Period
to 13 July 2020

The following table provides summary statistics for permanent job vacancies with a requirement for Security Operations skills. Included is a benchmarking guide to the salaries offered in vacancies that have cited Security Operations over the 6 months to 13 July 2020 with a comparison to the same period in the previous 2 years.

Security Operations (SecOps)
UK
6 months to
13 Jul 2020
Same period 2019 Same period 2018
Rank 270 386 464
Rank change year-on-year +116 +78 +43
Permanent jobs citing Security Operations 864 1,193 1,167
As % of all permanent jobs advertised in the UK 1.13% 0.81% 0.65%
As % of the Processes & Methodologies category 1.23% 0.88% 0.71%
Number of salaries quoted 679 870 887
Median annual salary £59,000 £60,000 £57,500
Median salary % change year-on-year -1.67% +4.35% -4.17%
10th Percentile £41,250 £36,500 £40,752
90th Percentile £90,000 £86,250 £86,250
UK excluding London median annual salary £53,000 £50,000 £54,000
% change year-on-year +6.00% -7.41% -1.82%

Security Operations is in the Processes and Methodologies category. The following table is for comparison with the above and provides summary statistics for all permanent job vacancies with a requirement for process or methodology skills.

All Process and Methodology Skills
UK
Permanent vacancies with a requirement for process or methodology skills 70,170 135,755 164,404
As % of all permanent IT jobs advertised in the UK 92.17% 92.21% 92.12%
Number of salaries quoted 55,978 106,868 131,604
Median annual salary £55,000 £52,500 £50,000
Median salary % change year-on-year +4.76% +5.00% +3.09%
10th Percentile £31,916 £30,000 £29,000
90th Percentile £90,000 £86,250 £82,500
UK excluding London median annual salary £47,500 £45,000 £45,000
% change year-on-year +5.56% - +5.88%

Security Operations
Job Vacancy Trend

Job postings citing Security Operations as a proportion of all IT jobs advertised.

Job vacancy trend for Security Operations in the UK

Security Operations
Salary Trend

3-month moving average salary quoted in jobs citing Security Operations.

Salary trend for Security Operations in the UK

Security Operations
Salary Histogram

Salary distribution for jobs citing Security Operations over the 6 months to 13 July 2020.

Salary histogram for Security Operations in the UK

Security Operations
Top 16 Job Locations

The table below looks at the demand and provides a guide to the median salaries quoted in IT jobs citing Security Operations within the UK over the 6 months to 13 July 2020. The 'Rank Change' column provides an indication of the change in demand within each location based on the same 6 month period last year.

Location Rank Change
on Same Period
Last Year
Matching
Permanent
IT Job Ads
Median Salary
Past 6 Months
Median Salary
% Change
on Same Period
Last Year
Live
Job
Vacancies
England +92 763 £60,000 - 35
UK excluding London +120 491 £53,000 +6.00% 25
London +90 361 £70,000 +3.70% 15
South East +136 160 £52,500 -16.00% 2
North of England +118 111 £55,000 +10.00% 9
Midlands +61 71 £60,000 +23.08% 3
Scotland +83 64 £45,000 -5.26% 2
North West +107 58 £45,000 -8.86% 2
Work from Home +82 56 £65,000 -13.33% 5
West Midlands +37 53 £60,000 +23.08% 3
Yorkshire +96 49 £58,500 +12.50% 5
South West +58 32 £46,250 -7.50% 3
Wales +29 30 £45,000 +13.92%
East of England +26 24 £60,000 +20.00% 3
East Midlands +72 18 £56,250 +15.38%
North East +23 4 £59,000 -9.23% 2

For the 6 months to 13 July 2020, IT jobs citing Security Operations also mentioned the following skills in order of popularity. The figures indicate the absolute number co-occurrences and as a proportion of all permanent job ads with a requirement for Security Operations.

1 442 (51.16%) SIEM
2 441 (51.04%) Cybersecurity
3 317 (36.69%) Information Security
4 261 (30.21%) Security Operations Centre
5 258 (29.86%) Firewall
6 194 (22.45%) Finance
7 192 (22.22%) Vulnerability Management
8 191 (22.11%) CISSP
9 173 (20.02%) AWS
10 171 (19.79%) Azure
11 165 (19.10%) Windows
12 162 (18.75%) Threat Intelligence
13 160 (18.52%) Linux
14 138 (15.97%) Cyber Threat Intelligence
15 131 (15.16%) Splunk
16 124 (14.35%) Penetration Testing
17 117 (13.54%) Microsoft
18 113 (13.08%) ITIL
19 109 (12.62%) Office 365
20 101 (11.69%) Security Management
21 100 (11.57%) Python
22 96 (11.11%) Degree
22 96 (11.11%) Security Cleared
23 95 (11.00%) Incident Management
23 95 (11.00%) TCP/IP
24 93 (10.76%) Network Security
25 90 (10.42%) Active Directory
25 90 (10.42%) Analytical Skills
26 84 (9.72%) LogRhythm
26 84 (9.72%) Vulnerability Scanning

Security Operations
Co-occurring IT Skills by Category

The follow tables expand on the table above by listing co-occurrences grouped by category. The same job type, locality and period is covered with up to 20 co-occurrences shown in each of the following categories:

Application Platforms
1 9 (1.04%) IIS
2 7 (0.81%) SharePoint
3 6 (0.69%) JBoss
3 6 (0.69%) MS Exchange
3 6 (0.69%) Tomcat
3 6 (0.69%) WebSphere
4 4 (0.46%) Anypoint
4 4 (0.46%) Confluence
5 3 (0.35%) Elasticsearch
Applications
1 32 (3.70%) Microsoft Office
2 7 (0.81%) Microsoft Excel
3 4 (0.46%) Microsoft PowerPoint
Business Applications
1 17 (1.97%) Sentinel
Cloud Services
1 173 (20.02%) AWS
2 171 (19.79%) Azure
3 109 (12.62%) Office 365
4 48 (5.56%) GCP
5 35 (4.05%) IaaS
6 34 (3.94%) PaaS
7 33 (3.82%) SaaS
8 32 (3.70%) Azure Active Directory
9 22 (2.55%) Virtual Private Cloud
10 16 (1.85%) Cloud Computing
10 16 (1.85%) Cloudflare
11 15 (1.74%) Amazon EC2
11 15 (1.74%) Amazon S3
11 15 (1.74%) AWS CloudFormation
11 15 (1.74%) Serverless
12 14 (1.62%) G Suite
12 14 (1.62%) Logic Apps
13 13 (1.50%) AWS Lambda
14 8 (0.93%) Amazon GuardDuty
15 6 (0.69%) OpenShift
Communications & Networking
1 258 (29.86%) Firewall
2 95 (11.00%) TCP/IP
3 93 (10.76%) Network Security
4 69 (7.99%) Intrusion Detection
5 64 (7.41%) VPN
6 58 (6.71%) DNS
7 53 (6.13%) Internet
8 42 (4.86%) HTTP
9 38 (4.40%) WAN
10 35 (4.05%) Wireless
11 34 (3.94%) LAN
12 26 (3.01%) Wireshark
13 23 (2.66%) SMTP
14 21 (2.43%) Wireless Security
15 17 (1.97%) SSL
16 15 (1.74%) DKIM
16 15 (1.74%) DMARC
17 14 (1.62%) IPsec
18 7 (0.81%) HTTPS
18 7 (0.81%) tcpdump
Database & Business Intelligence
1 9 (1.04%) Azure SQL Database
1 9 (1.04%) Data Lake
2 7 (0.81%) Amazon RDS
3 6 (0.69%) MySQL
4 5 (0.58%) Big Data
4 5 (0.58%) SQL Server
5 4 (0.46%) Relational Database
6 3 (0.35%) PostgreSQL
7 1 (0.12%) DB2
7 1 (0.12%) GIS
7 1 (0.12%) MongoDB
Development Applications
1 19 (2.20%) Metasploit
2 5 (0.58%) Jenkins
3 4 (0.46%) JIRA
4 2 (0.23%) Fiddler
4 2 (0.23%) Git (software)
4 2 (0.23%) IDA Disassembler
4 2 (0.23%) LINQPad
4 2 (0.23%) Postman
5 1 (0.12%) Atlassian Bamboo
5 1 (0.12%) Bitbucket Server
5 1 (0.12%) GitLab
5 1 (0.12%) Gradle
5 1 (0.12%) IntelliJ
5 1 (0.12%) Octopus Deploy
5 1 (0.12%) Snyk
5 1 (0.12%) Subversion
5 1 (0.12%) TeamCity
5 1 (0.12%) VSS/SourceSafe
General
1 194 (22.45%) Finance
2 31 (3.59%) Manufacturing
3 30 (3.47%) Public Sector
4 27 (3.13%) Telecoms
5 26 (3.01%) Marketing
6 23 (2.66%) Banking
7 17 (1.97%) Electronics
8 16 (1.85%) Retail
9 15 (1.74%) Law
10 8 (0.93%) Advertising
11 7 (0.81%) Aerospace
11 7 (0.81%) Legal
12 5 (0.58%) Games
13 4 (0.46%) Digital Economy
14 3 (0.35%) Local Government
14 3 (0.35%) Retail Banking
15 2 (0.23%) Military
15 2 (0.23%) Police
15 2 (0.23%) Publishing
16 1 (0.12%) Financial Institution
Job Titles
1 281 (32.52%) Analyst
2 198 (22.92%) Security Analyst
3 187 (21.64%) Security Engineer
4 73 (8.45%) SOC Analyst
5 71 (8.22%) Operations Analyst
5 71 (8.22%) Security Manager
5 71 (8.22%) Security Operations Analyst
6 68 (7.87%) Senior Analyst
7 51 (5.90%) Consultant
8 48 (5.56%) Architect
9 47 (5.44%) Security Specialist
10 45 (5.21%) SOC Engineer
11 44 (5.09%) Operational Security Manager
11 44 (5.09%) Operations Manager
11 44 (5.09%) Security Operations Manager
12 41 (4.75%) SIEM Engineer
13 39 (4.51%) Security Architect
14 38 (4.40%) Operations Engineer
15 35 (4.05%) IT Analyst
15 35 (4.05%) IT Security Analyst
Libraries, Frameworks & Software Standards
1 31 (3.59%) LDAP
2 24 (2.78%) .NET
3 22 (2.55%) Web Services
4 18 (2.08%) HTML
5 15 (1.74%) CSS
5 15 (1.74%) XML
6 14 (1.62%) Ajax
7 11 (1.27%) OAuth
8 9 (1.04%) 802.1X
9 8 (0.93%) ASP.NET
9 8 (0.93%) OpenID
9 8 (0.93%) Regular Expression
10 7 (0.81%) SailPoint
11 6 (0.69%) Middleware
12 4 (0.46%) ActiveMQ
12 4 (0.46%) Apache Flex
12 4 (0.46%) RAML
12 4 (0.46%) Swagger
13 3 (0.35%) React
14 2 (0.23%) SAML
Miscellaneous
1 261 (30.21%) Security Operations Centre
2 90 (10.42%) Analytical Skills
3 79 (9.14%) Management Information System
4 72 (8.33%) Cyberthreat
5 42 (4.86%) Public Cloud
6 31 (3.59%) Distributed Denial-of-Service
7 30 (3.47%) PKI
8 28 (3.24%) Cyber Kill Chain
9 27 (3.13%) Cyberattack
10 21 (2.43%) Data Centre
11 18 (2.08%) Cybercrime
12 14 (1.62%) Cloud Native
13 12 (1.39%) Cyber Defence
14 11 (1.27%) Private Cloud
15 10 (1.16%) Self-Motivation
16 8 (0.93%) User Experience
17 7 (0.81%) Algorithms
17 7 (0.81%) Internet of Things
18 5 (0.58%) Blog
19 4 (0.46%) Video\Live Streaming
Operating Systems
1 165 (19.10%) Windows
2 160 (18.52%) Linux
3 47 (5.44%) Unix
4 34 (3.94%) Windows Server
5 19 (2.20%) Kali Linux
6 13 (1.50%) Windows 10
7 11 (1.27%) Mac OS
7 11 (1.27%) Red Hat Enterprise Linux
8 9 (1.04%) Solaris
9 4 (0.46%) VMS
9 4 (0.46%) Windows Server 2012
10 2 (0.23%) Android
10 2 (0.23%) Apple iOS
10 2 (0.23%) CentOS
11 1 (0.12%) VxWorks
11 1 (0.12%) Windows 7
11 1 (0.12%) Windows Server 2008
11 1 (0.12%) Windows Server 2016
Processes & Methodologies
1 442 (51.16%) SIEM
2 441 (51.04%) Cybersecurity
3 317 (36.69%) Information Security
4 192 (22.22%) Vulnerability Management
5 162 (18.75%) Threat Intelligence
6 138 (15.97%) Cyber Threat Intelligence
7 124 (14.35%) Penetration Testing
8 113 (13.08%) ITIL
9 101 (11.69%) Security Management
10 95 (11.00%) Incident Management
11 84 (9.72%) Vulnerability Scanning
12 72 (8.33%) Agile Software Development
13 70 (8.10%) Analytics
14 68 (7.87%) Project Management
14 68 (7.87%) Security Monitoring
15 66 (7.64%) Problem-Solving
16 63 (7.29%) Risk Management
17 58 (6.71%) DevOps
17 58 (6.71%) Stakeholder Management
18 57 (6.60%) Security Architecture
Programming Languages
1 100 (11.57%) Python
2 60 (6.94%) PowerShell
3 55 (6.37%) SQL
4 54 (6.25%) Bash Shell
5 41 (4.75%) JavaScript
6 32 (3.70%) Java
7 28 (3.24%) Perl
8 24 (2.78%) C#
9 18 (2.08%) C
10 16 (1.85%) Shell Script
11 15 (1.74%) C++
12 10 (1.16%) Ruby
13 6 (0.69%) Go
13 6 (0.69%) PHP
14 5 (0.58%) VBA
15 2 (0.23%) VB.NET
16 1 (0.12%) Apex Code
16 1 (0.12%) VB
16 1 (0.12%) VBScript
Qualifications
1 191 (22.11%) CISSP
2 96 (11.11%) Degree
2 96 (11.11%) Security Cleared
3 78 (9.03%) SANS
4 74 (8.56%) CISM
5 63 (7.29%) SC Cleared
6 52 (6.02%) CEH
7 45 (5.21%) Cisco Certification
8 42 (4.86%) GCIH
9 40 (4.63%) GCIA
10 35 (4.05%) CompTIA Security+
11 34 (3.94%) CISA
11 34 (3.94%) CREST Certified
11 34 (3.94%) GIAC
12 32 (3.70%) (ISC)2 CCSP
13 24 (2.78%) CCSP
13 24 (2.78%) Computer Science Degree
14 22 (2.55%) Microsoft Certification
15 16 (1.85%) MCSE
16 14 (1.62%) DV Cleared
Quality Assurance & Compliance
1 76 (8.80%) ISO/IEC 27001
2 55 (6.37%) NIST
3 42 (4.86%) SLA
4 41 (4.75%) PCI DSS
5 33 (3.82%) GDPR
6 18 (2.08%) COBIT
6 18 (2.08%) ISO/IEC 27002 (supersedes ISO/IEC 17799)
7 15 (1.74%) HMG Security Policy Framework
8 13 (1.50%) Sarbanes-Oxley
9 12 (1.39%) NIST 800
10 11 (1.27%) NCSC
11 6 (0.69%) Cyber Essentials
12 5 (0.58%) AICPA
13 3 (0.35%) ISO 9001
13 3 (0.35%) JSP 440
14 2 (0.23%) Cyber Essentials PLUS
14 2 (0.23%) ISO 22301
14 2 (0.23%) RMADS
15 1 (0.12%) ISO 31000
System Software
1 90 (10.42%) Active Directory
2 38 (4.40%) VMware Infrastructure
3 19 (2.20%) Snort
4 14 (1.62%) Docker
5 6 (0.69%) Hyper-V
6 4 (0.46%) ProxySG
7 2 (0.23%) LXC
8 1 (0.12%) BitLocker
8 1 (0.12%) Firmware
8 1 (0.12%) Virtual Desktop
8 1 (0.12%) VMware ESXi
Systems Management
1 69 (7.99%) QRadar
2 37 (4.28%) Single Sign-On
3 33 (3.82%) Nessus
4 22 (2.55%) Terraform
5 19 (2.20%) Ansible
5 19 (2.20%) Kubernetes
6 16 (1.85%) CSIRT
7 14 (1.62%) Opsgenie
8 12 (1.39%) Network Intrusion Detection System
9 10 (1.16%) Microsoft Intune
9 10 (1.16%) SCCM
10 9 (1.04%) RSA enVision
11 8 (0.93%) Nagios
11 8 (0.93%) SCOM
12 7 (0.81%) Computer Emergency Response Teams
13 6 (0.69%) Computer Incident Response Team
13 6 (0.69%) McAfee ePO
14 5 (0.58%) FortiGate
15 4 (0.46%) EnCase
15 4 (0.46%) Puppet
Vendors
1 131 (15.16%) Splunk
2 117 (13.54%) Microsoft
3 84 (9.72%) LogRhythm
4 82 (9.49%) ArcSight
5 57 (6.60%) Cisco
6 39 (4.51%) VMware
7 35 (4.05%) ServiceNow
8 33 (3.82%) CyberArk
8 33 (3.82%) Qualys
9 31 (3.59%) CheckPoint
9 31 (3.59%) IBM
10 26 (3.01%) Google
11 25 (2.89%) Palo Alto
12 22 (2.55%) SAP
13 20 (2.31%) McAfee
14 18 (2.08%) Red Hat
15 16 (1.85%) BeyondTrust
15 16 (1.85%) Bomgar
15 16 (1.85%) NetWitness
15 16 (1.85%) Thycotic