Period
to 29 October 2020

The following table provides summary statistics for permanent job vacancies with a requirement for Security Operations skills. Included is a benchmarking guide to the salaries offered in vacancies that have cited Security Operations over the 6 months to 29 October 2020 with a comparison to the same period in the previous 2 years.

Security Operations (SecOps)
UK
6 months to
29 Oct 2020
Same period 2019 Same period 2018
Rank 286 334 428
Rank change year-on-year +48 +94 +78
Permanent jobs citing Security Operations 541 1,308 1,206
As % of all permanent jobs advertised in the UK 1.09% 0.95% 0.73%
As % of the Processes & Methodologies category 1.18% 1.03% 0.80%
Number of salaries quoted 428 836 881
Median annual salary £57,500 £60,000 £57,500
Median salary % change year-on-year -4.17% +4.35% -4.17%
10th Percentile £41,250 £32,500 £37,500
90th Percentile £85,000 £85,000 £82,500
UK excluding London median annual salary £55,000 £50,000 £55,000
% change year-on-year +10.00% -9.09% -

Security Operations is in the Processes and Methodologies category. The following table is for comparison with the above and provides summary statistics for all permanent job vacancies with a requirement for process or methodology skills.

All Process and Methodology Skills
UK
Permanent vacancies with a requirement for process or methodology skills 45,953 127,010 151,486
As % of all permanent IT jobs advertised in the UK 92.38% 92.21% 91.93%
Number of salaries quoted 37,887 100,305 120,420
Median annual salary £55,000 £52,500 £50,000
Median salary % change year-on-year +4.76% +5.00% -
10th Percentile £32,737 £30,000 £29,000
90th Percentile £90,000 £86,250 £83,750
UK excluding London median annual salary £49,000 £45,000 £45,000
% change year-on-year +8.89% - +5.88%

Security Operations
Job Vacancy Trend

Job postings citing Security Operations as a proportion of all IT jobs advertised.

Job vacancy trend for Security Operations in the UK

Security Operations
Salary Trend

3-month moving average salary quoted in jobs citing Security Operations.

Salary trend for Security Operations in the UK

Security Operations
Salary Histogram

Salary distribution for jobs citing Security Operations over the 6 months to 29 October 2020.

Salary histogram for Security Operations in the UK

Security Operations
Top 17 Job Locations

The table below looks at the demand and provides a guide to the median salaries quoted in IT jobs citing Security Operations within the UK over the 6 months to 29 October 2020. The 'Rank Change' column provides an indication of the change in demand within each location based on the same 6 month period last year.

Location Rank Change
on Same Period
Last Year
Matching
Permanent
IT Job Ads
Median Salary
Past 6 Months
Median Salary
% Change
on Same Period
Last Year
Live
Job
Vacancies
England +61 479 £57,500 -4.17% 64
UK excluding London +12 263 £55,000 +10.00% 50
London +98 250 £60,000 -14.29% 16
South East +91 67 £55,000 -8.33% 23
North of England +119 60 £53,925 +10.62% 10
Work from Home +43 55 £57,500 -23.33% 3
East of England +74 36 £50,000 -9.09% 6
South West +82 35 £55,000 +91.30% 8
North West +123 32 £57,000 +30.29% 4
Midlands -2 26 £60,000 +14.29% 1
Yorkshire +89 25 £47,500 -20.83% 5
Scotland +11 25 £45,000 +5.13% 2
West Midlands -1 21 £61,250 +16.67% 1
Wales +46 9 £45,000 +15.38%
East Midlands +58 5 £48,750 -18.75%
Northern Ireland +18 5 £25,000 -28.57%
North East +25 3 £55,925 +33.15% 1

For the 6 months to 29 October 2020, IT jobs citing Security Operations also mentioned the following skills in order of popularity. The figures indicate the absolute number co-occurrences and as a proportion of all permanent job ads with a requirement for Security Operations.

1 316 (58.41%) Cybersecurity
2 242 (44.73%) Information Security
3 229 (42.33%) SIEM
4 163 (30.13%) Firewall
5 161 (29.76%) Security Operations Centre
6 144 (26.62%) Vulnerability Management
7 125 (23.11%) CISSP
8 114 (21.07%) Finance
9 113 (20.89%) Threat Intelligence
10 111 (20.52%) AWS
11 107 (19.78%) Azure
12 106 (19.59%) Python
13 103 (19.04%) Cyber Threat Intelligence
14 94 (17.38%) Microsoft
15 93 (17.19%) ISO/IEC 27001
16 90 (16.64%) Linux
17 88 (16.27%) Penetration Testing
18 83 (15.34%) Office 365
19 79 (14.60%) NIST
20 77 (14.23%) Active Directory
21 73 (13.49%) Management Information System
22 72 (13.31%) Windows
23 71 (13.12%) ITIL
24 64 (11.83%) Splunk
25 62 (11.46%) SANS
26 61 (11.28%) Network Security
27 60 (11.09%) Cyberthreat
28 59 (10.91%) Incident Management
29 58 (10.72%) Stakeholder Management
30 56 (10.35%) Cisco

Security Operations
Co-occurring IT Skills by Category

The follow tables expand on the table above by listing co-occurrences grouped by category. The same job type, locality and period is covered with up to 20 co-occurrences shown in each of the following categories:

Application Platforms
1 3 (0.55%) Anypoint
2 2 (0.37%) SharePoint
3 1 (0.18%) Apache
3 1 (0.18%) Confluence
3 1 (0.18%) IIS
3 1 (0.18%) Mule
Applications
1 35 (6.47%) Microsoft Office
2 2 (0.37%) Microsoft PowerPoint
3 1 (0.18%) Microsoft Excel
3 1 (0.18%) MS Visio
Business Applications
1 18 (3.33%) Sentinel
2 1 (0.18%) SAP GRC
2 1 (0.18%) SAP S/4HANA
Cloud Services
1 111 (20.52%) AWS
2 107 (19.78%) Azure
3 83 (15.34%) Office 365
4 28 (5.18%) GCP
5 24 (4.44%) SaaS
6 17 (3.14%) IaaS
7 15 (2.77%) PaaS
8 14 (2.59%) Logic Apps
9 11 (2.03%) Cloud Computing
10 8 (1.48%) Virtual Private Cloud
11 7 (1.29%) Serverless
12 6 (1.11%) AWS CloudFormation
12 6 (1.11%) AWS CloudTrail
12 6 (1.11%) Azure Functions
12 6 (1.11%) BPaaS
13 5 (0.92%) Azure Active Directory
13 5 (0.92%) Azure Data Factory
14 2 (0.37%) Amazon CloudWatch
14 2 (0.37%) Amazon GuardDuty
14 2 (0.37%) Datadog
Communications & Networking
1 163 (30.13%) Firewall
2 61 (11.28%) Network Security
3 50 (9.24%) Internet
4 49 (9.06%) Intrusion Detection
5 36 (6.65%) TCP/IP
6 30 (5.55%) DNS
6 30 (5.55%) VPN
7 26 (4.81%) LAN
8 23 (4.25%) WAN
9 18 (3.33%) Wireshark
10 16 (2.96%) Wireless
11 11 (2.03%) Cisco ASA
11 11 (2.03%) Cisco Nexus
12 10 (1.85%) SMTP
13 9 (1.66%) Cisco Firepower
13 9 (1.66%) Cisco ISE
13 9 (1.66%) DKIM
13 9 (1.66%) DMARC
13 9 (1.66%) HTTP
14 8 (1.48%) Wireless Security
Database & Business Intelligence
1 2 (0.37%) Data Warehouse
1 2 (0.37%) MongoDB
1 2 (0.37%) MySQL
1 2 (0.37%) NoSQL
1 2 (0.37%) SQL Server
2 1 (0.18%) Amazon Aurora
2 1 (0.18%) Amazon RDS
2 1 (0.18%) Big Data
2 1 (0.18%) Cosmos DB
2 1 (0.18%) PostgreSQL
2 1 (0.18%) Redis
Development Applications
1 12 (2.22%) Metasploit
2 11 (2.03%) NUnit
3 10 (1.85%) Selenium
3 10 (1.85%) TestNG
3 10 (1.85%) WebDriver
4 7 (1.29%) Git (software)
5 6 (1.11%) Jenkins
6 5 (0.92%) xUnit.net
7 3 (0.55%) JIRA
8 2 (0.37%) Burp Suite
8 2 (0.37%) GitLab
9 1 (0.18%) Atlassian Bamboo
9 1 (0.18%) Gradle
9 1 (0.18%) IntelliJ
9 1 (0.18%) Octopus Deploy
9 1 (0.18%) Protractor
9 1 (0.18%) Snyk
9 1 (0.18%) Spinnaker
9 1 (0.18%) TeamCity
9 1 (0.18%) Travis CI
General
1 114 (21.07%) Finance
2 38 (7.02%) Manufacturing
3 29 (5.36%) Public Sector
4 27 (4.99%) Marketing
4 27 (4.99%) Telecoms
5 25 (4.62%) Electronics
6 21 (3.88%) Banking
7 16 (2.96%) Retail
8 12 (2.22%) Aerospace
9 11 (2.03%) Publishing
10 8 (1.48%) Law
10 8 (1.48%) Legal
11 7 (1.29%) Retail Banking
12 6 (1.11%) Pharmaceutical
13 4 (0.74%) Housing Association
14 2 (0.37%) French Language
14 2 (0.37%) Games
14 2 (0.37%) German Language
14 2 (0.37%) Investment Banking
14 2 (0.37%) Italian Language
Job Titles
1 154 (28.47%) Analyst
2 117 (21.63%) Security Engineer
3 113 (20.89%) Security Analyst
4 44 (8.13%) Operations Analyst
5 41 (7.58%) Security Operations Analyst
5 41 (7.58%) Senior Analyst
6 40 (7.39%) SOC Analyst
7 38 (7.02%) Operations Engineer
8 29 (5.36%) Consultant
9 26 (4.81%) Security Manager
10 23 (4.25%) Cloud Engineer
11 22 (4.07%) IT Analyst
11 22 (4.07%) IT Security Analyst
12 21 (3.88%) Cybersecurity Analyst
12 21 (3.88%) Security Specialist
13 20 (3.70%) Senior Security Analyst
14 19 (3.51%) AWS Engineer
14 19 (3.51%) Senior Consultant
14 19 (3.51%) Senior Manager
15 18 (3.33%) Incident Manager
Libraries, Frameworks & Software Standards
1 25 (4.62%) .NET
2 19 (3.51%) Web Services
3 9 (1.66%) Gherkin
4 7 (1.29%) XML
5 6 (1.11%) JSON
5 6 (1.11%) OAuth
6 5 (0.92%) .NET Core
6 5 (0.92%) RESTful
6 5 (0.92%) XSLT
7 4 (0.74%) OpenID
8 3 (0.55%) 802.1X
8 3 (0.55%) ActiveMQ
8 3 (0.55%) LDAP
8 3 (0.55%) RAML
8 3 (0.55%) React
8 3 (0.55%) Swagger
9 2 (0.37%) .NET Framework
9 2 (0.37%) Elastic Stack
9 2 (0.37%) OAuth2
9 2 (0.37%) SAML
Miscellaneous
1 161 (29.76%) Security Operations Centre
2 73 (13.49%) Management Information System
3 60 (11.09%) Cyberthreat
4 36 (6.65%) Analytical Skills
5 33 (6.10%) Public Cloud
6 24 (4.44%) Cyberattack
7 21 (3.88%) Cyber Kill Chain
7 21 (3.88%) Distributed Denial-of-Service
8 18 (3.33%) PKI
9 16 (2.96%) Data Centre
10 14 (2.59%) Cybercrime
11 11 (2.03%) Cloud Native
12 10 (1.85%) Cyber Defence
13 8 (1.48%) Virtual Team
14 7 (1.29%) Data Protection Act
14 7 (1.29%) Enterprise Software
14 7 (1.29%) Internet of Things
14 7 (1.29%) Private Cloud
15 4 (0.74%) Greenfield Project
15 4 (0.74%) User Experience
Operating Systems
1 90 (16.64%) Linux
2 72 (13.31%) Windows
3 31 (5.73%) Unix
4 13 (2.40%) Windows Server
5 12 (2.22%) Kali Linux
6 6 (1.11%) Apple iOS
6 6 (1.11%) Mac OS
7 4 (0.74%) Mac OS X
7 4 (0.74%) Ubuntu
7 4 (0.74%) VMS
8 3 (0.55%) Android
9 2 (0.37%) Red Hat Enterprise Linux
9 2 (0.37%) Windows Server 2008
9 2 (0.37%) Windows Server 2012
9 2 (0.37%) Windows Server 2016
10 1 (0.18%) MVS
10 1 (0.18%) Windows 10
10 1 (0.18%) Windows 7
10 1 (0.18%) Windows Server 2003
10 1 (0.18%) Windows Server 2019
Processes & Methodologies
1 316 (58.41%) Cybersecurity
2 242 (44.73%) Information Security
3 229 (42.33%) SIEM
4 144 (26.62%) Vulnerability Management
5 113 (20.89%) Threat Intelligence
6 103 (19.04%) Cyber Threat Intelligence
7 88 (16.27%) Penetration Testing
8 71 (13.12%) ITIL
9 59 (10.91%) Incident Management
10 58 (10.72%) Stakeholder Management
11 53 (9.80%) Agile Software Development
12 51 (9.43%) Security Management
13 50 (9.24%) Problem-Solving
14 49 (9.06%) Risk Management
15 47 (8.69%) DevOps
16 46 (8.50%) Identity Access Management
16 46 (8.50%) Vulnerability Scanning
17 44 (8.13%) Analytics
18 38 (7.02%) Security Monitoring
19 36 (6.65%) Privileged Access Management
Programming Languages
1 106 (19.59%) Python
2 40 (7.39%) PowerShell
3 39 (7.21%) Perl
4 37 (6.84%) Bash Shell
5 33 (6.10%) Java
6 29 (5.36%) SQL
7 26 (4.81%) JavaScript
8 20 (3.70%) C++
9 16 (2.96%) Shell Script
10 15 (2.77%) C#
11 13 (2.40%) Ruby
12 11 (2.03%) VB.NET
13 9 (1.66%) Go
14 5 (0.92%) C
14 5 (0.92%) PHP
15 2 (0.37%) Lisp
16 1 (0.18%) Apex Code
16 1 (0.18%) VB
16 1 (0.18%) VBA
16 1 (0.18%) VBScript
Qualifications
1 125 (23.11%) CISSP
2 62 (11.46%) SANS
3 47 (8.69%) CompTIA Security+
3 47 (8.69%) Degree
4 43 (7.95%) Security Cleared
5 40 (7.39%) Cisco Certification
6 32 (5.91%) CREST Certified
6 32 (5.91%) GCIH
7 31 (5.73%) CISM
7 31 (5.73%) SC Cleared
8 24 (4.44%) GCIA
9 23 (4.25%) CEH
10 19 (3.51%) CISA
11 18 (3.33%) GIAC
12 17 (3.14%) CCNA
12 17 (3.14%) GCFA
13 15 (2.77%) MCSE
13 15 (2.77%) Microsoft Certification
14 14 (2.59%) (ISC)2 CCSP
14 14 (2.59%) CCNP
Quality Assurance & Compliance
1 93 (17.19%) ISO/IEC 27001
2 79 (14.60%) NIST
3 34 (6.28%) GDPR
4 28 (5.18%) PCI DSS
5 22 (4.07%) SLA
6 20 (3.70%) COBIT
6 20 (3.70%) Cyber Essentials
6 20 (3.70%) ISO/IEC 27002 (supersedes ISO/IEC 17799)
7 15 (2.77%) NIST 800
8 10 (1.85%) HMG Security Policy Framework
9 8 (1.48%) QA
10 6 (1.11%) 21 CFR Part 11
10 6 (1.11%) HIPAA
10 6 (1.11%) ITGC
11 4 (0.74%) NCSC
12 2 (0.37%) COSO
12 2 (0.37%) ISO 22301
12 2 (0.37%) ISO/IEC 20000
12 2 (0.37%) JSP 440
13 1 (0.18%) Sarbanes-Oxley
System Software
1 77 (14.23%) Active Directory
2 19 (3.51%) Docker
3 15 (2.77%) VMware Infrastructure
4 12 (2.22%) Firmware
5 11 (2.03%) BitLocker
5 11 (2.03%) Snort
6 1 (0.18%) Hyper-V
6 1 (0.18%) VMware ESXi
6 1 (0.18%) vSphere
6 1 (0.18%) XenApp
Systems Management
1 44 (8.13%) QRadar
2 26 (4.81%) Nessus
3 25 (4.62%) SCCM
4 18 (3.33%) Network Intrusion Detection System
5 17 (3.14%) Kubernetes
6 14 (2.59%) Host Intrusion Detection System
6 14 (2.59%) Terraform
7 11 (2.03%) CSIRT
7 11 (2.03%) Norton AntiVirus
8 10 (1.85%) Ansible
9 7 (1.29%) EnCase
10 5 (0.92%) Computer Incident Response Team
10 5 (0.92%) Puppet
11 4 (0.74%) CASB
11 4 (0.74%) Computer Emergency Response Teams
11 4 (0.74%) Opscode Chef
12 3 (0.55%) CloudHub
13 2 (0.37%) SCOM
13 2 (0.37%) WhatsUp Gold
13 2 (0.37%) WSUS
Vendors
1 94 (17.38%) Microsoft
2 64 (11.83%) Splunk
3 56 (10.35%) Cisco
4 54 (9.98%) LogRhythm
5 44 (8.13%) IBM
6 35 (6.47%) Palo Alto
7 31 (5.73%) ArcSight
8 28 (5.18%) CheckPoint
9 25 (4.62%) SAP
9 25 (4.62%) Thycotic
10 24 (4.44%) CyberArk
10 24 (4.44%) NetWitness
11 23 (4.25%) BeyondTrust
11 23 (4.25%) Bomgar
12 19 (3.51%) Google
13 18 (3.33%) Symantec
14 16 (2.96%) McAfee
14 16 (2.96%) VMware
15 14 (2.59%) Red Hat
16 12 (2.22%) FireEye