SIEM Job Trends in the UK excluding London

Security Information and Event Management (SIEM)
UK > UK excluding London

The table below provides summary statistics and salary benchmarking for jobs advertised in the UK excluding London requiring SIEM skills. It covers permanent job vacancies from the 6 months leading up to 14 January 2026, with comparisons to the same periods in the previous two years.

6 months to
14 Jan 2026
Same period 2025 Same period 2024
Rank 348 232 230
Rank change year-on-year -116 -2 +91
Permanent jobs citing SIEM 162 409 451
As % of all permanent jobs in the UK excluding London 0.38% 1.14% 1.31%
As % of the Processes & Methodologies category 0.49% 1.28% 1.47%
Number of salaries quoted 126 246 333
10th Percentile £38,000 £41,250 £36,250
25th Percentile £44,063 £45,000 £46,521
Median annual salary (50th Percentile) £60,000 £59,000 £57,500
Median % change year-on-year +1.69% +2.61% -4.17%
75th Percentile £77,500 £76,500 £69,141
90th Percentile £85,000 £81,250 £73,750
UK median annual salary £70,000 £65,000 £62,500
% change year-on-year +7.69% +4.00% -3.85%

All Process & Methodology Skills
UK excluding London

SIEM falls under the Processes and Methodologies category. For comparison with the information above, the following table provides summary statistics for all permanent job vacancies requiring process or methodology skills in the UK excluding London.

Permanent vacancies with a requirement for process or methodology skills 33,283 31,985 30,588
As % of all permanent jobs advertised in the UK excluding London 78.49% 89.04% 88.64%
Number of salaries quoted 19,187 14,363 22,780
10th Percentile £27,750 £31,250 £28,000
25th Percentile £33,500 £41,250 £38,000
Median annual salary (50th Percentile) £50,000 £55,000 £52,000
Median % change year-on-year -9.09% +5.77% -5.45%
75th Percentile £65,000 £70,000 £66,250
90th Percentile £80,000 £83,750 £80,000
UK median annual salary £55,000 £60,000 £60,000
% change year-on-year -8.33% - -4.00%

SIEM
Job Vacancy Trend in the UK excluding London

Historical trend showing the proportion of permanent IT job postings citing SIEM relative to all permanent IT jobs advertised in the UK excluding London.

SIEM job vacancy trend in the UK excluding London

SIEM
Salary Trend in the UK excluding London

Salary distribution trend for jobs in the UK excluding London citing SIEM.

Salary distribution trend for jobs in the UK excluding London citing SIEM

SIEM
Salary Histogram in the UK excluding London

Salary distribution for jobs citing SIEM in the UK excluding London over the 6 months to 14 January 2026.

Salary histogram for SIEM in the UK excluding London

SIEM
Job Locations in the UK excluding London

The table below looks at the demand and provides a guide to the median salaries quoted in IT jobs citing SIEM within the UK excluding London region over the 6 months to 14 January 2026. The 'Rank Change' column provides an indication of the change in demand within each location based on the same 6 month period last year.

Location Rank Change
on Same Period
Last Year
Matching
Permanent
IT Job Ads
Median Salary
Past 6 Months
Median Salary
% Change
on Same Period
Last Year
Live
Jobs
South East -41 50 £57,000 -5.00% 59
Midlands -22 37 £55,000 +4.76% 30
West Midlands -4 36 £55,000 -8.33% 16
North of England -41 27 £51,250 -2.38% 35
South West +1 24 £75,000 -3.23% 23
Yorkshire -24 16 £52,500 -4.55% 13
East of England 0 12 £68,500 +11.38% 25
North West -7 10 £50,000 -0.61% 17
Wales +10 6 £85,000 +68.96% 5
Scotland -26 6 £62,600 +18.89% 7
North East +1 1 £47,500 -5.58% 5
Northern Ireland -15 1 £48,154 -4.28% 3
East Midlands -25 1 - - 13
SIEM
UK

SIEM
Co-Occurring Skills & Capabilities in the UK excluding London by Category

The following tables expand on the one above by listing co-occurrences grouped by category. They cover the same employment type, locality and period, with up to 20 co-occurrences shown in each category:

Application Platforms
1 4 (2.47%) SharePoint
2 1 (0.62%) Microsoft Exchange
Cloud Services
1 69 (42.59%) Azure
2 45 (27.78%) AWS
3 19 (11.73%) GCP
4 18 (11.11%) Azure Sentinel
5 14 (8.64%) Microsoft 365
6 13 (8.02%) SaaS
7 12 (7.41%) Entra ID
8 5 (3.09%) Microsoft Purview
9 4 (2.47%) Amazon GuardDuty
9 4 (2.47%) Azure DevOps
9 4 (2.47%) Cloud Computing
9 4 (2.47%) GitHub
9 4 (2.47%) Google Workspace
10 3 (1.85%) Azure Key Vault
10 3 (1.85%) Azure Logic Apps
10 3 (1.85%) Datadog
10 3 (1.85%) GitHub Actions
11 1 (0.62%) Azure Functions
11 1 (0.62%) Azure Monitor
11 1 (0.62%) Google Kubernetes Engine
Communications & Networking
1 60 (37.04%) Firewall
2 48 (29.63%) Network Security
3 26 (16.05%) VPN
4 16 (9.88%) WAN
5 13 (8.02%) LAN
6 12 (7.41%) TCP/IP
7 11 (6.79%) DNS
8 7 (4.32%) Intrusion Detection
9 6 (3.70%) Wireshark
10 5 (3.09%) SSL
11 4 (2.47%) DHCP
11 4 (2.47%) Internet
11 4 (2.47%) Remote Desktop
11 4 (2.47%) Wi-Fi
12 3 (1.85%) BGP
12 3 (1.85%) HTTP
12 3 (1.85%) IPsec
12 3 (1.85%) OSPF
12 3 (1.85%) SD-WAN
12 3 (1.85%) VLAN
Database & Business Intelligence
1 1 (0.62%) Big Data
1 1 (0.62%) Elasticsearch
Development Applications
1 4 (2.47%) Jenkins
2 3 (1.85%) CircleCI
3 2 (1.23%) JIRA
General
1 64 (39.51%) Social Skills
2 30 (18.52%) Finance
3 26 (16.05%) Analytical Skills
4 14 (8.64%) Inclusion and Diversity
5 13 (8.02%) Legal
6 8 (4.94%) Documentation Skills
7 4 (2.47%) Public Sector
8 3 (1.85%) Aerospace
8 3 (1.85%) Retail
9 2 (1.23%) Banking
9 2 (1.23%) Games
9 2 (1.23%) Manufacturing
9 2 (1.23%) Military
9 2 (1.23%) Presentation Skills
10 1 (0.62%) Electronics
10 1 (0.62%) Financial Institution
10 1 (0.62%) Law
10 1 (0.62%) Marketing
10 1 (0.62%) Pharmaceutical
10 1 (0.62%) Telecoms
Job Titles
1 48 (29.63%) Security Engineer
2 42 (25.93%) Analyst
3 32 (19.75%) Senior
4 29 (17.90%) Security Analyst
5 19 (11.73%) Cybersecurity Engineer
6 18 (11.11%) Senior Security Engineer
7 15 (9.26%) Cybersecurity Analyst
8 14 (8.64%) Infrastructure Engineer
9 12 (7.41%) Infrastructure Security Engineer
9 12 (7.41%) Support Engineer
10 11 (6.79%) IT Engineer
10 11 (6.79%) IT Security Engineer
10 11 (6.79%) Lead
11 10 (6.17%) Senior Analyst
12 9 (5.56%) SOC Analyst
13 8 (4.94%) Architect
13 8 (4.94%) Cloud Engineer
13 8 (4.94%) Technical Engineer
13 8 (4.94%) Technical Support
13 8 (4.94%) Technical Support Engineer
Libraries, Frameworks & Software Standards
1 4 (2.47%) ARM Templates
2 1 (0.62%) Django
2 1 (0.62%) Elastic Stack
2 1 (0.62%) Kafka
2 1 (0.62%) LDAP
2 1 (0.62%) Regular Expression
2 1 (0.62%) REST
Miscellaneous
1 31 (19.14%) Security Operations Centre
2 28 (17.28%) Security Posture
3 17 (10.49%) Cyber Threat
4 11 (6.79%) Cloud Native
4 11 (6.79%) Data Centre
5 8 (4.94%) Onboarding
5 8 (4.94%) Operational Technology
6 7 (4.32%) Cyber Defence
7 6 (3.70%) Cyber Kill Chain
8 5 (3.09%) Enterprise Software
8 5 (3.09%) Management Information System
8 5 (3.09%) YubiKey
9 4 (2.47%) ARM Cortex
9 4 (2.47%) Data Protection Act
9 4 (2.47%) Digital Media
9 4 (2.47%) Hybrid Cloud
10 3 (1.85%) Analytical Mindset
10 3 (1.85%) Cyber Security Posture
10 3 (1.85%) Life Science
10 3 (1.85%) Product Ownership
Operating Systems
1 30 (18.52%) Windows
2 16 (9.88%) Linux
3 10 (6.17%) Windows Server
4 6 (3.70%) Mac OS
5 1 (0.62%) Red Hat Enterprise Linux
Processes & Methodologies
1 92 (56.79%) Incident Response
2 85 (52.47%) Cybersecurity
3 75 (46.30%) Security Operations
4 42 (25.93%) Continuous Improvement
5 37 (22.84%) Information Security
6 36 (22.22%) Vulnerability Management
7 35 (21.60%) Problem-Solving
7 35 (21.60%) Threat Detection
8 34 (20.99%) Threat Intelligence
9 29 (17.90%) Cloud Security
10 25 (15.43%) SOAR
11 21 (12.96%) Data Protection
11 21 (12.96%) DevOps
11 21 (12.96%) MITRE ATT&CK
12 19 (11.73%) Vulnerability Assessment
13 18 (11.11%) Cyber Threat Intelligence
13 18 (11.11%) ITIL
14 17 (10.49%) Infrastructure Engineering
15 16 (9.88%) Infrastructure as Code
16 15 (9.26%) Penetration Testing
Programming Languages
1 26 (16.05%) PowerShell
2 23 (14.20%) Python
3 18 (11.11%) Kusto Query Language
4 9 (5.56%) SQL
5 8 (4.94%) Bicep
6 7 (4.32%) Bash
7 3 (1.85%) Go
7 3 (1.85%) JavaScript
Qualifications
1 33 (20.37%) Security Cleared
2 31 (19.14%) CISSP
2 31 (19.14%) CompTIA Security+
2 31 (19.14%) Degree
3 24 (14.81%) CEH
4 23 (14.20%) SC Cleared
5 16 (9.88%) DV Cleared
6 15 (9.26%) Cisco Certification
6 15 (9.26%) CISM
7 13 (8.02%) GCIA
8 11 (6.79%) CCNP
8 11 (6.79%) CompTIA CySA+
8 11 (6.79%) SANS
9 8 (4.94%) CCNA
10 7 (4.32%) Azure Certification
10 7 (4.32%) GCIH
10 7 (4.32%) Network+ Certification
11 6 (3.70%) GIAC
12 5 (3.09%) OSCP
13 4 (2.47%) GSEC
Quality Assurance & Compliance
1 61 (37.65%) ISO/IEC 27001
2 53 (32.72%) NIST
3 37 (22.84%) Cyber Essentials
4 19 (11.73%) GDPR
5 8 (4.94%) SLA
6 7 (4.32%) SOC 2
7 5 (3.09%) Cyber Essentials PLUS
7 5 (3.09%) PCI DSS
8 3 (1.85%) GRC
8 3 (1.85%) NCSC
9 2 (1.23%) Sarbanes-Oxley
10 1 (0.62%) COBIT
10 1 (0.62%) ISO/IEC 27002 (supersedes ISO/IEC 17799)
10 1 (0.62%) NIST 800
10 1 (0.62%) QA
System Software
1 15 (9.26%) VMware Infrastructure
2 14 (8.64%) Active Directory
3 7 (4.32%) Docker
4 3 (1.85%) Firmware
4 3 (1.85%) Hyper-V
4 3 (1.85%) Virtual Machines
5 1 (0.62%) Apache ZooKeeper
5 1 (0.62%) VMware NSX
Systems Management
1 14 (8.64%) Terraform
2 9 (5.56%) Kubernetes
3 7 (4.32%) Microsoft Intune
3 7 (4.32%) QRadar
4 3 (1.85%) Ansible
4 3 (1.85%) Computer Incident Response Team
4 3 (1.85%) Dell DRAC
4 3 (1.85%) Grafana
4 3 (1.85%) Single Sign-On
5 2 (1.23%) Nessus
5 2 (1.23%) WSUS
6 1 (0.62%) CASB
6 1 (0.62%) CSIRT
6 1 (0.62%) Kibana
6 1 (0.62%) logstash
Vendors
1 44 (27.16%) Microsoft
2 17 (10.49%) Splunk
3 16 (9.88%) Cisco
4 15 (9.26%) VMware
5 11 (6.79%) Dell
5 11 (6.79%) Juniper
6 10 (6.17%) CrowdStrike
7 8 (4.94%) Google
7 8 (4.94%) McAfee
8 7 (4.32%) Qualys
8 7 (4.32%) Tenable
9 6 (3.70%) ServiceNow
10 4 (2.47%) LogRhythm
10 4 (2.47%) Meraki
10 4 (2.47%) Palo Alto
10 4 (2.47%) Zscaler
11 3 (1.85%) ArcSight
11 3 (1.85%) Fortinet
11 3 (1.85%) SolarWinds
12 1 (0.62%) CheckPoint