Period
to 22 January 2018

The following table provides summary statistics for permanent job vacancies with a requirement for CREST Certified qualifications. Included is a benchmarking guide to the salaries offered over the 6 months to 22 January 2018 with a comparison to the same period in the previous 2 years.

CREST Certification
UK
6 months to
22 Jan 2018
Same period 2017 Same period 2016
Rank 890 856 1029
Rank change year-on-year -34 +173 +81
Permanent jobs citing CREST Certified 280 327 254
As % of all permanent IT jobs advertised in the UK 0.16% 0.19% 0.12%
As % of the Qualifications category 0.69% 0.73% 0.44%
Number of salaries quoted 222 232 185
UK median annual salary £59,000 £57,500 £57,500
Median salary % change year-on-year +2.61% - +4.55%
10th Percentile £40,125 £37,625 £33,000
90th Percentile £88,750 £90,000 £90,000
UK excluding London median annual salary £52,750 £53,000 £57,500
% change year-on-year -0.47% -7.83% -

CREST Certified is in the Academic Qualifications and Professional Certifications category. The following table is for comparison with the above and provides summary statistics for all permanent job vacancies with a requirement for academic qualifications or professional certifications.

All Academic and Professional Certifications
UK
Permanent vacancies requiring academic qualifications or professional certifications 40,827 44,777 57,845
As % of all permanent IT jobs advertised in the UK 23.54% 25.65% 27.73%
Number of salaries quoted 31,714 35,555 46,289
UK median annual salary £47,500 £45,000 £45,000
Median salary % change year-on-year +5.56% - -
10th Percentile £26,250 £26,250 £26,250
90th Percentile £78,616 £76,250 £75,000
UK excluding London median annual salary £42,500 £42,500 £42,000
% change year-on-year - +1.19% +5.00%

CREST Certified
Job Vacancy Trend

Job postings citing CREST Certified as a percentage of all IT jobs advertised.

Job vacancy trend for CREST Certified in the UK

CREST Certified
Salary Trend

This chart provides the 3-month moving average for salaries quoted in permanent IT jobs citing CREST Certified.

Salary trend for CREST Certified in the UK

CREST Certified
Salary Histogram

The salary distribution of IT jobs citing CREST Certified over the 6 months to 22 January 2018.

Salary histogram for CREST Certified in the UK

CREST Certified
Top 14 Job Locations

The table below looks at the demand and provides a guide to the median salaries quoted in IT jobs citing CREST Certified within the UK over the 6 months to 22 January 2018. The 'Rank Change' column provides an indication of the change in demand within each location based on the same 6 month period last year.

Location Rank Change
on Same Period
Last Year
Matching
Permanent
IT Job Ads
Median Salary
Past 6 Months
Median Salary
% Change
on Same Period
Last Year
Live
Job
Vacancies
England -31 262 £57,500 - 34
London -15 137 £65,000 - 20
UK excluding London -45 122 £52,750 -0.47% 15
North of England -24 37 £53,500 -2.73% 5
South East -9 34 £50,000 - 6
North West +6 23 £54,250 +8.50% 4
South West -2 18 £26,000 -50.48% 1
East of England +25 17 £49,000 -2.00% 1
Yorkshire -2 14 £47,500 -13.64% 1
Midlands -17 11 £65,000 +30.00% 1
West Midlands -8 10 £65,000 +40.54%
Wales - 3 £72,500 -
Scotland -39 2 £37,500 - 1
East Midlands +8 1 - - 1

For the 6 months to 22 January 2018, IT jobs citing CREST Certified also mentioned the following skills in order of popularity. The figures indicate the number co-occurrences and its proportion to all job ads with a requirement for CREST Certified.

1 185 (66.07%) Penetration Testing
2 140 (50.00%) Information Security
3 113 (40.36%) Cybersecurity
4 109 (38.93%) OSCP
5 81 (28.93%) CISSP
6 79 (28.21%) Windows
7 76 (27.14%) Security Cleared
8 70 (25.00%) SANS
9 68 (24.29%) SIEM
10 67 (23.93%) Linux
11 66 (23.57%) ISO/IEC 27001
12 63 (22.50%) Firewall
13 60 (21.43%) GIAC
13 60 (21.43%) Unix
14 58 (20.71%) Finance
15 49 (17.50%) SC Cleared
16 47 (16.79%) Security Testing
16 47 (16.79%) TCP/IP
17 45 (16.07%) Nessus
18 44 (15.71%) Wireless
19 42 (15.00%) Degree
19 42 (15.00%) Network Security
19 42 (15.00%) Security Architecture
20 41 (14.64%) Vulnerability Management
21 38 (13.57%) CEH
22 37 (13.21%) Cyberthreat
23 36 (12.86%) PCI DSS
24 35 (12.50%) Mentoring
25 34 (12.14%) Android
26 33 (11.79%) GCIH

CREST Certified
Co-occurring IT Skills by Category

The follow tables expand on the table above by listing co-occurrences grouped by category. The same job type, locality and period is covered with up to 20 co-occurrences shown in each of the following categories:

Application Platforms
1 3 (1.07%) IIS
Applications
1 1 (0.36%) Microsoft Excel
Cloud Services
1 3 (1.07%) Amazon AWS
2 2 (0.71%) Google Cloud Platform
2 2 (0.71%) Microsoft Azure
3 1 (0.36%) SaaS
Communications & Networking
1 63 (22.50%) Firewall
2 47 (16.79%) TCP/IP
3 44 (15.71%) Wireless
4 42 (15.00%) Network Security
5 22 (7.86%) Internet
6 15 (5.36%) LAN
7 13 (4.64%) WAN
8 10 (3.57%) HTTP
9 9 (3.21%) Cisco ASA
9 9 (3.21%) DNS
9 9 (3.21%) Wireshark
10 8 (2.86%) tcpdump
10 8 (2.86%) VPN
11 6 (2.14%) Cisco ISE
11 6 (2.14%) Cisco Wireless
11 6 (2.14%) IPsec
11 6 (2.14%) OpenVPN
11 6 (2.14%) PPP
12 5 (1.79%) NFC
12 5 (1.79%) Wi-Fi
Database & Business Intelligence
1 6 (2.14%) SQL Server
2 1 (0.36%) PostgreSQL
Development Applications
1 33 (11.79%) Burp Suite
2 29 (10.36%) Metasploit
3 2 (0.71%) AppScan
3 2 (0.71%) Paros
General
1 58 (20.71%) Finance
2 10 (3.57%) Telecoms
3 9 (3.21%) Banking
3 9 (3.21%) Retail
4 6 (2.14%) Law
4 6 (2.14%) Publishing
5 5 (1.79%) Legal
6 4 (1.43%) Local Government
6 4 (1.43%) Manufacturing
6 4 (1.43%) Marketing
7 3 (1.07%) Advertising
7 3 (1.07%) Electronics
8 2 (0.71%) Financial Institution
8 2 (0.71%) Games
8 2 (0.71%) Investment Banking
9 1 (0.36%) Aerospace
9 1 (0.36%) Automotive
Job Titles
1 114 (40.71%) Tester
2 112 (40.00%) Penetration Tester
3 84 (30.00%) Consultant
4 72 (25.71%) Security Consultant
5 50 (17.86%) Analyst
6 34 (12.14%) Security Tester
7 32 (11.43%) Security Penetration Tester
8 29 (10.36%) Security Analyst
8 29 (10.36%) Senior Penetration Tester
8 29 (10.36%) Senior Tester
9 26 (9.29%) Lead Tester
10 23 (8.21%) Lead Security Consultant
10 23 (8.21%) Senior Consultant
10 23 (8.21%) SOC Analyst
11 22 (7.86%) Senior Security Consultant
12 18 (6.43%) Cybersecurity Consultant
13 16 (5.71%) Team Leader
14 14 (5.00%) Forensic Investigator
15 10 (3.57%) Security Architect
15 10 (3.57%) Security Manager
Libraries, Frameworks & Software Standards
1 25 (8.93%) .NET
2 4 (1.43%) ASP.NET
2 4 (1.43%) Web Services
3 2 (0.71%) LDAP
3 2 (0.71%) Middleware
3 2 (0.71%) RESTful
4 1 (0.36%) CakePHP
4 1 (0.36%) Elastic Stack
4 1 (0.36%) HTML
Miscellaneous
1 37 (13.21%) Cyberthreat
2 32 (11.43%) Management Information System
3 20 (7.14%) Computer Science
3 20 (7.14%) Mobile App
3 20 (7.14%) Security Operations Centre
4 16 (5.71%) Cyberattack
5 14 (5.00%) Data Protection Act
6 13 (4.64%) Analytical Skills
7 12 (4.29%) PKI
8 11 (3.93%) CESG
9 9 (3.21%) NHS
10 8 (2.86%) Distributed Denial-of-Service
11 6 (2.14%) Linux Command Line
12 4 (1.43%) Embedded Systems
12 4 (1.43%) Fintech
13 3 (1.07%) Cyber Defence
13 3 (1.07%) Data Centre
13 3 (1.07%) Mobile Computing
13 3 (1.07%) Virtual Team
14 2 (0.71%) Cloud Native
Operating Systems
1 79 (28.21%) Windows
2 67 (23.93%) Linux
3 60 (21.43%) Unix
4 34 (12.14%) Android
5 32 (11.43%) Apple iOS
6 29 (10.36%) Kali Linux
7 6 (2.14%) CentOS
7 6 (2.14%) Debian
7 6 (2.14%) Red Hat Enterprise Linux
7 6 (2.14%) Ubuntu
8 2 (0.71%) KNOPPIX
8 2 (0.71%) Mac OS X
8 2 (0.71%) Solaris
8 2 (0.71%) Windows Mobile
Processes & Methodologies
1 185 (66.07%) Penetration Testing
2 140 (50.00%) Information Security
3 113 (40.36%) Cybersecurity
4 68 (24.29%) SIEM
5 47 (16.79%) Security Testing
6 42 (15.00%) Security Architecture
7 41 (14.64%) Vulnerability Management
8 35 (12.50%) Mentoring
9 33 (11.79%) ITIL
9 33 (11.79%) Threat Intelligence
9 33 (11.79%) Vulnerability Scanning
10 31 (11.07%) Cyber Threat Intelligence
11 30 (10.71%) OWASP
12 29 (10.36%) Security Operations
13 26 (9.29%) Incident Management
14 25 (8.93%) Social Engineering
15 23 (8.21%) Ethical Hacking
15 23 (8.21%) Reverse Engineering
16 22 (7.86%) Service Management
17 21 (7.50%) Risk Management
Programming Languages
1 33 (11.79%) Python
2 32 (11.43%) Java
3 28 (10.00%) SQL
4 25 (8.93%) Ruby
5 20 (7.14%) C
6 17 (6.07%) Bash Shell
7 15 (5.36%) C++
8 13 (4.64%) C#
9 11 (3.93%) PHP
10 10 (3.57%) Perl
11 5 (1.79%) PowerShell
12 2 (0.71%) VB
12 2 (0.71%) VB.NET
13 1 (0.36%) Shell Script
Qualifications
1 109 (38.93%) OSCP
2 81 (28.93%) CISSP
3 76 (27.14%) Security Cleared
4 70 (25.00%) SANS
5 60 (21.43%) GIAC
6 49 (17.50%) SC Cleared
7 42 (15.00%) Degree
8 38 (13.57%) CEH
9 33 (11.79%) GCIH
10 29 (10.36%) GCIA
11 27 (9.64%) CISM
12 25 (8.93%) CISA
12 25 (8.93%) Cisco Certification
12 25 (8.93%) GCFA
13 23 (8.21%) CHECK Team Leader
13 23 (8.21%) DV Cleared
13 23 (8.21%) Tigerscheme
14 22 (7.86%) CCNA
15 16 (5.71%) Cyber Scheme
15 16 (5.71%) GCFE
Quality Assurance & Compliance
1 66 (23.57%) ISO/IEC 27001
2 36 (12.86%) PCI DSS
3 16 (5.71%) GDPR
4 9 (3.21%) NIST 800
5 7 (2.50%) Cyber Essentials
6 6 (2.14%) HMG Security Policy Framework
7 3 (1.07%) ISO/IEC 27002 (supersedes ISO/IEC 17799)
7 3 (1.07%) QA
8 2 (0.71%) COBIT
8 2 (0.71%) GPG13
9 1 (0.36%) Cyber Essentials PLUS
9 1 (0.36%) IASME
System Software
1 15 (5.36%) Snort
2 6 (2.14%) pfSense
3 4 (1.43%) Active Directory
4 2 (0.71%) Docker
Systems Management
1 45 (16.07%) Nessus
2 20 (7.14%) Nmap
3 16 (5.71%) Core Impact
4 14 (5.00%) EnCase
5 6 (2.14%) CSIRT
5 6 (2.14%) FortiGate
5 6 (2.14%) OpenVAS
5 6 (2.14%) OSSEC
6 5 (1.79%) Computer Emergency Response Teams
6 5 (1.79%) Trend Micro Deep Security
7 3 (1.07%) WMI
8 2 (0.71%) Host Intrusion Detection System
8 2 (0.71%) HP Fortify
8 2 (0.71%) Kubernetes
8 2 (0.71%) Network Intrusion Detection System
8 2 (0.71%) WebInspect
9 1 (0.36%) logstash
9 1 (0.36%) QRadar
Vendors
1 25 (8.93%) Microsoft
2 13 (4.64%) Cisco
3 11 (3.93%) McAfee
3 11 (3.93%) Sourcefire
4 9 (3.21%) CheckPoint
5 8 (2.86%) Red Hat
5 8 (2.86%) Splunk
6 7 (2.50%) AlienVault
7 6 (2.14%) Aruba
7 6 (2.14%) Extreme Networks
7 6 (2.14%) F5
7 6 (2.14%) ForeScout
7 6 (2.14%) Fortinet
7 6 (2.14%) HP
7 6 (2.14%) Juniper
7 6 (2.14%) LogRhythm
7 6 (2.14%) Palo Alto
7 6 (2.14%) SonicWALL
7 6 (2.14%) WatchGuard
8 5 (1.79%) Trend Micro