Period
to 19 September 2017

The following table provides summary statistics for permanent job vacancies with a requirement for Information Security skills. Included is a benchmarking guide to the salaries offered in vacancies that have cited Information Security over the 6 months to 19 September 2017 with a comparison to the same period in the previous 2 years.

Information Security (InfoSec)
UK
6 months to
19 Sep 2017
Same period 2016 Same period 2015
Rank 113 98 140
Rank change year-on-year -15 +42 +43
Permanent jobs citing Information Security 4994 5648 5160
As % of all permanent IT jobs advertised in the UK 2.82% 2.91% 2.35%
As % of the Processes & Methodologies category 3.14% 3.27% 2.66%
Number of salaries quoted 3860 4476 4210
UK median annual salary £60,000 £60,000 £55,000
Median salary % change year-on-year - +9.09% +10.00%
10th Percentile £35,613 £36,250 £33,750
90th Percentile £90,000 £86,250 £82,500
UK excluding London median annual salary £50,000 £52,500 £50,000
% change year-on-year -4.76% +5.00% +8.70%

Information Security is in the Processes and Methodologies category. The following table is for comparison with the above and provides summary statistics for all permanent job vacancies with a requirement for process or methodology skills.

All Process and Methodology Skills
UK
Permanent vacancies with a requirement for process or methodology skills 159247 172880 193638
As % of all permanent IT jobs advertised in the UK 89.88% 89.13% 88.28%
Number of salaries quoted 125489 144219 159192
UK median annual salary £50,000 £50,000 £47,500
Median salary % change year-on-year - +5.26% +5.56%
10th Percentile £28,750 £28,000 £27,500
90th Percentile £80,000 £78,750 £76,250
UK excluding London median annual salary £42,500 £42,500 £42,500

Information Security
Job Vacancy Trend

Job postings citing Information Security as a percentage of all IT jobs advertised.

Job vacancy trend for Information Security in the UK

Information Security
Salary Trend

This chart provides the 3-month moving average for salaries quoted in permanent IT jobs citing Information Security.

Salary trend for Information Security in the UK

Information Security
Salary Histogram

The salary distribution of IT jobs citing Information Security over the 6 months to 19 September 2017.

Salary histogram for Information Security in the UK

Information Security
Top 17 Job Locations

The table below looks at the demand and provides a guide to the median salaries quoted in IT jobs citing Information Security within the UK over the 6 months to 19 September 2017. The 'Rank Change' column provides an indication of the change in demand within each location based on the same 6 month period last year.

Location Rank Change
on Same Period
Last Year
Matching
Permanent
IT Job Ads
Median Salary
Past 6 Months
Median Salary
% Change
on Same Period
Last Year
Live
Job
Vacancies
England -14 4746 £60,000 - 315
London +2 2473 £65,000 - 138
UK excluding London -27 2386 £50,000 -4.76% 191
South East -30 763 £52,500 -4.55% 69
North of England -15 687 £49,500 -2.94% 48
North West +29 401 £54,250 -1.36% 25
Midlands -39 324 £50,000 - 16
West Midlands -40 254 £52,500 +5.00% 14
East of England -13 253 £55,000 +15.79% 24
Yorkshire -47 252 £45,000 -10.00% 19
South West -14 230 £50,000 -4.76% 18
Scotland -38 88 £49,000 -6.22% 7
East Midlands +10 68 £47,500 -13.64% 2
Wales +4 40 £42,500 -5.56% 5
North East +17 34 £47,500 +14.46% 4
Northern Ireland -23 11 £47,500 +18.75% 3
Isle of Man - 3 - - 1

For the 6 months to 19 September 2017, IT jobs citing Information Security also mentioned the following skills in order of popularity. The figures indicate the number co-occurrences and its proportion to all job ads with a requirement for Information Security.

1 1889 (37.83%) CISSP
2 1769 (35.42%) ISO/IEC 27001
3 1508 (30.20%) Finance
4 1383 (27.69%) CISM
5 1349 (27.01%) Cybersecurity
6 1068 (21.39%) Risk Management
7 1063 (21.29%) Management Information System
8 1017 (20.36%) Degree
9 922 (18.46%) Firewall
10 916 (18.34%) PCI DSS
11 905 (18.12%) Data Protection
12 809 (16.20%) SIEM
13 797 (15.96%) CISA
14 787 (15.76%) Penetration Testing
15 780 (15.62%) ITIL
16 766 (15.34%) Windows
17 652 (13.06%) Security Architecture
18 642 (12.86%) Agile Software Development
19 588 (11.77%) Linux
20 570 (11.41%) Security Operations
21 535 (10.71%) Computer Science
22 510 (10.21%) Microsoft
23 498 (9.97%) Network Security
24 492 (9.85%) Analytical Skills
25 491 (9.83%) Security Management
26 468 (9.37%) GDPR
27 463 (9.27%) Project Management
28 451 (9.03%) Active Directory
29 424 (8.49%) Banking
30 399 (7.99%) Information Security Management

Information Security
Co-occurring IT Skills by Category

The follow tables expand on the table above by listing co-occurrences grouped by category. The same job type, locality and period is covered with up to 20 co-occurrences shown in each of the following categories:

Application Platforms
1 117 (2.34%) MS Exchange
2 75 (1.50%) IIS
3 71 (1.42%) SharePoint
4 59 (1.18%) Exchange Server 2010
5 38 (0.76%) Exchange Server 2013
6 27 (0.54%) Skype for Business
7 24 (0.48%) Apache
8 23 (0.46%) CMS
9 19 (0.38%) Apache Spark
10 17 (0.34%) OpenStack
11 14 (0.28%) Exchange Server 2007
11 14 (0.28%) Tomcat
12 13 (0.26%) SAS
13 10 (0.20%) Confluence
13 10 (0.20%) Elasticsearch
14 9 (0.18%) nginx
14 9 (0.18%) SharePoint 2010
15 8 (0.16%) Oracle SOA Suite
16 7 (0.14%) SharePoint 2013
16 7 (0.14%) WebSphere
Applications
1 102 (2.04%) Microsoft Office
2 68 (1.36%) Microsoft Excel
3 55 (1.10%) Microsoft PowerPoint
4 36 (0.72%) MS Visio
5 31 (0.62%) Microsoft Project
6 14 (0.28%) Spreadsheet
7 5 (0.10%) SPSS
8 3 (0.060%) GIMP
9 1 (0.020%) Acrobat
Business Applications
1 18 (0.36%) Sentinel
2 14 (0.28%) Remedy ITSM
3 13 (0.26%) Oracle Applications
4 12 (0.24%) Magento
5 11 (0.22%) assyst
5 11 (0.22%) Dynamics CRM
6 5 (0.10%) Dynamics AX
6 5 (0.10%) Payment Gateway
7 4 (0.080%) Cognos TM1
7 4 (0.080%) Infor M3
7 4 (0.080%) Oracle ERP
8 3 (0.060%) Adobe Campaign
8 3 (0.060%) Sage CRM
8 3 (0.060%) SAP HCM
8 3 (0.060%) Unica
9 2 (0.040%) Dynamics NAV
9 2 (0.040%) Sage 200
9 2 (0.040%) SAP Business One
9 2 (0.040%) SAP GRC
9 2 (0.040%) Veritas eDiscovery
Cloud Services
1 244 (4.89%) Amazon AWS
2 223 (4.47%) Microsoft Azure
3 186 (3.72%) SaaS
4 130 (2.60%) Office 365
5 124 (2.48%) IaaS
6 54 (1.08%) PaaS
7 39 (0.78%) Cloud Computing
8 20 (0.40%) Azure Active Directory
9 16 (0.32%) Mimecast
10 12 (0.24%) Google Cloud Platform
11 10 (0.20%) AWS CloudFormation
12 8 (0.16%) Force.com
12 8 (0.16%) G Suite
12 8 (0.16%) Sumo Logic
12 8 (0.16%) Virtual Private Cloud
13 6 (0.12%) Cloudflare
13 6 (0.12%) Trello
14 4 (0.080%) OneDrive
14 4 (0.080%) OpenShift
15 3 (0.060%) Google Compute Engine
Communications & Networking
1 922 (18.46%) Firewall
2 498 (9.97%) Network Security
3 325 (6.51%) TCP/IP
4 219 (4.39%) WAN
5 214 (4.29%) Internet
6 205 (4.10%) LAN
7 178 (3.56%) Intrusion Detection
8 153 (3.06%) DNS
9 150 (3.00%) VPN
10 98 (1.96%) VoIP
11 96 (1.92%) SAN
12 90 (1.80%) DHCP
13 75 (1.50%) Wireless
14 66 (1.32%) HTTP
15 58 (1.16%) VLAN
16 57 (1.14%) Cisco ASA
17 51 (1.02%) SMTP
18 45 (0.90%) Wireshark
19 44 (0.88%) LDAP
20 42 (0.84%) SSL
Database & Business Intelligence
1 196 (3.92%) SQL Server
2 87 (1.74%) MySQL
3 52 (1.04%) SQL Server 2008
4 50 (1.00%) SQL Server 2012
5 46 (0.92%) NoSQL
6 45 (0.90%) SQL Server Reporting Services
7 41 (0.82%) SQL Server Integration Services
8 38 (0.76%) Relational Database
9 37 (0.74%) Big Data
10 36 (0.72%) Hadoop
11 31 (0.62%) GIS
12 29 (0.58%) PostgreSQL
13 28 (0.56%) MongoDB
14 22 (0.44%) SQL Server 2000
14 22 (0.44%) SQL Server 2005
14 22 (0.44%) SQL Server Analysis Services
15 20 (0.40%) RDBMS
16 19 (0.38%) Data Warehouse
17 16 (0.32%) SQL Server 2014
18 15 (0.30%) Oracle Database
Development Applications
1 49 (0.98%) Metasploit
2 33 (0.66%) JIRA
3 32 (0.64%) Burp Suite
4 31 (0.62%) Jenkins
5 30 (0.60%) Git (software)
6 21 (0.42%) AppScan
6 21 (0.42%) Team Foundation Server
7 18 (0.36%) TeamCity
8 16 (0.32%) Visual Studio
9 14 (0.28%) Octopus Deploy
9 14 (0.28%) Paros
9 14 (0.28%) Selenium
10 9 (0.18%) WebScarab
11 8 (0.16%) Atlassian Bamboo
11 8 (0.16%) Gradle
11 8 (0.16%) JUnit
11 8 (0.16%) Maven
11 8 (0.16%) Mockito
11 8 (0.16%) TestNG
12 7 (0.14%) Sonatype Nexus
General
1 1508 (30.20%) Finance
2 424 (8.49%) Banking
3 341 (6.83%) Legal
4 247 (4.95%) Retail
5 206 (4.12%) Telecoms
6 164 (3.28%) Law
7 161 (3.22%) Marketing
8 106 (2.12%) Manufacturing
9 99 (1.98%) Investment Banking
10 77 (1.54%) Financial Institution
11 74 (1.48%) Electronics
12 52 (1.04%) Retail Banking
13 34 (0.68%) Advertising
14 29 (0.58%) Games
15 23 (0.46%) Publishing
16 22 (0.44%) Corporate Banking
17 21 (0.42%) Digital Economy
18 20 (0.40%) Military
19 19 (0.38%) Pharmaceutical
20 18 (0.36%) Automotive
Job Titles
1 1075 (21.53%) Analyst
2 827 (16.56%) Security Analyst
3 619 (12.39%) Security Manager
4 592 (11.85%) Consultant
5 461 (9.23%) Security Consultant
6 381 (7.63%) Information Analyst
7 378 (7.57%) Architect
8 376 (7.53%) Information Security Analyst
9 367 (7.35%) Information Manager
10 355 (7.11%) Information Security Manager
11 309 (6.19%) Security Engineer
12 255 (5.11%) Security Officer
13 238 (4.77%) Security Architect
14 228 (4.57%) IT Manager
15 215 (4.31%) Security Specialist
16 214 (4.29%) IT Analyst
17 200 (4.00%) Information Security Officer
18 186 (3.72%) Information Security Consultant
19 182 (3.64%) IT Security Analyst
20 181 (3.62%) Information Officer
Libraries, Frameworks & Software Standards
1 181 (3.62%) .NET
2 143 (2.86%) Web Services
3 113 (2.26%) HTML
4 73 (1.46%) SailPoint
5 54 (1.08%) CSS
6 51 (1.02%) Middleware
7 44 (0.88%) AngularJS
8 42 (0.84%) REST
9 41 (0.82%) ASP.NET
10 33 (0.66%) HTML5
11 31 (0.62%) XML
12 29 (0.58%) SOAP
13 28 (0.56%) ASP.NET Web API
14 26 (0.52%) React
15 22 (0.44%) Natural Language Processing
16 21 (0.42%) LAMP
17 20 (0.40%) RESTful
18 19 (0.38%) J2EE
19 17 (0.34%) Regular Expression
20 15 (0.30%) Entity Framework
Miscellaneous
1 1063 (21.29%) Management Information System
2 535 (10.71%) Computer Science
3 492 (9.85%) Analytical Skills
4 323 (6.47%) Data Protection Act
5 201 (4.02%) Data Centre
6 182 (3.64%) Cyberthreat
7 119 (2.38%) CESG
8 111 (2.22%) Security Operations Centre
9 91 (1.82%) Cyber Attack
10 84 (1.68%) Cyber Defence
10 84 (1.68%) Mobile App
11 70 (1.40%) PKI
12 61 (1.22%) Distributed Denial-of-Service
13 58 (1.16%) User Experience
14 48 (0.96%) Fintech
15 45 (0.90%) NHS
16 44 (0.88%) Driving Licence
16 44 (0.88%) iPad
17 42 (0.84%) SCADA
18 41 (0.82%) Virtual Team
Operating Systems
1 766 (15.34%) Windows
2 588 (11.77%) Linux
3 304 (6.09%) Windows Server
4 266 (5.33%) Unix
5 88 (1.76%) Windows Server 2008
6 84 (1.68%) Apple iOS
7 73 (1.46%) Windows Server 2012
8 57 (1.14%) Android
9 54 (1.08%) Windows 7
10 42 (0.84%) Mac OS X
10 42 (0.84%) Windows 10
11 34 (0.68%) CentOS
12 33 (0.66%) Windows Server 2003
13 32 (0.64%) Kali Linux
14 27 (0.54%) Solaris
15 22 (0.44%) Red Hat Enterprise Linux
16 20 (0.40%) Windows XP
17 16 (0.32%) Ubuntu
18 11 (0.22%) AIX
18 11 (0.22%) SUSE Linux Enterprise Server
Processes & Methodologies
1 1349 (27.01%) Cybersecurity
2 1068 (21.39%) Risk Management
3 905 (18.12%) Data Protection
4 809 (16.20%) SIEM
5 787 (15.76%) Penetration Testing
6 780 (15.62%) ITIL
7 652 (13.06%) Security Architecture
8 642 (12.86%) Agile Software Development
9 570 (11.41%) Security Operations
10 491 (9.83%) Security Management
11 463 (9.27%) Project Management
12 399 (7.99%) Information Security Management
13 395 (7.91%) Stakeholder Management
14 394 (7.89%) Vulnerability Management
15 377 (7.55%) ISMS
16 334 (6.69%) Incident Management
17 321 (6.43%) Change Management
18 317 (6.35%) Continuous Improvement
19 314 (6.29%) Risk Assessment
20 298 (5.97%) Identity Access Management
Programming Languages
1 256 (5.13%) SQL
2 233 (4.67%) Python
3 203 (4.06%) Java
4 170 (3.40%) C#
5 155 (3.10%) C
6 135 (2.70%) JavaScript
7 129 (2.58%) Perl
8 116 (2.32%) PowerShell
9 68 (1.36%) Ruby
10 56 (1.12%) C++
10 56 (1.12%) PHP
11 52 (1.04%) Bash Shell
12 36 (0.72%) Shell Script
13 23 (0.46%) VB.NET
14 22 (0.44%) VB
15 21 (0.42%) Bourne shell
16 17 (0.34%) Korn
17 16 (0.32%) VBScript
18 13 (0.26%) Go
18 13 (0.26%) T-SQL
Qualifications
1 1889 (37.83%) CISSP
2 1383 (27.69%) CISM
3 1017 (20.36%) Degree
4 797 (15.96%) CISA
5 397 (7.95%) Security Cleared
6 302 (6.05%) CEH
7 254 (5.09%) SC Cleared
8 243 (4.87%) Cisco Certification
9 241 (4.83%) GIAC
10 224 (4.49%) CRISC
11 176 (3.52%) Computer Science Degree
12 163 (3.26%) SANS
13 136 (2.72%) CCNA
14 135 (2.70%) CREST Certified
14 135 (2.70%) GCIH
15 120 (2.40%) Microsoft Certification
16 113 (2.26%) DV Cleared
17 111 (2.22%) CESG Certified Professional
18 108 (2.16%) SSCP
19 106 (2.12%) CCNP
Quality Assurance & Compliance
1 1769 (35.42%) ISO/IEC 27001
2 916 (18.34%) PCI DSS
3 468 (9.37%) GDPR
4 284 (5.69%) ISO/IEC 27002 (supersedes ISO/IEC 17799)
5 206 (4.12%) COBIT
6 198 (3.96%) Cyber Essentials
7 173 (3.46%) QA
8 155 (3.10%) Sarbanes-Oxley
9 115 (2.30%) SLA
10 98 (1.96%) ISO 9001
11 73 (1.46%) ISO/IEC 27005
12 72 (1.44%) ISO 22301
13 54 (1.08%) Data Quality
14 49 (0.98%) HMG Security Policy Framework
15 48 (0.96%) ISO/IEC 20000
16 46 (0.92%) Cyber Essentials PLUS
17 37 (0.74%) NIST 800
18 35 (0.70%) PMO
19 32 (0.64%) RMADS
20 26 (0.52%) SSAE 16
System Software
1 451 (9.03%) Active Directory
2 153 (3.06%) VMware Infrastructure
3 84 (1.68%) Hyper-V
4 64 (1.28%) VMware ESXi
5 61 (1.22%) Virtual Machines
6 46 (0.92%) Docker
7 42 (0.84%) vSphere
8 32 (0.64%) Snort
9 16 (0.32%) iptables
9 16 (0.32%) Virtual Servers
10 15 (0.30%) Firmware
11 12 (0.24%) ProxySG
12 10 (0.20%) VMware Workstation
13 9 (0.18%) XenApp
14 8 (0.16%) Apache Flume
14 8 (0.16%) Microsoft Virtual Server
15 7 (0.14%) XenServer
16 6 (0.12%) GlusterFS
16 6 (0.12%) Veritas Cluster Server
17 5 (0.10%) Microsoft App-V
Systems Management
1 195 (3.90%) Nessus
2 110 (2.20%) SCCM
3 86 (1.72%) QRadar
4 80 (1.60%) McAfee ePO
5 56 (1.12%) CSIRT
6 43 (0.86%) Puppet
7 41 (0.82%) Ansible
8 38 (0.76%) Opscode Chef
9 37 (0.74%) Nmap
10 35 (0.70%) Nexpose
11 30 (0.60%) Kubernetes
11 30 (0.60%) RSA Security Analytics
11 30 (0.60%) WSUS
12 29 (0.58%) Core Impact
12 29 (0.58%) Host Intrusion Detection System
12 29 (0.58%) PowerBroker
13 28 (0.56%) OpenVAS
14 23 (0.46%) vCenter Server
15 21 (0.42%) Nagios
16 20 (0.40%) SCOM
Vendors
1 510 (10.21%) Microsoft
2 360 (7.21%) Cisco
3 240 (4.81%) VMware
4 163 (3.26%) Oracle
5 162 (3.24%) Splunk
6 142 (2.84%) CheckPoint
7 131 (2.62%) McAfee
8 127 (2.54%) Palo Alto
9 124 (2.48%) CyberArk
10 114 (2.28%) Symantec
11 111 (2.22%) LogRhythm
12 98 (1.96%) Qualys
13 87 (1.74%) ArcSight
14 77 (1.54%) SAP
15 74 (1.48%) Juniper
16 71 (1.42%) HP
17 70 (1.40%) Cadence
18 63 (1.26%) SolarWinds
19 59 (1.18%) Apple
20 58 (1.16%) Citrix