Incident Response Jobs

Incident Response
UK

The table below provides summary statistics for permanent job vacancies requiring Incident Response skills. It includes a benchmarking guide to the annual salaries offered in vacancies that cited Incident Response over the 6 months leading up to 30 April 2025, comparing them to the same period in the previous two years.

6 months to
30 Apr 2025
Same period 2024 Same period 2023
Rank 256 293 383
Rank change year-on-year +37 +90 +47
Permanent jobs citing Incident Response 599 958 913
As % of all permanent jobs advertised in the UK 1.15% 0.97% 0.88%
As % of the Processes & Methodologies category 1.23% 1.13% 0.92%
Number of salaries quoted 475 732 623
10th Percentile £42,200 £42,500 £39,748
25th Percentile £52,500 £51,250 £47,500
Median annual salary (50th Percentile) £65,000 £65,000 £65,000
Median % change year-on-year - - +4.00%
75th Percentile £79,375 £80,000 £77,500
90th Percentile £99,000 £97,500 £92,500
UK excluding London median annual salary £55,000 £55,000 £55,000
% change year-on-year - - +3.55%

All Process and Methodology Skills
UK

Incident Response falls under the Processes and Methodologies category. For comparison with the information above, the following table provides summary statistics for all permanent job vacancies requiring process or methodology skills.

Permanent vacancies with a requirement for process or methodology skills 48,641 84,574 99,457
As % of all permanent jobs advertised in the UK 93.26% 86.00% 95.63%
Number of salaries quoted 26,531 59,798 58,397
10th Percentile £30,580 £29,000 £34,000
25th Percentile £42,500 £40,000 £45,000
Median annual salary (50th Percentile) £57,500 £55,000 £61,500
Median % change year-on-year +4.55% -10.57% +2.50%
75th Percentile £76,250 £72,500 £82,500
90th Percentile £98,750 £92,500 £100,000
UK excluding London median annual salary £52,500 £50,000 £55,000
% change year-on-year +5.00% -9.09% +4.76%

Incident Response
Job Vacancy Trend

Job postings citing Incident Response as a proportion of all IT jobs advertised.

Job vacancy trend for Incident Response in the UK

Incident Response
Salary Trend

3-month moving average salary quoted in jobs citing Incident Response.

Salary trend for Incident Response in the UK

Incident Response
Salary Histogram

Salary distribution for jobs citing Incident Response over the 6 months to 30 April 2025.

Salary histogram for Incident Response in the UK

Incident Response
Top 18 Job Locations

The table below looks at the demand and provides a guide to the median salaries quoted in IT jobs citing Incident Response within the UK over the 6 months to 30 April 2025. The 'Rank Change' column provides an indication of the change in demand within each location based on the same 6 month period last year.

Location Rank Change
on Same Period
Last Year
Matching
Permanent
IT Job Ads
Median Salary
Past 6 Months
Median Salary
% Change
on Same Period
Last Year
Live
Jobs
England +41 558 £65,000 - 513
London +75 295 £73,750 -1.67% 233
UK excluding London 0 268 £55,000 - 332
Work from Home +76 197 £60,000 -14.29% 310
South East +88 84 £55,000 -15.38% 72
North of England -43 61 £67,500 +29.60% 100
Midlands -8 50 £47,500 -20.83% 50
North West -61 37 £75,000 +44.00% 63
West Midlands -11 30 £60,000 - 36
East of England +66 23 £42,085 -15.83% 25
South West +59 21 £46,250 -7.50% 35
East Midlands +40 20 £45,000 -30.77% 14
Yorkshire +34 20 £57,500 -4.17% 30
Scotland +96 14 £49,254 -27.03% 40
Wales +37 11 £55,000 -12.00% 10
North East +47 4 £80,000 +14.29% 7
Isle of Man +10 3 £43,000 -7.53% 6
Northern Ireland +35 1 - - 3

Incident Response
Co-occurring Skills and Capabilities by Category

The follow tables expand on the table above by listing co-occurrences grouped by category. The same employment type, locality and period is covered with up to 20 co-occurrences shown in each of the following categories:

Application Platforms
1 14 (2.34%) Microsoft Exchange
2 12 (2.00%) SharePoint
3 6 (1.00%) nginx
4 5 (0.83%) Confluence
5 2 (0.33%) TPMS
6 1 (0.17%) Apache Airflow
6 1 (0.17%) OpenStack
6 1 (0.17%) Oracle Workflow
Applications
1 5 (0.83%) Microsoft Office
2 4 (0.67%) MS Visio
3 2 (0.33%) Microsoft Excel
4 1 (0.17%) Microsoft PowerPoint
Business Applications
1 2 (0.33%) Elite 3E
Cloud Services
1 204 (34.06%) Azure
2 105 (17.53%) AWS
3 80 (13.36%) Microsoft 365
4 62 (10.35%) GCP
5 61 (10.18%) Azure Sentinel
6 31 (5.18%) Entra ID
7 25 (4.17%) AWS CloudFormation
8 23 (3.84%) Serverless
9 22 (3.67%) AWS Lambda
10 18 (3.01%) Azure Logic Apps
11 16 (2.67%) AWS KMS
12 14 (2.34%) SaaS
13 11 (1.84%) Amazon CloudWatch
13 11 (1.84%) Azure DevOps
13 11 (1.84%) PaaS
14 9 (1.50%) Azure AKS
14 9 (1.50%) Cloud Computing
15 8 (1.34%) AWS CloudTrail
15 8 (1.34%) Datadog
16 7 (1.17%) IaaS
Communications & Networking
1 165 (27.55%) Firewall
2 118 (19.70%) Network Security
3 55 (9.18%) Intrusion Detection
4 42 (7.01%) VPN
5 35 (5.84%) DNS
6 34 (5.68%) TCP/IP
7 18 (3.01%) WAN
8 14 (2.34%) LAN
9 13 (2.17%) DHCP
10 12 (2.00%) SAN
11 11 (1.84%) HTTP
11 11 (1.84%) SMTP
12 8 (1.34%) BGP
12 8 (1.34%) OSPF
12 8 (1.34%) Wireshark
13 7 (1.17%) Spanning Tree
14 6 (1.00%) Cisco ASA
14 6 (1.00%) Cisco Firepower
14 6 (1.00%) Internet
15 5 (0.83%) SD-WAN
Database & Business Intelligence
1 10 (1.67%) Amazon RDS
2 6 (1.00%) MariaDB
3 4 (0.67%) DynamoDB
3 4 (0.67%) Power BI
4 3 (0.50%) GIS
5 1 (0.17%) Electronic Patient Records
5 1 (0.17%) Hadoop
5 1 (0.17%) HBase
5 1 (0.17%) MySQL
5 1 (0.17%) NoSQL
5 1 (0.17%) Oracle Reports
5 1 (0.17%) SQL Server
5 1 (0.17%) Tableau
Development Applications
1 10 (1.67%) JIRA
2 9 (1.50%) Jenkins
3 7 (1.17%) Burp Suite
3 7 (1.17%) CircleCI
3 7 (1.17%) GitLab
4 2 (0.33%) Bitbucket
4 2 (0.33%) Metasploit
5 1 (0.17%) Artifactory
5 1 (0.17%) Git
5 1 (0.17%) IDA Disassembler
5 1 (0.17%) Subversion
General
1 223 (37.23%) Social Skills
2 128 (21.37%) Analytical Skills
3 125 (20.87%) Finance
4 42 (7.01%) Law
5 34 (5.68%) Legal
6 33 (5.51%) Telecoms
7 29 (4.84%) Banking
8 28 (4.67%) Inclusion and Diversity
9 24 (4.01%) Retail
10 19 (3.17%) Public Sector
11 14 (2.34%) Manufacturing
12 13 (2.17%) Pharmaceutical
13 11 (1.84%) Marketing
13 11 (1.84%) Organisational Skills
14 9 (1.50%) Electronics
15 7 (1.17%) Mandarin Language
15 7 (1.17%) Presentation Skills
16 6 (1.00%) Aviation
17 5 (0.83%) Documentation Skills
17 5 (0.83%) Military
Job Titles
1 182 (30.38%) Analyst
2 113 (18.86%) Security Analyst
3 93 (15.53%) Senior
4 57 (9.52%) SOC Analyst
5 56 (9.35%) Security Engineer
6 55 (9.18%) Lead
7 48 (8.01%) Cybersecurity Analyst
8 47 (7.85%) Architect
9 44 (7.35%) Security Manager
10 43 (7.18%) Senior Analyst
11 28 (4.67%) Security Architect
12 24 (4.01%) Information Analyst
12 24 (4.01%) Information Security Analyst
13 23 (3.84%) Cloud Engineer
14 22 (3.67%) Infrastructure Engineer
15 21 (3.51%) IT Manager
16 20 (3.34%) Incident Analyst
17 19 (3.17%) Consultant
17 19 (3.17%) Cybersecurity Engineer
18 17 (2.84%) Cybersecurity Manager
Libraries, Frameworks & Software Standards
1 20 (3.34%) Elastic Stack
2 16 (2.67%) Kafka
3 11 (1.84%) Azure Blueprints
4 6 (1.00%) .NET
4 6 (1.00%) Leaflet
5 5 (0.83%) OpenTelemetry
6 4 (0.67%) Spring
6 4 (0.67%) Spring Boot
7 3 (0.50%) ARM Templates
7 3 (0.50%) JSON
8 2 (0.33%) Loki
8 2 (0.33%) PyTorch
8 2 (0.33%) scikit-learn
8 2 (0.33%) TensorFlow
9 1 (0.17%) CSS
9 1 (0.17%) EDI
9 1 (0.17%) PySpark
9 1 (0.17%) React
9 1 (0.17%) SAML
Miscellaneous
1 151 (25.21%) Management Information System
2 133 (22.20%) Security Posture
3 80 (13.36%) Cyber Threat
4 45 (7.51%) Security Operations Centre
5 29 (4.84%) Data Centre
6 28 (4.67%) Cloud Native
7 27 (4.51%) Self-Motivation
8 21 (3.51%) Social Media
8 21 (3.51%) Team-Oriented Environment
9 17 (2.84%) Cyber Defence
10 15 (2.50%) Cyberattack
10 15 (2.50%) Onboarding
11 14 (2.34%) CSOC
11 14 (2.34%) Virtual Team
12 13 (2.17%) Cyber Security Posture
13 11 (1.84%) Data Protection Act
13 11 (1.84%) Hedge funds
14 9 (1.50%) Analytical Mindset
14 9 (1.50%) PKI
14 9 (1.50%) Podcast
Operating Systems
1 116 (19.37%) Windows
2 34 (5.68%) Linux
3 26 (4.34%) Windows Server
4 21 (3.51%) Windows Vista
5 14 (2.34%) VMS
6 6 (1.00%) Apple iOS
7 5 (0.83%) Android
7 5 (0.83%) Unix
7 5 (0.83%) Windows 10
8 3 (0.50%) Windows Server 2019
9 1 (0.17%) Mac OS
9 1 (0.17%) Red Hat Enterprise Linux
9 1 (0.17%) Windows Server 2016
Processes & Methodologies
1 358 (59.77%) Cybersecurity
2 228 (38.06%) SIEM
3 220 (36.73%) Information Security
4 173 (28.88%) Vulnerability Management
5 165 (27.55%) Security Operations
6 143 (23.87%) Problem-Solving
7 142 (23.71%) Risk Management
8 134 (22.37%) Continuous Improvement
9 117 (19.53%) Cloud Security
10 107 (17.86%) Incident Management
11 99 (16.53%) Data Protection
12 92 (15.36%) Threat Intelligence
13 90 (15.03%) Computer Science
14 82 (13.69%) DevOps
15 81 (13.52%) Root Cause Analysis
16 78 (13.02%) Security Architecture
17 77 (12.85%) Penetration Testing
18 75 (12.52%) ITIL
19 73 (12.19%) Threat Detection
20 71 (11.85%) Cyber Threat Intelligence
Programming Languages
1 74 (12.35%) Python
2 62 (10.35%) PowerShell
3 38 (6.34%) Kusto Query Language
4 25 (4.17%) Bash
5 24 (4.01%) Java
6 5 (0.83%) SQL
7 4 (0.67%) TypeScript
8 3 (0.50%) Ruby
8 3 (0.50%) VBA
9 2 (0.33%) C#
9 2 (0.33%) Go
9 2 (0.33%) JavaScript
9 2 (0.33%) Perl
9 2 (0.33%) Search Processing Language
10 1 (0.17%) Bicep
10 1 (0.17%) C++
10 1 (0.17%) Scala
Qualifications
1 171 (28.55%) CISSP
2 162 (27.05%) Degree
3 98 (16.36%) CISM
4 80 (13.36%) Security Cleared
5 77 (12.85%) Computer Science Degree
6 75 (12.52%) CEH
7 57 (9.52%) Cisco Certification
8 56 (9.35%) SC Cleared
9 49 (8.18%) CompTIA Security+
10 41 (6.84%) CISA
11 39 (6.51%) GCIH
12 35 (5.84%) OSCP
13 33 (5.51%) (ISC)2 CCSP
14 31 (5.18%) GCIA
15 28 (4.67%) AWS Certification
15 28 (4.67%) Master's Degree
16 26 (4.34%) DBS Check
17 25 (4.17%) GIAC
18 23 (3.84%) DV Cleared
18 23 (3.84%) Microsoft Certification
Quality Assurance & Compliance
1 167 (27.88%) ISO/IEC 27001
2 140 (23.37%) NIST
3 126 (21.04%) GDPR
4 51 (8.51%) Cyber Essentials
5 50 (8.35%) PCI DSS
6 24 (4.01%) Cyber Essentials PLUS
7 22 (3.67%) HIPAA
8 13 (2.17%) QA
8 13 (2.17%) Sarbanes-Oxley
8 13 (2.17%) SLA
9 12 (2.00%) GRC
10 8 (1.34%) NCSC
10 8 (1.34%) SOC 2
11 7 (1.17%) ISO/IEC 27002 (supersedes ISO/IEC 17799)
12 6 (1.00%) COBIT
12 6 (1.00%) NIST 800
13 2 (0.33%) Actionable Recommendations
13 2 (0.33%) California Consumer Privacy Act
14 1 (0.17%) Accessibility
14 1 (0.17%) ISO/IEC 20000
System Software
1 56 (9.35%) Active Directory
2 49 (8.18%) Docker
3 27 (4.51%) Virtual Machines
4 13 (2.17%) VMware Infrastructure
5 8 (1.34%) Hyper-V
6 3 (0.50%) VMware ESXi
6 3 (0.50%) vSphere
7 2 (0.33%) Firmware
8 1 (0.17%) EMC RecoverPoint
8 1 (0.17%) HDFS
8 1 (0.17%) NFS
8 1 (0.17%) Snort
8 1 (0.17%) vCloud
8 1 (0.17%) Virtual Servers
Systems Management
1 57 (9.52%) Kubernetes
2 48 (8.01%) Terraform
3 35 (5.84%) Microsoft Intune
3 35 (5.84%) Prometheus
4 32 (5.34%) Grafana
5 22 (3.67%) QRadar
6 11 (1.84%) Ansible
6 11 (1.84%) CASB
7 10 (1.67%) Progress Chef
7 10 (1.67%) Puppet
8 8 (1.34%) FortiGate
8 8 (1.34%) Istio
9 6 (1.00%) CSIRT
9 6 (1.00%) Nessus
10 5 (0.83%) ArcSight ESM
10 5 (0.83%) linkerd
11 4 (0.67%) Argo
11 4 (0.67%) Computer Emergency Response Teams
12 3 (0.50%) Computer Incident Response Team
12 3 (0.50%) Consul
Vendors
1 178 (29.72%) Microsoft
2 41 (6.84%) Splunk
3 40 (6.68%) Tenable
3 40 (6.68%) VMware
4 31 (5.18%) Google
5 29 (4.84%) Cisco
5 29 (4.84%) Qualys
6 19 (3.17%) CrowdStrike
7 13 (2.17%) CheckPoint
8 11 (1.84%) ServiceNow
9 10 (1.67%) ArcSight
9 10 (1.67%) Palo Alto
10 9 (1.50%) SAP
11 8 (1.34%) Citrix
11 8 (1.34%) Fortinet
12 7 (1.17%) Juniper
12 7 (1.17%) LogRhythm
13 6 (1.00%) McAfee
13 6 (1.00%) Sophos
14 5 (0.83%) LogLogic