Period
to 21 October 2021

The following table provides summary statistics for permanent job vacancies with a requirement for Security Operations skills. Included is a benchmarking guide to the salaries offered in vacancies that have cited Security Operations over the 6 months to 21 October 2021 with a comparison to the same period in the previous 2 years.

Security Operations (SecOps)
UK
6 months to
21 Oct 2021
Same period 2020 Same period 2019
Rank 398 284 343
Rank change year-on-year -114 +59 +96
Permanent jobs citing Security Operations 991 539 1,300
As % of all permanent jobs advertised in the UK 0.79% 1.10% 0.95%
As % of the Processes & Methodologies category 0.83% 1.18% 1.02%
Number of salaries quoted 687 399 832
10th Percentile £38,381 £41,000 £32,500
25th Percentile £50,000 £46,250 £43,563
Median annual salary (50th Percentile) £65,000 £57,500 £60,000
Median % change year-on-year +13.04% -4.17% +4.35%
75th Percentile £77,500 £72,500 £77,500
90th Percentile £92,500 £85,000 £85,000
UK excluding London median annual salary £55,000 £55,000 £50,000
% change year-on-year - +10.00% -7.41%

Security Operations is in the Processes and Methodologies category. The following table is for comparison with the above and provides summary statistics for all permanent job vacancies with a requirement for process or methodology skills.

All Process and Methodology Skills
UK
Permanent vacancies with a requirement for process or methodology skills 118,881 45,537 126,912
As % of all permanent IT jobs advertised in the UK 94.22% 93.08% 92.61%
Number of salaries quoted 78,633 38,036 101,210
10th Percentile £32,750 £32,750 £30,000
25th Percentile £42,500 £42,500 £37,750
Median annual salary (50th Percentile) £57,500 £55,000 £52,500
Median % change year-on-year +4.55% +4.76% +5.00%
75th Percentile £77,500 £73,750 £70,250
90th Percentile £95,000 £90,000 £87,500
UK excluding London median annual salary £50,000 £49,000 £45,000
% change year-on-year +2.04% +8.89% -

Security Operations
Job Vacancy Trend

Job postings citing Security Operations as a proportion of all IT jobs advertised.

Job vacancy trend for Security Operations in the UK

Security Operations
Salary Trend

3-month moving average salary quoted in jobs citing Security Operations.

Salary trend for Security Operations in the UK

Security Operations
Salary Histogram

Salary distribution for jobs citing Security Operations over the 6 months to 21 October 2021.

Salary histogram for Security Operations in the UK

Security Operations
Top 17 Job Locations

The table below looks at the demand and provides a guide to the median salaries quoted in IT jobs citing Security Operations within the UK over the 6 months to 21 October 2021. The 'Rank Change' column provides an indication of the change in demand within each location based on the same 6 month period last year.

Location Rank Change
on Same Period
Last Year
Matching
Permanent
IT Job Ads
Median Salary
Past 6 Months
Median Salary
% Change
on Same Period
Last Year
Live
Job
Vacancies
England -98 866 £65,000 +13.04% 150
UK excluding London -63 539 £55,000 - 104
London -138 371 £70,000 +16.67% 53
Work from Home -119 235 £70,000 +21.74% 24
South East -81 134 £55,000 -2.22% 17
Midlands -34 112 £52,500 -16.67% 21
North of England -106 92 £58,750 +11.90% 37
South West -41 74 £55,000 - 8
Scotland -54 59 £44,500 -1.11% 3
West Midlands -70 59 £54,750 -13.10% 13
East of England -83 57 £55,000 - 12
East Midlands -38 49 £45,000 -7.69% 8
Yorkshire -85 43 £50,000 -4.76% 16
North West -85 37 £70,000 +55.56% 17
North East -17 12 £60,000 +13.53% 4
Northern Ireland -46 7 £22,500 -10.00% 2
Wales -55 7 £54,550 +21.22% 4

For the 6 months to 21 October 2021, IT jobs citing Security Operations also mentioned the following skills in order of popularity. The figures indicate the absolute number co-occurrences and as a proportion of all permanent job ads with a requirement for Security Operations.

1 448 (45.21%) Cybersecurity
2 411 (41.47%) Information Security
3 329 (33.20%) SIEM
4 320 (32.29%) Azure
5 313 (31.58%) Social Skills
6 226 (22.81%) AWS
7 223 (22.50%) Security Operations Centre
8 210 (21.19%) Microsoft
9 200 (20.18%) Finance
10 199 (20.08%) Firewall
11 187 (18.87%) CISSP
12 170 (17.15%) Vulnerability Management
13 167 (16.85%) Management Information System
14 157 (15.84%) Agile Software Development
15 152 (15.34%) ISO/IEC 27001
16 141 (14.23%) Analytical Skills
17 136 (13.72%) Python
18 129 (13.02%) Incident Management
19 126 (12.71%) Degree
20 123 (12.41%) Risk Management
21 112 (11.30%) DevOps
22 111 (11.20%) Threat Intelligence
23 107 (10.80%) PowerShell
24 106 (10.70%) Security Architecture
24 106 (10.70%) CISM
25 102 (10.29%) Windows
25 102 (10.29%) GCP
26 101 (10.19%) Splunk
27 95 (9.59%) GDPR
28 92 (9.28%) Linux

Security Operations
Co-occurring IT Skills by Category

The follow tables expand on the table above by listing co-occurrences grouped by category. The same job type, locality and period is covered with up to 20 co-occurrences shown in each of the following categories:

Application Platforms
1 31 (3.13%) IIS
2 11 (1.11%) Apache
2 11 (1.11%) Apache Airflow
3 9 (0.91%) MS Exchange
3 9 (0.91%) SharePoint
4 4 (0.40%) SAS
5 3 (0.30%) Elasticsearch
6 2 (0.20%) CMS
6 2 (0.20%) Confluence
Applications
1 53 (5.35%) Microsoft Office
2 23 (2.32%) Microsoft Excel
3 3 (0.30%) Microsoft PowerPoint
4 1 (0.10%) Microsoft Project
4 1 (0.10%) MS Visio
Business Applications
1 26 (2.62%) Sentinel
2 5 (0.50%) Maximo
3 2 (0.20%) Remedy ITSM
Cloud Services
1 320 (32.29%) Azure
2 226 (22.81%) AWS
3 102 (10.29%) GCP
4 62 (6.26%) Microsoft 365
5 50 (5.05%) Azure Sentinel
6 46 (4.64%) PaaS
7 45 (4.54%) IaaS
8 44 (4.44%) SaaS
9 37 (3.73%) Serverless
10 35 (3.53%) GitHub
11 24 (2.42%) Azure Active Directory
12 22 (2.22%) AWS CloudFormation
13 20 (2.02%) AWS Lambda
14 18 (1.82%) GitHub Actions
15 16 (1.61%) Amazon CloudWatch
15 16 (1.61%) Amazon SQS
15 16 (1.61%) Mimecast
16 15 (1.51%) Amazon EC2
17 14 (1.41%) Cloud Computing
18 13 (1.31%) Azure Functions
Communications & Networking
1 199 (20.08%) Firewall
2 86 (8.68%) Network Security
3 65 (6.56%) Intrusion Detection
4 45 (4.54%) Internet
5 34 (3.43%) HTTP
6 29 (2.93%) TCP/IP
7 23 (2.32%) DNS
8 22 (2.22%) VPN
9 20 (2.02%) Cisco ASA
9 20 (2.02%) F5 BIG-IP GTM
9 20 (2.02%) F5 BIG-IP LTM
10 19 (1.92%) Cisco IPT
11 16 (1.61%) Cisco Nexus
12 13 (1.31%) Wireless
13 11 (1.11%) LAN
13 11 (1.11%) SSL
14 10 (1.01%) IPsec
14 10 (1.01%) SMTP
14 10 (1.01%) Sourcefire
15 9 (0.91%) DHCP
Database & Business Intelligence
1 23 (2.32%) Data Lake
2 19 (1.92%) Big Data
3 17 (1.72%) SQL Server
4 16 (1.61%) Amazon RDS
5 14 (1.41%) Amazon DynamoDB
6 12 (1.21%) Azure SQL Database
7 11 (1.11%) Amazon Athena
7 11 (1.11%) Amazon Redshift
7 11 (1.11%) Electronic Patient Records
8 6 (0.61%) GIS
9 5 (0.50%) Redis
10 3 (0.30%) MySQL
11 2 (0.20%) Data Warehouse
11 2 (0.20%) Maltego
11 2 (0.20%) RDBMS
11 2 (0.20%) Relational Database
12 1 (0.10%) DTS
12 1 (0.10%) Power BI
Development Applications
1 20 (2.02%) Jenkins
2 18 (1.82%) Metasploit
3 17 (1.72%) Sonatype Nexus
4 7 (0.71%) TeamCity
5 5 (0.50%) AppScan
5 5 (0.50%) Octopus Deploy
6 4 (0.40%) JIRA
7 3 (0.30%) Burp Suite
8 1 (0.10%) CircleCI
8 1 (0.10%) Git (software)
8 1 (0.10%) SonarQube
General
1 313 (31.58%) Social Skills
2 200 (20.18%) Finance
3 141 (14.23%) Analytical Skills
4 86 (8.68%) Retail
5 63 (6.36%) Organisational Skills
6 38 (3.83%) Legal
7 35 (3.53%) Law
8 26 (2.62%) Banking
9 25 (2.52%) Public Sector
10 21 (2.12%) Games
10 21 (2.12%) Telecoms
11 18 (1.82%) Presentation Skills
12 17 (1.72%) Inclusion and Diversity
13 16 (1.61%) Influencing Skills
14 13 (1.31%) Marketing
15 12 (1.21%) Manufacturing
16 9 (0.91%) Electronics
16 9 (0.91%) Financial Institution
17 7 (0.71%) Military
18 5 (0.50%) Documentation Skills
Job Titles
1 261 (26.34%) Analyst
2 184 (18.57%) Security Analyst
3 140 (14.13%) Security Engineer
4 95 (9.59%) Security Manager
5 84 (8.48%) Consultant
6 66 (6.66%) Security Consultant
7 59 (5.95%) Cybersecurity Analyst
7 59 (5.95%) Security Specialist
7 59 (5.95%) SOC Analyst
8 51 (5.15%) Operations Analyst
9 50 (5.05%) Security Operations Analyst
10 48 (4.84%) Information Security Specialist
10 48 (4.84%) Information Specialist
10 48 (4.84%) Senior Analyst
10 48 (4.84%) Senior Security Engineer
11 44 (4.44%) Architect
12 42 (4.24%) SOC Engineer
13 40 (4.04%) Operational Security Manager
13 40 (4.04%) Security Operations Manager
14 37 (3.73%) Senior Consultant
Libraries, Frameworks & Software Standards
1 31 (3.13%) .NET
2 27 (2.72%) Web Services
3 25 (2.52%) LDAP
3 25 (2.52%) Middleware
4 23 (2.32%) Regular Expression
5 18 (1.82%) JSON
6 17 (1.72%) RESTful
7 13 (1.31%) AngularJS
8 11 (1.11%) ActiveMQ
8 11 (1.11%) HTML
8 11 (1.11%) Kafka
8 11 (1.11%) REST
9 9 (0.91%) ASP.NET
9 9 (0.91%) YAML
10 8 (0.81%) SAML
11 7 (0.71%) CSS
12 6 (0.61%) Elastic Stack
12 6 (0.61%) JDBC
12 6 (0.61%) ODBC
12 6 (0.61%) SOAP
Miscellaneous
1 223 (22.50%) Security Operations Centre
2 167 (16.85%) Management Information System
3 85 (8.58%) Cyberthreat
4 51 (5.15%) CCTV
5 39 (3.94%) Cyber Defence
5 39 (3.94%) Public Cloud
6 36 (3.63%) Cyberattack
7 31 (3.13%) Cyber Kill Chain
8 30 (3.03%) Self-Motivation
9 23 (2.32%) Virtual Team
10 22 (2.22%) Data Centre
11 20 (2.02%) Data Protection Act
12 18 (1.82%) Hybrid Cloud
13 16 (1.61%) Cloud Native
13 16 (1.61%) Distributed Denial-of-Service
14 12 (1.21%) Analytical Mindset
14 12 (1.21%) Social Media
15 8 (0.81%) Greenfield Project
16 7 (0.71%) CMDB
17 6 (0.61%) Microsoft Licensing
Operating Systems
1 102 (10.29%) Windows
2 92 (9.28%) Linux
3 51 (5.15%) Unix
4 14 (1.41%) Windows Server
5 6 (0.61%) Kali Linux
5 6 (0.61%) Windows Server 2012
5 6 (0.61%) Windows Server 2016
5 6 (0.61%) Windows Server 2019
6 5 (0.50%) Mac OS
7 2 (0.20%) Mac OS X
7 2 (0.20%) OpenBSD
7 2 (0.20%) Windows 10
7 2 (0.20%) Windows 7
7 2 (0.20%) Windows Server 2003
7 2 (0.20%) Windows Server 2008
8 1 (0.10%) Red Hat Enterprise Linux
Processes & Methodologies
1 448 (45.21%) Cybersecurity
2 411 (41.47%) Information Security
3 329 (33.20%) SIEM
4 170 (17.15%) Vulnerability Management
5 157 (15.84%) Agile Software Development
6 129 (13.02%) Incident Management
7 123 (12.41%) Risk Management
8 112 (11.30%) DevOps
9 111 (11.20%) Threat Intelligence
10 106 (10.70%) Security Architecture
11 91 (9.18%) Problem-Solving
12 90 (9.08%) Mentoring
13 89 (8.98%) ITIL
14 88 (8.88%) Continuous Improvement
14 88 (8.88%) Penetration Testing
15 79 (7.97%) Cyber Threat Intelligence
15 79 (7.97%) Service Delivery
16 77 (7.77%) Security Monitoring
17 72 (7.27%) Coaching
18 71 (7.16%) Security Management
Programming Languages
1 136 (13.72%) Python
2 107 (10.80%) PowerShell
3 45 (4.54%) Bash Shell
4 39 (3.94%) Java
5 37 (3.73%) JavaScript
6 34 (3.43%) C
7 28 (2.83%) SQL
8 26 (2.62%) C#
9 22 (2.22%) Scala
10 12 (1.21%) Perl
11 11 (1.11%) C++
12 9 (0.91%) Go
12 9 (0.91%) Shell Script
13 8 (0.81%) Ruby
14 7 (0.71%) PHP
15 5 (0.50%) VB
16 3 (0.30%) Rust
17 2 (0.20%) R
Qualifications
1 187 (18.87%) CISSP
2 126 (12.71%) Degree
3 106 (10.70%) CISM
4 81 (8.17%) Security Cleared
5 75 (7.57%) Cisco Certification
6 64 (6.46%) SC Cleared
7 47 (4.74%) (ISC)2 CCSP
8 45 (4.54%) CEH
9 33 (3.33%) CISA
10 28 (2.83%) CompTIA Security+
10 28 (2.83%) SANS
11 26 (2.62%) GIAC
12 21 (2.12%) CREST Certified
12 21 (2.12%) DV Cleared
13 20 (2.02%) OSCP
14 15 (1.51%) SSCP
15 14 (1.41%) AWS Certification
16 13 (1.31%) CCNA
16 13 (1.31%) IISP
17 12 (1.21%) IIBA
Quality Assurance & Compliance
1 152 (15.34%) ISO/IEC 27001
2 95 (9.59%) GDPR
3 87 (8.78%) PCI DSS
4 86 (8.68%) NIST
5 56 (5.65%) GRC
6 51 (5.15%) Cyber Essentials
7 36 (3.63%) COBIT
8 31 (3.13%) NCSC
9 22 (2.22%) SLA
10 13 (1.31%) QA
11 12 (1.21%) ISO/IEC 27002 (supersedes ISO/IEC 17799)
11 12 (1.21%) NIST 800
12 11 (1.11%) Cyber Essentials PLUS
13 8 (0.81%) SOC 2
14 5 (0.50%) ISO/IEC 20000
15 3 (0.30%) Sarbanes-Oxley
16 2 (0.20%) HMG Security Policy Framework
16 2 (0.20%) ISO 22301
16 2 (0.20%) ISO 31000
16 2 (0.20%) JSP 440
System Software
1 52 (5.25%) Active Directory
2 31 (3.13%) Docker
3 22 (2.22%) Virtual Machines
4 21 (2.12%) VMware Infrastructure
5 17 (1.72%) Hyper-V
6 13 (1.31%) NFS
7 10 (1.01%) Snort
8 5 (0.50%) BitLocker
8 5 (0.50%) Squid
9 3 (0.30%) LXC
10 2 (0.20%) Firmware
10 2 (0.20%) Virtual Desktop
10 2 (0.20%) VMware NSX
10 2 (0.20%) vSphere
10 2 (0.20%) XenApp
11 1 (0.10%) ProxySG
Systems Management
1 44 (4.44%) Ansible
1 44 (4.44%) QRadar
2 40 (4.04%) Nessus
3 36 (3.63%) Kubernetes
3 36 (3.63%) Terraform
4 20 (2.02%) CASB
5 11 (1.11%) Nexpose
6 9 (0.91%) Puppet
7 7 (0.71%) Microsoft Intune
8 6 (0.61%) DatAdvantage
8 6 (0.61%) Single Sign-On
9 5 (0.50%) Opscode Chef
9 5 (0.50%) Suricata
9 5 (0.50%) systemd
10 4 (0.40%) Computer Emergency Response Teams
10 4 (0.40%) Computer Incident Response Team
10 4 (0.40%) CSIRT
10 4 (0.40%) Packer
11 3 (0.30%) Rancher
11 3 (0.30%) SCCM
Vendors
1 210 (21.19%) Microsoft
2 101 (10.19%) Splunk
3 75 (7.57%) ServiceNow
4 61 (6.16%) Cisco
5 43 (4.34%) CheckPoint
6 39 (3.94%) Google
7 36 (3.63%) LogRhythm
8 29 (2.93%) Qualys
9 27 (2.72%) Palo Alto
10 26 (2.62%) VMware
10 26 (2.62%) Zscaler
11 21 (2.12%) Apple
12 20 (2.02%) F5
13 18 (1.82%) Databricks
14 17 (1.72%) McAfee
15 15 (1.51%) ArcSight
16 13 (1.31%) AlienVault
16 13 (1.31%) FireEye
17 12 (1.21%) CrowdStrike
17 12 (1.21%) Varonis