Threat Intelligence Job Trends in the UK excluding London

Threat Intelligence
UK > UK excluding London

The table below provides summary statistics and salary benchmarking for jobs advertised in the UK excluding London requiring Threat Intelligence skills. It covers permanent job vacancies from the 6 months leading up to 13 January 2026, with comparisons to the same periods in the previous two years.

6 months to
13 Jan 2026
Same period 2025 Same period 2024
Rank 365 415 411
Rank change year-on-year +50 -4 +5
Permanent jobs citing Threat Intelligence 142 157 159
As % of all permanent jobs in the UK excluding London 0.34% 0.44% 0.46%
As % of the Processes & Methodologies category 0.43% 0.49% 0.52%
Number of salaries quoted 62 51 93
10th Percentile £43,000 - £39,350
25th Percentile £45,886 £45,000 £47,725
Median annual salary (50th Percentile) £53,029 £58,750 £60,000
Median % change year-on-year -9.74% -2.08% +2.56%
75th Percentile £78,500 £67,500 £63,750
90th Percentile £84,875 £72,000 £66,100
UK median annual salary £78,500 £65,000 £60,500
% change year-on-year +20.77% +7.44% -6.92%

All Process & Methodology Skills
UK excluding London

Threat Intelligence falls under the Processes and Methodologies category. For comparison with the information above, the following table provides summary statistics for all permanent job vacancies requiring process or methodology skills in the UK excluding London.

Permanent vacancies with a requirement for process or methodology skills 33,128 31,909 30,715
As % of all permanent jobs advertised in the UK excluding London 78.51% 88.95% 88.65%
Number of salaries quoted 19,079 14,313 22,914
10th Percentile £27,750 £31,250 £28,000
25th Percentile £33,500 £41,250 £38,000
Median annual salary (50th Percentile) £50,000 £55,000 £52,000
Median % change year-on-year -9.09% +5.77% -5.45%
75th Percentile £65,000 £70,000 £66,250
90th Percentile £80,000 £83,750 £80,000
UK median annual salary £55,000 £60,000 £60,000
% change year-on-year -8.33% - -4.00%

Threat Intelligence
Job Vacancy Trend in the UK excluding London

Historical trend showing the proportion of permanent IT job postings citing Threat Intelligence relative to all permanent IT jobs advertised in the UK excluding London.

Threat Intelligence job vacancy trend in the UK excluding London

Threat Intelligence
Salary Trend in the UK excluding London

Salary distribution trend for jobs in the UK excluding London citing Threat Intelligence.

Salary distribution trend for jobs in the UK excluding London citing Threat Intelligence

Threat Intelligence
Salary Histogram in the UK excluding London

Salary distribution for jobs citing Threat Intelligence in the UK excluding London over the 6 months to 13 January 2026.

Salary histogram for Threat Intelligence in the UK excluding London

Threat Intelligence
Job Locations in the UK excluding London

The table below looks at the demand and provides a guide to the median salaries quoted in IT jobs citing Threat Intelligence within the UK excluding London region over the 6 months to 13 January 2026. The 'Rank Change' column provides an indication of the change in demand within each location based on the same 6 month period last year.

Location Rank Change
on Same Period
Last Year
Matching
Permanent
IT Job Ads
Median Salary
Past 6 Months
Median Salary
% Change
on Same Period
Last Year
Live
Jobs
North of England +23 43 £63,500 +8.09% 29
Midlands +41 40 £53,029 +17.84% 19
South East +12 30 £48,924 -26.43% 42
East Midlands +1 24 £51,058 +13.46% 10
North West +34 19 £63,500 -2.31% 15
Yorkshire -22 18 £58,250 +2.42% 10
West Midlands +30 16 £67,000 +12.37% 9
South West +13 10 £80,000 +32.78% 14
East of England +10 9 £68,750 +10.00% 25
North East +8 6 £78,000 - 4
Channel Islands - 4 - -
Wales +6 3 - - 8
Scotland -8 3 £22,129 -68.16% 6
Threat Intelligence
UK

Threat Intelligence
Co-Occurring Skills & Capabilities in the UK excluding London by Category

The following tables expand on the one above by listing co-occurrences grouped by category. They cover the same employment type, locality and period, with up to 20 co-occurrences shown in each category:

Cloud Services
1 30 (21.13%) Azure
2 27 (19.01%) AWS
3 10 (7.04%) GCP
4 6 (4.23%) Azure Sentinel
4 6 (4.23%) Microsoft 365
5 2 (1.41%) Amazon OpenSearch
5 2 (1.41%) Azure Logic Apps
5 2 (1.41%) SaaS
6 1 (0.70%) dbt
6 1 (0.70%) Dynamics 365
6 1 (0.70%) IaaS
6 1 (0.70%) Nutanix
6 1 (0.70%) Power Platform
Communications & Networking
1 16 (11.27%) Network Security
2 15 (10.56%) Firewall
3 11 (7.75%) VPN
4 3 (2.11%) Internet
4 3 (2.11%) Wireshark
5 2 (1.41%) Intrusion Detection
6 1 (0.70%) TCP/IP
Database & Business Intelligence
1 2 (1.41%) PostgreSQL
2 1 (0.70%) Elasticsearch
2 1 (0.70%) Power BI
Development Applications
1 7 (4.93%) Burp Suite
1 7 (4.93%) Metasploit
General
1 33 (23.24%) Social Skills
2 16 (11.27%) Analytical Skills
2 16 (11.27%) Finance
3 10 (7.04%) Legal
4 9 (6.34%) Retail
5 6 (4.23%) Law
6 2 (1.41%) Fire and Rescue
6 2 (1.41%) Inclusion and Diversity
6 2 (1.41%) Military
7 1 (0.70%) Aerospace
7 1 (0.70%) Influencing Skills
Job Titles
1 74 (52.11%) Lead
2 19 (13.38%) Analyst
3 14 (9.86%) Security Engineer
3 14 (9.86%) Security Specialist
4 13 (9.15%) Security Analyst
5 12 (8.45%) Threat Intelligence Specialist
6 11 (7.75%) Senior
7 10 (7.04%) Cybersecurity Analyst
8 8 (5.63%) Infrastructure Engineer
8 8 (5.63%) Infrastructure Security Engineer
9 5 (3.52%) IT Engineer
9 5 (3.52%) IT Infrastructure Engineer
9 5 (3.52%) IT Security Engineer
10 4 (2.82%) Cloud Engineer
10 4 (2.82%) Cloud Security Engineer
10 4 (2.82%) Senior Security Engineer
10 4 (2.82%) Threat Hunter
11 3 (2.11%) Cyber Threat Intelligence Specialist
11 3 (2.11%) IT Security Specialist
11 3 (2.11%) Security Manager
Libraries, Frameworks & Software Standards
1 4 (2.82%) ARM Templates
2 1 (0.70%) Django
Miscellaneous
1 90 (63.38%) Cyber Threat
2 74 (52.11%) Security Operations Centre
3 71 (50.00%) Cyber Kill Chain
4 69 (48.59%) Operational Technology
5 20 (14.08%) Security Posture
6 7 (4.93%) Insider Threat
6 7 (4.93%) Management Information System
7 6 (4.23%) Cyber Defence
7 6 (4.23%) Onboarding
8 5 (3.52%) Cyberattack
9 4 (2.82%) ARM Cortex
9 4 (2.82%) Hybrid Cloud
10 3 (2.11%) Enterprise Software
10 3 (2.11%) Self-Motivation
11 2 (1.41%) Distributed Systems
11 2 (1.41%) Driving Licence
11 2 (1.41%) SCADA
12 1 (0.70%) CSOC
12 1 (0.70%) MISP
12 1 (0.70%) Smart Energy
Operating Systems
1 8 (5.63%) Linux
1 8 (5.63%) Windows
2 4 (2.82%) Windows Server
3 3 (2.11%) Mac OS
Processes & Methodologies
1 111 (78.17%) Cyber Threat Intelligence
2 95 (66.90%) Security Operations
3 88 (61.97%) Vulnerability Management
4 81 (57.04%) Cyber Intelligence
5 76 (53.52%) Threat and Vulnerability Management
6 74 (52.11%) Risk Management
7 73 (51.41%) Mentoring
8 69 (48.59%) Roadmaps
8 69 (48.59%) Stakeholder Management
9 66 (46.48%) Coaching
10 65 (45.77%) Business Strategy
10 65 (45.77%) Change Advisory Board
10 65 (45.77%) ITIL
10 65 (45.77%) SABSA
10 65 (45.77%) Technology Roadmap
11 40 (28.17%) Incident Response
12 34 (23.94%) SIEM
13 29 (20.42%) Cybersecurity
14 27 (19.01%) Information Security
15 21 (14.79%) Problem-Solving
Programming Languages
1 11 (7.75%) PowerShell
2 9 (6.34%) Python
3 6 (4.23%) Kusto Query Language
4 4 (2.82%) Bicep
5 2 (1.41%) Go
5 2 (1.41%) TypeScript
6 1 (0.70%) Bash
6 1 (0.70%) SQL
Qualifications
1 15 (10.56%) CEH
1 15 (10.56%) CISSP
2 14 (9.86%) GIAC
3 12 (8.45%) Security Cleared
4 11 (7.75%) OSCP
5 10 (7.04%) Degree
6 9 (6.34%) CompTIA Security+
6 9 (6.34%) SC Cleared
7 7 (4.93%) CCNA
7 7 (4.93%) Cisco Certification
7 7 (4.93%) CISMP
7 7 (4.93%) CREST Certified
7 7 (4.93%) GPEN
7 7 (4.93%) MCP
7 7 (4.93%) MCSE
7 7 (4.93%) Microsoft Certification
8 4 (2.82%) CISM
9 3 (2.11%) CISA
9 3 (2.11%) GREM
9 3 (2.11%) SANS
Quality Assurance & Compliance
1 78 (54.93%) NIST
2 77 (54.23%) ISO/IEC 27001
3 65 (45.77%) ISO/IEC 27005
4 7 (4.93%) Actionable Recommendations
5 5 (3.52%) PCI DSS
6 4 (2.82%) GDPR
7 3 (2.11%) Cyber Essentials
7 3 (2.11%) Sarbanes-Oxley
8 2 (1.41%) QA
9 1 (0.70%) COBIT
9 1 (0.70%) NCSC
System Software
1 2 (1.41%) Active Directory
2 1 (0.70%) VMware Infrastructure
Systems Management
1 7 (4.93%) Nmap
2 4 (2.82%) Terraform
3 3 (2.11%) Computer Incident Response Team
3 3 (2.11%) QRadar
4 2 (1.41%) Kubernetes
5 1 (0.70%) CSIRT
5 1 (0.70%) Microsoft Intune
Vendors
1 15 (10.56%) Microsoft
2 8 (5.63%) Cisco
3 7 (4.93%) CrowdStrike
3 7 (4.93%) Splunk
4 4 (2.82%) ServiceNow
5 2 (1.41%) Google
6 1 (0.70%) Extreme Networks
6 1 (0.70%) Fortinet
6 1 (0.70%) Netskope
6 1 (0.70%) Rapid7
6 1 (0.70%) VMware