Period
to 23 August 2017

The following table provides summary statistics for permanent job vacancies with a requirement for SANS qualifications. Included is a benchmarking guide to the salaries offered over the 6 months to 23 August 2017 with a comparison to the same period in the previous 2 years.

SANS Institute
UK
6 months to
23 Aug 2017
Same period 2016 Same period 2015
Rank 887 812 993
Rank change year-on-year -75 +181 +167
Permanent jobs citing SANS 309 473 292
As % of all permanent IT jobs advertised in the UK 0.18% 0.24% 0.13%
As % of the Qualifications category 0.72% 0.90% 0.49%
Number of salaries quoted 232 407 266
UK median annual salary £60,000 £55,000 £55,000
Median salary % change year-on-year +9.09% - +22.22%
10th Percentile £36,750 £40,750 £37,500
90th Percentile £81,125 £78,750 £95,000
UK excluding London median annual salary £47,500 £53,000 £53,750
% change year-on-year -10.38% -1.40% +19.44%

SANS is in the Academic Qualifications and Professional Certifications category. The following table is for comparison with the above and provides summary statistics for all permanent job vacancies with a requirement for academic qualifications or professional certifications.

All Academic and Professional Certifications
UK
Permanent vacancies requiring academic qualifications or professional certifications 42880 52716 59663
As % of all permanent IT jobs advertised in the UK 24.36% 26.79% 27.55%
Number of salaries quoted 32925 42572 47383
UK median annual salary £45,000 £45,000 £45,000
10th Percentile £26,250 £26,250 £25,500
90th Percentile £77,500 £75,000 £73,500
UK excluding London median annual salary £42,500 £42,377 £40,000
% change year-on-year +0.29% +5.94% -

SANS
Job Vacancy Trend

Job postings citing SANS as a percentage of all IT jobs advertised.

Job vacancy trend for SANS in the UK

SANS
Salary Trend

This chart provides the 3-month moving average for salaries quoted in permanent IT jobs citing SANS.

Salary trend for SANS in the UK

SANS
Salary Histogram

The salary distribution of IT jobs citing SANS over the 6 months to 23 August 2017.

Salary histogram for SANS in the UK

SANS
Top 14 Job Locations

The table below looks at the demand and provides a guide to the median salaries quoted in IT jobs citing SANS within the UK over the 6 months to 23 August 2017. The 'Rank Change' column provides an indication of the change in demand within each location based on the same 6 month period last year.

Location Rank Change
on Same Period
Last Year
Matching
Permanent
IT Job Ads
Median Salary
Past 6 Months
Median Salary
% Change
on Same Period
Last Year
Live
Job
Vacancies
England -46 304 £60,000 +9.09% 13
London +8 159 £62,500 - 8
UK excluding London -61 145 £47,500 -10.38% 5
South West -17 50 £41,250 -25.00%
North of England 0 40 £57,500 -
South East +2 24 £80,000 +46.79% 4
North West -31 24 £52,500 -25.00%
East of England -19 15 £47,500 - 1
Yorkshire +21 14 £62,500 +55.28%
Midlands +25 12 £58,750 -12.96%
West Midlands +7 11 £52,500 -22.22%
Scotland +6 4 - -
North East +18 2 £30,000 -29.41%
East Midlands +20 1 £80,000 +23.08%

For the 6 months to 23 August 2017, IT jobs citing SANS also mentioned the following skills in order of popularity. The figures indicate the number co-occurrences and its proportion to all job ads with a requirement for SANS.

1 219 (70.87%) CISSP
2 184 (59.55%) Information Security
3 144 (46.60%) CISM
4 123 (39.81%) Windows
5 114 (36.89%) SIEM
6 111 (35.92%) Linux
7 105 (33.98%) Cybersecurity
8 99 (32.04%) Finance
9 95 (30.74%) ITIL
10 89 (28.80%) ISO/IEC 27001
10 89 (28.80%) Security Operations
11 86 (27.83%) Firewall
12 83 (26.86%) GIAC
13 78 (25.24%) CISA
14 77 (24.92%) Security Cleared
15 70 (22.65%) SC Cleared
16 69 (22.33%) GCIA
16 69 (22.33%) Unix
17 67 (21.68%) CEH
18 65 (21.04%) GCIH
19 61 (19.74%) TCP/IP
20 59 (19.09%) Network Security
21 55 (17.80%) Management Information System
22 54 (17.48%) CREST Certified
23 49 (15.86%) PCI DSS
23 49 (15.86%) CRISC
24 48 (15.53%) Security Operations Centre
24 48 (15.53%) Java
25 47 (15.21%) Degree
25 47 (15.21%) Threat Intelligence

SANS
Co-occurring IT Skills by Category

The follow tables expand on the table above by listing co-occurrences grouped by category. The same job type, locality and period is covered with up to 20 co-occurrences shown in each of the following categories:

Application Platforms
1 15 (4.85%) IIS
2 8 (2.59%) WebSphere
3 5 (1.62%) Apache
3 5 (1.62%) MS Exchange
4 4 (1.29%) Exchange Server 2013
4 4 (1.29%) Skype for Business
5 3 (0.97%) SharePoint
6 1 (0.32%) Apache Pig
6 1 (0.32%) Apache Spark
6 1 (0.32%) MS Project Server
Applications
1 4 (1.29%) Microsoft Office
2 1 (0.32%) Microsoft Project
Business Applications
1 14 (4.53%) Oracle Applications
Cloud Services
1 20 (6.47%) Microsoft Azure
2 17 (5.50%) Amazon AWS
3 11 (3.56%) Office 365
4 8 (2.59%) Google Cloud Platform
5 2 (0.65%) Cloud Computing
6 1 (0.32%) GitHub
6 1 (0.32%) Mimecast
Communications & Networking
1 86 (27.83%) Firewall
2 61 (19.74%) TCP/IP
3 59 (19.09%) Network Security
4 44 (14.24%) Internet
5 25 (8.09%) Intrusion Detection
6 19 (6.15%) VPN
7 17 (5.50%) WAN
8 16 (5.18%) Wireshark
9 15 (4.85%) DNS
10 14 (4.53%) DHCP
11 13 (4.21%) LAN
12 10 (3.24%) Software-Defined Networking
13 8 (2.59%) SNMP
14 7 (2.27%) MPLS
14 7 (2.27%) SAN
15 6 (1.94%) HTTP
15 6 (1.94%) Wireless
16 5 (1.62%) Cisco Wireless
16 5 (1.62%) HTTPS
16 5 (1.62%) IPsec
Database & Business Intelligence
1 9 (2.91%) SQL Server
2 2 (0.65%) Hadoop
3 1 (0.32%) Apache Hive
3 1 (0.32%) Big Data
3 1 (0.32%) MySQL
3 1 (0.32%) PostgreSQL
Development Applications
1 13 (4.21%) Burp Suite
2 9 (2.91%) Jenkins
2 9 (2.91%) Paros
2 9 (2.91%) WebScarab
3 8 (2.59%) AppScan
4 5 (1.62%) Metasploit
5 3 (0.97%) JIRA
5 3 (0.97%) Redmine
General
1 99 (32.04%) Finance
2 24 (7.77%) Banking
3 16 (5.18%) Private Banking
4 10 (3.24%) Retail
5 8 (2.59%) Legal
5 8 (2.59%) Marketing
6 6 (1.94%) Games
7 5 (1.62%) Telecoms
8 3 (0.97%) Aerospace
8 3 (0.97%) Billing
8 3 (0.97%) Spanish Language
9 2 (0.65%) Electronics
9 2 (0.65%) Manufacturing
9 2 (0.65%) Retail Banking
10 1 (0.32%) Advertising
10 1 (0.32%) Arabic Language
10 1 (0.32%) Financial Institution
10 1 (0.32%) Military
10 1 (0.32%) Pharmaceutical
10 1 (0.32%) Publishing
Job Titles
1 138 (44.66%) Analyst
2 74 (23.95%) Security Analyst
3 45 (14.56%) SOC Analyst
4 42 (13.59%) Consultant
5 37 (11.97%) Senior Analyst
6 35 (11.33%) Security Consultant
7 30 (9.71%) Security Manager
8 25 (8.09%) Security Engineer
9 24 (7.77%) Cybersecurity Analyst
10 20 (6.47%) IT Analyst
11 19 (6.15%) Information Analyst
11 19 (6.15%) Information Security Analyst
12 18 (5.83%) IT Engineer
13 17 (5.50%) Senior Security Analyst
14 15 (4.85%) Operations Analyst
15 14 (4.53%) Incident Manager
15 14 (4.53%) Information Security Consultant
16 13 (4.21%) Architect
16 13 (4.21%) Security Architect
17 12 (3.88%) Risk Analyst
Libraries, Frameworks & Software Standards
1 27 (8.74%) .NET
2 12 (3.88%) Web Services
3 8 (2.59%) MSMQ
3 8 (2.59%) WebSphere MQ
4 2 (0.65%) CGI
4 2 (0.65%) HTML
4 2 (0.65%) XML
5 1 (0.32%) CSS
5 1 (0.32%) Java EE
5 1 (0.32%) LAMP
5 1 (0.32%) LAPP Stack
5 1 (0.32%) REST
5 1 (0.32%) SailPoint
Miscellaneous
1 55 (17.80%) Management Information System
2 48 (15.53%) Security Operations Centre
3 36 (11.65%) Cyberthreat
4 22 (7.12%) Analytical Skills
5 17 (5.50%) Cyber Attack
6 16 (5.18%) Data Protection Act
7 11 (3.56%) Computer Science
7 11 (3.56%) Distributed Denial-of-Service
8 9 (2.91%) Internet of Things
9 7 (2.27%) Data Centre
10 6 (1.94%) Cybercrime
10 6 (1.94%) Reinsurance
11 5 (1.62%) Linux Command Line
11 5 (1.62%) PKI
11 5 (1.62%) Public Cloud
12 4 (1.29%) Fintech
12 4 (1.29%) Replication
13 3 (0.97%) CESG
13 3 (0.97%) Online Games
14 2 (0.65%) Data Structures
Operating Systems
1 123 (39.81%) Windows
2 111 (35.92%) Linux
3 69 (22.33%) Unix
4 19 (6.15%) Windows Server
5 11 (3.56%) Windows Server 2003
5 11 (3.56%) Windows Server 2008
6 7 (2.27%) Windows 7
6 7 (2.27%) Windows Server 2012
7 6 (1.94%) Red Hat Enterprise Linux
8 5 (1.62%) CentOS
8 5 (1.62%) Debian
8 5 (1.62%) Kali Linux
8 5 (1.62%) Ubuntu
9 2 (0.65%) FreeBSD
9 2 (0.65%) HPUX
10 1 (0.32%) KNOPPIX
10 1 (0.32%) Windows 10
10 1 (0.32%) Windows 8
10 1 (0.32%) Windows Vista
10 1 (0.32%) Windows XP
Processes & Methodologies
1 184 (59.55%) Information Security
2 114 (36.89%) SIEM
3 105 (33.98%) Cybersecurity
4 95 (30.74%) ITIL
5 89 (28.80%) Security Operations
6 47 (15.21%) Threat Intelligence
7 45 (14.56%) Stakeholder Management
8 44 (14.24%) Data Protection
9 43 (13.92%) Malware Analysis
9 43 (13.92%) Security Architecture
10 42 (13.59%) Coaching
11 40 (12.94%) Cyber Threat Intelligence
11 40 (12.94%) Incident Management
12 39 (12.62%) Risk Management
12 39 (12.62%) Service Management
13 37 (11.97%) Penetration Testing
14 36 (11.65%) Vulnerability Management
15 34 (11.00%) Mentoring
16 32 (10.36%) Vulnerability Scanning
17 30 (9.71%) Software Engineering
Programming Languages
1 48 (15.53%) Java
2 26 (8.41%) Python
3 17 (5.50%) Perl
4 15 (4.85%) C#
4 15 (4.85%) SQL
5 14 (4.53%) Bash Shell
5 14 (4.53%) C
6 13 (4.21%) C++
7 8 (2.59%) Korn
7 8 (2.59%) Ruby
8 5 (1.62%) C-shell
8 5 (1.62%) PHP
9 3 (0.97%) JavaScript
10 2 (0.65%) PowerShell
11 1 (0.32%) Shell Script
Qualifications
1 219 (70.87%) CISSP
2 144 (46.60%) CISM
3 83 (26.86%) GIAC
4 78 (25.24%) CISA
5 77 (24.92%) Security Cleared
6 70 (22.65%) SC Cleared
7 69 (22.33%) GCIA
8 67 (21.68%) CEH
9 65 (21.04%) GCIH
10 54 (17.48%) CREST Certified
11 49 (15.86%) CRISC
12 47 (15.21%) Degree
13 45 (14.56%) Cisco Certification
13 45 (14.56%) DV Cleared
14 29 (9.39%) SSCP
15 26 (8.41%) GSEC
16 25 (8.09%) CCNA
17 24 (7.77%) CCNP
18 22 (7.12%) (ISC)2 CCSP
18 22 (7.12%) CESG Certified Professional
Quality Assurance & Compliance
1 89 (28.80%) ISO/IEC 27001
2 49 (15.86%) PCI DSS
3 37 (11.97%) GDPR
4 25 (8.09%) COBIT
5 12 (3.88%) NIST 800
6 10 (3.24%) Cyber Essentials
7 9 (2.91%) ISO 22301
8 8 (2.59%) Sarbanes-Oxley
9 3 (0.97%) ISO/IEC 27002 (supersedes ISO/IEC 17799)
9 3 (0.97%) SLA
9 3 (0.97%) Web Application Security Consortium
10 2 (0.65%) ISO 14001
10 2 (0.65%) ISO 9001
10 2 (0.65%) ISO/IEC 27005
10 2 (0.65%) PA-DSS
11 1 (0.32%) GPG13
11 1 (0.32%) HIPAA
11 1 (0.32%) RMADS
System Software
1 19 (6.15%) Active Directory
2 18 (5.83%) Snort
3 16 (5.18%) vSphere
4 14 (4.53%) VMware Infrastructure
5 13 (4.21%) VMware ESXi
6 9 (2.91%) Virtual Machines
7 5 (1.62%) pfSense
8 4 (1.29%) Firmware
9 3 (0.97%) NFS
9 3 (0.97%) Samba
9 3 (0.97%) VMware NSX
10 1 (0.32%) Docker
Systems Management
1 20 (6.47%) Host Intrusion Detection System
2 18 (5.83%) Network Intrusion Detection System
3 16 (5.18%) Nessus
4 14 (4.53%) Nmap
5 12 (3.88%) Puppet
6 11 (3.56%) Ansible
6 11 (3.56%) FortiGate
7 10 (3.24%) McAfee ePO
8 6 (1.94%) CSIRT
8 6 (1.94%) RSA enVision
9 5 (1.62%) Computer Emergency Response Teams
9 5 (1.62%) Nagios
10 4 (1.29%) SCOM
11 3 (0.97%) QRadar
11 3 (0.97%) vCenter Server
12 2 (0.65%) Computer Incident Response Team
12 2 (0.65%) EnCase
12 2 (0.65%) SCCM
12 2 (0.65%) SolarWinds Orion
12 2 (0.65%) XenMobile
Vendors
1 39 (12.62%) Microsoft
2 37 (11.97%) Cisco
3 28 (9.06%) LogRhythm
4 24 (7.77%) ArcSight
5 23 (7.44%) Dell
6 21 (6.80%) CheckPoint
7 20 (6.47%) FireEye
8 19 (6.15%) Splunk
8 19 (6.15%) VMware
9 17 (5.50%) Oracle
10 15 (4.85%) SonicWALL
11 12 (3.88%) Blue Coat
11 12 (3.88%) McAfee
11 12 (3.88%) Palo Alto
12 9 (2.91%) AlienVault
13 8 (2.59%) Google
13 8 (2.59%) HP
13 8 (2.59%) IBM
13 8 (2.59%) LogLogic
13 8 (2.59%) Symantec