Incident Response
UK

The following table provides summary statistics for permanent job vacancies with a requirement for Incident Response skills. Included is a benchmarking guide to the salaries offered in vacancies that have cited Incident Response over the 6 months to 5 May 2024 with a comparison to the same period in the previous 2 years.

6 months to
5 May 2024
Same period 2023 Same period 2022
Rank 297 371 426
Rank change year-on-year +74 +55 +4
Permanent jobs citing Incident Response 963 907 1,304
As % of all permanent jobs advertised in the UK 0.98% 0.88% 0.83%
As % of the Processes & Methodologies category 1.14% 0.92% 0.87%
Number of salaries quoted 733 623 828
10th Percentile £42,548 £39,150 £38,750
25th Percentile £51,250 £47,500 £48,750
Median annual salary (50th Percentile) £65,000 £65,000 £62,500
Median % change year-on-year - +4.00% +4.17%
75th Percentile £80,000 £77,500 £80,000
90th Percentile £97,500 £92,500 £91,475
UK excluding London median annual salary £55,000 £52,500 £53,316
% change year-on-year +4.76% -1.53% +1.55%

All Process and Methodology Skills
UK

Incident Response is in the Processes and Methodologies category. The following table is for comparison with the above and provides summary statistics for all permanent job vacancies with a requirement for process or methodology skills.

Permanent vacancies with a requirement for process or methodology skills 84,624 98,922 149,770
As % of all permanent jobs advertised in the UK 85.89% 95.62% 95.60%
Number of salaries quoted 59,744 58,119 83,346
10th Percentile £29,000 £34,000 £33,500
25th Percentile £40,000 £45,000 £43,750
Median annual salary (50th Percentile) £55,000 £61,500 £60,000
Median % change year-on-year -10.57% +2.50% +9.09%
75th Percentile £72,500 £81,500 £80,000
90th Percentile £92,500 £100,000 £96,250
UK excluding London median annual salary £50,000 £55,000 £52,500
% change year-on-year -9.09% +4.76% +9.38%

Incident Response
Job Vacancy Trend

Job postings citing Incident Response as a proportion of all IT jobs advertised.

Job vacancy trend for Incident Response in the UK

Incident Response
Salary Trend

3-month moving average salary quoted in jobs citing Incident Response.

Salary trend for Incident Response in the UK

Incident Response
Salary Histogram

Salary distribution for jobs citing Incident Response over the 6 months to 5 May 2024.

Salary histogram for Incident Response in the UK

Incident Response
Top 19 Job Locations

The table below looks at the demand and provides a guide to the median salaries quoted in IT jobs citing Incident Response within the UK over the 6 months to 5 May 2024. The 'Rank Change' column provides an indication of the change in demand within each location based on the same 6 month period last year.

Location Rank Change
on Same Period
Last Year
Matching
Permanent
IT Job Ads
Median Salary
Past 6 Months
Median Salary
% Change
on Same Period
Last Year
Live
Jobs
England +114 850 £62,500 -3.85% 282
UK excluding London +72 600 £55,000 +4.76% 158
Work from Home +2 328 £70,000 +12.00% 143
London +90 314 £75,000 +4.90% 127
North of England +148 198 £52,084 -13.19% 46
North West +90 132 £52,084 -13.19% 24
Midlands +30 126 £60,000 +20.00% 28
South East -5 111 £62,500 +12.11% 45
West Midlands +45 96 £60,000 +9.09% 22
South West +28 78 £50,000 -0.99% 14
Yorkshire +114 57 £60,000 -2.04% 17
Scotland -58 46 £67,500 +28.57% 14
East Midlands -21 30 £65,000 +36.84% 6
East of England +12 16 £52,500 +5.00% 7
Wales +1 14 £62,500 +13.64% 4
North East -1 9 £70,000 +3.70% 5
Isle of Man -13 8 £46,500 +3.33% 1
Northern Ireland +18 2 - - 1
Channel Islands - 1 £100,000 -

Incident Response
Co-occurring Skills and Capabilities by Category

The follow tables expand on the table above by listing co-occurrences grouped by category. The same employment type, locality and period is covered with up to 20 co-occurrences shown in each of the following categories:

Application Platforms
1 19 (1.97%) Microsoft Exchange
2 15 (1.56%) SharePoint
3 9 (0.93%) IIS
4 6 (0.62%) Apache
5 1 (0.10%) Confluence
5 1 (0.10%) nginx
Applications
1 54 (5.61%) Microsoft Office
2 39 (4.05%) Microsoft Excel
3 38 (3.95%) Microsoft PowerPoint
4 3 (0.31%) Microsoft Project
4 3 (0.31%) MS Visio
Business Applications
1 6 (0.62%) Dynamics CRM
2 1 (0.10%) Payment Gateway
2 1 (0.10%) SAP S/4HANA
Cloud Services
1 264 (27.41%) Azure
2 153 (15.89%) Microsoft 365
3 132 (13.71%) AWS
4 67 (6.96%) SaaS
5 41 (4.26%) Azure Sentinel
6 35 (3.63%) GCP
7 22 (2.28%) Entra ID
8 20 (2.08%) PaaS
9 19 (1.97%) IaaS
10 15 (1.56%) Cloud Computing
11 12 (1.25%) Amazon CloudWatch
12 11 (1.14%) Amazon S3
12 11 (1.14%) Power Platform
13 10 (1.04%) Amazon GuardDuty
13 10 (1.04%) AWS CloudTrail
14 9 (0.93%) Amazon ECS
14 9 (0.93%) Serverless
15 8 (0.83%) AWS CloudFormation
15 8 (0.83%) Cloudflare
16 6 (0.62%) Virtual Private Cloud
Communications & Networking
1 243 (25.23%) Firewall
2 86 (8.93%) Intrusion Detection
3 63 (6.54%) Network Security
4 45 (4.67%) TCP/IP
5 34 (3.53%) VPN
6 30 (3.12%) Internet
7 21 (2.18%) DNS
8 19 (1.97%) LAN
9 18 (1.87%) WAN
10 12 (1.25%) SAN
10 12 (1.25%) Wireshark
11 7 (0.73%) DHCP
11 7 (0.73%) HTTP
11 7 (0.73%) SMTP
12 5 (0.52%) SSL
12 5 (0.52%) VLAN
13 4 (0.42%) DMZ
13 4 (0.42%) NetScaler
13 4 (0.42%) Wireless
14 3 (0.31%) Broadband
Database & Business Intelligence
1 36 (3.74%) SQL Server
2 22 (2.28%) MySQL
3 16 (1.66%) RDBMS
3 16 (1.66%) Relational Database
4 13 (1.35%) MongoDB
5 12 (1.25%) BigQuery
5 12 (1.25%) Data Hub
5 12 (1.25%) DB2
5 12 (1.25%) Enterprise Data Warehouse
6 7 (0.73%) Amazon RDS
7 6 (0.62%) Azure SQL Database
7 6 (0.62%) SQL Server Reporting Services
8 4 (0.42%) PostgreSQL
8 4 (0.42%) Power BI
9 2 (0.21%) Metabase
9 2 (0.21%) Oracle Database
9 2 (0.21%) Redis
10 1 (0.10%) Hadoop
10 1 (0.10%) MariaDB
Development Applications
1 6 (0.62%) Visual Studio
2 5 (0.52%) Burp Suite
2 5 (0.52%) Metasploit
3 3 (0.31%) Jenkins
4 2 (0.21%) GitLab
4 2 (0.21%) JIRA
4 2 (0.21%) Snyk
4 2 (0.21%) sqlmap
5 1 (0.10%) Bitbucket
5 1 (0.10%) Git
5 1 (0.10%) TeamCity
General
1 319 (33.13%) Social Skills
2 206 (21.39%) Finance
3 143 (14.85%) Analytical Skills
4 81 (8.41%) Legal
5 75 (7.79%) Law
6 50 (5.19%) Public Sector
7 43 (4.47%) Military
8 42 (4.36%) Banking
9 41 (4.26%) Manufacturing
10 28 (2.91%) Marketing
11 24 (2.49%) Inclusion and Diversity
12 21 (2.18%) Documentation Skills
12 21 (2.18%) Games
13 19 (1.97%) Presentation Skills
14 16 (1.66%) Spanish Language
15 15 (1.56%) Financial Institution
15 15 (1.56%) Retail
16 11 (1.14%) French Language
16 11 (1.14%) Influencing Skills
17 8 (0.83%) Pharmaceutical
Job Titles
1 268 (27.83%) Analyst
2 153 (15.89%) Security Analyst
3 142 (14.75%) Senior
4 87 (9.03%) Lead
4 87 (9.03%) Security Engineer
5 85 (8.83%) Cybersecurity Analyst
6 83 (8.62%) Senior Analyst
7 73 (7.58%) Security Manager
8 57 (5.92%) SOC Analyst
9 51 (5.30%) Senior Security Analyst
10 50 (5.19%) Consultant
11 46 (4.78%) Architect
12 45 (4.67%) IT Analyst
13 43 (4.47%) Security Consultant
14 39 (4.05%) IT Security Analyst
14 39 (4.05%) Security Architect
15 37 (3.84%) Security Specialist
16 35 (3.63%) Incident Manager
17 31 (3.22%) Information Manager
17 31 (3.22%) Information Security Manager
Libraries, Frameworks & Software Standards
1 15 (1.56%) .NET
2 10 (1.04%) Web Services
3 8 (0.83%) Laravel
4 7 (0.73%) XML
5 6 (0.62%) .NET Framework
6 4 (0.42%) EDI
6 4 (0.42%) Kafka
6 4 (0.42%) Node.js
7 3 (0.31%) HTML
7 3 (0.31%) Vue
7 3 (0.31%) web3js
8 2 (0.21%) CSS
8 2 (0.21%) D3.js
8 2 (0.21%) React
8 2 (0.21%) Sass
9 1 (0.10%) Elastic Stack
9 1 (0.10%) OAuth2
9 1 (0.10%) PHP-FPM
9 1 (0.10%) REST
9 1 (0.10%) Symfony
Miscellaneous
1 170 (17.65%) Cyber Threat
2 143 (14.85%) Management Information System
3 99 (10.28%) Security Posture
4 98 (10.18%) Cyberattack
5 77 (8.00%) Security Operations Centre
6 63 (6.54%) Operational Technology
7 40 (4.15%) Cyber Kill Chain
8 39 (4.05%) Driving Licence
9 33 (3.43%) Industrial Internet of Things
10 26 (2.70%) Public Cloud
11 24 (2.49%) Cyber Defence
12 21 (2.18%) Analytical Mindset
12 21 (2.18%) Data Centre
13 19 (1.97%) Client/Server
14 16 (1.66%) SCADA
15 13 (1.35%) Cloud Security Posture
16 12 (1.25%) Cloud Native
16 12 (1.25%) Data Fabric
17 11 (1.14%) Data Protection Act
18 8 (0.83%) Self-Motivation
Operating Systems
1 198 (20.56%) Windows
2 121 (12.56%) Linux
3 54 (5.61%) Unix
4 44 (4.57%) Windows Server
5 18 (1.87%) Mac OS X
6 16 (1.66%) zOS
7 10 (1.04%) Kali Linux
8 8 (0.83%) Ubuntu
9 7 (0.73%) Windows Server 2012
10 5 (0.52%) Windows 10
11 4 (0.42%) CentOS
11 4 (0.42%) Solaris
11 4 (0.42%) Windows Server 2016
12 3 (0.31%) Mac OS
13 2 (0.21%) Apple iOS
13 2 (0.21%) Windows 7
14 1 (0.10%) AIX
14 1 (0.10%) Amazon Linux
14 1 (0.10%) Android
14 1 (0.10%) Data ONTAP
Processes & Methodologies
1 670 (69.57%) Cybersecurity
2 286 (29.70%) Information Security
3 281 (29.18%) Security Operations
4 256 (26.58%) SIEM
5 197 (20.46%) Problem-Solving
6 173 (17.96%) Incident Management
7 170 (17.65%) Threat Intelligence
8 164 (17.03%) Cyber Threat Intelligence
9 155 (16.10%) Risk Management
10 151 (15.68%) Vulnerability Management
11 104 (10.80%) Computer Science
12 102 (10.59%) Penetration Testing
13 100 (10.38%) Disaster Recovery
14 97 (10.07%) Cloud Security
15 82 (8.52%) Change Management
16 81 (8.41%) Vulnerability Assessment
17 80 (8.31%) Security Architecture
18 78 (8.10%) ITIL
19 74 (7.68%) Roadmaps
19 74 (7.68%) Service Delivery
Programming Languages
1 67 (6.96%) PowerShell
2 63 (6.54%) Python
3 29 (3.01%) SQL
4 26 (2.70%) Bash
5 12 (1.25%) C#
5 12 (1.25%) Java
6 11 (1.14%) PHP
7 8 (0.83%) JavaScript
7 8 (0.83%) Rust
8 6 (0.62%) T-SQL
9 5 (0.52%) C++
10 3 (0.31%) Go
11 2 (0.21%) Kusto Query Language
11 2 (0.21%) Lisp
11 2 (0.21%) Shell Script
12 1 (0.10%) Perl
12 1 (0.10%) Ruby
12 1 (0.10%) TypeScript
Qualifications
1 265 (27.52%) Degree
2 262 (27.21%) CISSP
3 143 (14.85%) CISM
4 109 (11.32%) Security Cleared
5 61 (6.33%) Cisco Certification
6 56 (5.82%) Computer Science Degree
7 55 (5.71%) CEH
8 52 (5.40%) SC Cleared
9 51 (5.30%) CompTIA Security+
10 45 (4.67%) GIAC
11 42 (4.36%) (ISC)2 CCSP
12 40 (4.15%) CISA
13 37 (3.84%) CCSP
14 34 (3.53%) Master's Degree
15 25 (2.60%) CREST Certified
16 24 (2.49%) GCIH
17 23 (2.39%) AWS Certification
17 23 (2.39%) OSCP
18 20 (2.08%) GCIA
19 19 (1.97%) Azure Certification
Quality Assurance & Compliance
1 248 (25.75%) ISO/IEC 27001
2 142 (14.75%) NIST
3 98 (10.18%) Cyber Essentials
4 75 (7.79%) GDPR
5 64 (6.65%) PCI DSS
6 41 (4.26%) ISO 9001
6 41 (4.26%) ISO/IEC 27002 (supersedes ISO/IEC 17799)
7 39 (4.05%) ISO/IEC 17025
8 36 (3.74%) GRC
9 35 (3.63%) NCSC
10 20 (2.08%) JSP 440
11 18 (1.87%) Cyber Essentials PLUS
12 11 (1.14%) SLA
13 8 (0.83%) Accessibility
13 8 (0.83%) QA
13 8 (0.83%) SOC 2
14 7 (0.73%) COBIT
14 7 (0.73%) HIPAA
14 7 (0.73%) Sarbanes-Oxley
15 6 (0.62%) NIST 800
System Software
1 76 (7.89%) Active Directory
2 29 (3.01%) VMware Infrastructure
3 13 (1.35%) Hyper-V
4 8 (0.83%) Docker
5 5 (0.52%) VMware NSX
6 3 (0.31%) Terminal Services
6 3 (0.31%) Virtual Machines
6 3 (0.31%) VMware ESXi
7 2 (0.21%) Virtual Servers
8 1 (0.10%) BitLocker
8 1 (0.10%) Virtual Desktop
8 1 (0.10%) XenApp
Systems Management
1 37 (3.84%) EnCase
2 23 (2.39%) QRadar
3 18 (1.87%) CSIRT
3 18 (1.87%) Terraform
4 17 (1.77%) Microsoft Intune
5 13 (1.35%) Kubernetes
6 9 (0.93%) Single Sign-On
7 8 (0.83%) SCCM
8 7 (0.73%) Ansible
8 7 (0.73%) CASB
9 4 (0.42%) Cacti
9 4 (0.42%) Computer Emergency Response Teams
9 4 (0.42%) Nmap
9 4 (0.42%) Prometheus
9 4 (0.42%) Suricata
10 3 (0.31%) Grafana
10 3 (0.31%) Nessus
10 3 (0.31%) SELinux
11 2 (0.21%) Data Guard
11 2 (0.21%) Host Intrusion Detection System
Vendors
1 296 (30.74%) Microsoft
2 54 (5.61%) VMware
3 40 (4.15%) Splunk
4 39 (4.05%) Dell
5 34 (3.53%) Oracle
6 33 (3.43%) Qualys
7 27 (2.80%) Cisco
8 25 (2.60%) CrowdStrike
9 18 (1.87%) IBM
10 15 (1.56%) Google
11 14 (1.45%) Darktrace
12 13 (1.35%) Databricks
13 12 (1.25%) Citrix
13 12 (1.25%) F5
13 12 (1.25%) ServiceNow
14 10 (1.04%) Sun
15 9 (0.93%) CyberArk
15 9 (0.93%) Datto
16 8 (0.83%) Juniper
16 8 (0.83%) Xero