Period
to 21 January 2021

The following table provides summary statistics for permanent job vacancies with a requirement for Security Operations skills. Included is a benchmarking guide to the salaries offered in vacancies that have cited Security Operations over the 6 months to 21 January 2021 with a comparison to the same period in the previous 2 years.

Security Operations (SecOps)
UK
6 months to
21 Jan 2021
Same period 2020 Same period 2019
Rank 315 326 398
Rank change year-on-year +11 +72 +72
Permanent jobs citing Security Operations 605 1,220 1,144
As % of all permanent jobs advertised in the UK 0.95% 0.97% 0.76%
As % of the Processes & Methodologies category 1.03% 1.05% 0.82%
Number of salaries quoted 508 852 791
Median annual salary £62,500 £60,000 £57,500
Median salary % change year-on-year +4.17% +4.35% -4.17%
10th Percentile £37,500 £37,500 £37,500
90th Percentile £95,000 £90,000 £86,250
UK excluding London median annual salary £52,500 £55,000 £52,500
% change year-on-year -4.55% +4.76% -

Security Operations is in the Processes and Methodologies category. The following table is for comparison with the above and provides summary statistics for all permanent job vacancies with a requirement for process or methodology skills.

All Process and Methodology Skills
UK
Permanent vacancies with a requirement for process or methodology skills 58,876 116,316 139,084
As % of all permanent IT jobs advertised in the UK 92.35% 92.12% 92.24%
Number of salaries quoted 47,493 93,197 111,139
Median annual salary £55,000 £52,500 £52,500
Median salary % change year-on-year +4.76% - +5.00%
10th Percentile £32,500 £30,000 £29,750
90th Percentile £90,000 £87,500 £85,000
UK excluding London median annual salary £49,000 £45,569 £45,000
% change year-on-year +7.53% +1.27% -

Security Operations
Job Vacancy Trend

Job postings citing Security Operations as a proportion of all IT jobs advertised.

Job vacancy trend for Security Operations in the UK

Security Operations
Salary Trend

3-month moving average salary quoted in jobs citing Security Operations.

Salary trend for Security Operations in the UK

Security Operations
Salary Histogram

Salary distribution for jobs citing Security Operations over the 6 months to 21 January 2021.

Salary histogram for Security Operations in the UK

Security Operations
Top 16 Job Locations

The table below looks at the demand and provides a guide to the median salaries quoted in IT jobs citing Security Operations within the UK over the 6 months to 21 January 2021. The 'Rank Change' column provides an indication of the change in demand within each location based on the same 6 month period last year.

Location Rank Change
on Same Period
Last Year
Matching
Permanent
IT Job Ads
Median Salary
Past 6 Months
Median Salary
% Change
on Same Period
Last Year
Live
Job
Vacancies
England +5 540 £65,000 +8.33% 78
UK excluding London -60 288 £52,500 -4.55% 52
London +101 268 £70,000 -6.67% 33
South East +84 104 £53,250 -11.25% 18
Work from Home -13 88 £65,000 +4.00% 9
North of England +28 50 £43,750 -12.50% 11
East of England +57 44 £46,000 -23.33% 4
Midlands -48 39 £70,000 +33.33% 7
West Midlands -44 38 £70,000 +33.33% 4
North West +59 29 £57,500 +30.68% 5
South West +29 24 £57,500 +33.72% 5
Scotland -23 23 £45,827 -16.68% 4
Yorkshire +4 19 £40,000 -33.33% 5
Northern Ireland +14 4 £25,000 -42.86% 3
North East +19 2 £61,250 +59.09% 1
East Midlands +32 1 £72,500 +38.10% 3

For the 6 months to 21 January 2021, IT jobs citing Security Operations also mentioned the following skills in order of popularity. The figures indicate the absolute number co-occurrences and as a proportion of all permanent job ads with a requirement for Security Operations.

1 349 (57.69%) Cybersecurity
2 265 (43.80%) Information Security
3 216 (35.70%) SIEM
4 180 (29.75%) Vulnerability Management
5 146 (24.13%) Firewall
6 142 (23.47%) Security Operations Centre
7 127 (20.99%) CISSP
8 119 (19.67%) AWS
8 119 (19.67%) Threat Intelligence
9 113 (18.68%) Azure
10 112 (18.51%) Python
11 108 (17.85%) Management Information System
12 106 (17.52%) Finance
13 104 (17.19%) ISO/IEC 27001
14 103 (17.02%) Cyber Threat Intelligence
15 98 (16.20%) Microsoft
16 96 (15.87%) Penetration Testing
17 93 (15.37%) Linux
18 82 (13.55%) Network Security
19 75 (12.40%) Incident Management
20 74 (12.23%) ITIL
20 74 (12.23%) Identity Access Management
21 73 (12.07%) Cyberthreat
22 72 (11.90%) DevOps
23 71 (11.74%) Windows
24 70 (11.57%) NIST
25 61 (10.08%) Active Directory
26 59 (9.75%) Stakeholder Management
27 56 (9.26%) Splunk
28 55 (9.09%) Problem-Solving

Security Operations
Co-occurring IT Skills by Category

The follow tables expand on the table above by listing co-occurrences grouped by category. The same job type, locality and period is covered with up to 20 co-occurrences shown in each of the following categories:

Application Platforms
1 6 (0.99%) Apache
2 4 (0.66%) Confluence
3 2 (0.33%) SharePoint
4 1 (0.17%) IIS
4 1 (0.17%) Mule
Applications
1 18 (2.98%) Microsoft Office
2 3 (0.50%) Microsoft Excel
2 3 (0.50%) Microsoft PowerPoint
3 2 (0.33%) MS Visio
Business Applications
1 10 (1.65%) Sentinel
2 1 (0.17%) Remedy ITSM
2 1 (0.17%) SAP GRC
2 1 (0.17%) SAP S/4HANA
Cloud Services
1 119 (19.67%) AWS
2 113 (18.68%) Azure
3 52 (8.60%) Office 365
4 46 (7.60%) SaaS
5 28 (4.63%) IaaS
6 26 (4.30%) PaaS
7 25 (4.13%) Cloud Computing
8 24 (3.97%) GCP
9 18 (2.98%) Serverless
10 17 (2.81%) BPaaS
11 14 (2.31%) Virtual Private Cloud
12 9 (1.49%) Amazon EC2
12 9 (1.49%) Amazon ELB
12 9 (1.49%) Amazon S3
12 9 (1.49%) AWS Lambda
12 9 (1.49%) Logic Apps
13 8 (1.32%) Amazon EKS
13 8 (1.32%) Azure Functions
13 8 (1.32%) GitHub
14 7 (1.16%) Azure Data Factory
Communications & Networking
1 146 (24.13%) Firewall
2 82 (13.55%) Network Security
3 49 (8.10%) Intrusion Detection
4 33 (5.45%) LAN
5 30 (4.96%) TCP/IP
6 27 (4.46%) Internet
7 26 (4.30%) VPN
8 25 (4.13%) DNS
9 24 (3.97%) WAN
10 21 (3.47%) Cisco ASA
11 16 (2.64%) WAAS
12 14 (2.31%) Cisco Nexus
13 11 (1.82%) Cisco Firepower
13 11 (1.82%) Cisco ISE
13 11 (1.82%) SSL
14 10 (1.65%) SMTP
15 9 (1.49%) HTTP
16 8 (1.32%) Wireless
17 6 (0.99%) DMZ
17 6 (0.99%) IPsec
Database & Business Intelligence
1 10 (1.65%) Amazon RDS
2 4 (0.66%) SQL Server
3 3 (0.50%) NoSQL
4 2 (0.33%) Cosmos DB
4 2 (0.33%) Data Warehouse
4 2 (0.33%) MongoDB
4 2 (0.33%) MySQL
4 2 (0.33%) Redis
5 1 (0.17%) Amazon Aurora
5 1 (0.17%) Azure SQL Database
5 1 (0.17%) Big Data
5 1 (0.17%) Data Lake
5 1 (0.17%) PostgreSQL
5 1 (0.17%) Relational Database
5 1 (0.17%) SQL Server Integration Services
Development Applications
1 15 (2.48%) Jenkins
2 11 (1.82%) Metasploit
2 11 (1.82%) NUnit
3 10 (1.65%) JIRA
3 10 (1.65%) Selenium
3 10 (1.65%) TestNG
3 10 (1.65%) WebDriver
4 9 (1.49%) Git (software)
5 6 (0.99%) GitLab
5 6 (0.99%) xUnit.net
6 3 (0.50%) Burp Suite
6 3 (0.50%) Snyk
7 1 (0.17%) Postman
7 1 (0.17%) Protractor
7 1 (0.17%) SonarQube
7 1 (0.17%) Spinnaker
7 1 (0.17%) Travis CI
General
1 106 (17.52%) Finance
2 22 (3.64%) Banking
2 22 (3.64%) Public Sector
3 21 (3.47%) Publishing
4 15 (2.48%) Manufacturing
5 13 (2.15%) Aerospace
6 12 (1.98%) Marketing
7 11 (1.82%) Retail
7 11 (1.82%) Telecoms
8 10 (1.65%) Electronics
9 9 (1.49%) Legal
10 5 (0.83%) Housing Association
10 5 (0.83%) Law
10 5 (0.83%) Pharmaceutical
11 4 (0.66%) French Language
11 4 (0.66%) German Language
11 4 (0.66%) Retail Banking
12 3 (0.50%) Italian Language
13 2 (0.33%) Financial Institution
13 2 (0.33%) Spanish Language
Job Titles
1 180 (29.75%) Analyst
2 126 (20.83%) Security Analyst
3 78 (12.89%) Security Engineer
4 47 (7.77%) Senior Analyst
5 45 (7.44%) SOC Analyst
6 40 (6.61%) Operations Analyst
7 37 (6.12%) Security Operations Analyst
8 33 (5.45%) Consultant
8 33 (5.45%) Head of Security
9 32 (5.29%) Security Manager
10 30 (4.96%) IT Analyst
10 30 (4.96%) IT Security Analyst
11 29 (4.79%) Cybersecurity Analyst
12 27 (4.46%) Senior Security Analyst
13 24 (3.97%) DevSecOps Engineer
14 23 (3.80%) Operations Manager
15 22 (3.64%) AWS Engineer
15 22 (3.64%) Security Consultant
16 21 (3.47%) Cloud Engineer
16 21 (3.47%) Operations Engineer
Libraries, Frameworks & Software Standards
1 23 (3.80%) Web Services
2 21 (3.47%) .NET
3 11 (1.82%) Middleware
3 11 (1.82%) SAML
4 10 (1.65%) XML
5 9 (1.49%) Gherkin
5 9 (1.49%) OAuth
6 8 (1.32%) JSON
6 8 (1.32%) OpenID
7 7 (1.16%) RESTful
8 6 (0.99%) .NET Core
8 6 (0.99%) Elastic Stack
8 6 (0.99%) LDAP
8 6 (0.99%) XSLT
9 5 (0.83%) SOAP
10 3 (0.50%) Node.js
11 2 (0.33%) 802.1X
11 2 (0.33%) AngularJS
11 2 (0.33%) React
11 2 (0.33%) REST
Miscellaneous
1 142 (23.47%) Security Operations Centre
2 108 (17.85%) Management Information System
3 73 (12.07%) Cyberthreat
4 44 (7.27%) Analytical Skills
5 29 (4.79%) Public Cloud
6 25 (4.13%) PKI
7 23 (3.80%) Cyberattack
8 21 (3.47%) Distributed Denial-of-Service
9 20 (3.31%) Cyber Kill Chain
10 18 (2.98%) Cyber Defence
11 17 (2.81%) Enterprise Software
12 14 (2.31%) Cloud Native
13 13 (2.15%) Data Centre
14 12 (1.98%) Cybercrime
15 10 (1.65%) User Experience
16 8 (1.32%) Data Protection Act
16 8 (1.32%) Linux Command Line
16 8 (1.32%) Video Conferencing
16 8 (1.32%) Virtual Team
17 7 (1.16%) Self-Motivation
Operating Systems
1 93 (15.37%) Linux
2 71 (11.74%) Windows
3 45 (7.44%) Unix
4 23 (3.80%) Windows Server
5 7 (1.16%) Kali Linux
5 7 (1.16%) Mac OS
6 4 (0.66%) Apple iOS
7 3 (0.50%) Mac OS X
7 3 (0.50%) Ubuntu
7 3 (0.50%) Windows 10
8 1 (0.17%) Android
8 1 (0.17%) MVS
8 1 (0.17%) Red Hat Enterprise Linux
8 1 (0.17%) VMS
8 1 (0.17%) Windows Server 2003
8 1 (0.17%) Windows Server 2008
8 1 (0.17%) Windows Server 2012
8 1 (0.17%) Windows Server 2016
8 1 (0.17%) Windows Server 2019
Processes & Methodologies
1 349 (57.69%) Cybersecurity
2 265 (43.80%) Information Security
3 216 (35.70%) SIEM
4 180 (29.75%) Vulnerability Management
5 119 (19.67%) Threat Intelligence
6 103 (17.02%) Cyber Threat Intelligence
7 96 (15.87%) Penetration Testing
8 75 (12.40%) Incident Management
9 74 (12.23%) Identity Access Management
9 74 (12.23%) ITIL
10 72 (11.90%) DevOps
11 59 (9.75%) Stakeholder Management
12 55 (9.09%) Problem-Solving
13 54 (8.93%) Agile Software Development
14 50 (8.26%) Continuous Improvement
14 50 (8.26%) Risk Management
15 49 (8.10%) Security Architecture
16 47 (7.77%) Analytics
17 44 (7.27%) Configuration Management
18 40 (6.61%) Security Management
Programming Languages
1 112 (18.51%) Python
2 47 (7.77%) Perl
3 42 (6.94%) PowerShell
4 38 (6.28%) Java
5 28 (4.63%) SQL
6 23 (3.80%) C++
7 21 (3.47%) JavaScript
8 20 (3.31%) Bash Shell
9 18 (2.98%) Ruby
10 15 (2.48%) C#
11 12 (1.98%) Go
11 12 (1.98%) Shell Script
12 11 (1.82%) VB.NET
13 4 (0.66%) PHP
14 3 (0.50%) C
14 3 (0.50%) Lisp
15 2 (0.33%) Scala
16 1 (0.17%) Groovy
16 1 (0.17%) VBA
Qualifications
1 127 (20.99%) CISSP
2 53 (8.76%) CISM
3 46 (7.60%) Cisco Certification
3 46 (7.60%) Degree
4 43 (7.11%) Security Cleared
5 38 (6.28%) SANS
6 35 (5.79%) CompTIA Security+
7 33 (5.45%) CISA
8 31 (5.12%) CEH
9 30 (4.96%) SC Cleared
10 28 (4.63%) GCIH
11 24 (3.97%) CREST Certified
12 22 (3.64%) CCNP
12 22 (3.64%) GIAC
13 17 (2.81%) GCFA
14 16 (2.64%) (ISC)2 CCSP
14 16 (2.64%) ISO 27001 Lead Auditor
14 16 (2.64%) OSCP
15 14 (2.31%) CCNA
16 11 (1.82%) GCIA
Quality Assurance & Compliance
1 104 (17.19%) ISO/IEC 27001
2 70 (11.57%) NIST
3 37 (6.12%) GDPR
4 34 (5.62%) PCI DSS
5 29 (4.79%) Cyber Essentials
6 22 (3.64%) SLA
7 19 (3.14%) COBIT
7 19 (3.14%) ITGC
8 16 (2.64%) 21 CFR Part 11
8 16 (2.64%) HIPAA
9 11 (1.82%) ISO/IEC 27002 (supersedes ISO/IEC 17799)
9 11 (1.82%) NCSC
9 11 (1.82%) NIST 800
9 11 (1.82%) QA
10 4 (0.66%) Disclosure Scotland
10 4 (0.66%) Sarbanes-Oxley
11 3 (0.50%) COSO
11 3 (0.50%) Cyber Essentials PLUS
11 3 (0.50%) Government Security Classifications
11 3 (0.50%) ISO/IEC 20000
System Software
1 61 (10.08%) Active Directory
2 32 (5.29%) Docker
3 18 (2.98%) BitLocker
3 18 (2.98%) Firmware
4 10 (1.65%) VMware Infrastructure
5 3 (0.50%) Hyper-V
6 1 (0.17%) Snort
6 1 (0.17%) vSphere
6 1 (0.17%) XenApp
Systems Management
1 35 (5.79%) Nessus
2 32 (5.29%) SCCM
3 30 (4.96%) Kubernetes
4 26 (4.30%) QRadar
5 25 (4.13%) Terraform
6 18 (2.98%) Norton AntiVirus
7 14 (2.31%) Host Intrusion Detection System
8 11 (1.82%) Network Intrusion Detection System
9 10 (1.65%) CSIRT
10 9 (1.49%) Ansible
10 9 (1.49%) CASB
11 7 (1.16%) Computer Emergency Response Teams
11 7 (1.16%) Computer Incident Response Team
12 5 (0.83%) Nmap
13 3 (0.50%) OpenVAS
13 3 (0.50%) Opscode Chef
13 3 (0.50%) Puppet
14 2 (0.33%) EnCase
14 2 (0.33%) Microsoft Intune
14 2 (0.33%) WSUS
Vendors
1 98 (16.20%) Microsoft
2 56 (9.26%) Splunk
3 51 (8.43%) Cisco
4 39 (6.45%) LogRhythm
5 33 (5.45%) IBM
6 28 (4.63%) AlienVault
7 27 (4.46%) CheckPoint
8 26 (4.30%) FireEye
9 24 (3.97%) Symantec
10 22 (3.64%) McAfee
11 21 (3.47%) Palo Alto
12 20 (3.31%) Google
13 18 (2.98%) Tanium
14 13 (2.15%) Darktrace
14 13 (2.15%) NetWitness
14 13 (2.15%) Rapid7
14 13 (2.15%) VMware
15 12 (1.98%) Qualys
15 12 (1.98%) TOWER Software
16 11 (1.82%) Fortinet