Period
to 25 February 2018

The following table provides summary statistics for permanent job vacancies with a requirement for GPG13 skills. Included is a benchmarking guide to the salaries offered in vacancies that have cited GPG13 over the 6 months to 25 February 2018 with a comparison to the same period in the previous 2 years.

Good Practice Guide 13 (GPG 13)
UK
6 months to
25 Feb 2018
Same period 2017 Same period 2016
Rank 1134 1085 1267
Rank change year-on-year -49 +182 -9
Permanent jobs citing GPG13 47 89 33
As % of all permanent IT jobs advertised in the UK 0.027% 0.051% 0.016%
As % of the Quality Assurance & Compliance category 0.21% 0.41% 0.12%
Number of salaries quoted 27 38 24
UK median annual salary £65,000 £65,000 £58,750
Median salary % change year-on-year - +10.64% +6.82%
10th Percentile £55,500 £47,500 £42,800
90th Percentile £80,500 £78,125 £80,000
UK excluding London median annual salary £62,500 £52,500 £57,500
% change year-on-year +19.05% -8.70% -

GPG13 is in the Quality Assurance and Compliance category. The following table is for comparison with the above and provides summary statistics for all permanent job vacancies with a requirement for quality assurance or compliance skills.

All Quality Assurance and Compliance Skills
UK
Permanent vacancies with a requirement for quality assurance or compliance skills 22,457 21,613 27,241
As % of all permanent IT jobs advertised in the UK 12.90% 12.39% 12.93%
Number of salaries quoted 17,527 17,120 21,543
UK median annual salary £50,000 £47,500 £47,500
Median salary % change year-on-year +5.26% - +5.56%
10th Percentile £27,651 £26,250 £26,250
90th Percentile £80,000 £77,500 £75,000
UK excluding London median annual salary £43,500 £42,500 £42,500
% change year-on-year +2.35% - +6.25%

GPG13
Job Vacancy Trend

Job postings citing GPG13 as a percentage of all IT jobs advertised.

Job vacancy trend for GPG13 in the UK

GPG13
Salary Trend

This chart provides the 3-month moving average for salaries quoted in permanent IT jobs citing GPG13.

Salary trend for GPG13 in the UK

GPG13
Salary Histogram

The salary distribution of IT jobs citing GPG13 over the 6 months to 25 February 2018.

Salary histogram for GPG13 in the UK

GPG13
Top 10 Job Locations

The table below looks at the demand and provides a guide to the median salaries quoted in IT jobs citing GPG13 within the UK over the 6 months to 25 February 2018. The 'Rank Change' column provides an indication of the change in demand within each location based on the same 6 month period last year.

Location Rank Change
on Same Period
Last Year
Matching
Permanent
IT Job Ads
Median Salary
Past 6 Months
Median Salary
% Change
on Same Period
Last Year
Live
Job
Vacancies
England -20 42 £65,000 +13.04% 2
UK excluding London -32 30 £62,500 +19.05% 1
South East +12 12 £62,500 +77.30%
London -8 12 £70,000 -3.45% 1
Midlands -25 11 £62,500 +11.11%
West Midlands -29 11 £62,500 +11.11%
South West +4 4 - -
East of England -5 2 £57,908 -
North of England +13 1 £62,500 - 1
North West 0 1 £62,500 - 1

For the 6 months to 25 February 2018, IT jobs citing GPG13 also mentioned the following skills in order of popularity. The figures indicate the absolute number co-occurrences and as a proportion of all permanent job ads with a requirement for GPG13.

1 41 (87.23%) Information Security
2 40 (85.11%) SIEM
3 32 (68.09%) ISO/IEC 27001
4 31 (65.96%) CISSP
5 27 (57.45%) Linux
6 24 (51.06%) Firewall
6 24 (51.06%) Analytics
7 22 (46.81%) Cybersecurity
7 22 (46.81%) ITIL
8 21 (44.68%) CEH
9 18 (38.30%) Sourcefire
10 17 (36.17%) VMware
10 17 (36.17%) Python
11 16 (34.04%) Management Information System
11 16 (34.04%) Snort
11 16 (34.04%) Degree
11 16 (34.04%) Event Correlation
12 15 (31.91%) Computer Science Degree
12 15 (31.91%) ArcSight
12 15 (31.91%) Windows
13 13 (27.66%) Hadoop
13 13 (27.66%) Regular Expression
13 13 (27.66%) Big Data
14 12 (25.53%) OSCP
14 12 (25.53%) Bash Shell
14 12 (25.53%) HDFS
14 12 (25.53%) Apache Spark
14 12 (25.53%) PCRE
14 12 (25.53%) FireEye
14 12 (25.53%) Palo Alto

GPG13
Co-occurring IT Skills by Category

The follow tables expand on the table above by listing co-occurrences grouped by category. The same job type, locality and period is covered with up to 20 co-occurrences shown in each of the following categories:

Application Platforms
1 12 (25.53%) Apache
1 12 (25.53%) Apache Spark
2 10 (21.28%) Elasticsearch
3 2 (4.26%) IIS
Cloud Services
1 6 (12.77%) IaaS
1 6 (12.77%) PaaS
2 2 (4.26%) Amazon AWS
2 2 (4.26%) Microsoft Azure
3 1 (2.13%) SaaS
Communications & Networking
1 24 (51.06%) Firewall
2 8 (17.02%) IPsec
2 8 (17.02%) VPN
3 7 (14.89%) DNS
4 5 (10.64%) Network Security
4 5 (10.64%) SSL
5 4 (8.51%) FTP
5 4 (8.51%) HTTP
5 4 (8.51%) Internet
6 2 (4.26%) Intrusion Detection
7 1 (2.13%) TCP/IP
Database & Business Intelligence
1 13 (27.66%) Big Data
1 13 (27.66%) Hadoop
2 1 (2.13%) SQL Server
General
1 7 (14.89%) Law
2 6 (12.77%) Publishing
3 1 (2.13%) Games
3 1 (2.13%) Legal
Job Titles
1 11 (23.40%) SOC Engineer
2 7 (14.89%) Integration Engineer
3 6 (12.77%) Architect
3 6 (12.77%) Consultant
3 6 (12.77%) Security Consultant
3 6 (12.77%) Security Engineer
3 6 (12.77%) Security Manager
3 6 (12.77%) Solutions Architect
4 5 (10.64%) Head of Security
4 5 (10.64%) Information Security Consultant
4 5 (10.64%) Security Architect
4 5 (10.64%) Security Solutions Architect
5 4 (8.51%) Cybersecurity Engineer
6 3 (6.38%) ArcSight Engineer
6 3 (6.38%) CISSP Engineer
6 3 (6.38%) Head of Cybersecurity
6 3 (6.38%) Security Incident Manager
6 3 (6.38%) Security Operations Manager
6 3 (6.38%) SIEM Engineer
6 3 (6.38%) Windows Engineer
Libraries, Frameworks & Software Standards
1 13 (27.66%) Regular Expression
2 12 (25.53%) Elastic Stack
2 12 (25.53%) PCRE
3 7 (14.89%) Middleware
Miscellaneous
1 16 (34.04%) Management Information System
2 11 (23.40%) Data Centre
3 8 (17.02%) Analytical Skills
4 7 (14.89%) Computer Science
5 6 (12.77%) CMDB
5 6 (12.77%) Cyberattack
6 5 (10.64%) Data Protection Act
6 5 (10.64%) Public Cloud
6 5 (10.64%) Security Operations Centre
7 4 (8.51%) Cyber Defence
8 3 (6.38%) NHS
8 3 (6.38%) PKI
9 2 (4.26%) Taxonomies
10 1 (2.13%) Cyberthreat
Operating Systems
1 27 (57.45%) Linux
2 15 (31.91%) Windows
3 6 (12.77%) Unix
4 3 (6.38%) AIX
4 3 (6.38%) Kali Linux
Processes & Methodologies
1 41 (87.23%) Information Security
2 40 (85.11%) SIEM
3 24 (51.06%) Analytics
4 22 (46.81%) Cybersecurity
4 22 (46.81%) ITIL
5 16 (34.04%) Event Correlation
6 12 (25.53%) Security Operations
7 11 (23.40%) Incident Management
7 11 (23.40%) OWASP
7 11 (23.40%) Service Management
8 10 (21.28%) Risk Management
8 10 (21.28%) Software Engineering
9 9 (19.15%) ETL
9 9 (19.15%) Identity Access Management
10 7 (14.89%) Computer Forensics
10 7 (14.89%) Continuous Improvement
10 7 (14.89%) Penetration Testing
10 7 (14.89%) Project Management
10 7 (14.89%) Security Management
10 7 (14.89%) Threat Intelligence
Programming Languages
1 17 (36.17%) Python
2 12 (25.53%) Bash Shell
2 12 (25.53%) Ruby
3 5 (10.64%) PowerShell
4 4 (8.51%) C
4 4 (8.51%) C#
4 4 (8.51%) C++
4 4 (8.51%) Java
4 4 (8.51%) PHP
4 4 (8.51%) Shell Script
4 4 (8.51%) SQL
Qualifications
1 31 (65.96%) CISSP
2 21 (44.68%) CEH
3 16 (34.04%) Degree
4 15 (31.91%) Computer Science Degree
5 12 (25.53%) GCIH
5 12 (25.53%) OSCP
6 11 (23.40%) Security Cleared
7 9 (19.15%) SC Cleared
8 8 (17.02%) CompTIA Security+
9 6 (12.77%) ISEB
9 6 (12.77%) PMI Certification
9 6 (12.77%) PMP
10 5 (10.64%) ITIL Certification
11 4 (8.51%) CISM
12 3 (6.38%) SANS
13 2 (4.26%) CISA
13 2 (4.26%) CREST Certified
13 2 (4.26%) IISP
14 1 (2.13%) Cisco Certification
14 1 (2.13%) Network+ Certification
Quality Assurance & Compliance
1 32 (68.09%) ISO/IEC 27001
2 11 (23.40%) COBIT
3 6 (12.77%) ISO/IEC 27002 (supersedes ISO/IEC 17799)
4 5 (10.64%) Cyber Essentials
4 5 (10.64%) GDPR
5 1 (2.13%) HMG Security Policy Framework
5 1 (2.13%) PCI DSS
5 1 (2.13%) PMO
System Software
1 16 (34.04%) Snort
2 12 (25.53%) HDFS
2 12 (25.53%) VMware Infrastructure
3 1 (2.13%) Active Directory
Systems Management
1 12 (25.53%) Suricata
2 7 (14.89%) QRadar
3 5 (10.64%) Host Intrusion Detection System
4 4 (8.51%) ArcSight ESM
4 4 (8.51%) RSA Archer
4 4 (8.51%) RSA enVision
4 4 (8.51%) RSA Security Analytics
4 4 (8.51%) Symantec Endpoint Protection
5 3 (6.38%) CSIRT
5 3 (6.38%) Fluentd
5 3 (6.38%) Nessus
6 2 (4.26%) McAfee ePO
7 1 (2.13%) Computer Emergency Response Teams
Vendors
1 18 (38.30%) Sourcefire
2 17 (36.17%) VMware
3 15 (31.91%) ArcSight
4 12 (25.53%) FireEye
4 12 (25.53%) Fortinet
4 12 (25.53%) Palo Alto
4 12 (25.53%) Sophos
4 12 (25.53%) TippingPoint
5 8 (17.02%) LogRhythm
6 7 (14.89%) Splunk
7 6 (12.77%) AlienVault
7 6 (12.77%) CheckPoint
7 6 (12.77%) Citrix
7 6 (12.77%) EMC
7 6 (12.77%) NetApp
8 5 (10.64%) SolarWinds
9 4 (8.51%) LogLogic
9 4 (8.51%) Symantec
9 4 (8.51%) Trend Micro
10 3 (6.38%) HP