Incident Response Job Trends in the City of London

Incident Response
Central London > City of London

The table below provides summary statistics and salary benchmarking for jobs advertised in the City of London requiring Incident Response skills. It covers permanent job vacancies from the 6 months leading up to 6 January 2026, with comparisons to the same periods in the previous two years.

6 months to
6 Jan 2026
Same period 2025 Same period 2024
Rank 82 83 131
Rank change year-on-year +1 +48 +60
Permanent jobs citing Incident Response 50 83 34
As % of all permanent jobs in the City of London 2.30% 3.11% 1.22%
As % of the Processes & Methodologies category 2.64% 3.26% 1.28%
Number of salaries quoted 33 55 33
10th Percentile £66,500 £56,250 £44,000
25th Percentile £72,500 £61,250 £62,500
Median annual salary (50th Percentile) £80,000 £65,000 £67,500
Median % change year-on-year +23.08% -3.70% -10.00%
75th Percentile £91,250 £77,875 £85,000
90th Percentile £96,250 £95,750 £150,000
Central London median annual salary £80,000 £65,000 £68,750
% change year-on-year +23.08% -5.45% -8.33%

All Process & Methodology Skills
City of London

Incident Response falls under the Processes and Methodologies category. For comparison with the information above, the following table provides summary statistics for all permanent job vacancies requiring process or methodology skills in the City of London.

Permanent vacancies with a requirement for process or methodology skills 1,893 2,545 2,655
As % of all permanent jobs advertised in the City of London 86.99% 95.50% 95.13%
Number of salaries quoted 1,399 1,634 2,379
10th Percentile £42,500 £46,250 £40,750
25th Percentile £57,500 £55,000 £55,000
Median annual salary (50th Percentile) £77,500 £75,000 £75,000
Median % change year-on-year +3.33% - -
75th Percentile £100,000 £95,000 £96,625
90th Percentile £113,750 £117,500 £115,000
Central London median annual salary £77,500 £74,750 £75,000
% change year-on-year +3.68% -0.33% -

Incident Response
Job Vacancy Trend in the City of London

Historical trend showing the proportion of permanent IT job postings citing Incident Response relative to all permanent IT jobs advertised in the City of London.

Incident Response job vacancy trend in the City of London

Incident Response
Salary Trend in the City of London

Salary distribution trend for jobs in the City of London citing Incident Response.

Salary distribution trend for jobs in the City of London citing Incident Response

Incident Response
Salary Histogram in the City of London

Salary distribution for jobs citing Incident Response in the City of London over the 6 months to 6 January 2026.

Salary histogram for Incident Response in the City of London

Incident Response
Co-Occurring Skills & Capabilities in the City of London by Category

The following tables expand on the one above by listing co-occurrences grouped by category. They cover the same employment type, locality and period, with up to 20 co-occurrences shown in each category:

Application Platforms
1 3 (6.00%) SharePoint
2 1 (2.00%) Confluence
2 1 (2.00%) Microsoft Exchange
Applications
1 2 (4.00%) Microsoft Office
Business Applications
1 2 (4.00%) Remedy ITSM
Cloud Services
1 23 (46.00%) Azure
2 11 (22.00%) Microsoft 365
3 6 (12.00%) Entra ID
4 5 (10.00%) AWS
4 5 (10.00%) Azure DevOps
4 5 (10.00%) GCP
5 4 (8.00%) Azure Sentinel
5 4 (8.00%) Mimecast
5 4 (8.00%) Tessian
6 3 (6.00%) Nutanix
7 2 (4.00%) Azure Monitor
7 2 (4.00%) Microsoft Purview
7 2 (4.00%) SaaS
8 1 (2.00%) Amazon CloudWatch
8 1 (2.00%) AWS CloudFormation
8 1 (2.00%) Copilot Studio
8 1 (2.00%) Datadog
8 1 (2.00%) GitHub
8 1 (2.00%) GitHub Actions
8 1 (2.00%) Microsoft Copilot
Communications & Networking
1 18 (36.00%) Firewall
2 8 (16.00%) Network Security
3 4 (8.00%) VPN
4 3 (6.00%) DNS
5 2 (4.00%) Intrusion Detection
6 1 (2.00%) BGP
6 1 (2.00%) DKIM
6 1 (2.00%) DMARC
6 1 (2.00%) OSPF
6 1 (2.00%) Spanning Tree
6 1 (2.00%) SSH
6 1 (2.00%) Wireless
Database & Business Intelligence
1 1 (2.00%) Elasticsearch
1 1 (2.00%) NoSQL
1 1 (2.00%) Relational Database
Development Applications
1 1 (2.00%) Burp Suite
1 1 (2.00%) GitLab
1 1 (2.00%) Jenkins
1 1 (2.00%) JIRA
General
1 18 (36.00%) Finance
1 18 (36.00%) Social Skills
2 7 (14.00%) Analytical Skills
2 7 (14.00%) Documentation Skills
3 4 (8.00%) Financial Institution
3 4 (8.00%) Legal
4 3 (6.00%) Inclusion and Diversity
4 3 (6.00%) Law
5 2 (4.00%) Banking
6 1 (2.00%) Investment Banking
6 1 (2.00%) Mandarin Language
6 1 (2.00%) Pharmaceutical
6 1 (2.00%) Presentation Skills
6 1 (2.00%) Telecoms
Job Titles
1 13 (26.00%) Lead
2 9 (18.00%) Analyst
3 8 (16.00%) Senior
4 7 (14.00%) Security Engineer
4 7 (14.00%) Security Specialist
5 6 (12.00%) Security Analyst
6 4 (8.00%) Cybersecurity Engineer
6 4 (8.00%) IT Security Specialist
6 4 (8.00%) Security Operations Specialist
7 3 (6.00%) Cybersecurity Analyst
7 3 (6.00%) Disaster Recovery Specialist
7 3 (6.00%) Information Analyst
7 3 (6.00%) Information Security Analyst
7 3 (6.00%) Information Security Specialist
7 3 (6.00%) Information Specialist
7 3 (6.00%) Security Manager
7 3 (6.00%) Senior Security Engineer
8 2 (4.00%) Team Leader
8 2 (4.00%) Technical Analyst
8 2 (4.00%) Technical Leader
Libraries, Frameworks & Software Standards
1 4 (8.00%) .NET
2 2 (4.00%) ARM Templates
3 1 (2.00%) CSS
3 1 (2.00%) Elastic Stack
3 1 (2.00%) HTML
3 1 (2.00%) Next.js
3 1 (2.00%) Node.js
3 1 (2.00%) REST
3 1 (2.00%) SOAP
3 1 (2.00%) XML
Miscellaneous
1 8 (16.00%) Security Operations Centre
1 8 (16.00%) Security Posture
2 5 (10.00%) Cyber Threat
3 4 (8.00%) CMDB
3 4 (8.00%) Cyber Defence
3 4 (8.00%) Distributed Denial-of-Service
4 3 (6.00%) Cloud Security Posture
4 3 (6.00%) Hybrid Cloud
5 2 (4.00%) Analytical Mindset
5 2 (4.00%) Data Protection Act
5 2 (4.00%) Distributed Systems
5 2 (4.00%) Management Information System
6 1 (2.00%) Credit Risk
6 1 (2.00%) Data Centre
6 1 (2.00%) Linux Command Line
6 1 (2.00%) Mobile App
6 1 (2.00%) PKI
6 1 (2.00%) Tandem
6 1 (2.00%) Virtual Team
Operating Systems
1 11 (22.00%) Linux
2 9 (18.00%) Windows
3 3 (6.00%) Unix
4 1 (2.00%) Kali Linux
4 1 (2.00%) Red Hat Enterprise Linux
4 1 (2.00%) Windows Server
Processes & Methodologies
1 26 (52.00%) SIEM
2 25 (50.00%) Security Operations
3 19 (38.00%) Cybersecurity
4 17 (34.00%) Information Security
5 14 (28.00%) Incident Management
6 13 (26.00%) Root Cause Analysis
7 12 (24.00%) Data Loss Prevention
8 10 (20.00%) Change Management
8 10 (20.00%) Mentoring
8 10 (20.00%) Problem-Solving
9 9 (18.00%) Continuous Improvement
10 8 (16.00%) Cloud Security
10 8 (16.00%) DevOps
10 8 (16.00%) Risk Management
10 8 (16.00%) Threat Intelligence
11 7 (14.00%) Computer Science
11 7 (14.00%) Runbook
11 7 (14.00%) SOAR
11 7 (14.00%) Vulnerability Management
12 6 (12.00%) Malware Analysis
Programming Languages
1 12 (24.00%) Python
2 10 (20.00%) PowerShell
3 5 (10.00%) C#
3 5 (10.00%) SQL
4 3 (6.00%) Bash
5 2 (4.00%) Bicep
6 1 (2.00%) JavaScript
6 1 (2.00%) Kusto Query Language
6 1 (2.00%) Perl
6 1 (2.00%) Shell Script
Qualifications
1 16 (32.00%) CISSP
2 11 (22.00%) Degree
3 6 (12.00%) Cisco Certification
3 6 (12.00%) GIAC
4 4 (8.00%) (ISC)2 CCSP
4 4 (8.00%) Computer Science Degree
5 3 (6.00%) CEH
5 3 (6.00%) CISM
5 3 (6.00%) CompTIA Security+
5 3 (6.00%) GCIH
5 3 (6.00%) Network+ Certification
5 3 (6.00%) Novell Certification
5 3 (6.00%) OSCP
6 2 (4.00%) CCNA
6 2 (4.00%) CompTIA CySA+
6 2 (4.00%) Postgraduate
6 2 (4.00%) Security Cleared
7 1 (2.00%) Azure Certification
7 1 (2.00%) CCSAM
7 1 (2.00%) ISO 27001 Lead Implementer
Quality Assurance & Compliance
1 11 (22.00%) NIST
2 8 (16.00%) ISO/IEC 27001
3 4 (8.00%) GDPR
4 3 (6.00%) Cyber Essentials
4 3 (6.00%) ISO/IEC 27002 (supersedes ISO/IEC 17799)
4 3 (6.00%) QA
5 2 (4.00%) Cyber Essentials PLUS
5 2 (4.00%) ITGC
6 1 (2.00%) GRC
6 1 (2.00%) PCI DSS
6 1 (2.00%) SLA
6 1 (2.00%) SOC 2
System Software
1 4 (8.00%) Active Directory
2 2 (4.00%) Docker
3 1 (2.00%) Virtual Desktop
Systems Management
1 5 (10.00%) Kubernetes
2 4 (8.00%) CSIRT
2 4 (8.00%) Single Sign-On
2 4 (8.00%) Terraform
3 3 (6.00%) Computer Emergency Response Teams
3 3 (6.00%) Grafana
3 3 (6.00%) Microsoft Intune
4 2 (4.00%) ArcSight ESM
4 2 (4.00%) QRadar
5 1 (2.00%) Ansible
5 1 (2.00%) Prometheus
5 1 (2.00%) SCCM
Vendors
1 21 (42.00%) Microsoft
2 8 (16.00%) CrowdStrike
3 7 (14.00%) Palo Alto
4 4 (8.00%) ServiceNow
4 4 (8.00%) Splunk
5 3 (6.00%) Commvault
5 3 (6.00%) CyberArk
5 3 (6.00%) iManage
5 3 (6.00%) Rapid7
5 3 (6.00%) Thales
5 3 (6.00%) VMware
6 2 (4.00%) ArcSight
6 2 (4.00%) BMC
6 2 (4.00%) LogLogic
6 2 (4.00%) McAfee
6 2 (4.00%) Remedy
7 1 (2.00%) Cisco
7 1 (2.00%) Gemalto
7 1 (2.00%) IBM
7 1 (2.00%) Imperva