Period
to 23 November 2020

The following table provides summary statistics for permanent job vacancies with a requirement for NCSC skills. Included is a benchmarking guide to the salaries offered in vacancies that have cited NCSC over the 6 months to 23 November 2020 with a comparison to the same period in the previous 2 years.

National Cyber Security Centre (NCSC)
UK
6 months to
23 Nov 2020
Same period 2019 Same period 2018
Rank 633 908 1093
Rank change year-on-year +275 +185 +48
Permanent jobs citing NCSC 88 152 98
As % of all permanent jobs advertised in the UK 0.16% 0.11% 0.060%
As % of the Quality Assurance & Compliance category 1.38% 0.87% 0.45%
Number of salaries quoted 82 121 64
Median annual salary £65,000 £67,500 £60,000
Median salary % change year-on-year -3.70% +12.50% +26.98%
10th Percentile £38,750 £45,000 £38,625
90th Percentile £87,500 £88,750 £81,000
UK excluding London median annual salary £65,000 £62,000 £60,000
% change year-on-year +4.84% +3.33% +29.73%

NCSC is in the Quality Assurance and Compliance category. The following table is for comparison with the above and provides summary statistics for all permanent job vacancies with a requirement for quality assurance or compliance skills.

All Quality Assurance and Compliance Skills
UK
Permanent vacancies with a requirement for quality assurance or compliance skills 6,382 17,475 21,828
As % of all permanent IT jobs advertised in the UK 11.78% 12.93% 13.40%
Number of salaries quoted 4,979 13,268 16,420
Median annual salary £53,506 £50,000 £50,000
Median salary % change year-on-year +7.01% - -
10th Percentile £30,750 £28,461 £27,750
90th Percentile £85,000 £82,500 £80,000
UK excluding London median annual salary £50,000 £45,000 £45,000
% change year-on-year +11.11% - +5.88%

NCSC
Job Vacancy Trend

Job postings citing NCSC as a proportion of all IT jobs advertised.

Job vacancy trend for NCSC in the UK

NCSC
Salary Trend

3-month moving average salary quoted in jobs citing NCSC.

Salary trend for NCSC in the UK

NCSC
Salary Histogram

Salary distribution for jobs citing NCSC over the 6 months to 23 November 2020.

Salary histogram for NCSC in the UK

NCSC
Top 16 Job Locations

The table below looks at the demand and provides a guide to the median salaries quoted in IT jobs citing NCSC within the UK over the 6 months to 23 November 2020. The 'Rank Change' column provides an indication of the change in demand within each location based on the same 6 month period last year.

Location Rank Change
on Same Period
Last Year
Matching
Permanent
IT Job Ads
Median Salary
Past 6 Months
Median Salary
% Change
on Same Period
Last Year
Live
Job
Vacancies
England +301 84 £65,000 -7.14% 37
UK excluding London +255 74 £65,000 +4.84% 30
South West +119 31 £65,000 -15.46% 6
South East +202 23 £59,000 +18.00% 13
Work from Home -17 19 £65,000 -11.86% 2
London +215 10 £70,000 -5.08% 9
North of England +139 10 £55,000 -25.42% 3
Midlands +119 9 £70,000 -5.08% 4
West Midlands +97 8 £70,000 -5.08% 2
Yorkshire +100 6 £55,000 -25.42% 1
North West +116 4 £35,000 -52.91% 2
East of England +145 2 £85,000 +51.11% 1
Scotland +77 2 - - 1
East Midlands +76 1 £30,000 -64.71% 2
Northern Ireland +21 1 £65,000 +30.00% 1
Wales - 1 £38,000 - 1

For the 6 months to 23 November 2020, IT jobs citing NCSC also mentioned the following skills in order of popularity. The figures indicate the absolute number co-occurrences and as a proportion of all permanent job ads with a requirement for NCSC.

1 56 (63.64%) Cybersecurity
2 51 (57.95%) ISO/IEC 27001
3 40 (45.45%) Risk Management
3 40 (45.45%) CISSP
4 38 (43.18%) Security Cleared
5 35 (39.77%) Information Security
6 33 (37.50%) CISM
7 29 (32.95%) SC Cleared
8 28 (31.82%) Security Architecture
9 27 (30.68%) CESG Certified Professional
9 27 (30.68%) NIST
10 24 (27.27%) Management Information System
10 24 (27.27%) Information Assurance
11 21 (23.86%) Azure
11 21 (23.86%) Public Sector
12 18 (20.45%) HMG Security Policy Framework
13 17 (19.32%) ISO/IEC 27005
13 17 (19.32%) Security Management
14 16 (18.18%) Agile Software Development
14 16 (18.18%) Microsoft
14 16 (18.18%) AWS
14 16 (18.18%) PCI DSS
14 16 (18.18%) GDPR
14 16 (18.18%) Cyber Essentials
15 14 (15.91%) Firewall
15 14 (15.91%) SIEM
16 13 (14.77%) DV Cleared
16 13 (14.77%) CISA
16 13 (14.77%) Risk Assessment
17 12 (13.64%) Active Directory

NCSC
Co-occurring IT Skills by Category

The follow tables expand on the table above by listing co-occurrences grouped by category. The same job type, locality and period is covered with up to 20 co-occurrences shown in each of the following categories:

Application Platforms
1 4 (4.55%) SharePoint
2 2 (2.27%) Camunda
2 2 (2.27%) Confluence
3 1 (1.14%) Adobe Experience Manager
3 1 (1.14%) CMS
3 1 (1.14%) Drupal
Business Applications
1 1 (1.14%) Infor M3
Cloud Services
1 21 (23.86%) Azure
2 16 (18.18%) AWS
3 10 (11.36%) IaaS
3 10 (11.36%) PaaS
4 9 (10.23%) SaaS
5 7 (7.95%) Office 365
6 4 (4.55%) Dynamics 365
6 4 (4.55%) OneDrive
6 4 (4.55%) Power Automate
7 3 (3.41%) GCP
8 2 (2.27%) Cloud Computing
8 2 (2.27%) OpenShift
9 1 (1.14%) Azure Active Directory
9 1 (1.14%) Google Analytics
9 1 (1.14%) HP Helion
9 1 (1.14%) IBM Cloud
9 1 (1.14%) SoftLayer
Communications & Networking
1 14 (15.91%) Firewall
2 9 (10.23%) Intrusion Detection
3 8 (9.09%) Unified Communications
4 6 (6.82%) Network Security
5 4 (4.55%) IPv4
5 4 (4.55%) IPv6
5 4 (4.55%) VPN
6 3 (3.41%) LAN
6 3 (3.41%) WAN
7 2 (2.27%) Wireless
7 2 (2.27%) Wireless Security
8 1 (1.14%) BGP
8 1 (1.14%) DMARC
8 1 (1.14%) Internet
8 1 (1.14%) RTP
8 1 (1.14%) SAN
8 1 (1.14%) SSH
8 1 (1.14%) SSL
8 1 (1.14%) TCP/IP
8 1 (1.14%) VLAN
Database & Business Intelligence
1 9 (10.23%) Big Data
2 2 (2.27%) MySQL
2 2 (2.27%) PostgreSQL
2 2 (2.27%) Relational Database
3 1 (1.14%) Data Warehouse
Development Applications
1 2 (2.27%) Ant
1 2 (2.27%) Cucumber
1 2 (2.27%) Git (software)
1 2 (2.27%) Gradle
1 2 (2.27%) JIRA
1 2 (2.27%) JUnit
1 2 (2.27%) Maven
1 2 (2.27%) Mockito
1 2 (2.27%) Snyk
2 1 (1.14%) Burp Suite
2 1 (1.14%) Jenkins
2 1 (1.14%) Visual Studio Team System
General
1 21 (23.86%) Public Sector
2 11 (12.50%) Legal
3 5 (5.68%) Finance
3 5 (5.68%) Telecoms
4 4 (4.55%) Manufacturing
5 3 (3.41%) Advertising
6 2 (2.27%) Marketing
6 2 (2.27%) Military
7 1 (1.14%) Banking
7 1 (1.14%) Electronics
7 1 (1.14%) Law
Job Titles
1 32 (36.36%) Architect
2 27 (30.68%) Consultant
3 22 (25.00%) Security Architect
4 15 (17.05%) Security Consultant
5 9 (10.23%) Cloud Architect
5 9 (10.23%) Solutions Architect
6 8 (9.09%) Cybersecurity Consultant
7 7 (7.95%) Information Assurance Consultant
8 6 (6.82%) Security Manager
9 5 (5.68%) Information Security Consultant
10 4 (4.55%) Cloud Solutions Architect
10 4 (4.55%) Cybersecurity Architect
10 4 (4.55%) Microsoft Consultant
11 3 (3.41%) Analyst
11 3 (3.41%) IT Manager
11 3 (3.41%) IT Security Manager
11 3 (3.41%) Network Architect
11 3 (3.41%) Senior Information Assurance Consultant
11 3 (3.41%) Senior Information Security Consultant
11 3 (3.41%) Senior Security Consultant
Libraries, Frameworks & Software Standards
1 3 (3.41%) AngularJS
1 3 (3.41%) React
2 2 (2.27%) 802.1X
2 2 (2.27%) CSS
2 2 (2.27%) HTML
2 2 (2.27%) ModSecurity
2 2 (2.27%) Nightwatchjs
2 2 (2.27%) Spring
2 2 (2.27%) Spring Boot
2 2 (2.27%) Twitter Bootstrap
2 2 (2.27%) Vue.js
2 2 (2.27%) Web Services
3 1 (1.14%) Material Design
Miscellaneous
1 24 (27.27%) Management Information System
2 7 (7.95%) CESG
3 6 (6.82%) Cloud Native
3 6 (6.82%) PKI
3 6 (6.82%) Security Operations Centre
4 5 (5.68%) Distributed Denial-of-Service
4 5 (5.68%) Public Cloud
5 4 (4.55%) Analytical Skills
5 4 (4.55%) Cyberattack
5 4 (4.55%) Self-Motivation
6 2 (2.27%) Blog
6 2 (2.27%) Cyberthreat
6 2 (2.27%) User Experience
7 1 (1.14%) BYOD
7 1 (1.14%) Cyber Defence
7 1 (1.14%) Data Centre
7 1 (1.14%) Data Protection Act
7 1 (1.14%) Enterprise Software
7 1 (1.14%) Smartphone
7 1 (1.14%) Social Media
Operating Systems
1 6 (6.82%) Linux
2 5 (5.68%) Windows
2 5 (5.68%) Windows Server
2 5 (5.68%) Windows Server 2016
3 4 (4.55%) Windows 10
3 4 (4.55%) Windows Server 2019
4 1 (1.14%) Kali Linux
Processes & Methodologies
1 56 (63.64%) Cybersecurity
2 40 (45.45%) Risk Management
3 35 (39.77%) Information Security
4 28 (31.82%) Security Architecture
5 24 (27.27%) Information Assurance
6 17 (19.32%) Security Management
7 16 (18.18%) Agile Software Development
8 14 (15.91%) SIEM
9 13 (14.77%) Risk Assessment
10 12 (13.64%) ISMS
11 11 (12.50%) Open Source
12 10 (11.36%) Analytics
12 10 (11.36%) DevSecOps
12 10 (11.36%) Ethical Hacking
12 10 (11.36%) Information Security Management
13 9 (10.23%) Data Privacy
14 8 (9.09%) Converged Infrastructure
14 8 (9.09%) DevOps
14 8 (9.09%) High Availability
14 8 (9.09%) Penetration Testing
Programming Languages
1 6 (6.82%) Java
2 5 (5.68%) Python
3 3 (3.41%) SQL
4 2 (2.27%) Java 8
4 2 (2.27%) JavaScript
4 2 (2.27%) PowerShell
Qualifications
1 40 (45.45%) CISSP
2 38 (43.18%) Security Cleared
3 33 (37.50%) CISM
4 29 (32.95%) SC Cleared
5 27 (30.68%) CESG Certified Professional
6 13 (14.77%) CISA
6 13 (14.77%) DV Cleared
7 9 (10.23%) CEH
7 9 (10.23%) CRISC
8 8 (9.09%) Degree
8 8 (9.09%) OSCP
9 5 (5.68%) DBS Check
10 4 (4.55%) ISO 27001 Lead Implementer
11 3 (3.41%) (ISC)2 CCSP
11 3 (3.41%) CCSP
11 3 (3.41%) Cisco Certification
11 3 (3.41%) MCSE
11 3 (3.41%) Microsoft Certification
11 3 (3.41%) SSCP
12 2 (2.27%) CCIE
Quality Assurance & Compliance
1 51 (57.95%) ISO/IEC 27001
2 27 (30.68%) NIST
3 18 (20.45%) HMG Security Policy Framework
4 17 (19.32%) ISO/IEC 27005
5 16 (18.18%) Cyber Essentials
5 16 (18.18%) GDPR
5 16 (18.18%) PCI DSS
6 9 (10.23%) JSP 440
7 8 (9.09%) COBIT
7 8 (9.09%) RMADS
8 6 (6.82%) Cyber Essentials PLUS
8 6 (6.82%) ISO 22301
8 6 (6.82%) ISO 31000
8 6 (6.82%) NIST 800
9 5 (5.68%) ISO/IEC 27002 (supersedes ISO/IEC 17799)
10 3 (3.41%) Government Security Classifications
11 2 (2.27%) Sarbanes-Oxley
System Software
1 12 (13.64%) Active Directory
2 8 (9.09%) Docker
Systems Management
1 12 (13.64%) Terraform
2 5 (5.68%) Ansible
2 5 (5.68%) Computer Emergency Response Teams
3 3 (3.41%) Nessus
4 2 (2.27%) Kubernetes
4 2 (2.27%) Microsoft Intune
4 2 (2.27%) OpenVAS
5 1 (1.14%) Single Sign-On
Vendors
1 16 (18.18%) Microsoft
2 10 (11.36%) Google
3 6 (6.82%) Cisco
4 4 (4.55%) Juniper
5 3 (3.41%) Oracle
6 2 (2.27%) AlienVault
6 2 (2.27%) Atlassian
6 2 (2.27%) Red Hat
7 1 (1.14%) Arista
7 1 (1.14%) SAP
7 1 (1.14%) Trend Micro