Threat Intelligence Contracts with Hybrid/Remote/WFH Options

Threat Intelligence
UK > Work from Home

The table below provides summary statistics for remote or hybrid contract work requiring Threat Intelligence skills. It includes a benchmarking guide to the contractor rates offered in vacancies that cited Threat Intelligence over the 6 months leading up to 7 May 2025, comparing them to the same period in the previous two years.

6 months to
7 May 2025
Same period 2024 Same period 2023
Rank 275 304 388
Rank change year-on-year +29 +84 +169
Contract jobs citing Threat Intelligence 30 40 86
As % of all contract jobs with a WFH option 0.30% 0.26% 0.34%
As % of the Processes & Methodologies category 0.33% 0.30% 0.38%
Number of daily rates quoted 27 30 49
10th Percentile £456 £498 £525
25th Percentile £500 £531 £606
Median daily rate (50th Percentile) £575 £645 £659
Median % change year-on-year -10.85% -2.12% +14.61%
75th Percentile £600 £850 £798
90th Percentile £638 £858 £838
UK median daily rate £550 £600 £625
% change year-on-year -8.33% -4.00% +19.05%
Number of hourly rates quoted 1 0 0
10th Percentile - - -
25th Percentile £77.50 - -
Median hourly rate £85.00 - -
75th Percentile £92.50 - -
90th Percentile - - -
UK median hourly rate £85.00 £80.00 -
% change year-on-year +6.25% - -

All Process and Methodology Skills
Work from Home

Threat Intelligence falls under the Processes and Methodologies category. For comparison with the information above, the following table provides summary statistics for all contract job vacancies with remote or hybrid options requiring process or methodology skills.

Contract vacancies with a requirement for process or methodology skills 8,994 13,387 22,922
As % of all contract jobs with a WFH option 91.19% 87.93% 89.77%
Number of daily rates quoted 6,179 8,971 16,192
10th Percentile £338 £325 £363
25th Percentile £415 £425 £450
Median daily rate (50th Percentile) £525 £525 £540
Median % change year-on-year - -2.78% +2.86%
75th Percentile £638 £638 £650
90th Percentile £763 £750 £750
UK median daily rate £520 £525 £550
% change year-on-year -0.95% -4.55% +3.77%
Number of hourly rates quoted 221 576 528
10th Percentile £13.85 £15.08 £18.68
25th Percentile £19.00 £24.25 £30.00
Median hourly rate £39.04 £42.50 £55.00
Median % change year-on-year -8.14% -22.73% +57.14%
75th Percentile £66.00 £60.00 £68.81
90th Percentile £75.00 £75.13 £80.25
UK median hourly rate £29.00 £35.96 £36.00
% change year-on-year -19.35% -0.11% +44.00%

Threat Intelligence
Trend for Jobs with a WFH Option

Job vacancies with remote working options citing Threat Intelligence as a proportion of all IT jobs advertised.

Threat Intelligence trend for jobs with Hybrid/Remote/WFH options

Threat Intelligence
Daily Rate Trend for Jobs with a WFH Option

3-month moving average daily rate quoted in job vacancies with remote working options citing Threat Intelligence.

Threat Intelligence daily rate for jobs with a WFH option

Threat Intelligence
Daily Rate Histogram for Jobs with a WFH Option

Daily rate distribution for jobs with remote working options citing Threat Intelligence over the 6 months to 7 May 2025.

Threat Intelligence daily rate histogram for jobs with a WFH option

Threat Intelligence
Hourly Rate Trend for Jobs with a WFH Option

3-month moving average hourly rate quoted in job vacancies with remote working options citing Threat Intelligence.

Threat Intelligence hourly rate for jobs with a WFH option

Threat Intelligence
Co-occurring Skills and Capabilities with WFH Options by Category

The follow tables expand on the table above by listing co-occurrences grouped by category. The same employment type, locality and period is covered with up to 20 co-occurrences shown in each of the following categories:

Cloud Services
1 8 (26.67%) Azure
2 5 (16.67%) AWS
3 3 (10.00%) Azure Sentinel
3 3 (10.00%) Entra ID
4 2 (6.67%) GCP
4 2 (6.67%) Microsoft 365
5 1 (3.33%) Azure DevOps
5 1 (3.33%) Azure ExpressRoute
5 1 (3.33%) Azure Key Vault
5 1 (3.33%) Azure Logic Apps
5 1 (3.33%) Cloud Computing
5 1 (3.33%) Power Automate
Communications & Networking
1 6 (20.00%) Firewall
2 3 (10.00%) Network Security
3 2 (6.67%) Intrusion Detection
4 1 (3.33%) Cisco ISE
4 1 (3.33%) TCP/IP
4 1 (3.33%) VPN
4 1 (3.33%) VSAN
Database & Business Intelligence
1 1 (3.33%) NoSQL
General
1 5 (16.67%) Social Skills
2 4 (13.33%) Analytical Skills
2 4 (13.33%) Finance
3 3 (10.00%) Presentation Skills
4 1 (3.33%) Manufacturing
4 1 (3.33%) Military
4 1 (3.33%) Public Sector
Job Titles
1 5 (16.67%) Analyst
1 5 (16.67%) Lead
2 4 (13.33%) SOC Analyst
3 3 (10.00%) Architect
3 3 (10.00%) Consultant
3 3 (10.00%) Security Architect
4 2 (6.67%) IT Manager
4 2 (6.67%) IT Security Manager
4 2 (6.67%) Penetration Tester
4 2 (6.67%) Security Engineer
4 2 (6.67%) Security Manager
4 2 (6.67%) SOC Consultant
4 2 (6.67%) SOC Engineer
4 2 (6.67%) Tester
4 2 (6.67%) Vulnerability Manager
5 1 (3.33%) Audit Consultant
5 1 (3.33%) Cyber Threat Intelligence Consultant
5 1 (3.33%) Security Specialist
5 1 (3.33%) Senior
5 1 (3.33%) Threat and Vulnerability Manager
Miscellaneous
1 10 (33.33%) Cyber Threat
1 10 (33.33%) Security Operations Centre
2 9 (30.00%) Security Posture
3 4 (13.33%) Management Information System
3 4 (13.33%) Operational Technology
4 2 (6.67%) Cyber Defence
4 2 (6.67%) Cyberattack
4 2 (6.67%) Legacy Systems
4 2 (6.67%) Onboarding
4 2 (6.67%) SCADA
5 1 (3.33%) Cloud Native
5 1 (3.33%) Cyber Kill Chain
5 1 (3.33%) Cyber Security Posture
5 1 (3.33%) Insider Threat
5 1 (3.33%) Life Science
5 1 (3.33%) MISP
5 1 (3.33%) Renewable Energy
5 1 (3.33%) Self-Motivation
Operating Systems
1 2 (6.67%) Linux
1 2 (6.67%) Windows
2 1 (3.33%) Mac OS
Processes & Methodologies
1 27 (90.00%) Cyber Threat Intelligence
2 22 (73.33%) SIEM
3 21 (70.00%) Cybersecurity
4 18 (60.00%) Security Operations
5 16 (53.33%) Incident Response
6 12 (40.00%) Vulnerability Management
7 10 (33.33%) MITRE ATT&CK
8 9 (30.00%) Threat Detection
9 8 (26.67%) Security Monitoring
10 7 (23.33%) Incident Management
10 7 (23.33%) SOAR
11 6 (20.00%) Cyber Intelligence
12 5 (16.67%) Cloud Security
12 5 (16.67%) Malware Analysis
12 5 (16.67%) Threat and Vulnerability Management
13 4 (13.33%) Continuous Improvement
13 4 (13.33%) Ethical Hacking
13 4 (13.33%) Identity Access Management
13 4 (13.33%) Patch Management
13 4 (13.33%) Vulnerability Remediation
Programming Languages
1 6 (20.00%) PowerShell
2 5 (16.67%) Python
3 1 (3.33%) Bash
3 1 (3.33%) C
3 1 (3.33%) Kusto Query Language
3 1 (3.33%) SQL
Qualifications
1 11 (36.67%) CISSP
2 6 (20.00%) CEH
2 6 (20.00%) GCIH
2 6 (20.00%) GIAC
3 4 (13.33%) CISM
4 3 (10.00%) CREST Certified
5 2 (6.67%) CISA
5 2 (6.67%) CompTIA Security+
5 2 (6.67%) Cyber Scheme
5 2 (6.67%) Degree
5 2 (6.67%) GCIA
5 2 (6.67%) GSEC
5 2 (6.67%) SC Cleared
5 2 (6.67%) Security Cleared
6 1 (3.33%) CCNA
6 1 (3.33%) CESG Certified Professional
6 1 (3.33%) Cisco Certification
6 1 (3.33%) GCFA
6 1 (3.33%) ISEB
6 1 (3.33%) SSCP
Quality Assurance & Compliance
1 11 (36.67%) NIST
2 9 (30.00%) ISO/IEC 27001
3 4 (13.33%) NIST 800
4 3 (10.00%) GDPR
5 1 (3.33%) Actionable Recommendations
5 1 (3.33%) HIPAA
5 1 (3.33%) ISO/IEC 27002 (supersedes ISO/IEC 17799)
5 1 (3.33%) JSP 440
5 1 (3.33%) NCSC
5 1 (3.33%) PCI DSS
5 1 (3.33%) QA
System Software
1 1 (3.33%) Active Directory
1 1 (3.33%) Firmware
1 1 (3.33%) Hyper-V
1 1 (3.33%) VMware Infrastructure
1 1 (3.33%) VMware NSX
1 1 (3.33%) vSphere
Systems Management
1 5 (16.67%) QRadar
2 1 (3.33%) Ansible
2 1 (3.33%) CSIRT
2 1 (3.33%) Grafana
2 1 (3.33%) Prometheus
2 1 (3.33%) Single Sign-On
2 1 (3.33%) Terraform
Vendors
1 9 (30.00%) Splunk
2 5 (16.67%) Microsoft
3 3 (10.00%) Palo Alto
4 2 (6.67%) Cisco
4 2 (6.67%) CrowdStrike
4 2 (6.67%) IBM
4 2 (6.67%) Rapid7
5 1 (3.33%) ArcSight
5 1 (3.33%) Google
5 1 (3.33%) Kenna
5 1 (3.33%) Qualys
5 1 (3.33%) VMware