Period
to 16 December 2018

The following table provides summary statistics for permanent job vacancies with a requirement for Cyber Threat Intelligence skills. Included is a benchmarking guide to the salaries offered in vacancies that have cited Cyber Threat Intelligence over the 6 months to 16 December 2018 with a comparison to the same period in the previous 2 years.

Cyber Threat Intelligence
UK
6 months to
16 Dec 2018
Same period 2017 Same period 2016
Rank 817 960 997
Rank change year-on-year +143 +37 +201
Permanent jobs citing Cyber Threat Intelligence 312 242 213
As % of all permanent IT jobs advertised in the UK 0.20% 0.14% 0.11%
As % of the Processes & Methodologies category 0.22% 0.15% 0.13%
Number of salaries quoted 198 191 179
UK median annual salary £60,000 £60,000 £62,500
Median salary % change year-on-year - -4.00% +4.17%
10th Percentile £35,000 £31,250 £38,750
90th Percentile £86,250 £91,250 £85,000
UK excluding London median annual salary £52,000 £42,500 £57,500
% change year-on-year +22.35% -26.09% -4.17%

Cyber Threat Intelligence is in the Processes and Methodologies category. The following table is for comparison with the above and provides summary statistics for all permanent job vacancies with a requirement for process or methodology skills.

All Process and Methodology Skills
UK
Permanent vacancies with a requirement for process or methodology skills 144,874 163,724 169,145
As % of all permanent IT jobs advertised in the UK 91.60% 91.89% 91.31%
Number of salaries quoted 114,516 130,082 140,302
UK median annual salary £52,500 £50,000 £48,500
Median salary % change year-on-year +5.00% +3.09% +2.11%
10th Percentile £29,750 £28,500 £27,750
90th Percentile £85,000 £80,000 £78,750
UK excluding London median annual salary £45,000 £43,500 £42,500
% change year-on-year +3.45% +2.35% -

Cyber Threat Intelligence
Job Vacancy Trend

Job postings citing Cyber Threat Intelligence as a percentage of all IT jobs advertised.

Job vacancy trend for Cyber Threat Intelligence in the UK

Cyber Threat Intelligence
Salary Trend

This chart provides the 3-month moving average for salaries quoted in permanent IT jobs citing Cyber Threat Intelligence.

Salary trend for Cyber Threat Intelligence in the UK

Cyber Threat Intelligence
Salary Histogram

The salary distribution of IT jobs citing Cyber Threat Intelligence over the 6 months to 16 December 2018.

Salary histogram for Cyber Threat Intelligence in the UK

Cyber Threat Intelligence
Top 14 Job Locations

The table below looks at the demand and provides a guide to the median salaries quoted in IT jobs citing Cyber Threat Intelligence within the UK over the 6 months to 16 December 2018. The 'Rank Change' column provides an indication of the change in demand within each location based on the same 6 month period last year.

Location Rank Change
on Same Period
Last Year
Matching
Permanent
IT Job Ads
Median Salary
Past 6 Months
Median Salary
% Change
on Same Period
Last Year
Live
Job
Vacancies
England +134 269 £60,000 - 33
UK excluding London +138 173 £52,000 +22.35% 21
London +21 113 £65,000 - 18
East of England +82 59 £40,000 -25.53% 4
South East +21 37 £57,500 -6.50% 3
Midlands +44 31 £57,500 -19.30% 4
North of England +41 24 £61,500 +67.39% 4
Scotland 0 17 £52,500 +87.50% 1
West Midlands +49 16 £42,500 -50.72% 3
East Midlands +38 15 £57,500 - 1
North West +22 13 £61,500 +75.71% 1
Yorkshire +34 10 £61,250 +54.59% 3
South West -6 5 £51,250 +28.13%
North East - 1 £65,354 -

For the 6 months to 16 December 2018, IT jobs citing Cyber Threat Intelligence also mentioned the following skills in order of popularity. The figures indicate the absolute number co-occurrences and as a proportion of all permanent job ads with a requirement for Cyber Threat Intelligence.

1 312 (100.00%) Threat Intelligence
2 259 (83.01%) Cybersecurity
3 143 (45.83%) SIEM
4 142 (45.51%) Information Security
5 129 (41.35%) CISSP
6 126 (40.38%) Cyberthreat
7 115 (36.86%) Cyber Intelligence
8 109 (34.94%) Security Operations
9 108 (34.62%) Firewall
10 92 (29.49%) Analytical Skills
11 84 (26.92%) Analytics
12 78 (25.00%) Problem-Solving
13 76 (24.36%) Cyber Kill Chain
14 75 (24.04%) Risk Management
15 74 (23.72%) Splunk
16 71 (22.76%) Penetration Testing
17 70 (22.44%) CEH
18 68 (21.79%) SANS
19 62 (19.87%) Symantec
19 62 (19.87%) Cisco Certification
20 61 (19.55%) Linux
21 60 (19.23%) Degree
21 60 (19.23%) Vulnerability Management
22 56 (17.95%) Self-Motivation
23 55 (17.63%) Windows
23 55 (17.63%) Retail
24 51 (16.35%) Event Correlation
25 50 (16.03%) Wireshark
26 49 (15.71%) Data Loss Prevention
26 49 (15.71%) Security Operations Centre

Cyber Threat Intelligence
Co-occurring IT Skills by Category

The follow tables expand on the table above by listing co-occurrences grouped by category. The same job type, locality and period is covered with up to 20 co-occurrences shown in each of the following categories:

Application Platforms
1 5 (1.60%) Elasticsearch
2 1 (0.32%) nginx
Applications
1 4 (1.28%) Microsoft Excel
1 4 (1.28%) Microsoft PowerPoint
2 2 (0.64%) Microsoft Office
3 1 (0.32%) Spreadsheet
Business Applications
1 3 (0.96%) Distributed Ledger
Cloud Services
1 13 (4.17%) Amazon AWS
2 6 (1.92%) Microsoft Azure
3 4 (1.28%) IaaS
3 4 (1.28%) PaaS
3 4 (1.28%) SaaS
Communications & Networking
1 108 (34.62%) Firewall
2 50 (16.03%) Wireshark
3 42 (13.46%) Intrusion Detection
4 23 (7.37%) Network Security
5 19 (6.09%) TCP/IP
6 12 (3.85%) DNS
7 8 (2.56%) HTTP
8 7 (2.24%) FTP
8 7 (2.24%) SMTP
8 7 (2.24%) SSL
9 6 (1.92%) Internet
9 6 (1.92%) Sourcefire
10 4 (1.28%) MPLS
10 4 (1.28%) VPN
11 3 (0.96%) Cisco ASA
11 3 (0.96%) LAN
11 3 (0.96%) WAN
12 2 (0.64%) Broadband
13 1 (0.32%) Cisco Firepower
13 1 (0.32%) SMS
Database & Business Intelligence
1 10 (3.21%) Big Data
2 8 (2.56%) PostgreSQL
3 6 (1.92%) MySQL
4 5 (1.60%) Blockchain
5 3 (0.96%) Neo4j
6 2 (0.64%) Data Warehouse
6 2 (0.64%) Hadoop
6 2 (0.64%) Redis
7 1 (0.32%) Data Mining
7 1 (0.32%) Maltego
7 1 (0.32%) NoSQL
7 1 (0.32%) SQL Server
Development Applications
1 12 (3.85%) Git (software)
2 10 (3.21%) Jenkins
2 10 (3.21%) Maven
3 4 (1.28%) SonarQube
4 3 (0.96%) Metasploit
5 1 (0.32%) JIRA
General
1 55 (17.63%) Retail
2 33 (10.58%) Finance
3 9 (2.88%) Law
3 9 (2.88%) Legal
4 8 (2.56%) Banking
5 3 (0.96%) Military
6 2 (0.64%) Marketing
6 2 (0.64%) Spanish Language
7 1 (0.32%) Aerospace
7 1 (0.32%) Brand Awareness
7 1 (0.32%) Dutch Language
7 1 (0.32%) Financial Institution
7 1 (0.32%) French Language
7 1 (0.32%) Games
7 1 (0.32%) Russian Language
7 1 (0.32%) Swedish Language
7 1 (0.32%) Telecoms
Job Titles
1 127 (40.71%) Analyst
2 59 (18.91%) Security Analyst
3 43 (13.78%) Cybersecurity Analyst
4 35 (11.22%) SOC Analyst
5 31 (9.94%) Security Engineer
6 26 (8.33%) SOC Engineer
7 22 (7.05%) Consultant
8 20 (6.41%) SIEM Analyst
9 19 (6.09%) SIEM Engineer
10 18 (5.77%) Penetration Tester
10 18 (5.77%) Security Penetration Tester
10 18 (5.77%) Security Tester
10 18 (5.77%) Tester
11 17 (5.45%) Senior Penetration Tester
11 17 (5.45%) Senior Tester
12 16 (5.13%) Auditor
12 16 (5.13%) IT Auditor
13 14 (4.49%) Senior Analyst
14 13 (4.17%) Security Consultant
14 13 (4.17%) Senior Consultant
Libraries, Frameworks & Software Standards
1 5 (1.60%) Guava
1 5 (1.60%) Hibernate
1 5 (1.60%) Spring
2 4 (1.28%) Natural Language Processing
3 2 (0.64%) .NET
3 2 (0.64%) Flask
3 2 (0.64%) JSON
3 2 (0.64%) Middleware
3 2 (0.64%) Web Services
4 1 (0.32%) ASP.NET
4 1 (0.32%) ASP.NET MVC
4 1 (0.32%) CSS
4 1 (0.32%) CSS3
4 1 (0.32%) Django
4 1 (0.32%) HTML
4 1 (0.32%) HTML5
4 1 (0.32%) jQuery
4 1 (0.32%) REST
4 1 (0.32%) TensorFlow
4 1 (0.32%) WF
Miscellaneous
1 126 (40.38%) Cyberthreat
2 92 (29.49%) Analytical Skills
3 76 (24.36%) Cyber Kill Chain
4 56 (17.95%) Self-Motivation
5 49 (15.71%) Security Operations Centre
6 35 (11.22%) Cyber Defence
6 35 (11.22%) Cyberattack
7 26 (8.33%) Management Information System
8 17 (5.45%) Virtual Team
9 7 (2.24%) Cybercrime
10 4 (1.28%) Analytical Mindset
10 4 (1.28%) Distributed Denial-of-Service
10 4 (1.28%) PMI
11 3 (0.96%) Blog
11 3 (0.96%) NHS
12 2 (0.64%) Enterprise Software
12 2 (0.64%) Linux Command Line
12 2 (0.64%) Mainframe
13 1 (0.32%) Data Protection Act
13 1 (0.32%) Greenfield Project
Operating Systems
1 61 (19.55%) Linux
2 55 (17.63%) Windows
3 15 (4.81%) Unix
4 5 (1.60%) Kali Linux
4 5 (1.60%) Red Hat Enterprise Linux
5 4 (1.28%) Solaris
5 4 (1.28%) Windows Server
6 3 (0.96%) CentOS
6 3 (0.96%) Ubuntu
Processes & Methodologies
1 312 (100.00%) Threat Intelligence
2 259 (83.01%) Cybersecurity
3 143 (45.83%) SIEM
4 142 (45.51%) Information Security
5 115 (36.86%) Cyber Intelligence
6 109 (34.94%) Security Operations
7 84 (26.92%) Analytics
8 78 (25.00%) Problem-Solving
9 75 (24.04%) Risk Management
10 71 (22.76%) Penetration Testing
11 60 (19.23%) Vulnerability Management
12 51 (16.35%) Event Correlation
13 49 (15.71%) Data Loss Prevention
14 48 (15.38%) Malware Analysis
15 43 (13.78%) Threat Detection
16 40 (12.82%) Mentoring
17 37 (11.86%) Security Architecture
18 35 (11.22%) Computer Science
18 35 (11.22%) Reverse Engineering
19 34 (10.90%) Incident Management
Programming Languages
1 26 (8.33%) Python
2 19 (6.09%) Java
3 15 (4.81%) Perl
4 14 (4.49%) Bash Shell
5 11 (3.53%) Ruby
6 8 (2.56%) JavaScript
7 7 (2.24%) SQL
8 6 (1.92%) R
9 5 (1.60%) Java 8
10 4 (1.28%) VBA
11 3 (0.96%) C#
11 3 (0.96%) PowerShell
12 1 (0.32%) C
12 1 (0.32%) C++
12 1 (0.32%) VB
Qualifications
1 129 (41.35%) CISSP
2 70 (22.44%) CEH
3 68 (21.79%) SANS
4 62 (19.87%) Cisco Certification
5 60 (19.23%) Degree
6 48 (15.38%) GCIH
7 45 (14.42%) GCIA
8 41 (13.14%) CREST Certified
9 37 (11.86%) GREM
10 36 (11.54%) CCNA
10 36 (11.54%) CISA
11 33 (10.58%) CISM
11 33 (10.58%) GSEC
12 32 (10.26%) GCFA
13 26 (8.33%) (ISC)2 CCSP
13 26 (8.33%) CCNP
13 26 (8.33%) CCSP
13 26 (8.33%) MCSE
13 26 (8.33%) Microsoft Certification
14 25 (8.01%) GCFE
Quality Assurance & Compliance
1 42 (13.46%) ISO/IEC 27001
2 25 (8.01%) GDPR
3 20 (6.41%) PCI DSS
4 15 (4.81%) COBIT
5 6 (1.92%) SLA
6 4 (1.28%) Sarbanes-Oxley
7 2 (0.64%) PMO
8 1 (0.32%) Cyber Essentials
8 1 (0.32%) HIPAA
8 1 (0.32%) ISO 9001
8 1 (0.32%) ISO/IEC 27002 (supersedes ISO/IEC 17799)
System Software
1 7 (2.24%) Snort
2 4 (1.28%) Docker
3 2 (0.64%) Virtual Machines
4 1 (0.32%) Active Directory
4 1 (0.32%) ProxySG
Systems Management
1 48 (15.38%) RSA Security Analytics
2 24 (7.69%) Stealthwatch
3 21 (6.73%) QRadar
4 20 (6.41%) CSIRT
5 10 (3.21%) Terraform
6 9 (2.88%) Nessus
7 6 (1.92%) Computer Incident Response Team
7 6 (1.92%) Opscode Chef
7 6 (1.92%) Puppet
8 5 (1.60%) AirWatch
8 5 (1.60%) Host Intrusion Detection System
8 5 (1.60%) Norton AntiVirus
9 4 (1.28%) OpenVAS
10 2 (0.64%) CASB
10 2 (0.64%) EnCase
10 2 (0.64%) Kibana
10 2 (0.64%) Network Intrusion Detection System
10 2 (0.64%) Nexpose
11 1 (0.32%) Computer Emergency Response Teams
11 1 (0.32%) Suricata
Vendors
1 74 (23.72%) Splunk
2 62 (19.87%) Symantec
3 45 (14.42%) Microsoft
4 35 (11.22%) Cisco
5 32 (10.26%) Qualys
6 31 (9.94%) CheckPoint
7 30 (9.62%) Red Hat
8 24 (7.69%) VMware
9 23 (7.37%) ArcSight
9 23 (7.37%) LogRhythm
10 12 (3.85%) AlienVault
10 12 (3.85%) CyberArk
11 9 (2.88%) Palo Alto
12 7 (2.24%) Darktrace
13 5 (1.60%) Google
13 5 (1.60%) Meraki
13 5 (1.60%) Okta
14 4 (1.28%) IBM
14 4 (1.28%) McAfee
14 4 (1.28%) SAP