SIEM Job Trends

Security Information and Event Management (SIEM)
UK

The table below provides summary statistics and salary benchmarking for jobs requiring SIEM skills. It covers permanent job vacancies from the 6 months leading up to 14 March 2026, with comparisons to the same periods in the previous two years.

6 months to
14 Mar 2026
Same period 2025 Same period 2024
Rank 307 285 271
Rank change year-on-year -22 -14 +36
Permanent jobs citing SIEM 477 487 887
As % of all permanent jobs in the UK 0.64% 1.12% 1.05%
As % of the Processes & Methodologies category 0.82% 1.19% 1.21%
Number of salaries quoted 358 367 721
10th Percentile £43,000 £42,000 £40,000
25th Percentile £51,250 £47,500 £47,725
Median annual salary (50th Percentile) £67,500 £62,500 £62,783
Median % change year-on-year +8.00% -0.45% -3.41%
75th Percentile £82,500 £77,500 £73,000
90th Percentile £92,500 £92,500 £95,000
UK excluding London median annual salary £57,239 £55,000 £60,000
% change year-on-year +4.07% -8.33% -

All Process & Methodology Skills
UK

SIEM falls under the Processes and Methodologies category. For comparison with the information above, the following table provides summary statistics for all permanent job vacancies requiring process or methodology skills.

Permanent vacancies with a requirement for process or methodology skills 57,853 40,823 73,554
As % of all permanent jobs advertised in the UK 78.06% 93.60% 87.34%
Number of salaries quoted 35,092 22,156 55,922
10th Percentile £29,750 £32,366 £29,000
25th Percentile £39,911 £45,000 £40,000
Median annual salary (50th Percentile) £55,000 £60,000 £55,000
Median % change year-on-year -8.33% +9.09% -11.86%
75th Percentile £76,674 £80,000 £73,750
90th Percentile £97,500 £102,500 £93,750
UK excluding London median annual salary £50,000 £55,000 £50,000
% change year-on-year -9.09% +10.00% -9.09%

SIEM
Job Vacancy Trend

Historical trend showing the proportion of permanent IT job postings citing SIEM relative to all permanent IT jobs advertised.

SIEM job vacancy trend in the UK

SIEM
Salary Trend

Salary distribution trend for jobs in the UK citing SIEM.

Salary distribution trend for jobs in the UK citing SIEM

SIEM
Salary Histogram

Salary distribution for jobs citing SIEM over the 6 months to 14 March 2026.

Salary histogram for SIEM in the UK

SIEM
Top 16 Job Locations

The table below looks at the demand and provides a guide to the median salaries quoted in IT jobs citing SIEM within the UK over the 6 months to 14 March 2026. The 'Rank Change' column provides an indication of the change in demand within each location based on the same 6 month period last year.

Location Rank Change
on Same Period
Last Year
Matching
Permanent
IT Job Ads
Median Salary
Past 6 Months
Median Salary
% Change
on Same Period
Last Year
Live
Jobs
England -17 450 £67,500 +8.00% 192
UK excluding London -44 243 £57,239 +4.07% 154
London +38 194 £72,500 -3.33% 78
Work from Home +15 142 £69,559 +11.29% 109
North of England -38 62 £57,239 +9.03% 51
South East -29 59 £55,000 -8.33% 54
Midlands -46 56 £52,500 - 10
West Midlands -7 47 £55,000 - 6
Yorkshire -8 46 £57,239 +9.03% 7
South West -8 41 £75,000 +11.11% 10
East of England -18 14 £57,500 -6.50% 19
North West -34 12 £50,000 -14.53% 41
East Midlands -46 9 £38,500 -14.44% 4
Wales -2 7 £85,000 +72.15% 5
Scotland -14 5 £66,710 +33.42% 5
North East -21 4 £75,000 +76.47% 3

SIEM
Co-Occurring Skills & Capabilities by Category

The following tables expand on the one above by listing co-occurrences grouped by category. They cover the same employment type, locality and period, with up to 20 co-occurrences shown in each category:

Application Platforms
1 21 (4.40%) Microsoft Exchange
2 19 (3.98%) SharePoint
Applications
1 2 (0.42%) Microsoft Office
Business Applications
1 1 (0.21%) Exchequer
Cloud Services
1 186 (38.99%) Azure
2 107 (22.43%) AWS
3 75 (15.72%) Microsoft 365
4 70 (14.68%) Entra ID
5 61 (12.79%) Azure Sentinel
6 50 (10.48%) GCP
7 35 (7.34%) Microsoft Purview
8 28 (5.87%) SaaS
9 16 (3.35%) GitHub
10 12 (2.52%) Amazon GuardDuty
11 10 (2.10%) GitHub Actions
11 10 (2.10%) Mimecast
12 9 (1.89%) Datadog
13 7 (1.47%) Google Workspace
13 7 (1.47%) IaaS
13 7 (1.47%) Power Platform
14 6 (1.26%) PaaS
14 6 (1.26%) Serverless
15 5 (1.05%) Amazon EKS
15 5 (1.05%) AWS CloudTrail
Communications & Networking
1 178 (37.32%) Firewall
2 96 (20.13%) Network Security
3 52 (10.90%) VPN
4 39 (8.18%) DNS
4 39 (8.18%) WAN
5 33 (6.92%) LAN
6 27 (5.66%) TCP/IP
7 22 (4.61%) Intrusion Detection
8 15 (3.14%) SD-WAN
9 12 (2.52%) SAN
10 10 (2.10%) DHCP
11 9 (1.89%) SMTP
12 8 (1.68%) BGP
12 8 (1.68%) HTTPS
12 8 (1.68%) Wireshark
13 7 (1.47%) Internet
13 7 (1.47%) MPLS
13 7 (1.47%) VLAN
14 6 (1.26%) Cisco ISE
14 6 (1.26%) Wi-Fi
Database & Business Intelligence
1 5 (1.05%) Data Lake
2 3 (0.63%) Power BI
3 2 (0.42%) SQL Server
4 1 (0.21%) Big Data
4 1 (0.21%) Elasticsearch
4 1 (0.21%) Metadata
4 1 (0.21%) Tableau
Development Applications
1 13 (2.73%) Jenkins
2 8 (1.68%) Bitbucket
2 8 (1.68%) CircleCI
3 7 (1.47%) GitLab
4 6 (1.26%) JIRA
5 4 (0.84%) Metasploit
6 1 (0.21%) Git
General
1 153 (32.08%) Social Skills
2 93 (19.50%) Analytical Skills
3 92 (19.29%) Finance
4 44 (9.22%) Inclusion and Diversity
5 38 (7.97%) Legal
6 22 (4.61%) Banking
7 20 (4.19%) Documentation Skills
8 15 (3.14%) Public Sector
9 13 (2.73%) Retail
10 11 (2.31%) Law
11 7 (1.47%) Games
12 6 (1.26%) Influencing Skills
12 6 (1.26%) Presentation Skills
13 5 (1.05%) Financial Institution
13 5 (1.05%) Organisational Skills
14 3 (0.63%) Advertising
14 3 (0.63%) Manufacturing
15 2 (0.42%) Aerospace
15 2 (0.42%) Military
16 1 (0.21%) Local Government
Job Titles
1 118 (24.74%) Analyst
2 80 (16.77%) Security Analyst
3 77 (16.14%) Security Engineer
4 70 (14.68%) Senior
5 58 (12.16%) Lead
6 48 (10.06%) Security Manager
7 46 (9.64%) Architect
8 41 (8.60%) Cybersecurity Analyst
9 29 (6.08%) Support Engineer
10 27 (5.66%) Security Architect
11 22 (4.61%) SOC Analyst
12 21 (4.40%) Senior Analyst
13 19 (3.98%) Consultant
13 19 (3.98%) Infrastructure Engineer
14 16 (3.35%) Cybersecurity Engineer
14 16 (3.35%) Cybersecurity Manager
14 16 (3.35%) Infrastructure Security Engineer
14 16 (3.35%) IT Manager
14 16 (3.35%) Security Specialist
15 15 (3.14%) Information Security Analyst
Libraries, Frameworks & Software Standards
1 10 (2.10%) REST
1 10 (2.10%) SAML
2 6 (1.26%) LDAP
3 5 (1.05%) OpenTelemetry
3 5 (1.05%) Regular Expression
4 4 (0.84%) ARM Templates
5 3 (0.63%) Elastic Stack
5 3 (0.63%) JSON
5 3 (0.63%) JSON Schema
5 3 (0.63%) XML
6 2 (0.42%) AWS SAM
6 2 (0.42%) EDI
6 2 (0.42%) PyTorch
6 2 (0.42%) TensorFlow
7 1 (0.21%) Kafka
7 1 (0.21%) ModSecurity
7 1 (0.21%) OAuth
7 1 (0.21%) OpenID
7 1 (0.21%) SailPoint
7 1 (0.21%) XMPP
Miscellaneous
1 76 (15.93%) Security Posture
2 65 (13.63%) Security Operations Centre
3 38 (7.97%) Cyber Threat
4 37 (7.76%) Cyber Defence
5 25 (5.24%) Data Protection Act
5 25 (5.24%) Management Information System
5 25 (5.24%) PKI
6 24 (5.03%) Data Centre
7 21 (4.40%) Cloud Native
8 16 (3.35%) Onboarding
9 13 (2.73%) Cyber Kill Chain
10 12 (2.52%) Hybrid Cloud
11 11 (2.31%) Analytical Mindset
12 10 (2.10%) CSOC
12 10 (2.10%) Operational Technology
13 8 (1.68%) Cyberattack
13 8 (1.68%) Enterprise Software
14 6 (1.26%) Self-Motivation
15 5 (1.05%) Blog
15 5 (1.05%) YubiKey
Operating Systems
1 121 (25.37%) Windows
2 83 (17.40%) Linux
3 44 (9.22%) Windows Server
4 15 (3.14%) Red Hat Enterprise Linux
5 11 (2.31%) Unix
6 6 (1.26%) Mac OS
7 4 (0.84%) Kali Linux
8 3 (0.63%) Windows Server 2019
9 2 (0.42%) Windows 10
10 1 (0.21%) Android
10 1 (0.21%) Apple iOS
Processes & Methodologies
1 265 (55.56%) Incident Response
2 238 (49.90%) Cybersecurity
3 179 (37.53%) Security Operations
4 125 (26.21%) Continuous Improvement
5 118 (24.74%) Cloud Security
6 103 (21.59%) Information Security
7 99 (20.75%) Vulnerability Management
8 90 (18.87%) Threat Intelligence
9 79 (16.56%) Problem-Solving
10 74 (15.51%) SOAR
10 74 (15.51%) Threat Detection
11 69 (14.47%) Cyber Threat Intelligence
11 69 (14.47%) Risk Management
12 66 (13.84%) Data Loss Prevention
13 60 (12.58%) Data Protection
13 60 (12.58%) Disaster Recovery
14 59 (12.37%) MITRE ATT&CK
15 57 (11.95%) Security Architecture
16 55 (11.53%) Stakeholder Management
17 53 (11.11%) Security Monitoring
Programming Languages
1 94 (19.71%) PowerShell
2 84 (17.61%) Python
3 35 (7.34%) Bash
4 20 (4.19%) Kusto Query Language
5 17 (3.56%) SQL
6 11 (2.31%) Bicep
7 8 (1.68%) Go
8 6 (1.26%) JavaScript
9 3 (0.63%) Shell Script
10 2 (0.42%) Perl
11 1 (0.21%) Scala
Qualifications
1 115 (24.11%) CISSP
2 99 (20.75%) Security Cleared
3 89 (18.66%) Degree
4 61 (12.79%) SC Cleared
5 58 (12.16%) CISM
6 52 (10.90%) CompTIA Security+
7 45 (9.43%) CEH
8 42 (8.81%) DV Cleared
9 41 (8.60%) Cisco Certification
10 37 (7.76%) GIAC
11 29 (6.08%) CompTIA CySA+
12 24 (5.03%) GCIH
13 20 (4.19%) Computer Science Degree
14 18 (3.77%) (ISC)2 CCSP
15 17 (3.56%) CCNA
15 17 (3.56%) OSCP
16 15 (3.14%) GCIA
17 14 (2.94%) CCNP
17 14 (2.94%) SANS
18 13 (2.73%) Azure Certification
Quality Assurance & Compliance
1 163 (34.17%) ISO/IEC 27001
2 153 (32.08%) NIST
3 84 (17.61%) Cyber Essentials
4 74 (15.51%) GDPR
5 21 (4.40%) PCI DSS
5 21 (4.40%) SLA
6 18 (3.77%) Cyber Essentials PLUS
7 16 (3.35%) GRC
8 15 (3.14%) ISO/IEC 27002 (supersedes ISO/IEC 17799)
9 14 (2.94%) SOC 2
10 13 (2.73%) NCSC
11 12 (2.52%) Sarbanes-Oxley
12 7 (1.47%) JSP 440
12 7 (1.47%) NIST 800
13 6 (1.26%) ISAE 3402
14 5 (1.05%) Data Quality
14 5 (1.05%) Government Security Classifications
14 5 (1.05%) HMG Security Policy Framework
15 3 (0.63%) ITGC
16 2 (0.42%) Def Stans
System Software
1 70 (14.68%) Active Directory
2 45 (9.43%) VMware Infrastructure
3 24 (5.03%) vSphere
4 18 (3.77%) Docker
5 10 (2.10%) VMware ESXi
6 7 (1.47%) Virtual Machines
7 6 (1.26%) VMware NSX
8 4 (0.84%) Hyper-V
9 3 (0.63%) Slurm Workload Manager
10 2 (0.42%) EMC RecoverPoint
10 2 (0.42%) GPFS
10 2 (0.42%) Lustre
11 1 (0.21%) Apache ZooKeeper
11 1 (0.21%) Firmware
11 1 (0.21%) NLBS
Systems Management
1 35 (7.34%) Terraform
2 31 (6.50%) Ansible
2 31 (6.50%) Kubernetes
3 20 (4.19%) Microsoft Intune
4 19 (3.98%) Single Sign-On
5 15 (3.14%) QRadar
6 13 (2.73%) WSUS
7 9 (1.89%) Grafana
8 6 (1.26%) CASB
9 5 (1.05%) Computer Incident Response Team
9 5 (1.05%) CSIRT
9 5 (1.05%) Nessus
10 4 (0.84%) Active Directory Federation Services
11 3 (0.63%) ArcSight ESM
11 3 (0.63%) VxRail
12 2 (0.42%) Computer Emergency Response Teams
12 2 (0.42%) PowerCLI
12 2 (0.42%) Proxmox
12 2 (0.42%) SELinux
12 2 (0.42%) vCenter Server
Vendors
1 202 (42.35%) Microsoft
2 57 (11.95%) Splunk
3 55 (11.53%) VMware
4 50 (10.48%) Cisco
5 48 (10.06%) CrowdStrike
6 34 (7.13%) Tenable
7 25 (5.24%) McAfee
8 20 (4.19%) Palo Alto
9 19 (3.98%) Google
10 18 (3.77%) CheckPoint
10 18 (3.77%) CyberArk
10 18 (3.77%) Fortinet
11 17 (3.56%) Dell
12 16 (3.35%) Juniper
13 15 (3.14%) LogRhythm
14 12 (2.52%) iManage
15 11 (2.31%) Qualys
16 10 (2.10%) Rapid7
17 9 (1.89%) ServiceNow
17 9 (1.89%) Zscaler