Period
to 14 December 2017

The following table provides summary statistics for permanent job vacancies with a requirement for SANS qualifications. Included is a benchmarking guide to the salaries offered over the 6 months to 14 December 2017 with a comparison to the same period in the previous 2 years.

SANS Institute
UK
6 months to
14 Dec 2017
Same period 2016 Same period 2015
Rank 825 746 925
Rank change year-on-year -79 +179 +228
Permanent jobs citing SANS 381 483 396
As % of all permanent IT jobs advertised in the UK 0.21% 0.26% 0.18%
As % of the Qualifications category 0.89% 1.00% 0.67%
Number of salaries quoted 281 392 321
UK median annual salary £58,525 £60,000 £60,000
Median salary % change year-on-year -2.46% - +9.09%
10th Percentile £37,500 £40,000 £41,250
90th Percentile £88,750 £85,000 £82,500
UK excluding London median annual salary £50,000 £52,500 £60,000
% change year-on-year -4.76% -12.50% +20.00%

SANS is in the Academic Qualifications and Professional Certifications category. The following table is for comparison with the above and provides summary statistics for all permanent job vacancies with a requirement for academic qualifications or professional certifications.

All Academic and Professional Certifications
UK
Permanent vacancies requiring academic qualifications or professional certifications 42687 48295 59156
As % of all permanent IT jobs advertised in the UK 23.76% 26.03% 27.44%
Number of salaries quoted 32802 38575 47457
UK median annual salary £47,500 £45,000 £45,000
Median salary % change year-on-year +5.56% - -
10th Percentile £26,250 £26,250 £26,250
90th Percentile £77,500 £76,250 £75,000
UK excluding London median annual salary £42,500 £42,500 £41,500
% change year-on-year - +2.41% +3.75%

SANS
Job Vacancy Trend

Job postings citing SANS as a percentage of all IT jobs advertised.

Job vacancy trend for SANS in the UK

SANS
Salary Trend

This chart provides the 3-month moving average for salaries quoted in permanent IT jobs citing SANS.

Salary trend for SANS in the UK

SANS
Salary Histogram

The salary distribution of IT jobs citing SANS over the 6 months to 14 December 2017.

Salary histogram for SANS in the UK

SANS
Top 13 Job Locations

The table below looks at the demand and provides a guide to the median salaries quoted in IT jobs citing SANS within the UK over the 6 months to 14 December 2017. The 'Rank Change' column provides an indication of the change in demand within each location based on the same 6 month period last year.

Location Rank Change
on Same Period
Last Year
Matching
Permanent
IT Job Ads
Median Salary
Past 6 Months
Median Salary
% Change
on Same Period
Last Year
Live
Job
Vacancies
England -70 372 £57,500 -4.17% 24
London +12 205 £70,000 +3.70% 16
UK excluding London -90 163 £50,000 -4.76% 8
South West -46 46 £45,000 -18.18%
South East -1 41 £72,500 +31.82%
North of England -3 33 £50,250 +5.79% 6
East of England +22 28 £50,000 +17.65% 1
Yorkshire +41 19 £41,500 +16.90% 3
Midlands +9 14 £48,000 -8.57% 1
North West -15 14 £53,000 -7.83% 3
West Midlands -18 9 £38,500 -26.67% 1
East Midlands +19 5 £57,500 -25.81%
Wales +15 1 £60,000 -

For the 6 months to 14 December 2017, IT jobs citing SANS also mentioned the following skills in order of popularity. The figures indicate the number co-occurrences and its proportion to all job ads with a requirement for SANS.

1 266 (69.82%) CISSP
2 182 (47.77%) Windows
3 181 (47.51%) Information Security
4 172 (45.14%) Cybersecurity
5 168 (44.09%) SIEM
6 156 (40.94%) CISM
6 156 (40.94%) Firewall
7 147 (38.58%) Linux
8 142 (37.27%) GIAC
9 123 (32.28%) Finance
10 102 (26.77%) CISA
11 98 (25.72%) Unix
11 98 (25.72%) TCP/IP
12 94 (24.67%) ITIL
13 92 (24.15%) ISO/IEC 27001
14 90 (23.62%) Security Operations
15 79 (20.73%) CEH
15 79 (20.73%) Penetration Testing
16 71 (18.64%) Management Information System
17 70 (18.37%) Cisco Certification
17 70 (18.37%) SSCP
17 70 (18.37%) Network Security
18 69 (18.11%) Security Cleared
18 69 (18.11%) Cisco
19 68 (17.85%) GCIH
20 67 (17.59%) GCIA
21 63 (16.54%) CREST Certified
22 59 (15.49%) Microsoft
23 58 (15.22%) PCI DSS
24 56 (14.70%) OWASP

SANS
Co-occurring IT Skills by Category

The follow tables expand on the table above by listing co-occurrences grouped by category. The same job type, locality and period is covered with up to 20 co-occurrences shown in each of the following categories:

Application Platforms
1 31 (8.14%) IIS
2 23 (6.04%) WebSphere
3 9 (2.36%) Apache Pig
4 8 (2.10%) MS Exchange
5 7 (1.84%) Apache
6 6 (1.57%) Exchange Server 2013
6 6 (1.57%) Skype for Business
7 2 (0.52%) Exchange Server 2010
8 1 (0.26%) JBoss
8 1 (0.26%) Tomcat
8 1 (0.26%) WordPress
Applications
1 3 (0.79%) Microsoft Office
Cloud Services
1 19 (4.99%) Office 365
2 11 (2.89%) Amazon AWS
2 11 (2.89%) Microsoft Azure
3 10 (2.62%) Mimecast
4 4 (1.05%) SaaS
5 3 (0.79%) IaaS
5 3 (0.79%) PaaS
6 2 (0.52%) Google Cloud Platform
Communications & Networking
1 156 (40.94%) Firewall
2 98 (25.72%) TCP/IP
3 70 (18.37%) Network Security
4 51 (13.39%) Intrusion Detection
5 45 (11.81%) Internet
6 25 (6.56%) VPN
7 16 (4.20%) SNMP
8 15 (3.94%) DNS
9 14 (3.67%) WAN
10 13 (3.41%) HTTP
10 13 (3.41%) SSL
11 12 (3.15%) DHCP
11 12 (3.15%) SAN
11 12 (3.15%) Wireless
12 11 (2.89%) MPLS
12 11 (2.89%) VoIP
13 10 (2.62%) FCoE
14 9 (2.36%) DKIM
14 9 (2.36%) DMARC
15 8 (2.10%) Wireshark
Database & Business Intelligence
1 31 (8.14%) SQL Server
2 15 (3.94%) Big Data
3 14 (3.67%) MySQL
4 9 (2.36%) Apache Hive
4 9 (2.36%) Hadoop
5 3 (0.79%) NoSQL
Development Applications
1 18 (4.72%) JIRA
2 12 (3.15%) Metasploit
3 10 (2.62%) Redmine
4 9 (2.36%) Git (software)
5 8 (2.10%) Atlassian Bamboo
5 8 (2.10%) Bitbucket
5 8 (2.10%) CodeSonar
5 8 (2.10%) git-flow
5 8 (2.10%) Robot Framework
5 8 (2.10%) Selenium
6 6 (1.57%) Burp Suite
7 2 (0.52%) Jenkins
8 1 (0.26%) AppScan
8 1 (0.26%) IDA Disassembler
8 1 (0.26%) OllyDbg
8 1 (0.26%) SoapUI
8 1 (0.26%) WinDbg
8 1 (0.26%) Xcode
General
1 123 (32.28%) Finance
2 32 (8.40%) Banking
3 28 (7.35%) Private Banking
4 24 (6.30%) Legal
5 8 (2.10%) Games
6 7 (1.84%) Law
6 7 (1.84%) Retail
7 6 (1.57%) Marketing
8 4 (1.05%) Spanish Language
9 3 (0.79%) Aerospace
9 3 (0.79%) Financial Institution
9 3 (0.79%) Investment Banking
9 3 (0.79%) Local Government
9 3 (0.79%) Military
9 3 (0.79%) Telecoms
10 2 (0.52%) Billing
10 2 (0.52%) Digital Economy
10 2 (0.52%) Manufacturing
10 2 (0.52%) Retail Banking
11 1 (0.26%) Advertising
Job Titles
1 127 (33.33%) Analyst
2 81 (21.26%) Security Analyst
3 53 (13.91%) Security Engineer
4 31 (8.14%) Senior Analyst
4 31 (8.14%) SOC Analyst
5 26 (6.82%) Consultant
5 26 (6.82%) Security Manager
6 25 (6.56%) Information Analyst
6 25 (6.56%) Information Security Analyst
7 22 (5.77%) IT Manager
8 21 (5.51%) Architect
8 21 (5.51%) IT Engineer
8 21 (5.51%) Security Architect
9 20 (5.25%) Security Consultant
10 19 (4.99%) Penetration Tester
10 19 (4.99%) Tester
11 18 (4.72%) Cybersecurity Analyst
12 16 (4.20%) Infrastructure Manager
13 15 (3.94%) Finance Manager
13 15 (3.94%) Infrastructure Engineer
Libraries, Frameworks & Software Standards
1 27 (7.09%) .NET
2 23 (6.04%) MSMQ
2 23 (6.04%) WebSphere MQ
3 17 (4.46%) Java EE
4 13 (3.41%) REST
4 13 (3.41%) STL
5 9 (2.36%) ASP.NET
6 8 (2.10%) .NET Framework
6 8 (2.10%) Django
6 8 (2.10%) LAMP
6 8 (2.10%) Node.js
6 8 (2.10%) RabbitMQ
6 8 (2.10%) SOAP
6 8 (2.10%) Spring MVC
7 4 (1.05%) Web Services
8 1 (0.26%) Ajax
8 1 (0.26%) CSS
8 1 (0.26%) HTML
8 1 (0.26%) Middleware
8 1 (0.26%) XML
Miscellaneous
1 71 (18.64%) Management Information System
2 47 (12.34%) Cyberthreat
3 46 (12.07%) Security Operations Centre
4 28 (7.35%) Analytical Skills
5 21 (5.51%) Cyber Defence
5 21 (5.51%) PKI
6 17 (4.46%) Distributed Denial-of-Service
7 16 (4.20%) Computer Science
8 12 (3.15%) Cyber Attack
8 12 (3.15%) Reinsurance
9 9 (2.36%) Algorithms
9 9 (2.36%) Data Structures
10 8 (2.10%) Data Centre
11 7 (1.84%) Fintech
12 6 (1.57%) Replication
13 5 (1.31%) CESG
13 5 (1.31%) Cyber Kill Chain
13 5 (1.31%) Greenfield Project
14 4 (1.05%) BYOD
14 4 (1.05%) Linux Command Line
Operating Systems
1 182 (47.77%) Windows
2 147 (38.58%) Linux
3 98 (25.72%) Unix
4 39 (10.24%) Windows Server
5 17 (4.46%) Apple iOS
6 14 (3.67%) Android
6 14 (3.67%) Windows Server 2008
7 10 (2.62%) Kali Linux
8 8 (2.10%) Mac OS X
9 6 (1.57%) Windows Server 2003
10 5 (1.31%) FreeBSD
10 5 (1.31%) Windows 7
11 4 (1.05%) Red Hat Enterprise Linux
12 3 (0.79%) CentOS
12 3 (0.79%) Debian
12 3 (0.79%) Ubuntu
12 3 (0.79%) VMS
13 2 (0.52%) Windows Server 2012
14 1 (0.26%) KNOPPIX
14 1 (0.26%) Windows 10
Processes & Methodologies
1 181 (47.51%) Information Security
2 172 (45.14%) Cybersecurity
3 168 (44.09%) SIEM
4 94 (24.67%) ITIL
5 90 (23.62%) Security Operations
6 79 (20.73%) Penetration Testing
7 56 (14.70%) OWASP
8 55 (14.44%) Security Architecture
9 54 (14.17%) Stakeholder Management
10 50 (13.12%) Ethical Hacking
10 50 (13.12%) Threat Intelligence
11 48 (12.60%) Vulnerability Scanning
12 45 (11.81%) Risk Management
13 44 (11.55%) Cyber Threat Intelligence
14 41 (10.76%) Mentoring
15 40 (10.50%) Vulnerability Assessment
16 39 (10.24%) Vulnerability Management
17 37 (9.71%) Data Protection
17 37 (9.71%) Malware Analysis
18 35 (9.19%) Incident Management
Programming Languages
1 55 (14.44%) Java
2 49 (12.86%) Python
3 44 (11.55%) SQL
4 41 (10.76%) C
5 33 (8.66%) Bash Shell
5 33 (8.66%) C++
6 25 (6.56%) C#
7 18 (4.72%) PHP
8 16 (4.20%) JavaScript
9 15 (3.94%) PowerShell
10 14 (3.67%) Objective-C
11 13 (3.41%) Ruby
12 12 (3.15%) Perl
13 11 (2.89%) Korn
14 10 (2.62%) Shell Script
15 1 (0.26%) C-shell
15 1 (0.26%) Go
Qualifications
1 266 (69.82%) CISSP
2 156 (40.94%) CISM
3 142 (37.27%) GIAC
4 102 (26.77%) CISA
5 79 (20.73%) CEH
6 70 (18.37%) Cisco Certification
6 70 (18.37%) SSCP
7 69 (18.11%) Security Cleared
8 68 (17.85%) GCIH
9 67 (17.59%) GCIA
10 63 (16.54%) CREST Certified
11 54 (14.17%) CCNA
12 51 (13.39%) CompTIA Security+
13 48 (12.60%) CRISC
14 46 (12.07%) SC Cleared
15 40 (10.50%) Network+ Certification
16 39 (10.24%) DV Cleared
16 39 (10.24%) OSCP
17 37 (9.71%) CSSLP
18 36 (9.45%) Degree
Quality Assurance & Compliance
1 92 (24.15%) ISO/IEC 27001
2 58 (15.22%) PCI DSS
3 44 (11.55%) GDPR
4 35 (9.19%) COBIT
5 19 (4.99%) NIST 800
6 12 (3.15%) Cyber Essentials
7 11 (2.89%) ISO/IEC 27002 (supersedes ISO/IEC 17799)
8 6 (1.57%) Sarbanes-Oxley
9 5 (1.31%) ISO 31000
9 5 (1.31%) ISO/IEC 27005
10 4 (1.05%) HMG Security Policy Framework
10 4 (1.05%) ISO 9001
10 4 (1.05%) RMADS
11 3 (0.79%) GPG13
11 3 (0.79%) ISO 22301
11 3 (0.79%) PA-DSS
11 3 (0.79%) Web Application Security Consortium
12 2 (0.52%) HIPAA
12 2 (0.52%) QA
13 1 (0.26%) MiFID
System Software
1 33 (8.66%) Active Directory
2 25 (6.56%) vSphere
3 21 (5.51%) Snort
4 18 (4.72%) Virtual Machines
5 17 (4.46%) VMware ESXi
6 16 (4.20%) VMware Infrastructure
7 11 (2.89%) Docker
7 11 (2.89%) VMware NSX
8 10 (2.62%) NFS
8 10 (2.62%) Samba
9 6 (1.57%) Firmware
10 3 (0.79%) pfSense
11 2 (0.52%) XenApp
Systems Management
1 33 (8.66%) Host Intrusion Detection System
2 21 (5.51%) McAfee ePO
3 20 (5.25%) Puppet
4 14 (3.67%) Nagios
4 14 (3.67%) Nessus
5 12 (3.15%) Ansible
5 12 (3.15%) CSIRT
6 11 (2.89%) FortiGate
6 11 (2.89%) WebInspect
7 10 (2.62%) QRadar
7 10 (2.62%) RSA enVision
7 10 (2.62%) SCOM
7 10 (2.62%) vCenter Server
8 9 (2.36%) Network Intrusion Detection System
9 8 (2.10%) Norton AntiVirus
9 8 (2.10%) Salt
10 6 (1.57%) RSA Security Analytics
10 6 (1.57%) WMI
11 5 (1.31%) Nmap
11 5 (1.31%) Systems Management Server (SMS)
Vendors
1 69 (18.11%) Cisco
2 59 (15.49%) Microsoft
3 36 (9.45%) VMware
4 35 (9.19%) McAfee
5 34 (8.92%) CheckPoint
6 29 (7.61%) Symantec
7 26 (6.82%) Dell
7 26 (6.82%) Sophos
8 23 (6.04%) Palo Alto
9 20 (5.25%) Blue Coat
10 18 (4.72%) SolarWinds
11 17 (4.46%) FireEye
11 17 (4.46%) HP
11 17 (4.46%) Sourcefire
12 15 (3.94%) Splunk
13 14 (3.67%) Sun
14 13 (3.41%) LogRhythm
15 12 (3.15%) Juniper
16 11 (2.89%) Forcepoint
16 11 (2.89%) NetApp