Period
to 30 March 2020

The following table provides summary statistics for permanent job vacancies with a requirement for NCSC skills. Included is a benchmarking guide to the salaries offered in vacancies that have cited NCSC over the 6 months to 30 March 2020 with a comparison to the same period in the previous 2 years.

National Cyber Security Centre (NCSC)
UK
6 months to
30 Mar 2020
Same period 2019 Same period 2018
Rank 822 978 1187
Rank change year-on-year +156 +209 +3
Permanent jobs citing NCSC 171 147 31
As % of all permanent jobs advertised in the UK 0.14% 0.099% 0.017%
As % of the Quality Assurance & Compliance category 1.18% 0.70% 0.14%
Number of salaries quoted 111 102 20
Median annual salary £67,500 £70,000 £70,000
Median salary % change year-on-year -3.57% - +75.00%
10th Percentile £47,500 £52,500 £41,005
90th Percentile £93,750 £96,250 £85,000
UK excluding London median annual salary £65,000 £70,000 £53,500
% change year-on-year -7.14% +30.84% +78.33%

NCSC is in the Quality Assurance and Compliance category. The following table is for comparison with the above and provides summary statistics for all permanent job vacancies with a requirement for quality assurance or compliance skills.

All Quality Assurance and Compliance Skills
UK
Permanent vacancies with a requirement for quality assurance or compliance skills 14,539 20,887 22,683
As % of all permanent IT jobs advertised in the UK 12.28% 14.00% 12.79%
Number of salaries quoted 11,168 15,192 17,661
Median annual salary £52,500 £50,000 £50,000
Median salary % change year-on-year +5.00% - +5.26%
10th Percentile £28,750 £27,500 £27,500
90th Percentile £83,750 £81,250 £80,000
UK excluding London median annual salary £45,000 £45,000 £43,500
% change year-on-year - +3.45% +6.10%

NCSC
Job Vacancy Trend

Job postings citing NCSC as a proportion of all IT jobs advertised.

Job vacancy trend for NCSC in the UK

NCSC
Salary Trend

3-month moving average salary quoted in jobs citing NCSC.

Salary trend for NCSC in the UK

NCSC
Salary Histogram

Salary distribution for jobs citing NCSC over the 6 months to 30 March 2020.

Salary histogram for NCSC in the UK

NCSC
Top 15 Job Locations

The table below looks at the demand and provides a guide to the median salaries quoted in IT jobs citing NCSC within the UK over the 6 months to 30 March 2020. The 'Rank Change' column provides an indication of the change in demand within each location based on the same 6 month period last year.

Location Rank Change
on Same Period
Last Year
Matching
Permanent
IT Job Ads
Median Salary
Past 6 Months
Median Salary
% Change
on Same Period
Last Year
Live
Job
Vacancies
England +138 158 £66,750 -4.64% 17
UK excluding London +99 106 £65,000 -7.14% 12
London +103 55 £76,883 -0.80% 5
South East +62 37 £65,000 -7.14% 1
South West +60 36 £76,883 +112.09% 5
Work from Home +24 24 £70,000 -6.67% 2
North of England +62 17 £57,000 -5.00% 3
North West +41 13 £56,611 -5.65% 3
Midlands +51 8 £65,000 -23.53%
West Midlands +52 7 £60,000 -33.33%
East of England +59 4 £57,500 - 3
Yorkshire +46 4 £65,625 -
Scotland +46 3 £53,750 -6.52%
Wales - 2 - - 1
Northern Ireland - 1 £50,000 -

For the 6 months to 30 March 2020, IT jobs citing NCSC also mentioned the following skills in order of popularity. The figures indicate the absolute number co-occurrences and as a proportion of all permanent job ads with a requirement for NCSC.

1 120 (70.18%) Cybersecurity
2 113 (66.08%) CISSP
3 105 (61.40%) CISM
4 95 (55.56%) Information Security
5 87 (50.88%) ISO/IEC 27001
6 65 (38.01%) Security Cleared
7 64 (37.43%) Risk Management
8 63 (36.84%) Information Assurance
9 55 (32.16%) CESG Certified Professional
10 47 (27.49%) Degree
11 43 (25.15%) SC Cleared
12 40 (23.39%) Security Architecture
12 40 (23.39%) Agile Software Development
12 40 (23.39%) NIST
13 37 (21.64%) Cyber Essentials
14 33 (19.30%) Security Management
15 32 (18.71%) Azure
16 31 (18.13%) Risk Assessment
17 30 (17.54%) CISA
17 30 (17.54%) IISP
18 29 (16.96%) CRISC
19 28 (16.37%) AWS
19 28 (16.37%) PCI DSS
20 27 (15.79%) IIS
20 27 (15.79%) HMG Security Policy Framework
20 27 (15.79%) Mentoring
21 25 (14.62%) Management Information System
21 25 (14.62%) OWASP
22 23 (13.45%) MBCS
22 23 (13.45%) Public Cloud

NCSC
Co-occurring IT Skills by Category

The follow tables expand on the table above by listing co-occurrences grouped by category. The same job type, locality and period is covered with up to 20 co-occurrences shown in each of the following categories:

Application Platforms
1 27 (15.79%) IIS
2 8 (4.68%) Confluence
2 8 (4.68%) Red Hat Fuse
3 2 (1.17%) Drupal
4 1 (0.58%) Exchange Server 2010
4 1 (0.58%) Exchange Server 2013
4 1 (0.58%) MS Exchange
4 1 (0.58%) Skype for Business
Applications
1 8 (4.68%) Microsoft Excel
2 7 (4.09%) MS Visio
3 4 (2.34%) Microsoft PowerPoint
4 3 (1.75%) Microsoft Office
Business Applications
1 2 (1.17%) Sentinel
2 1 (0.58%) Sparx Enterprise Architect
Cloud Services
1 32 (18.71%) Azure
2 28 (16.37%) AWS
3 17 (9.94%) IaaS
4 15 (8.77%) Office 365
4 15 (8.77%) PaaS
5 14 (8.19%) SaaS
6 10 (5.85%) Amazon GuardDuty
7 8 (4.68%) Amazon CloudWatch
8 4 (2.34%) Azure Active Directory
8 4 (2.34%) Cloud Computing
9 2 (1.17%) AWS CloudFormation
10 1 (0.58%) AWS CodeDeploy
10 1 (0.58%) Mimecast
10 1 (0.58%) Power Platform
Communications & Networking
1 20 (11.70%) Firewall
2 18 (10.53%) Network Security
3 11 (6.43%) Internet
4 8 (4.68%) HTTP
5 6 (3.51%) Intrusion Detection
6 5 (2.92%) TCP/IP
6 5 (2.92%) VPN
7 4 (2.34%) SAN
8 3 (1.75%) SSL
9 2 (1.17%) Cisco ASA
9 2 (1.17%) DMARC
9 2 (1.17%) LAN
9 2 (1.17%) SSH
9 2 (1.17%) WAN
9 2 (1.17%) Wi-Fi
9 2 (1.17%) Wireless
9 2 (1.17%) Wireless Security
10 1 (0.58%) DHCP
10 1 (0.58%) RTP
10 1 (0.58%) Skype
Database & Business Intelligence
1 3 (1.75%) SQL Server
2 2 (1.17%) Big Data
2 2 (1.17%) MySQL
2 2 (1.17%) PostgreSQL
2 2 (1.17%) SQL Server 2008
2 2 (1.17%) SQL Server 2012
3 1 (0.58%) Azure SQL Data Warehouse
3 1 (0.58%) Azure SQL Database
3 1 (0.58%) Data Warehouse
3 1 (0.58%) Power BI
Development Applications
1 8 (4.68%) JIRA
General
1 21 (12.28%) Public Sector
2 20 (11.70%) Law
3 18 (10.53%) Aerospace
4 13 (7.60%) Finance
4 13 (7.60%) Legal
5 9 (5.26%) Military
6 8 (4.68%) Retail
7 6 (3.51%) Back Office
8 5 (2.92%) Advertising
9 2 (1.17%) Games
10 1 (0.58%) Telecoms
Job Titles
1 38 (22.22%) Consultant
1 38 (22.22%) Security Consultant
2 28 (16.37%) Cybersecurity Consultant
3 27 (15.79%) Security Manager
4 20 (11.70%) Architect
5 19 (11.11%) Information Manager
5 19 (11.11%) Information Security Manager
6 10 (5.85%) Senior Consultant
6 10 (5.85%) Senior Security Consultant
7 9 (5.26%) Information Security Officer
7 9 (5.26%) Security Architect
7 9 (5.26%) Security Engineer
7 9 (5.26%) Security Officer
8 8 (4.68%) Information Security Consultant
8 8 (4.68%) Technical Architect
9 7 (4.09%) Information Assurance Engineer
9 7 (4.09%) Principal Consultant
9 7 (4.09%) Principal Security Consultant
9 7 (4.09%) Risk Consultant
9 7 (4.09%) Senior Cybersecurity Consultant
Libraries, Frameworks & Software Standards
1 8 (4.68%) REST
1 8 (4.68%) SOAP
1 8 (4.68%) XML
2 7 (4.09%) ModSecurity
2 7 (4.09%) RESTful
3 6 (3.51%) Velocity
4 3 (1.75%) LDAP
4 3 (1.75%) Web Services
5 2 (1.17%) 802.1X
5 2 (1.17%) LAMP
6 1 (0.58%) SAML
Miscellaneous
1 25 (14.62%) Management Information System
2 23 (13.45%) Public Cloud
2 23 (13.45%) Self-Motivation
3 15 (8.77%) Cyber Defence
4 7 (4.09%) Data Protection Act
5 6 (3.51%) Analytical Skills
6 5 (2.92%) Distributed Denial-of-Service
6 5 (2.92%) Virtual Team
7 4 (2.34%) PKI
8 3 (1.75%) Data Centre
9 2 (1.17%) Cloud Native
9 2 (1.17%) Cyberattack
9 2 (1.17%) Cyberthreat
9 2 (1.17%) EMC VNX
9 2 (1.17%) NHS
10 1 (0.58%) CESG
10 1 (0.58%) Clustering
10 1 (0.58%) SCADA
10 1 (0.58%) Smart Meter
10 1 (0.58%) User Experience
Operating Systems
1 15 (8.77%) Linux
2 12 (7.02%) Windows
3 8 (4.68%) Ubuntu
4 7 (4.09%) Windows Server
5 3 (1.75%) Windows Server 2012
6 2 (1.17%) Windows 10
6 2 (1.17%) Windows 7
6 2 (1.17%) Windows Server 2008
6 2 (1.17%) Windows Server 2016
7 1 (0.58%) VMS
Processes & Methodologies
1 120 (70.18%) Cybersecurity
2 95 (55.56%) Information Security
3 64 (37.43%) Risk Management
4 63 (36.84%) Information Assurance
5 40 (23.39%) Agile Software Development
5 40 (23.39%) Security Architecture
6 33 (19.30%) Security Management
7 31 (18.13%) Risk Assessment
8 27 (15.79%) Mentoring
9 25 (14.62%) OWASP
10 21 (12.28%) Data Protection
10 21 (12.28%) Ergonomics
10 21 (12.28%) Human Factors
10 21 (12.28%) Stakeholder Management
11 17 (9.94%) Open Source
12 16 (9.36%) Data Privacy
12 16 (9.36%) Identity Access Management
12 16 (9.36%) Internal Audit
12 16 (9.36%) Penetration Testing
13 15 (8.77%) Analytics
Programming Languages
1 9 (5.26%) Java
2 7 (4.09%) C
3 6 (3.51%) PowerShell
4 4 (2.34%) SQL
5 2 (1.17%) Bash Shell
6 1 (0.58%) Perl
6 1 (0.58%) Python
Qualifications
1 113 (66.08%) CISSP
2 105 (61.40%) CISM
3 65 (38.01%) Security Cleared
4 55 (32.16%) CESG Certified Professional
5 47 (27.49%) Degree
6 43 (25.15%) SC Cleared
7 30 (17.54%) CISA
7 30 (17.54%) IISP
8 29 (16.96%) CRISC
9 23 (13.45%) MBCS
10 18 (10.53%) DV Cleared
11 10 (5.85%) CISMP
12 8 (4.68%) (ISC)2 CCSP
12 8 (4.68%) Cisco Certification
12 8 (4.68%) CREST Certified
13 7 (4.09%) CEH
14 6 (3.51%) CompTIA Security+
15 5 (2.92%) CCSP
16 4 (2.34%) PCI QSA
17 3 (1.75%) Computer Science Degree
Quality Assurance & Compliance
1 87 (50.88%) ISO/IEC 27001
2 40 (23.39%) NIST
3 37 (21.64%) Cyber Essentials
4 28 (16.37%) PCI DSS
5 27 (15.79%) HMG Security Policy Framework
6 19 (11.11%) GDPR
7 18 (10.53%) QA
8 16 (9.36%) JSP 440
9 13 (7.60%) COBIT
10 10 (5.85%) NIST 800
11 9 (5.26%) Sarbanes-Oxley
12 8 (4.68%) Government Security Classifications
12 8 (4.68%) RMADS
13 5 (2.92%) HIPAA
13 5 (2.92%) ISO 22301
14 2 (1.17%) ISO/IEC 27005
15 1 (0.58%) Cyber Essentials PLUS
15 1 (0.58%) IASME
15 1 (0.58%) ISO 31000
15 1 (0.58%) ISO/IEC 27002 (supersedes ISO/IEC 17799)
System Software
1 10 (5.85%) Active Directory
2 3 (1.75%) Docker
2 3 (1.75%) VMware Infrastructure
3 2 (1.17%) vSphere
3 2 (1.17%) XenApp
4 1 (0.58%) ACF2
4 1 (0.58%) Hyper-V
4 1 (0.58%) Virtual Machines
Systems Management
1 8 (4.68%) ZABBIX
2 4 (2.34%) Terraform
3 3 (1.75%) Nessus
4 2 (1.17%) McAfee ePO
4 2 (1.17%) Microsoft Intune
4 2 (1.17%) QRadar
5 1 (0.58%) Computer Emergency Response Teams
5 1 (0.58%) Kubernetes
5 1 (0.58%) Norton AntiVirus
5 1 (0.58%) Single Sign-On
Vendors
1 19 (11.11%) Microsoft
2 10 (5.85%) Cisco
3 9 (5.26%) Capita
4 8 (4.68%) Red Hat
5 5 (2.92%) Fortinet
5 5 (2.92%) Palo Alto
5 5 (2.92%) Splunk
5 5 (2.92%) VMware
6 3 (1.75%) McAfee
6 3 (1.75%) Rapid7
6 3 (1.75%) Sophos
6 3 (1.75%) Symantec
7 2 (1.17%) 3PAR
7 2 (1.17%) CA
7 2 (1.17%) Citrix
7 2 (1.17%) EMC
7 2 (1.17%) Google
7 2 (1.17%) HP
7 2 (1.17%) Trend Micro
7 2 (1.17%) Zerto