Incident Response Jobs

Incident Response
UK

The table below provides summary statistics for permanent job vacancies requiring Incident Response skills. It includes a benchmarking guide to the annual salaries offered in vacancies that cited Incident Response over the 6 months leading up to 11 May 2025, comparing them to the same period in the previous two years.

6 months to
11 May 2025
Same period 2024 Same period 2023
Rank 273 297 380
Rank change year-on-year +24 +83 +54
Permanent jobs citing Incident Response 621 982 895
As % of all permanent jobs advertised in the UK 1.13% 0.99% 0.89%
As % of the Processes & Methodologies category 1.21% 1.16% 0.93%
Number of salaries quoted 489 743 614
10th Percentile £42,000 £42,740 £38,750
25th Percentile £52,500 £51,250 £47,500
Median annual salary (50th Percentile) £65,000 £65,000 £65,000
Median % change year-on-year - - +4.00%
75th Percentile £78,750 £80,000 £77,500
90th Percentile £100,000 £97,500 £93,375
UK excluding London median annual salary £55,000 £55,000 £53,750
% change year-on-year - +2.33% +1.20%

All Process and Methodology Skills
UK

Incident Response falls under the Processes and Methodologies category. For comparison with the information above, the following table provides summary statistics for all permanent job vacancies requiring process or methodology skills.

Permanent vacancies with a requirement for process or methodology skills 51,302 84,920 96,579
As % of all permanent jobs advertised in the UK 93.76% 85.59% 95.61%
Number of salaries quoted 27,015 59,883 56,845
10th Percentile £30,000 £29,008 £34,000
25th Percentile £42,500 £40,000 £45,000
Median annual salary (50th Percentile) £57,500 £55,000 £61,180
Median % change year-on-year +4.55% -10.10% +1.97%
75th Percentile £75,000 £72,500 £81,250
90th Percentile £98,474 £92,500 £100,000
UK excluding London median annual salary £52,500 £50,000 £55,000
% change year-on-year +5.00% -9.09% +4.76%

Incident Response
Job Vacancy Trend

Job postings citing Incident Response as a proportion of all IT jobs advertised.

Job vacancy trend for Incident Response in the UK

Incident Response
Salary Trend

3-month moving average salary quoted in jobs citing Incident Response.

Salary trend for Incident Response in the UK

Incident Response
Salary Histogram

Salary distribution for jobs citing Incident Response over the 6 months to 11 May 2025.

Salary histogram for Incident Response in the UK

Incident Response
Top 18 Job Locations

The table below looks at the demand and provides a guide to the median salaries quoted in IT jobs citing Incident Response within the UK over the 6 months to 11 May 2025. The 'Rank Change' column provides an indication of the change in demand within each location based on the same 6 month period last year.

Location Rank Change
on Same Period
Last Year
Matching
Permanent
IT Job Ads
Median Salary
Past 6 Months
Median Salary
% Change
on Same Period
Last Year
Live
Jobs
England +4 574 £65,000 - 737
London +79 299 £72,500 -3.33% 377
UK excluding London -13 286 £55,000 - 490
Work from Home +57 202 £62,500 -10.71% 493
South East +79 92 £55,000 -12.00% 176
North of England -56 67 £65,000 +24.80% 130
Midlands -21 45 £50,000 -16.67% 60
North West -82 41 £75,000 +44.00% 70
West Midlands -13 27 £60,000 - 39
South West +52 23 £47,500 -5.00% 41
East of England +47 23 £42,085 -19.84% 38
Yorkshire +30 22 £57,500 -4.17% 55
Scotland +98 21 £45,000 -29.41% 36
East Midlands +31 18 £45,000 -30.77% 20
Wales +36 11 £55,000 -12.00% 11
North East +46 4 £80,000 +14.29% 5
Isle of Man +10 3 £43,000 -7.53% 4
Northern Ireland +40 1 - - 7

Incident Response
Co-occurring Skills and Capabilities by Category

The follow tables expand on the table above by listing co-occurrences grouped by category. The same employment type, locality and period is covered with up to 20 co-occurrences shown in each of the following categories:

Application Platforms
1 16 (2.58%) Microsoft Exchange
2 14 (2.25%) SharePoint
3 6 (0.97%) nginx
4 3 (0.48%) Confluence
5 2 (0.32%) TPMS
6 1 (0.16%) Apache Airflow
6 1 (0.16%) OpenStack
6 1 (0.16%) Oracle Workflow
Applications
1 5 (0.81%) Microsoft Office
2 3 (0.48%) MS Visio
3 2 (0.32%) Microsoft Excel
4 1 (0.16%) Microsoft PowerPoint
Business Applications
1 1 (0.16%) Elite 3E
Cloud Services
1 206 (33.17%) Azure
2 107 (17.23%) AWS
3 79 (12.72%) Microsoft 365
4 65 (10.47%) GCP
5 59 (9.50%) Azure Sentinel
6 28 (4.51%) Entra ID
7 24 (3.86%) AWS CloudFormation
8 23 (3.70%) Serverless
9 22 (3.54%) AWS Lambda
10 16 (2.58%) AWS KMS
10 16 (2.58%) Azure Logic Apps
11 15 (2.42%) SaaS
12 12 (1.93%) Azure DevOps
13 11 (1.77%) Amazon CloudWatch
14 10 (1.61%) Cloud Computing
14 10 (1.61%) PaaS
15 8 (1.29%) AWS CloudTrail
15 8 (1.29%) Azure AKS
15 8 (1.29%) Datadog
16 7 (1.13%) Microsoft Purview
Communications & Networking
1 173 (27.86%) Firewall
2 116 (18.68%) Network Security
3 53 (8.53%) Intrusion Detection
4 47 (7.57%) VPN
5 38 (6.12%) DNS
6 37 (5.96%) TCP/IP
7 20 (3.22%) WAN
8 16 (2.58%) DHCP
8 16 (2.58%) LAN
9 12 (1.93%) HTTP
9 12 (1.93%) SAN
9 12 (1.93%) SMTP
10 9 (1.45%) BGP
10 9 (1.45%) OSPF
11 8 (1.29%) Wireshark
12 7 (1.13%) Cisco ASA
12 7 (1.13%) Spanning Tree
12 7 (1.13%) Wi-Fi
13 6 (0.97%) Cisco Firepower
13 6 (0.97%) SD-WAN
Database & Business Intelligence
1 10 (1.61%) Amazon RDS
2 6 (0.97%) MariaDB
3 4 (0.64%) DynamoDB
3 4 (0.64%) Power BI
4 3 (0.48%) GIS
5 1 (0.16%) Electronic Patient Records
5 1 (0.16%) Hadoop
5 1 (0.16%) HBase
5 1 (0.16%) MySQL
5 1 (0.16%) NoSQL
5 1 (0.16%) Oracle Reports
5 1 (0.16%) SQL Server
5 1 (0.16%) Tableau
Development Applications
1 11 (1.77%) Jenkins
2 9 (1.45%) JIRA
3 7 (1.13%) Burp Suite
3 7 (1.13%) CircleCI
3 7 (1.13%) GitLab
4 3 (0.48%) Git
5 2 (0.32%) Bitbucket
5 2 (0.32%) Metasploit
6 1 (0.16%) Artifactory
6 1 (0.16%) IDA Disassembler
6 1 (0.16%) MLflow
6 1 (0.16%) Subversion
General
1 238 (38.33%) Social Skills
2 134 (21.58%) Analytical Skills
3 132 (21.26%) Finance
4 42 (6.76%) Law
5 36 (5.80%) Legal
5 36 (5.80%) Telecoms
6 28 (4.51%) Banking
7 27 (4.35%) Inclusion and Diversity
8 24 (3.86%) Retail
9 21 (3.38%) Public Sector
10 18 (2.90%) Manufacturing
11 15 (2.42%) Marketing
12 13 (2.09%) Pharmaceutical
13 12 (1.93%) Electronics
13 12 (1.93%) Organisational Skills
14 8 (1.29%) Presentation Skills
15 7 (1.13%) Aviation
15 7 (1.13%) Mandarin Language
16 5 (0.81%) Aerospace
16 5 (0.81%) Local Government
Job Titles
1 183 (29.47%) Analyst
2 115 (18.52%) Security Analyst
3 91 (14.65%) Senior
4 61 (9.82%) Security Engineer
5 59 (9.50%) SOC Analyst
6 58 (9.34%) Lead
7 48 (7.73%) Architect
8 46 (7.41%) Cybersecurity Analyst
9 40 (6.44%) Security Manager
10 39 (6.28%) Senior Analyst
11 29 (4.67%) Security Architect
12 24 (3.86%) Information Analyst
12 24 (3.86%) Information Security Analyst
12 24 (3.86%) IT Manager
13 23 (3.70%) Cybersecurity Engineer
14 22 (3.54%) Cloud Engineer
14 22 (3.54%) Consultant
14 22 (3.54%) Infrastructure Engineer
15 20 (3.22%) Incident Analyst
16 17 (2.74%) Vulnerability Manager
Libraries, Frameworks & Software Standards
1 19 (3.06%) Elastic Stack
2 16 (2.58%) Kafka
3 9 (1.45%) Azure Blueprints
4 7 (1.13%) OpenTelemetry
5 6 (0.97%) .NET
5 6 (0.97%) Leaflet
6 4 (0.64%) Spring
6 4 (0.64%) Spring Boot
7 3 (0.48%) ARM Templates
7 3 (0.48%) JSON
7 3 (0.48%) PyTorch
7 3 (0.48%) TensorFlow
8 2 (0.32%) Loki
8 2 (0.32%) scikit-learn
9 1 (0.16%) CSS
9 1 (0.16%) Hugging Face
9 1 (0.16%) LangChain
9 1 (0.16%) LDAP
9 1 (0.16%) PySpark
9 1 (0.16%) React
Miscellaneous
1 151 (24.32%) Management Information System
2 134 (21.58%) Security Posture
3 88 (14.17%) Cyber Threat
4 52 (8.37%) Security Operations Centre
5 30 (4.83%) Data Centre
6 29 (4.67%) Cloud Native
7 28 (4.51%) Self-Motivation
8 21 (3.38%) Social Media
8 21 (3.38%) Team-Oriented Environment
9 18 (2.90%) Cyber Defence
10 15 (2.42%) Cyberattack
11 14 (2.25%) Onboarding
11 14 (2.25%) Virtual Team
12 12 (1.93%) CSOC
12 12 (1.93%) Data Protection Act
13 11 (1.77%) Hedge funds
14 10 (1.61%) Cyber Security Posture
15 9 (1.45%) PKI
15 9 (1.45%) Podcast
16 8 (1.29%) Analytical Mindset
Operating Systems
1 120 (19.32%) Windows
2 37 (5.96%) Linux
3 24 (3.86%) Windows Server
4 21 (3.38%) Windows Vista
5 14 (2.25%) VMS
6 10 (1.61%) Unix
7 6 (0.97%) Android
7 6 (0.97%) Apple iOS
8 4 (0.64%) Windows 10
9 3 (0.48%) Windows Server 2019
10 2 (0.32%) Mac OS
11 1 (0.16%) Red Hat Enterprise Linux
11 1 (0.16%) Windows Server 2016
Processes & Methodologies
1 368 (59.26%) Cybersecurity
2 235 (37.84%) SIEM
3 224 (36.07%) Information Security
4 175 (28.18%) Vulnerability Management
5 173 (27.86%) Security Operations
6 155 (24.96%) Problem-Solving
7 140 (22.54%) Continuous Improvement
7 140 (22.54%) Risk Management
8 119 (19.16%) Incident Management
9 116 (18.68%) Cloud Security
10 99 (15.94%) Data Protection
11 95 (15.30%) Threat Intelligence
12 90 (14.49%) Computer Science
13 81 (13.04%) Root Cause Analysis
14 80 (12.88%) DevOps
15 79 (12.72%) Security Architecture
16 76 (12.24%) Cyber Threat Intelligence
16 76 (12.24%) ITIL
17 75 (12.08%) Threat Detection
18 74 (11.92%) Penetration Testing
Programming Languages
1 74 (11.92%) Python
2 67 (10.79%) PowerShell
3 37 (5.96%) Kusto Query Language
4 26 (4.19%) Java
5 25 (4.03%) Bash
6 7 (1.13%) SQL
7 4 (0.64%) TypeScript
8 3 (0.48%) Ruby
8 3 (0.48%) VBA
9 2 (0.32%) C#
9 2 (0.32%) Go
9 2 (0.32%) JavaScript
9 2 (0.32%) Perl
9 2 (0.32%) PL/SQL
9 2 (0.32%) Search Processing Language
9 2 (0.32%) Shell Script
10 1 (0.16%) Bicep
10 1 (0.16%) C++
10 1 (0.16%) Scala
Qualifications
1 173 (27.86%) CISSP
2 168 (27.05%) Degree
3 97 (15.62%) CISM
4 87 (14.01%) Security Cleared
5 78 (12.56%) Computer Science Degree
6 76 (12.24%) CEH
7 60 (9.66%) SC Cleared
8 54 (8.70%) Cisco Certification
9 50 (8.05%) CompTIA Security+
10 43 (6.92%) GCIH
11 40 (6.44%) CISA
12 38 (6.12%) OSCP
13 33 (5.31%) GCIA
14 30 (4.83%) (ISC)2 CCSP
15 28 (4.51%) Master's Degree
16 27 (4.35%) AWS Certification
16 27 (4.35%) GIAC
17 26 (4.19%) DBS Check
18 25 (4.03%) DV Cleared
19 22 (3.54%) Microsoft Certification
Quality Assurance & Compliance
1 163 (26.25%) ISO/IEC 27001
2 138 (22.22%) NIST
3 127 (20.45%) GDPR
4 55 (8.86%) Cyber Essentials
5 48 (7.73%) PCI DSS
6 28 (4.51%) Cyber Essentials PLUS
7 22 (3.54%) HIPAA
8 17 (2.74%) SLA
9 16 (2.58%) QA
10 12 (1.93%) GRC
11 11 (1.77%) Sarbanes-Oxley
12 9 (1.45%) SOC 2
13 7 (1.13%) COBIT
13 7 (1.13%) ISO/IEC 27002 (supersedes ISO/IEC 17799)
13 7 (1.13%) NCSC
14 6 (0.97%) NIST 800
15 2 (0.32%) California Consumer Privacy Act
16 1 (0.16%) Accessibility
16 1 (0.16%) Actionable Recommendations
16 1 (0.16%) EU AI Act
System Software
1 53 (8.53%) Active Directory
2 48 (7.73%) Docker
3 25 (4.03%) Virtual Machines
4 16 (2.58%) VMware Infrastructure
5 11 (1.77%) Hyper-V
6 3 (0.48%) VMware ESXi
6 3 (0.48%) vSphere
7 2 (0.32%) Firmware
8 1 (0.16%) EMC RecoverPoint
8 1 (0.16%) HDFS
8 1 (0.16%) NFS
8 1 (0.16%) Snort
8 1 (0.16%) vCloud
8 1 (0.16%) Virtual Servers
Systems Management
1 57 (9.18%) Kubernetes
2 48 (7.73%) Terraform
3 38 (6.12%) Microsoft Intune
4 37 (5.96%) Prometheus
5 36 (5.80%) Grafana
6 23 (3.70%) QRadar
7 12 (1.93%) Progress Chef
8 11 (1.77%) Ansible
9 10 (1.61%) Puppet
10 9 (1.45%) CASB
11 8 (1.29%) FortiGate
12 7 (1.13%) CSIRT
13 6 (0.97%) ArcSight ESM
13 6 (0.97%) Istio
13 6 (0.97%) Nessus
14 4 (0.64%) Argo
14 4 (0.64%) Computer Emergency Response Teams
15 3 (0.48%) Computer Incident Response Team
15 3 (0.48%) Consul
15 3 (0.48%) linkerd
Vendors
1 181 (29.15%) Microsoft
2 50 (8.05%) Splunk
3 43 (6.92%) VMware
4 40 (6.44%) Tenable
5 29 (4.67%) Cisco
6 28 (4.51%) Google
6 28 (4.51%) Qualys
7 20 (3.22%) CrowdStrike
8 13 (2.09%) ArcSight
9 12 (1.93%) CheckPoint
9 12 (1.93%) SAP
9 12 (1.93%) ServiceNow
10 11 (1.77%) Palo Alto
11 9 (1.45%) Fortinet
12 8 (1.29%) Juniper
13 7 (1.13%) Citrix
13 7 (1.13%) Dynatrace
13 7 (1.13%) McAfee
14 6 (0.97%) AlienVault
14 6 (0.97%) Meraki