Security Operations Job Trends

Security Operations (SecOps)
UK

The table below provides summary statistics and salary benchmarking for jobs requiring Security Operations skills. It covers permanent job vacancies from the 6 months leading up to 26 June 2026, with comparisons to the same periods in the previous two years.

6 months to
26 Jun 2026
Same period 2025 Same period 2024
Rank 234 379 326
Rank change year-on-year +145 -53 +11
Permanent jobs citing Security Operations 787 322 861
As % of all permanent jobs in the UK 0.83% 0.71% 0.81%
As % of the Processes & Methodologies category 1.13% 0.77% 0.99%
Number of salaries quoted 590 233 631
10th Percentile £41,700 £41,750 £37,500
25th Percentile £52,500 £48,875 £50,000
Median annual salary (50th Percentile) £70,000 £62,000 £60,000
Median % change year-on-year +12.90% +3.33% -4.00%
75th Percentile £82,500 £77,500 £77,500
90th Percentile £95,000 £99,250 £100,000
UK excluding London median annual salary £65,000 £55,000 £54,000
% change year-on-year +18.18% +1.85% -6.09%

All Process & Methodology Skills
UK

Security Operations falls under the Processes and Methodologies category. For comparison with the information above, the following table provides summary statistics for all permanent job vacancies requiring process or methodology skills.

Permanent vacancies with a requirement for process or methodology skills 69,702 41,872 87,252
As % of all permanent jobs advertised in the UK 73.38% 92.19% 82.13%
Number of salaries quoted 48,070 22,602 61,776
10th Percentile £30,000 £28,750 £29,750
25th Percentile £41,250 £38,750 £40,000
Median annual salary (50th Percentile) £60,000 £57,500 £55,000
Median % change year-on-year +4.35% +4.55% -9.54%
75th Percentile £78,750 £77,500 £72,500
90th Percentile £100,000 £100,000 £92,500
UK excluding London median annual salary £52,681 £50,000 £50,000
% change year-on-year +5.36% - -9.09%

Security Operations
Job Vacancy Trend

Historical trend showing the proportion of permanent IT job postings citing Security Operations relative to all permanent IT jobs advertised.

Security Operations job vacancy trend in the UK

Security Operations
Salary Trend

Salary distribution trend for jobs in the UK citing Security Operations.

Salary distribution trend for jobs in the UK citing Security Operations

Security Operations
Salary Histogram

Salary distribution for jobs citing Security Operations over the 6 months to 26 June 2026.

Salary histogram for Security Operations in the UK

Security Operations
Top 17 Job Locations

The table below looks at the demand and provides a guide to the median salaries quoted in IT jobs citing Security Operations within the UK over the 6 months to 26 June 2026. The 'Rank Change' column provides an indication of the change in demand within each location based on the same 6 month period last year.

Location Rank Change
on Same Period
Last Year
Matching
Permanent
IT Job Ads
Median Salary
Past 6 Months
Median Salary
% Change
on Same Period
Last Year
Live
Jobs
England +134 708 £70,000 +12.00% 221
UK excluding London +123 459 £65,000 +18.18% 171
London +92 273 £75,000 -3.23% 89
Work from Home +107 240 £65,000 +18.18% 102
South East +55 139 £60,000 -11.11% 60
North of England +53 123 £70,000 +16.67% 37
Midlands +16 82 £57,500 +4.55% 18
North West +57 74 £75,000 +36.36% 19
East Midlands +21 46 £55,000 -10.02% 7
Yorkshire -7 43 £62,500 - 15
West Midlands -24 36 £67,500 +22.73% 11
South West -48 36 £65,000 +27.31% 19
East of England -7 32 £57,500 +5.02% 25
Wales -20 30 £25,000 -52.56% 10
Scotland +16 17 £75,000 +36.36% 9
North East -40 6 £75,000 +22.45% 3
Northern Ireland - 2 £40,750 - 3

Security Operations
Co-Occurring Skills & Capabilities by Category

The following tables expand on the one above by listing co-occurrences grouped by category. They cover the same employment type, locality and period, with up to 20 co-occurrences shown in each category:

Application Platforms
1 11 (1.40%) SharePoint
2 3 (0.38%) Confluence
2 3 (0.38%) Microsoft Exchange
3 2 (0.25%) Apache Spark
Applications
1 1 (0.13%) Microsoft Excel
1 1 (0.13%) Microsoft PowerPoint
Business Applications
1 2 (0.25%) Distributed Ledger
2 1 (0.13%) Exchequer
Cloud Services
1 170 (21.60%) Azure
2 94 (11.94%) AWS
3 79 (10.04%) Microsoft 365
4 63 (8.01%) Azure Sentinel
5 52 (6.61%) Entra ID
6 41 (5.21%) GCP
7 24 (3.05%) SaaS
8 16 (2.03%) Mimecast
9 14 (1.78%) Anthropic Claude
10 13 (1.65%) Microsoft Purview
11 12 (1.52%) Zapier
12 11 (1.40%) Azure Logic Apps
13 9 (1.14%) GitHub
13 9 (1.14%) GitHub Actions
14 7 (0.89%) Amazon GuardDuty
14 7 (0.89%) AWS CloudFormation
14 7 (0.89%) IaaS
14 7 (0.89%) PaaS
15 6 (0.76%) Cloudflare
15 6 (0.76%) Sumo Logic
Communications & Networking
1 115 (14.61%) Firewall
2 80 (10.17%) Network Security
3 37 (4.70%) WAN
4 35 (4.45%) TCP/IP
5 34 (4.32%) DNS
5 34 (4.32%) LAN
6 32 (4.07%) VPN
7 18 (2.29%) Intrusion Detection
7 18 (2.29%) Wi-Fi
8 17 (2.16%) HTTP
9 16 (2.03%) Cisco Nexus
10 15 (1.91%) Internet
11 11 (1.40%) FTP
11 11 (1.40%) SMTP
12 10 (1.27%) Cisco ISE
13 8 (1.02%) SSL
14 7 (0.89%) SD-WAN
15 5 (0.64%) NGFW
16 4 (0.51%) HTTPS
17 3 (0.38%) SAN
Database & Business Intelligence
1 4 (0.51%) SQL Server
2 3 (0.38%) MongoDB
2 3 (0.38%) Power BI
3 2 (0.25%) Elasticsearch
3 2 (0.25%) Hadoop
3 2 (0.25%) NoSQL
3 2 (0.25%) Relational Database
4 1 (0.13%) Azure SQL Database
4 1 (0.13%) Big Data
4 1 (0.13%) Tableau
Development Applications
1 7 (0.89%) Jenkins
2 4 (0.51%) Bitbucket
2 4 (0.51%) CircleCI
2 4 (0.51%) JIRA
2 4 (0.51%) Metasploit
3 1 (0.13%) Yeoman
General
1 168 (21.35%) Social Skills
2 103 (13.09%) Analytical Skills
3 92 (11.69%) Finance
4 51 (6.48%) Inclusion and Diversity
5 40 (5.08%) Law
6 34 (4.32%) Public Sector
7 33 (4.19%) Legal
8 26 (3.30%) Retail
9 17 (2.16%) Influencing Skills
10 16 (2.03%) Banking
11 11 (1.40%) Aerospace
12 10 (1.27%) Financial Institution
13 6 (0.76%) Advertising
13 6 (0.76%) Back Office
13 6 (0.76%) Organisational Skills
13 6 (0.76%) Police
13 6 (0.76%) Presentation Skills
14 5 (0.64%) Aviation
15 4 (0.51%) Games
15 4 (0.51%) Manufacturing
Job Titles
1 195 (24.78%) Analyst
2 145 (18.42%) Security Analyst
3 121 (15.37%) Senior
4 97 (12.33%) Security Engineer
4 97 (12.33%) Security Manager
5 87 (11.05%) Lead
6 83 (10.55%) Cybersecurity Analyst
7 64 (8.13%) Senior Analyst
8 54 (6.86%) Cybersecurity Manager
9 53 (6.73%) SOC Engineer
10 50 (6.35%) Operational Security Manager
10 50 (6.35%) Security Operations Manager
10 50 (6.35%) Senior Security Analyst
11 47 (5.97%) Operations Manager
11 47 (5.97%) SOC Analyst
12 46 (5.84%) Architect
13 38 (4.83%) Cybersecurity Engineer
14 35 (4.45%) Operations Analyst
15 33 (4.19%) Security Specialist
16 30 (3.81%) Security Architect
Libraries, Frameworks & Software Standards
1 14 (1.78%) LDAP
2 6 (0.76%) Regular Expression
3 5 (0.64%) REST
4 4 (0.51%) ARM Templates
5 3 (0.38%) JSON
5 3 (0.38%) OpenID
5 3 (0.38%) SAML
6 2 (0.25%) Kafka
6 2 (0.25%) RESTful
6 2 (0.25%) Smart Contracts
7 1 (0.13%) EDI
7 1 (0.13%) Elastic Stack
7 1 (0.13%) FFmpeg
7 1 (0.13%) GStreamer
7 1 (0.13%) HTML
7 1 (0.13%) SailPoint
7 1 (0.13%) TAPI
7 1 (0.13%) Unreal Engine
7 1 (0.13%) WebRTC
7 1 (0.13%) WPF
Miscellaneous
1 195 (24.78%) Security Operations Centre
2 131 (16.65%) Security Posture
3 71 (9.02%) Cyber Defence
4 51 (6.48%) Cyber Threat
4 51 (6.48%) Management Information System
5 37 (4.70%) CSOC
6 30 (3.81%) Cloud Native
7 25 (3.18%) Onboarding
8 14 (1.78%) Data Centre
9 13 (1.65%) Cyberattack
9 13 (1.65%) Self-Motivation
10 12 (1.52%) Cloud Security Posture
11 10 (1.27%) Hybrid Cloud
12 9 (1.14%) AI Agents
12 9 (1.14%) Client/Server
13 7 (0.89%) Analytical Mindset
13 7 (0.89%) Virtual Team
14 6 (0.76%) Cyber Kill Chain
14 6 (0.76%) Driving Licence
14 6 (0.76%) Insider Threat
Operating Systems
1 95 (12.07%) Windows
2 61 (7.75%) Linux
3 16 (2.03%) Windows 10
4 13 (1.65%) Unix
5 8 (1.02%) Windows Server
6 4 (0.51%) Kali Linux
7 3 (0.38%) Mac OS
7 3 (0.38%) Red Hat Enterprise Linux
7 3 (0.38%) Windows Server 2012
7 3 (0.38%) Windows Server 2019
8 1 (0.13%) CentOS
8 1 (0.13%) Data ONTAP
8 1 (0.13%) Ubuntu
Processes & Methodologies
1 442 (56.16%) Cybersecurity
2 298 (37.87%) SIEM
3 276 (35.07%) Incident Response
4 175 (22.24%) Continuous Improvement
5 160 (20.33%) Vulnerability Management
6 153 (19.44%) Cloud Security
7 144 (18.30%) Information Security
8 120 (15.25%) Threat Intelligence
9 104 (13.21%) Problem-Solving
10 101 (12.83%) Cyber Threat Intelligence
10 101 (12.83%) Threat Detection
11 98 (12.45%) Risk Management
12 86 (10.93%) SOAR
13 73 (9.28%) AI
13 73 (9.28%) MITRE ATT&CK
13 73 (9.28%) Security Monitoring
14 69 (8.77%) Mentoring
15 68 (8.64%) Roadmaps
16 64 (8.13%) Penetration Testing
17 60 (7.62%) Incident Management
Programming Languages
1 106 (13.47%) PowerShell
2 92 (11.69%) Python
3 31 (3.94%) Kusto Query Language
4 24 (3.05%) Bash
5 13 (1.65%) SQL
6 9 (1.14%) C++
6 9 (1.14%) Perl
7 6 (0.76%) Bicep
7 6 (0.76%) JavaScript
7 6 (0.76%) Search Processing Language
8 5 (0.64%) C
9 3 (0.38%) C#
9 3 (0.38%) Java
10 2 (0.25%) Go
10 2 (0.25%) Shell Script
11 1 (0.13%) MATLAB
Qualifications
1 155 (19.70%) Security Cleared
2 117 (14.87%) SC Cleared
3 103 (13.09%) CISSP
4 70 (8.89%) CompTIA Security+
5 60 (7.62%) Degree
6 51 (6.48%) GIAC
7 50 (6.35%) CISM
8 34 (4.32%) CEH
8 34 (4.32%) Cisco Certification
9 31 (3.94%) DV Cleared
10 26 (3.30%) SANS
11 22 (2.80%) (ISC)2 CCSP
12 21 (2.67%) CompTIA CySA+
12 21 (2.67%) Computer Science Degree
12 21 (2.67%) CREST Certified
13 20 (2.54%) GCIH
14 18 (2.29%) CCSP
14 18 (2.29%) CISA
15 17 (2.16%) GCIA
16 14 (1.78%) Azure Certification
Quality Assurance & Compliance
1 156 (19.82%) ISO/IEC 27001
2 145 (18.42%) NIST
3 66 (8.39%) GDPR
4 49 (6.23%) GRC
5 47 (5.97%) Cyber Essentials
6 34 (4.32%) PCI DSS
7 20 (2.54%) Cyber Essentials PLUS
7 20 (2.54%) SOC 2
8 17 (2.16%) NCSC
8 17 (2.16%) Sarbanes-Oxley
9 10 (1.27%) SLA
10 5 (0.64%) Accessibility
10 5 (0.64%) ISO/IEC 27002 (supersedes ISO/IEC 17799)
11 3 (0.38%) COBIT
11 3 (0.38%) Data Quality
11 3 (0.38%) NIST 800
11 3 (0.38%) SOC 3
12 2 (0.25%) Actionable Recommendations
12 2 (0.25%) ISO 22301
12 2 (0.25%) PMO
System Software
1 27 (3.43%) Active Directory
2 10 (1.27%) Docker
3 6 (0.76%) Virtual Machines
4 4 (0.51%) VMware Infrastructure
5 3 (0.38%) VMware ESXi
6 2 (0.25%) Firmware
7 1 (0.13%) vSphere
Systems Management
1 35 (4.45%) Microsoft Intune
2 27 (3.43%) Terraform
3 26 (3.30%) QRadar
3 26 (3.30%) SCCM
4 22 (2.80%) Kubernetes
5 14 (1.78%) Ansible
6 12 (1.52%) Single Sign-On
7 7 (0.89%) FortiGate
8 6 (0.76%) Computer Emergency Response Teams
8 6 (0.76%) Graylog
9 4 (0.51%) Computer Incident Response Team
9 4 (0.51%) Grafana
9 4 (0.51%) vCenter Server
10 3 (0.38%) CASB
10 3 (0.38%) Kibana
10 3 (0.38%) Nessus
10 3 (0.38%) Red Hat Satellite
11 2 (0.25%) CSIRT
12 1 (0.13%) Host Intrusion Detection System
Vendors
1 231 (29.35%) Microsoft
2 65 (8.26%) Splunk
3 51 (6.48%) ServiceNow
4 43 (5.46%) Qualys
5 40 (5.08%) CrowdStrike
6 34 (4.32%) Cisco
7 26 (3.30%) Palo Alto
8 22 (2.80%) Tenable
9 19 (2.41%) SolarWinds
10 16 (2.03%) OpenAI
11 14 (1.78%) Fortinet
11 14 (1.78%) Google
12 13 (1.65%) Aruba
13 12 (1.52%) Rapid7
14 10 (1.27%) Sophos
15 8 (1.02%) iManage
15 8 (1.02%) VMware
15 8 (1.02%) Zscaler
16 7 (0.89%) Okta
17 6 (0.76%) Carbon Black