Period
to 13 April 2021

The following table provides summary statistics for permanent job vacancies with a requirement for Security Operations skills. Included is a benchmarking guide to the salaries offered in vacancies that have cited Security Operations over the 6 months to 13 April 2021 with a comparison to the same period in the previous 2 years.

Security Operations (SecOps)
UK
6 months to
13 Apr 2021
Same period 2020 Same period 2019
Rank 341 297 407
Rank change year-on-year -44 +110 +67
Permanent jobs citing Security Operations 716 1,177 1,109
As % of all permanent jobs advertised in the UK 0.86% 1.03% 0.74%
As % of the Processes & Methodologies category 0.93% 1.12% 0.81%
Number of salaries quoted 519 884 763
10th Percentile £38,800 £38,750 £37,500
25th Percentile £46,250 £46,250 £45,000
Median annual salary (50th Percentile) £62,500 £60,000 £57,500
Median % change year-on-year +4.17% +4.35% -
75th Percentile £80,000 £77,500 £77,500
90th Percentile £95,000 £90,000 £93,750
UK excluding London median annual salary £55,000 £55,000 £52,500
% change year-on-year - +4.76% -

Security Operations is in the Processes and Methodologies category. The following table is for comparison with the above and provides summary statistics for all permanent job vacancies with a requirement for process or methodology skills.

All Process and Methodology Skills
UK
Permanent vacancies with a requirement for process or methodology skills 76,792 104,892 137,408
As % of all permanent IT jobs advertised in the UK 92.47% 92.14% 92.30%
Number of salaries quoted 59,116 84,257 109,289
10th Percentile £32,500 £31,250 £30,000
25th Percentile £41,250 £40,000 £37,500
Median annual salary (50th Percentile) £55,000 £55,000 £52,500
Median % change year-on-year - +4.76% +5.00%
75th Percentile £75,000 £72,500 £70,000
90th Percentile £90,000 £90,000 £85,000
UK excluding London median annual salary £48,500 £47,500 £45,000
% change year-on-year +2.11% +5.56% -

Security Operations
Job Vacancy Trend

Job postings citing Security Operations as a proportion of all IT jobs advertised.

Job vacancy trend for Security Operations in the UK

Security Operations
Salary Trend

3-month moving average salary quoted in jobs citing Security Operations.

Salary trend for Security Operations in the UK

Security Operations
Salary Histogram

Salary distribution for jobs citing Security Operations over the 6 months to 13 April 2021.

Salary histogram for Security Operations in the UK

Security Operations
Top 16 Job Locations

The table below looks at the demand and provides a guide to the median salaries quoted in IT jobs citing Security Operations within the UK over the 6 months to 13 April 2021. The 'Rank Change' column provides an indication of the change in demand within each location based on the same 6 month period last year.

Location Rank Change
on Same Period
Last Year
Matching
Permanent
IT Job Ads
Median Salary
Past 6 Months
Median Salary
% Change
on Same Period
Last Year
Live
Job
Vacancies
England -40 651 £65,000 +8.33% 111
UK excluding London -69 363 £55,000 - 79
London +13 290 £70,000 -6.67% 32
Work from Home -29 142 £52,500 -25.00% 23
South East -28 108 £61,000 +10.91% 21
North of England -7 68 £57,500 +7.98% 20
East of England +68 66 £62,500 +4.17% 8
Midlands -41 66 £54,500 -0.91% 13
West Midlands -34 65 £53,500 -0.93% 9
North West +6 36 £60,000 +33.33% 10
South West +10 28 £40,000 -11.11% 14
Yorkshire -18 27 £56,250 -6.25% 9
Scotland -51 22 £42,653 -5.22% 2
North East +16 5 £45,000 +5.88% 1
Wales +14 5 £45,000 -10.00%
East Midlands -2 1 £55,000 -2.22% 3

For the 6 months to 13 April 2021, IT jobs citing Security Operations also mentioned the following skills in order of popularity. The figures indicate the absolute number co-occurrences and as a proportion of all permanent job ads with a requirement for Security Operations.

1 411 (57.40%) Cybersecurity
2 340 (47.49%) Information Security
3 242 (33.80%) SIEM
4 187 (26.12%) Vulnerability Management
5 179 (25.00%) Azure
6 177 (24.72%) Firewall
7 156 (21.79%) CISSP
8 153 (21.37%) Security Operations Centre
9 141 (19.69%) Management Information System
9 141 (19.69%) AWS
10 133 (18.58%) Threat Intelligence
11 132 (18.44%) Finance
12 128 (17.88%) ISO/IEC 27001
13 120 (16.76%) Penetration Testing
14 114 (15.92%) Microsoft
15 113 (15.78%) Cyber Threat Intelligence
16 102 (14.25%) Cyberthreat
17 95 (13.27%) Network Security
18 89 (12.43%) Linux
19 86 (12.01%) Incident Management
20 85 (11.87%) Windows
21 82 (11.45%) CISM
21 82 (11.45%) Identity Access Management
22 81 (11.31%) Python
23 79 (11.03%) Security Architecture
24 72 (10.06%) Degree
24 72 (10.06%) Risk Management
25 70 (9.78%) Microsoft 365
26 68 (9.50%) DevSecOps
26 68 (9.50%) SaaS

Security Operations
Co-occurring IT Skills by Category

The follow tables expand on the table above by listing co-occurrences grouped by category. The same job type, locality and period is covered with up to 20 co-occurrences shown in each of the following categories:

Application Platforms
1 15 (2.09%) IIS
2 6 (0.84%) Apache
2 6 (0.84%) Confluence
3 5 (0.70%) SharePoint
4 2 (0.28%) Elasticsearch
5 1 (0.14%) Mule
Applications
1 8 (1.12%) Microsoft Excel
1 8 (1.12%) MS Visio
2 5 (0.70%) Microsoft PowerPoint
3 4 (0.56%) Microsoft Office
4 1 (0.14%) Microsoft Project
4 1 (0.14%) Spreadsheet
Business Applications
1 7 (0.98%) Sentinel
2 3 (0.42%) Remedy ITSM
3 1 (0.14%) Dynamics CRM
3 1 (0.14%) Elite 3E
3 1 (0.14%) SAP GRC
3 1 (0.14%) SAP S/4HANA
Cloud Services
1 179 (25.00%) Azure
2 141 (19.69%) AWS
3 70 (9.78%) Microsoft 365
4 68 (9.50%) SaaS
5 52 (7.26%) PaaS
6 46 (6.42%) IaaS
7 40 (5.59%) Cloud Computing
8 34 (4.75%) GCP
9 19 (2.65%) BPaaS
10 16 (2.23%) Serverless
11 14 (1.96%) Azure Active Directory
11 14 (1.96%) Power Platform
12 13 (1.82%) PowerApps
13 12 (1.68%) GitHub
13 12 (1.68%) Virtual Private Cloud
14 9 (1.26%) Amazon EC2
14 9 (1.26%) Amazon ELB
14 9 (1.26%) Amazon S3
14 9 (1.26%) AWS Lambda
15 8 (1.12%) Google Workspace
Communications & Networking
1 177 (24.72%) Firewall
2 95 (13.27%) Network Security
3 57 (7.96%) Intrusion Detection
4 37 (5.17%) DNS
5 31 (4.33%) TCP/IP
6 24 (3.35%) VPN
7 22 (3.07%) SSL
8 21 (2.93%) Cisco ASA
8 21 (2.93%) LAN
9 18 (2.51%) SMTP
9 18 (2.51%) WAAS
10 17 (2.37%) HTTP
11 15 (2.09%) FTP
12 14 (1.96%) Cisco Nexus
12 14 (1.96%) Internet
12 14 (1.96%) WAN
13 12 (1.68%) IPsec
14 10 (1.40%) F5 BIG-IP GTM
14 10 (1.40%) F5 BIG-IP LTM
15 9 (1.26%) Wireshark
Database & Business Intelligence
1 9 (1.26%) Amazon RDS
2 6 (0.84%) SQL Server
3 3 (0.42%) Azure SQL Database
3 3 (0.42%) Redis
4 2 (0.28%) Data Warehouse
4 2 (0.28%) MongoDB
4 2 (0.28%) PostgreSQL
5 1 (0.14%) Big Data
5 1 (0.14%) Cosmos DB
5 1 (0.14%) Data Lake
5 1 (0.14%) MySQL
5 1 (0.14%) NoSQL
5 1 (0.14%) Power BI
5 1 (0.14%) Relational Database
5 1 (0.14%) SQL Server Integration Services
Development Applications
1 21 (2.93%) Metasploit
2 19 (2.65%) Jenkins
3 10 (1.40%) JIRA
4 7 (0.98%) Burp Suite
5 6 (0.84%) GitLab
5 6 (0.84%) Sonatype Nexus
6 4 (0.56%) Git (software)
6 4 (0.56%) NUnit
6 4 (0.56%) Selenium
6 4 (0.56%) TestNG
6 4 (0.56%) WebDriver
7 3 (0.42%) Snyk
8 2 (0.28%) xUnit.net
9 1 (0.14%) Postman
9 1 (0.14%) SonarQube
9 1 (0.14%) Spinnaker
9 1 (0.14%) Travis CI
General
1 132 (18.44%) Finance
2 26 (3.63%) Public Sector
3 24 (3.35%) Legal
4 19 (2.65%) Banking
5 18 (2.51%) Marketing
6 17 (2.37%) Manufacturing
7 15 (2.09%) Telecoms
8 14 (1.96%) Publishing
9 12 (1.68%) Aerospace
9 12 (1.68%) Electronics
10 9 (1.26%) Retail
11 6 (0.84%) Games
11 6 (0.84%) Law
12 5 (0.70%) Financial Institution
13 3 (0.42%) French Language
13 3 (0.42%) German Language
14 2 (0.28%) Automotive
14 2 (0.28%) Italian Language
14 2 (0.28%) Retail Banking
14 2 (0.28%) Spanish Language
Job Titles
1 244 (34.08%) Analyst
2 144 (20.11%) Security Analyst
3 85 (11.87%) Security Engineer
4 64 (8.94%) SOC Analyst
5 49 (6.84%) Senior Analyst
6 44 (6.15%) Operations Analyst
7 43 (6.01%) Security Operations Analyst
8 42 (5.87%) Architect
9 39 (5.45%) Head of Security
10 38 (5.31%) Security Manager
11 36 (5.03%) Security Architect
12 34 (4.75%) Consultant
13 32 (4.47%) Security Specialist
14 31 (4.33%) Cybersecurity Analyst
14 31 (4.33%) IT Analyst
15 30 (4.19%) IT Security Analyst
16 26 (3.63%) Security Consultant
17 23 (3.21%) DevSecOps Engineer
18 21 (2.93%) Cloud Architect
18 21 (2.93%) Senior Security Analyst
Libraries, Frameworks & Software Standards
1 32 (4.47%) Web Services
2 19 (2.65%) SAML
3 16 (2.23%) Middleware
4 14 (1.96%) LDAP
5 12 (1.68%) .NET
5 12 (1.68%) OAuth
5 12 (1.68%) OpenID
6 8 (1.12%) XML
7 6 (0.84%) SOAP
8 5 (0.70%) Elastic Stack
8 5 (0.70%) RESTful
9 4 (0.56%) .NET Core
9 4 (0.56%) Gherkin
10 3 (0.42%) JSON
10 3 (0.42%) Node.js
11 2 (0.28%) .NET Framework
11 2 (0.28%) 802.1X
11 2 (0.28%) HTML
11 2 (0.28%) React
11 2 (0.28%) XSLT
Miscellaneous
1 153 (21.37%) Security Operations Centre
2 141 (19.69%) Management Information System
3 102 (14.25%) Cyberthreat
4 55 (7.68%) Analytical Skills
5 48 (6.70%) Public Cloud
6 36 (5.03%) Distributed Denial-of-Service
7 30 (4.19%) Cyberattack
8 28 (3.91%) Cyber Kill Chain
9 26 (3.63%) Cloud Native
9 26 (3.63%) PKI
10 23 (3.21%) Cyber Defence
11 22 (3.07%) Data Centre
12 20 (2.79%) Greenfield Project
13 18 (2.51%) Enterprise Software
14 16 (2.23%) Cybercrime
15 13 (1.82%) Analytical Mindset
16 12 (1.68%) Mobile App
17 8 (1.12%) BYOD
17 8 (1.12%) User Experience
17 8 (1.12%) Video Conferencing
Operating Systems
1 89 (12.43%) Linux
2 85 (11.87%) Windows
3 45 (6.28%) Unix
4 18 (2.51%) Windows Server
5 13 (1.82%) Kali Linux
6 10 (1.40%) Mac OS
7 8 (1.12%) Windows 10
8 4 (0.56%) Apple iOS
9 3 (0.42%) Android
9 3 (0.42%) Red Hat Enterprise Linux
10 2 (0.28%) SUSE
10 2 (0.28%) Windows Server 2012
10 2 (0.28%) Windows Server 2016
11 1 (0.14%) MVS
11 1 (0.14%) VMS
Processes & Methodologies
1 411 (57.40%) Cybersecurity
2 340 (47.49%) Information Security
3 242 (33.80%) SIEM
4 187 (26.12%) Vulnerability Management
5 133 (18.58%) Threat Intelligence
6 120 (16.76%) Penetration Testing
7 113 (15.78%) Cyber Threat Intelligence
8 86 (12.01%) Incident Management
9 82 (11.45%) Identity Access Management
10 79 (11.03%) Security Architecture
11 72 (10.06%) Risk Management
12 68 (9.50%) DevSecOps
13 66 (9.22%) DevOps
14 63 (8.80%) Agile Software Development
14 63 (8.80%) ITIL
15 53 (7.40%) Continuous Improvement
15 53 (7.40%) Vulnerability Scanning
16 49 (6.84%) Cyber Intelligence
17 48 (6.70%) Security Monitoring
18 44 (6.15%) Analytics
Programming Languages
1 81 (11.31%) Python
2 52 (7.26%) PowerShell
3 35 (4.89%) Perl
4 30 (4.19%) SQL
5 27 (3.77%) C++
6 26 (3.63%) Java
7 21 (2.93%) C#
8 10 (1.40%) C
9 9 (1.26%) Bash Shell
10 8 (1.12%) Ruby
11 7 (0.98%) JavaScript
12 6 (0.84%) Go
13 5 (0.70%) PHP
13 5 (0.70%) VB
13 5 (0.70%) VB.NET
14 4 (0.56%) VBA
15 2 (0.28%) Lisp
15 2 (0.28%) Scala
15 2 (0.28%) VBScript
16 1 (0.14%) Shell Script
Qualifications
1 156 (21.79%) CISSP
2 82 (11.45%) CISM
3 72 (10.06%) Degree
4 61 (8.52%) CISA
5 55 (7.68%) Cisco Certification
6 54 (7.54%) Security Cleared
7 48 (6.70%) CEH
8 46 (6.42%) SANS
9 37 (5.17%) GIAC
10 33 (4.61%) OSCP
11 32 (4.47%) SC Cleared
12 26 (3.63%) (ISC)2 CCSP
13 24 (3.35%) CompTIA Security+
14 20 (2.79%) GCIH
15 18 (2.51%) ISO 27001 Lead Auditor
16 16 (2.23%) CRISC
17 14 (1.96%) CCNP
17 14 (1.96%) CREST Certified
17 14 (1.96%) IISP
18 13 (1.82%) EC-Council LPT
Quality Assurance & Compliance
1 128 (17.88%) ISO/IEC 27001
2 65 (9.08%) PCI DSS
3 52 (7.26%) GDPR
4 48 (6.70%) NIST
5 46 (6.42%) GRC
6 37 (5.17%) Cyber Essentials
7 22 (3.07%) COBIT
8 20 (2.79%) ITGC
9 18 (2.51%) 21 CFR Part 11
9 18 (2.51%) HIPAA
10 17 (2.37%) SLA
11 15 (2.09%) Sarbanes-Oxley
12 11 (1.54%) QA
13 10 (1.40%) NCSC
14 8 (1.12%) ISO/IEC 20000
14 8 (1.12%) NIST 800
15 5 (0.70%) COSO
15 5 (0.70%) Cyber Essentials PLUS
15 5 (0.70%) SOC 2
16 4 (0.56%) Disclosure Scotland
System Software
1 54 (7.54%) Active Directory
2 28 (3.91%) Docker
3 13 (1.82%) Firmware
4 12 (1.68%) BitLocker
5 9 (1.26%) VMware Infrastructure
6 6 (0.84%) Snort
7 5 (0.70%) Squid
8 4 (0.56%) Active Directory Lightweight Directory Services
8 4 (0.56%) Hyper-V
8 4 (0.56%) Shibboleth
9 3 (0.42%) Virtual Machines
10 2 (0.28%) Virtual Desktop
Systems Management
1 51 (7.12%) Nessus
2 36 (5.03%) Terraform
3 24 (3.35%) Kubernetes
4 22 (3.07%) QRadar
5 20 (2.79%) Puppet
5 20 (2.79%) SCCM
6 13 (1.82%) Ansible
7 12 (1.68%) CSIRT
7 12 (1.68%) Norton AntiVirus
8 11 (1.54%) CASB
8 11 (1.54%) Microsoft Intune
9 8 (1.12%) Computer Emergency Response Teams
10 7 (0.98%) Computer Incident Response Team
11 6 (0.84%) Jamf Pro
11 6 (0.84%) Nmap
12 5 (0.70%) EnCase
12 5 (0.70%) Nexpose
12 5 (0.70%) Single Sign-On
12 5 (0.70%) Suricata
13 4 (0.56%) Host Intrusion Detection System
Vendors
1 114 (15.92%) Microsoft
2 58 (8.10%) Splunk
3 51 (7.12%) Cisco
4 41 (5.73%) CheckPoint
5 33 (4.61%) AlienVault
5 33 (4.61%) FireEye
5 33 (4.61%) LogRhythm
6 32 (4.47%) Qualys
7 26 (3.63%) Google
7 26 (3.63%) McAfee
8 25 (3.49%) Symantec
9 24 (3.35%) ServiceNow
10 21 (2.93%) Twitter
11 20 (2.79%) Carbon Black
12 19 (2.65%) Sun
13 18 (2.51%) Zscaler
14 17 (2.37%) Darktrace
14 17 (2.37%) Palo Alto
15 15 (2.09%) Blue Coat
15 15 (2.09%) F5