Period
to 23 October 2018

The following table provides summary statistics for permanent job vacancies with a requirement for Security Operations skills. Included is a benchmarking guide to the salaries offered in vacancies that have cited Security Operations over the 6 months to 23 October 2018 with a comparison to the same period in the previous 2 years.

Security Operations (SecOps)
UK
6 months to
23 Oct 2018
Same period 2017 Same period 2016
Rank 418 496 467
Rank change year-on-year +78 -29 +97
Permanent jobs citing Security Operations 1,212 1,012 1,223
As % of all permanent IT jobs advertised in the UK 0.74% 0.58% 0.64%
As % of the Processes & Methodologies category 0.81% 0.63% 0.71%
Number of salaries quoted 864 757 982
UK median annual salary £55,000 £60,000 £60,000
Median salary % change year-on-year -8.33% - +8.60%
10th Percentile £38,750 £38,900 £36,000
90th Percentile £82,500 £90,000 £82,500
UK excluding London median annual salary £55,000 £55,000 £50,000
% change year-on-year - +10.00% -

Security Operations is in the Processes and Methodologies category. The following table is for comparison with the above and provides summary statistics for all permanent job vacancies with a requirement for process or methodology skills.

All Process and Methodology Skills
UK
Permanent vacancies with a requirement for process or methodology skills 150,004 160,879 172,382
As % of all permanent IT jobs advertised in the UK 91.04% 91.57% 90.91%
Number of salaries quoted 119,274 126,930 143,463
UK median annual salary £50,000 £50,000 £48,500
Median salary % change year-on-year - +3.09% +2.11%
10th Percentile £29,000 £28,250 £27,500
90th Percentile £83,750 £80,000 £78,750
UK excluding London median annual salary £45,000 £42,500 £42,500
% change year-on-year +5.88% - -

Security Operations
Job Vacancy Trend

Job postings citing Security Operations as a percentage of all IT jobs advertised.

Job vacancy trend for Security Operations in the UK

Security Operations
Salary Trend

This chart provides the 3-month moving average for salaries quoted in permanent IT jobs citing Security Operations.

Salary trend for Security Operations in the UK

Security Operations
Salary Histogram

The salary distribution of IT jobs citing Security Operations over the 6 months to 23 October 2018.

Salary histogram for Security Operations in the UK

Security Operations
Top 16 Job Locations

The table below looks at the demand and provides a guide to the median salaries quoted in IT jobs citing Security Operations within the UK over the 6 months to 23 October 2018. The 'Rank Change' column provides an indication of the change in demand within each location based on the same 6 month period last year.

Location Rank Change
on Same Period
Last Year
Matching
Permanent
IT Job Ads
Median Salary
Past 6 Months
Median Salary
% Change
on Same Period
Last Year
Live
Job
Vacancies
England +54 1,105 £57,000 -5.00% 115
UK excluding London +189 752 £55,000 - 82
London -48 421 £65,000 - 43
East of England +190 255 £49,500 -1.00% 10
South East -42 154 £55,000 -8.33% 22
North of England +119 144 £55,000 +7.32% 15
Midlands +65 90 £47,500 -13.64% 13
North West +57 77 £60,000 +20.00% 8
Yorkshire +53 63 £52,500 -6.67% 7
West Midlands +65 62 £46,500 -14.29% 10
Scotland +38 61 £65,000 - 7
South West -10 35 £55,000 +18.92% 13
East Midlands +16 25 £52,500 -22.22% 3
Northern Ireland - 8 £45,000 -
Wales +12 6 £40,210 -36.93% 3
North East -13 4 £25,000 -54.55%

For the 6 months to 23 October 2018, IT jobs citing Security Operations also mentioned the following skills in order of popularity. The figures indicate the absolute number co-occurrences and as a proportion of all permanent job ads with a requirement for Security Operations.

1 672 (55.45%) Information Security
2 650 (53.63%) SIEM
3 571 (47.11%) Cybersecurity
4 471 (38.86%) Security Operations Centre
5 468 (38.61%) Firewall
6 370 (30.53%) CISSP
7 302 (24.92%) ISO/IEC 27001
8 298 (24.59%) Vulnerability Management
9 253 (20.87%) Network Security
10 248 (20.46%) Linux
11 247 (20.38%) Splunk
12 236 (19.47%) Windows
13 221 (18.23%) Data Loss Prevention
14 220 (18.15%) Finance
15 216 (17.82%) Microsoft
16 204 (16.83%) Incident Management
17 197 (16.25%) Risk Management
18 186 (15.35%) Degree
19 178 (14.69%) SANS
20 172 (14.19%) Management Information System
21 161 (13.28%) Qualys
21 161 (13.28%) Analytical Skills
22 153 (12.62%) Security Architecture
23 150 (12.38%) Penetration Testing
24 147 (12.13%) CEH
24 147 (12.13%) CISM
25 142 (11.72%) TCP/IP
26 138 (11.39%) Security Management
26 138 (11.39%) Problem-Solving
27 135 (11.14%) SSCP

Security Operations
Co-occurring IT Skills by Category

The follow tables expand on the table above by listing co-occurrences grouped by category. The same job type, locality and period is covered with up to 20 co-occurrences shown in each of the following categories:

Application Platforms
1 16 (1.32%) Apache
2 14 (1.16%) IIS
3 13 (1.07%) SharePoint
4 9 (0.74%) Elasticsearch
5 8 (0.66%) Apache Spark
6 4 (0.33%) Skype for Business
7 3 (0.25%) SAS
7 3 (0.25%) SharePoint 2013
8 1 (0.083%) JBoss
8 1 (0.083%) nginx
8 1 (0.083%) Tomcat
Applications
1 45 (3.71%) Microsoft Office
2 11 (0.91%) Microsoft Excel
3 4 (0.33%) MS Visio
4 3 (0.25%) Microsoft PowerPoint
Business Applications
1 1 (0.083%) SAP HR
Cloud Services
1 86 (7.10%) Amazon AWS
2 62 (5.12%) Microsoft Azure
3 45 (3.71%) Office 365
4 38 (3.14%) SaaS
5 28 (2.31%) Mimecast
6 24 (1.98%) Cloud Computing
7 20 (1.65%) Google Cloud Platform
8 13 (1.07%) GitHub
9 4 (0.33%) Azure Active Directory
9 4 (0.33%) PaaS
9 4 (0.33%) Serverless
10 3 (0.25%) Amazon EC2
10 3 (0.25%) Amazon S3
11 2 (0.17%) AWS CloudFormation
11 2 (0.17%) AWS Lambda
11 2 (0.17%) Azure Data Factory
11 2 (0.17%) Azure Functions
12 1 (0.083%) Amazon Kinesis
12 1 (0.083%) OpenDNS
12 1 (0.083%) Sumo Logic
Communications & Networking
1 468 (38.61%) Firewall
2 253 (20.87%) Network Security
3 142 (11.72%) TCP/IP
4 125 (10.31%) Intrusion Detection
5 78 (6.44%) VPN
6 57 (4.70%) DNS
6 57 (4.70%) SSL
7 55 (4.54%) HTTP
8 54 (4.46%) Internet
9 53 (4.37%) Wireshark
10 30 (2.48%) LAN
11 29 (2.39%) IPsec
12 28 (2.31%) WAN
13 26 (2.15%) Wireless
14 24 (1.98%) SNMP
15 23 (1.90%) DKIM
15 23 (1.90%) DMARC
16 22 (1.82%) FTP
16 22 (1.82%) MPLS
17 20 (1.65%) DHCP
Database & Business Intelligence
1 50 (4.13%) Big Data
2 12 (0.99%) Hadoop
3 9 (0.74%) SQL Server
4 6 (0.50%) Data Lake
4 6 (0.50%) Data Warehouse
5 5 (0.41%) GIS
5 5 (0.41%) SQL Server 2008
6 4 (0.33%) Geospatial Data
6 4 (0.33%) QlikView
7 2 (0.17%) Amazon RDS
7 2 (0.17%) Amazon Redshift
7 2 (0.17%) Azure SQL Database
7 2 (0.17%) PostgreSQL
7 2 (0.17%) SQL Server 2014
7 2 (0.17%) SQL Server Reporting Services
8 1 (0.083%) SQL Server Integration Services
Development Applications
1 26 (2.15%) JIRA
2 17 (1.40%) Jenkins
2 17 (1.40%) Metasploit
3 2 (0.17%) Maven
3 2 (0.17%) Sonatype Nexus
3 2 (0.17%) TeamCity
4 1 (0.083%) AppScan
4 1 (0.083%) Burp Suite
4 1 (0.083%) Hudson
4 1 (0.083%) Paros
4 1 (0.083%) Redmine
General
1 220 (18.15%) Finance
2 129 (10.64%) Retail
3 63 (5.20%) Banking
4 37 (3.05%) Investment Banking
5 30 (2.48%) Legal
6 21 (1.73%) Telecoms
7 18 (1.49%) Law
8 15 (1.24%) Manufacturing
9 10 (0.83%) Military
10 7 (0.58%) French Language
11 6 (0.50%) Advertising
11 6 (0.50%) Marketing
12 5 (0.41%) Back Office
13 4 (0.33%) Financial Institution
13 4 (0.33%) German Language
13 4 (0.33%) Italian Language
14 3 (0.25%) Brand Awareness
14 3 (0.25%) Games
14 3 (0.25%) Local Government
15 2 (0.17%) Aerospace
Job Titles
1 390 (32.18%) Analyst
2 251 (20.71%) Security Analyst
3 219 (18.07%) Security Engineer
4 129 (10.64%) Security Manager
5 124 (10.23%) SOC Analyst
6 98 (8.09%) Consultant
7 93 (7.67%) Operations Analyst
7 93 (7.67%) Security Operations Analyst
8 87 (7.18%) Security Consultant
9 77 (6.35%) Senior Analyst
10 57 (4.70%) IT Analyst
10 57 (4.70%) IT Security Analyst
11 55 (4.54%) Senior Security Analyst
12 52 (4.29%) IT Consultant
12 52 (4.29%) IT Security Consultant
12 52 (4.29%) Operations Manager
13 51 (4.21%) Security Specialist
14 50 (4.13%) Information Analyst
15 49 (4.04%) Information Security Analyst
16 48 (3.96%) Security Operations Manager
Libraries, Frameworks & Software Standards
1 21 (1.73%) Elastic Stack
2 7 (0.58%) Node.js
3 6 (0.50%) ISPF
3 6 (0.50%) OAuth
3 6 (0.50%) OpenID
3 6 (0.50%) SOAP
4 5 (0.41%) .NET
4 5 (0.41%) Middleware
4 5 (0.41%) OAuth2
4 5 (0.41%) Web Services
4 5 (0.41%) XACML
5 4 (0.33%) SAML
6 3 (0.25%) JSON
7 2 (0.17%) AngularJS
7 2 (0.17%) HTML
7 2 (0.17%) LDAP
8 1 (0.083%) CGI
8 1 (0.083%) JDBC
8 1 (0.083%) ODBC
8 1 (0.083%) REST
Miscellaneous
1 471 (38.86%) Security Operations Centre
2 172 (14.19%) Management Information System
3 161 (13.28%) Analytical Skills
4 106 (8.75%) PKI
5 105 (8.66%) Distributed Denial-of-Service
6 94 (7.76%) Cyberthreat
7 89 (7.34%) Computer Science
8 77 (6.35%) Self-Motivation
9 72 (5.94%) Cyber Kill Chain
10 54 (4.46%) Cyberattack
11 49 (4.04%) Data Centre
11 49 (4.04%) Data Protection Act
12 36 (2.97%) Cyber Defence
13 21 (1.73%) Cybercrime
14 20 (1.65%) Fintech
15 19 (1.57%) Hedge funds
16 17 (1.40%) Enterprise Software
17 13 (1.07%) Life Science
18 12 (0.99%) Hybrid Cloud
19 11 (0.91%) Public Cloud
Operating Systems
1 248 (20.46%) Linux
2 236 (19.47%) Windows
3 80 (6.60%) Unix
4 33 (2.72%) Windows Server
5 29 (2.39%) Kali Linux
6 20 (1.65%) Mac OS X
6 20 (1.65%) Red Hat Enterprise Linux
7 5 (0.41%) Windows Server 2008
7 5 (0.41%) Windows Server 2012
8 4 (0.33%) CentOS
9 3 (0.25%) Solaris
10 2 (0.17%) Android
10 2 (0.17%) Apple iOS
10 2 (0.17%) Mac OS
11 1 (0.083%) Ubuntu
11 1 (0.083%) Windows 10
11 1 (0.083%) Windows 8
Processes & Methodologies
1 672 (55.45%) Information Security
2 650 (53.63%) SIEM
3 571 (47.11%) Cybersecurity
4 298 (24.59%) Vulnerability Management
5 221 (18.23%) Data Loss Prevention
6 204 (16.83%) Incident Management
7 197 (16.25%) Risk Management
8 153 (12.62%) Security Architecture
9 150 (12.38%) Penetration Testing
10 138 (11.39%) Problem-Solving
10 138 (11.39%) Security Management
11 134 (11.06%) Threat Intelligence
12 124 (10.23%) Identity Access Management
13 114 (9.41%) Vulnerability Scanning
14 107 (8.83%) Cyber Threat Intelligence
15 106 (8.75%) Threat Management
16 103 (8.50%) Analytics
17 101 (8.33%) ITIL
17 101 (8.33%) Vulnerability Assessment
18 93 (7.67%) Continuous Improvement
Programming Languages
1 99 (8.17%) Python
2 44 (3.63%) Perl
3 30 (2.48%) SQL
4 29 (2.39%) Bash Shell
5 27 (2.23%) PowerShell
6 26 (2.15%) Ruby
7 24 (1.98%) Java
8 20 (1.65%) JavaScript
9 18 (1.49%) C
10 17 (1.40%) C#
11 16 (1.32%) PHP
11 16 (1.32%) VBA
12 12 (0.99%) Go
13 6 (0.50%) JCL
13 6 (0.50%) REXX
14 4 (0.33%) Shell Script
15 3 (0.25%) Assembly Language
15 3 (0.25%) C++
16 2 (0.17%) R
16 2 (0.17%) VB
Qualifications
1 370 (30.53%) CISSP
2 186 (15.35%) Degree
3 178 (14.69%) SANS
4 147 (12.13%) CEH
4 147 (12.13%) CISM
5 135 (11.14%) SSCP
6 127 (10.48%) Cisco Certification
7 123 (10.15%) CompTIA Security+
8 109 (8.99%) GIAC
9 98 (8.09%) CISA
10 89 (7.34%) Security Cleared
11 88 (7.26%) CSSLP
12 83 (6.85%) GCIH
13 75 (6.19%) CCNA
14 73 (6.02%) GCIA
15 62 (5.12%) Computer Science Degree
16 56 (4.62%) CCNP
17 50 (4.13%) (ISC)2 CCSP
18 49 (4.04%) MCSE
18 49 (4.04%) Microsoft Certification
Quality Assurance & Compliance
1 302 (24.92%) ISO/IEC 27001
2 128 (10.56%) PCI DSS
3 106 (8.75%) GDPR
4 56 (4.62%) ISO/IEC 27002 (supersedes ISO/IEC 17799)
5 28 (2.31%) QA
6 26 (2.15%) Cyber Essentials
7 22 (1.82%) SLA
8 21 (1.73%) COBIT
8 21 (1.73%) GPG13
9 13 (1.07%) Sarbanes-Oxley
10 11 (0.91%) IASME
11 10 (0.83%) PMO
12 7 (0.58%) Government Security Classifications
13 5 (0.41%) RMADS
14 3 (0.25%) SSAE 16
15 2 (0.17%) ISAE 3402
15 2 (0.17%) ISO 9001
15 2 (0.17%) JSP 440
15 2 (0.17%) PA-DSS
16 1 (0.083%) PSD2
System Software
1 69 (5.69%) Active Directory
2 36 (2.97%) Virtual Machines
3 29 (2.39%) VMware Infrastructure
4 28 (2.31%) Snort
5 18 (1.49%) iptables
6 14 (1.16%) Docker
7 7 (0.58%) HDFS
8 6 (0.50%) RACF
9 3 (0.25%) vSphere
10 2 (0.17%) VMware ESXi
11 1 (0.083%) NFS
11 1 (0.083%) Samba
11 1 (0.083%) Squid
11 1 (0.083%) VMware NSX
Systems Management
1 122 (10.07%) QRadar
2 48 (3.96%) RSA Security Analytics
3 36 (2.97%) Nessus
4 20 (1.65%) CSIRT
5 19 (1.57%) Stealthwatch
6 15 (1.24%) Ansible
6 15 (1.24%) Nmap
7 12 (0.99%) Kubernetes
8 10 (0.83%) Host Intrusion Detection System
8 10 (0.83%) Suricata
9 9 (0.74%) CASB
9 9 (0.74%) EnCase
9 9 (0.74%) Norton AntiVirus
10 8 (0.66%) OSSEC
11 7 (0.58%) IBM BigFix
11 7 (0.58%) Kibana
11 7 (0.58%) Network Intrusion Detection System
11 7 (0.58%) SCCM
11 7 (0.58%) WSUS
12 6 (0.50%) FortiGate
Vendors
1 247 (20.38%) Splunk
2 216 (17.82%) Microsoft
3 161 (13.28%) Qualys
4 97 (8.00%) Cisco
5 88 (7.26%) Symantec
6 63 (5.20%) LogRhythm
7 60 (4.95%) VMware
8 58 (4.79%) Red Hat
9 57 (4.70%) CheckPoint
10 51 (4.21%) ArcSight
11 38 (3.14%) Oracle
12 36 (2.97%) Forcepoint
13 33 (2.72%) Palo Alto
13 33 (2.72%) Sophos
14 26 (2.15%) Dell
15 24 (1.98%) LogLogic
15 24 (1.98%) TIBCO
16 23 (1.90%) CyberArk
17 21 (1.73%) Fortinet
18 15 (1.24%) AlienVault