Security Operations Job Trends

Security Operations (SecOps)
UK

The table below provides summary statistics and salary benchmarking for jobs requiring Security Operations skills. It covers permanent job vacancies from the 6 months leading up to 17 March 2026, with comparisons to the same periods in the previous two years.

6 months to
17 Mar 2026
Same period 2025 Same period 2024
Rank 293 288 315
Rank change year-on-year -5 +27 +16
Permanent jobs citing Security Operations 500 449 756
As % of all permanent jobs in the UK 0.67% 1.04% 0.89%
As % of the Processes & Methodologies category 0.86% 1.12% 1.02%
Number of salaries quoted 308 324 617
10th Percentile £44,400 £42,500 £37,500
25th Percentile £51,250 £51,232 £48,000
Median annual salary (50th Percentile) £70,000 £65,000 £62,500
Median % change year-on-year +7.69% +4.00% -6.72%
75th Percentile £80,000 £82,500 £77,500
90th Percentile £91,975 £110,000 £98,000
UK excluding London median annual salary £65,000 £55,000 £55,000
% change year-on-year +18.18% - -8.33%

All Process & Methodology Skills
UK

Security Operations falls under the Processes and Methodologies category. For comparison with the information above, the following table provides summary statistics for all permanent job vacancies requiring process or methodology skills.

Permanent vacancies with a requirement for process or methodology skills 58,222 40,192 73,990
As % of all permanent jobs advertised in the UK 77.86% 93.47% 87.20%
Number of salaries quoted 35,232 22,295 56,140
10th Percentile £29,750 £31,750 £29,035
25th Percentile £40,000 £44,188 £40,000
Median annual salary (50th Percentile) £55,000 £60,000 £55,000
Median % change year-on-year -8.33% +9.09% -11.41%
75th Percentile £77,424 £80,000 £73,750
90th Percentile £97,500 £102,500 £93,750
UK excluding London median annual salary £50,000 £55,000 £50,000
% change year-on-year -9.09% +10.00% -9.09%

Security Operations
Job Vacancy Trend

Historical trend showing the proportion of permanent IT job postings citing Security Operations relative to all permanent IT jobs advertised.

Security Operations job vacancy trend in the UK

Security Operations
Salary Trend

Salary distribution trend for jobs in the UK citing Security Operations.

Salary distribution trend for jobs in the UK citing Security Operations

Security Operations
Salary Histogram

Salary distribution for jobs citing Security Operations over the 6 months to 17 March 2026.

Salary histogram for Security Operations in the UK

Security Operations
Top 17 Job Locations

The table below looks at the demand and provides a guide to the median salaries quoted in IT jobs citing Security Operations within the UK over the 6 months to 17 March 2026. The 'Rank Change' column provides an indication of the change in demand within each location based on the same 6 month period last year.

Location Rank Change
on Same Period
Last Year
Matching
Permanent
IT Job Ads
Median Salary
Past 6 Months
Median Salary
% Change
on Same Period
Last Year
Live
Jobs
England +10 462 £70,000 +7.69% 185
UK excluding London +18 298 £65,000 +18.18% 148
Work from Home +54 226 £60,000 -4.00% 117
London -1 168 £75,000 - 65
South East +30 99 £62,500 - 52
North of England -24 70 £65,000 +30.00% 32
Midlands -2 56 £54,000 -1.82% 20
South West -8 36 £75,000 +36.36% 14
Yorkshire -32 31 £50,000 +11.11% 8
West Midlands -1 30 £65,000 +18.18% 14
North West -16 28 £63,000 +26.00% 18
East Midlands - 26 £42,000 - 6
East of England -27 16 £80,000 +29.03% 18
Scotland -27 12 £72,500 +20.83% 9
North East -17 11 £75,000 +66.67% 6
Wales -14 7 £55,000 -37.14% 4
Northern Ireland -30 3 £32,500 - 2

Security Operations
Co-Occurring Skills & Capabilities by Category

The following tables expand on the one above by listing co-occurrences grouped by category. They cover the same employment type, locality and period, with up to 20 co-occurrences shown in each category:

Application Platforms
1 8 (1.60%) Microsoft Exchange
2 7 (1.40%) SharePoint
3 2 (0.40%) Palantir Foundry
4 1 (0.20%) Confluence
Business Applications
1 1 (0.20%) Exchequer
Cloud Services
1 117 (23.40%) Azure
2 64 (12.80%) AWS
3 39 (7.80%) Microsoft 365
4 35 (7.00%) Azure Sentinel
4 35 (7.00%) GCP
5 24 (4.80%) SaaS
6 21 (4.20%) Entra ID
7 15 (3.00%) Mimecast
8 14 (2.80%) PaaS
9 12 (2.40%) IaaS
10 11 (2.20%) GitHub
10 11 (2.20%) Microsoft Purview
11 10 (2.00%) GitHub Actions
12 7 (1.40%) AWS CloudFormation
13 6 (1.20%) Datadog
14 5 (1.00%) Tessian
15 4 (0.80%) Azure DevOps
15 4 (0.80%) OneDrive
15 4 (0.80%) Power Platform
16 3 (0.60%) Dynamics 365
Communications & Networking
1 81 (16.20%) Firewall
2 68 (13.60%) Network Security
3 32 (6.40%) VPN
4 20 (4.00%) Intrusion Detection
5 16 (3.20%) DNS
6 14 (2.80%) TCP/IP
7 9 (1.80%) DHCP
8 7 (1.40%) SAN
9 5 (1.00%) WAN
10 4 (0.80%) Cisco ISE
10 4 (0.80%) HTTPS
10 4 (0.80%) Wireshark
11 3 (0.60%) Cisco Nexus
11 3 (0.60%) Internet
11 3 (0.60%) LAN
11 3 (0.60%) SCCP
12 2 (0.40%) DKIM
12 2 (0.40%) DMARC
12 2 (0.40%) SD-WAN
12 2 (0.40%) SSL
Database & Business Intelligence
1 3 (0.60%) Elasticsearch
1 3 (0.60%) Power BI
2 2 (0.40%) Metadata
3 1 (0.20%) Tableau
Development Applications
1 6 (1.20%) CircleCI
1 6 (1.20%) Jenkins
2 4 (0.80%) Bitbucket
2 4 (0.80%) Metasploit
3 2 (0.40%) JIRA
4 1 (0.20%) Git
4 1 (0.20%) IDA Disassembler
General
1 124 (24.80%) Social Skills
2 86 (17.20%) Finance
3 73 (14.60%) Analytical Skills
4 41 (8.20%) Inclusion and Diversity
5 27 (5.40%) Law
6 20 (4.00%) Legal
7 18 (3.60%) Banking
7 18 (3.60%) Public Sector
7 18 (3.60%) Retail
8 15 (3.00%) Influencing Skills
9 11 (2.20%) Financial Institution
10 10 (2.00%) Back Office
11 8 (1.60%) Advertising
11 8 (1.60%) Organisational Skills
11 8 (1.60%) Presentation Skills
12 3 (0.60%) Aviation
12 3 (0.60%) Documentation Skills
12 3 (0.60%) Games
12 3 (0.60%) Pharmaceutical
13 1 (0.20%) Telecoms
Job Titles
1 120 (24.00%) Lead
2 100 (20.00%) Analyst
3 69 (13.80%) Security Analyst
4 58 (11.60%) Security Manager
5 56 (11.20%) Senior
6 53 (10.60%) Security Engineer
7 37 (7.40%) Cybersecurity Analyst
8 28 (5.60%) Cybersecurity Manager
8 28 (5.60%) Operational Security Manager
8 28 (5.60%) Security Operations Manager
9 26 (5.20%) Operations Manager
9 26 (5.20%) SOC Analyst
10 21 (4.20%) SOC Manager
11 18 (3.60%) Consultant
11 18 (3.60%) Head of Security
11 18 (3.60%) Infrastructure Manager
11 18 (3.60%) SOC Engineer
12 17 (3.40%) Infrastructure Engineer
13 16 (3.20%) Security Specialist
13 16 (3.20%) Senior Security Engineer
Libraries, Frameworks & Software Standards
1 8 (1.60%) ARM Templates
2 2 (0.40%) Elastic Stack
2 2 (0.40%) OpenTelemetry
2 2 (0.40%) REST
3 1 (0.20%) EDI
3 1 (0.20%) Flash
3 1 (0.20%) LDAP
3 1 (0.20%) SOAP
Miscellaneous
1 196 (39.20%) Security Operations Centre
2 105 (21.00%) Cyber Threat
3 78 (15.60%) Cyber Kill Chain
4 71 (14.20%) Operational Technology
5 67 (13.40%) Security Posture
6 41 (8.20%) Cyber Defence
7 21 (4.20%) Cloud Native
8 19 (3.80%) Management Information System
9 13 (2.60%) CSOC
10 10 (2.00%) Analytical Mindset
11 9 (1.80%) Onboarding
12 7 (1.40%) Cyber Security Posture
12 7 (1.40%) Driving Licence
12 7 (1.40%) Hybrid Cloud
13 6 (1.20%) Enterprise Software
13 6 (1.20%) PKI
14 5 (1.00%) Cyberattack
14 5 (1.00%) Data Centre
14 5 (1.00%) Data Protection Act
14 5 (1.00%) Replication
Operating Systems
1 71 (14.20%) Windows
2 45 (9.00%) Linux
3 16 (3.20%) Windows Server
4 15 (3.00%) Windows 10
5 12 (2.40%) Unix
6 7 (1.40%) Windows Server 2012
6 7 (1.40%) Windows Server 2019
7 5 (1.00%) Mac OS
8 4 (0.80%) Kali Linux
9 1 (0.20%) Data ONTAP
Processes & Methodologies
1 207 (41.40%) Incident Response
2 201 (40.20%) Cybersecurity
3 180 (36.00%) SIEM
4 148 (29.60%) Threat Intelligence
5 132 (26.40%) Vulnerability Management
6 130 (26.00%) Cyber Threat Intelligence
7 111 (22.20%) Risk Management
8 106 (21.20%) Mentoring
9 105 (21.00%) Continuous Improvement
10 101 (20.20%) Roadmaps
11 98 (19.60%) Threat and Vulnerability Management
12 96 (19.20%) Stakeholder Management
13 88 (17.60%) ITIL
14 84 (16.80%) Information Security
15 80 (16.00%) Cloud Security
15 80 (16.00%) Cyber Intelligence
16 79 (15.80%) Coaching
17 72 (14.40%) Business Strategy
18 71 (14.20%) Technology Roadmap
19 69 (13.80%) Problem-Solving
Programming Languages
1 71 (14.20%) PowerShell
2 65 (13.00%) Python
3 23 (4.60%) Bash
4 17 (3.40%) Kusto Query Language
5 11 (2.20%) Bicep
6 10 (2.00%) SQL
7 3 (0.60%) JavaScript
7 3 (0.60%) Shell Script
8 2 (0.40%) Perl
9 1 (0.20%) C
9 1 (0.20%) C++
Qualifications
1 83 (16.60%) CISSP
2 73 (14.60%) Security Cleared
3 62 (12.40%) Degree
4 58 (11.60%) SC Cleared
5 44 (8.80%) CompTIA Security+
6 37 (7.40%) CISM
7 32 (6.40%) GIAC
8 24 (4.80%) Cisco Certification
9 22 (4.40%) CEH
9 22 (4.40%) GCIH
10 19 (3.80%) CompTIA CySA+
11 17 (3.40%) Computer Science Degree
11 17 (3.40%) CREST Certified
12 15 (3.00%) (ISC)2 CCSP
12 15 (3.00%) DV Cleared
13 12 (2.40%) Azure Certification
13 12 (2.40%) CISA
14 9 (1.80%) CCNA
14 9 (1.80%) Microsoft Certification
14 9 (1.80%) SANS
Quality Assurance & Compliance
1 165 (33.00%) ISO/IEC 27001
2 161 (32.20%) NIST
3 68 (13.60%) ISO/IEC 27005
4 46 (9.20%) GDPR
5 40 (8.00%) Cyber Essentials
6 35 (7.00%) PCI DSS
7 30 (6.00%) GRC
8 22 (4.40%) Cyber Essentials PLUS
9 21 (4.20%) SOC 2
10 15 (3.00%) NCSC
11 9 (1.80%) SLA
12 6 (1.20%) SOC 3
13 5 (1.00%) ISO/IEC 27002 (supersedes ISO/IEC 17799)
14 4 (0.80%) COBIT
15 3 (0.60%) Accessibility
15 3 (0.60%) ITGC
15 3 (0.60%) Sarbanes-Oxley
16 1 (0.20%) Actionable Recommendations
16 1 (0.20%) California Consumer Privacy Act
16 1 (0.20%) PMO
System Software
1 17 (3.40%) Active Directory
2 15 (3.00%) Docker
3 9 (1.80%) VMware ESXi
4 2 (0.40%) VMware Infrastructure
5 1 (0.20%) Virtual Machines
Systems Management
1 28 (5.60%) Terraform
2 26 (5.20%) Kubernetes
3 22 (4.40%) SCCM
4 17 (3.40%) Microsoft Intune
5 16 (3.20%) Ansible
6 15 (3.00%) QRadar
7 7 (1.40%) vCenter Server
8 6 (1.20%) Grafana
8 6 (1.20%) Single Sign-On
9 5 (1.00%) CASB
9 5 (1.00%) Computer Incident Response Team
10 3 (0.60%) ArcSight ESM
10 3 (0.60%) CSIRT
11 2 (0.40%) Computer Emergency Response Teams
11 2 (0.40%) Nessus
11 2 (0.40%) Prometheus
12 1 (0.20%) Host Intrusion Detection System
Vendors
1 142 (28.40%) Microsoft
2 39 (7.80%) ServiceNow
3 32 (6.40%) Splunk
4 23 (4.60%) CrowdStrike
4 23 (4.60%) SolarWinds
5 13 (2.60%) Tenable
5 13 (2.60%) VMware
6 10 (2.00%) Qualys
7 9 (1.80%) Cisco
8 8 (1.60%) NetApp
9 7 (1.40%) 3PAR
9 7 (1.40%) Palo Alto
9 7 (1.40%) Veeam
10 6 (1.20%) Google
10 6 (1.20%) LogRhythm
10 6 (1.20%) Okta
11 5 (1.00%) CheckPoint
12 4 (0.80%) Fortinet
12 4 (0.80%) Rapid7
12 4 (0.80%) Zscaler