadar
1 3 (9.09%) Single Sign-On
2 2 (6.06%) FortiGate
2 2 (6.06%) Kubernetes
3 1 (3.03%) CSIRT
3 1 (3.03%) Prometheus
3 1 (3.03%) Terraform
Vendors
1 9 (27.27%) Splunk
2 7 (21.21%) Microsoft
3 3 (9.09%) Rapid7
4 2 (6.06%) IBM
4 2 (6.06%) Palo Alto
4 2 (6.06%) Ribbon
4 2 (6.06%) Tenable
5 1 (3.03%) ArcSight
5 1 (3.03%) CrowdStrike
5 1 (3.03%) Darktrace
5 1 (3.03%) McAfee
5 1 (3.03%) Symantec
5 1 (3.03%) Trend Micro
5 1 (3.03%) VMware