Threat Detection Job Trends

Threat Detection
UK

The table below provides summary statistics and salary benchmarking for jobs requiring Threat Detection skills. It covers permanent job vacancies from the 6 months leading up to 16 August 2026, with comparisons to the same periods in the previous two years.

6 months to
16 Aug 2026
Same period 2025 Same period 2024
Rank 519 580 691
Rank change year-on-year +61 +111 +20
Permanent jobs citing Threat Detection 276 109 104
As % of all permanent jobs in the UK 0.26% 0.22% 0.13%
As % of the Processes & Methodologies category 0.35% 0.24% 0.16%
Number of salaries quoted 170 95 72
10th Percentile £42,500 £43,500 £37,625
25th Percentile £55,000 £51,750 £50,313
Median annual salary (50th Percentile) £72,500 £70,000 £65,000
Median % change year-on-year +3.57% +7.69% +1.96%
75th Percentile £88,750 £81,875 £85,000
90th Percentile £100,250 £115,000 £90,000
UK excluding London median annual salary £58,500 £59,000 £53,000
% change year-on-year -0.85% +11.32% -10.96%

All Process & Methodology Skills
UK

Threat Detection falls under the Processes and Methodologies category. For comparison with the information above, the following table provides summary statistics for all permanent job vacancies requiring process or methodology skills.

Permanent vacancies with a requirement for process or methodology skills 78,515 44,640 67,074
As % of all permanent jobs advertised in the UK 73.47% 89.25% 80.94%
Number of salaries quoted 54,079 25,322 43,171
10th Percentile £30,975 £28,500 £31,250
25th Percentile £41,250 £36,750 £41,250
Median annual salary (50th Percentile) £60,000 £55,000 £55,000
Median % change year-on-year +9.09% - -8.71%
75th Percentile £78,750 £75,000 £75,000
90th Percentile £100,000 £97,236 £95,000
UK excluding London median annual salary £55,000 £47,500 £50,000
% change year-on-year +15.79% -5.00% -9.09%

Threat Detection
Job Vacancy Trend

Historical trend showing the proportion of permanent IT job postings citing Threat Detection relative to all permanent IT jobs advertised.

Threat Detection job vacancy trend in the UK

Threat Detection
Salary Trend

Salary distribution trend for jobs in the UK citing Threat Detection.

Salary distribution trend for jobs in the UK citing Threat Detection

Threat Detection
Salary Histogram

Salary distribution for jobs citing Threat Detection over the 6 months to 16 August 2026.

Salary histogram for Threat Detection in the UK

Threat Detection
Top 15 Job Locations

The table below looks at the demand and provides a guide to the median salaries quoted in IT jobs citing Threat Detection within the UK over the 6 months to 16 August 2026. The 'Rank Change' column provides an indication of the change in demand within each location based on the same 6 month period last year.

Location Rank Change
on Same Period
Last Year
Matching
Permanent
IT Job Ads
Median Salary
Past 6 Months
Median Salary
% Change
on Same Period
Last Year
Live
Jobs
England +64 268 £72,500 +3.57% 66
UK excluding London -15 145 £58,500 -0.85% 54
London +27 124 £86,000 +7.50% 26
Work from Home +9 68 £75,026 -6.22% 35
South East -5 62 £51,500 -26.43% 25
North of England -21 37 £62,500 +16.28% 11
North West +12 22 £72,500 +45.00% 7
East of England -21 16 £70,000 +55.56% 2
Yorkshire -17 15 £62,500 +8.70% 4
Midlands -27 14 £64,250 +16.82% 5
South West -65 13 £45,000 -22.08% 7
West Midlands -33 8 £72,500 +31.82% 2
East Midlands -20 6 £58,500 +1.74% 3
Scotland -1 2 £75,026 +47.83%
Northern Ireland - 1 £40,000 -

Threat Detection
Co-Occurring Skills & Capabilities by Category

The following tables expand on the one above by listing co-occurrences grouped by category. They cover the same employment type, locality and period, with up to 20 co-occurrences shown in each category:

Application Platforms
1 5 (1.81%) Confluence
2 2 (0.72%) Microsoft Exchange
3 1 (0.36%) Apache Spark
Cloud Services
1 85 (30.80%) Azure
2 55 (19.93%) AWS
3 40 (14.49%) Entra ID
4 33 (11.96%) Azure Sentinel
5 25 (9.06%) GCP
6 24 (8.70%) Microsoft 365
7 13 (4.71%) SaaS
8 9 (3.26%) Microsoft Purview
8 9 (3.26%) PaaS
9 8 (2.90%) Azure Logic Apps
10 7 (2.54%) Amazon GuardDuty
11 5 (1.81%) Nutanix
12 4 (1.45%) Mimecast
12 4 (1.45%) Sumo Logic
13 3 (1.09%) Amazon Bedrock
13 3 (1.09%) AWS CloudFormation
13 3 (1.09%) Cloud Computing
13 3 (1.09%) IaaS
14 2 (0.72%) Anthropic Claude
14 2 (0.72%) Microsoft Copilot
Communications & Networking
1 74 (26.81%) Firewall
2 53 (19.20%) Network Security
3 27 (9.78%) Internet
4 24 (8.70%) VPN
5 23 (8.33%) Kerberos
5 23 (8.33%) WAN
6 22 (7.97%) Cisco Nexus
7 21 (7.61%) DNS
7 21 (7.61%) LAN
7 21 (7.61%) TCP/IP
8 19 (6.88%) Wi-Fi
9 15 (5.43%) Intrusion Detection
10 13 (4.71%) HTTP
11 6 (2.17%) Cisco ISE
12 5 (1.81%) IPsec
12 5 (1.81%) SSL
13 3 (1.09%) DHCP
13 3 (1.09%) HTTPS
14 2 (0.72%) FTP
14 2 (0.72%) SMTP
Database & Business Intelligence
1 5 (1.81%) MongoDB
1 5 (1.81%) SQL Server
Development Applications
1 8 (2.90%) JIRA
2 3 (1.09%) Bitbucket
2 3 (1.09%) Metasploit
General
1 84 (30.43%) Social Skills
2 57 (20.65%) Analytical Skills
3 39 (14.13%) Finance
4 16 (5.80%) Legal
5 14 (5.07%) Influencing Skills
6 13 (4.71%) Aerospace
7 11 (3.99%) Inclusion and Diversity
7 11 (3.99%) Military
8 10 (3.62%) Public Sector
9 8 (2.90%) Law
10 6 (2.17%) Police
10 6 (2.17%) Retail
11 5 (1.81%) Aviation
11 5 (1.81%) Banking
11 5 (1.81%) Financial Institution
12 4 (1.45%) Advertising
13 2 (0.72%) Pharmaceutical
14 1 (0.36%) French Language
14 1 (0.36%) German Language
14 1 (0.36%) Telecoms
Job Titles
1 70 (25.36%) Analyst
2 53 (19.20%) Lead
3 49 (17.75%) Security Analyst
4 47 (17.03%) Senior
5 44 (15.94%) Security Engineer
6 28 (10.14%) Cybersecurity Analyst
6 28 (10.14%) Cybersecurity Engineer
7 25 (9.06%) Senior Analyst
8 22 (7.97%) Security Specialist
8 22 (7.97%) Senior Security Analyst
9 21 (7.61%) Architect
10 17 (6.16%) IT Analyst
10 17 (6.16%) IT Security Analyst
11 15 (5.43%) Security Manager
11 15 (5.43%) Senior Cybersecurity Analyst
11 15 (5.43%) SIEM Analyst
12 13 (4.71%) SOC Analyst
13 11 (3.99%) Senior Security Engineer
14 10 (3.62%) AWS Specialist
14 10 (3.62%) Firewall Analyst
Libraries, Frameworks & Software Standards
1 25 (9.06%) LDAP
1 25 (9.06%) SAML
2 24 (8.70%) OpenID
3 21 (7.61%) OAuth
4 16 (5.80%) REST
5 12 (4.35%) RESTful
6 10 (3.62%) ModSecurity
7 6 (2.17%) Regular Expression
8 4 (1.45%) SOAP
8 4 (1.45%) Web Services
8 4 (1.45%) WSDL
8 4 (1.45%) XML
9 2 (0.72%) Elastic Stack
9 2 (0.72%) JSON
10 1 (0.36%) JWT
Miscellaneous
1 87 (31.52%) Security Posture
2 50 (18.12%) Cyber Threat
3 41 (14.86%) Security Operations Centre
4 36 (13.04%) Cyber Defence
5 23 (8.33%) Onboarding
6 20 (7.25%) Management Information System
7 12 (4.35%) Enterprise Software
8 11 (3.99%) Distributed Denial-of-Service
8 11 (3.99%) Social Media
9 10 (3.62%) Cyberattack
10 9 (3.26%) Cloud Native
10 9 (3.26%) Cyber Kill Chain
11 8 (2.90%) Cloud Security Posture
12 7 (2.54%) CSOC
12 7 (2.54%) Virtual Team
13 6 (2.17%) Analytical Mindset
13 6 (2.17%) Low-Code
14 5 (1.81%) Cyber Security Posture
14 5 (1.81%) Insider Threat
15 4 (1.45%) Hybrid Cloud
Operating Systems
1 33 (11.96%) Linux
1 33 (11.96%) Windows
2 10 (3.62%) Windows Server
3 5 (1.81%) Red Hat Enterprise Linux
4 3 (1.09%) Kali Linux
4 3 (1.09%) Mac OS
4 3 (1.09%) Unix
Processes & Methodologies
1 193 (69.93%) Cybersecurity
2 171 (61.96%) Incident Response
3 168 (60.87%) SIEM
4 151 (54.71%) Security Operations
5 99 (35.87%) Vulnerability Management
6 81 (29.35%) Cloud Security
7 77 (27.90%) Continuous Improvement
8 61 (22.10%) Threat Intelligence
9 55 (19.93%) Security Monitoring
10 52 (18.84%) SOAR
11 51 (18.48%) Incident Management
12 48 (17.39%) Cyber Threat Intelligence
13 46 (16.67%) Information Security
13 46 (16.67%) Penetration Testing
14 44 (15.94%) Problem-Solving
14 44 (15.94%) Stakeholder Management
15 43 (15.58%) AI
16 42 (15.22%) MITRE ATT&CK
17 41 (14.86%) Identity Access Management
17 41 (14.86%) Roadmaps
Programming Languages
1 70 (25.36%) PowerShell
2 52 (18.84%) Python
3 12 (4.35%) Bash
3 12 (4.35%) Kusto Query Language
4 9 (3.26%) Search Processing Language
5 5 (1.81%) Java
5 5 (1.81%) SQL
6 4 (1.45%) JavaScript
7 2 (0.72%) Bicep
7 2 (0.72%) C++
7 2 (0.72%) Perl
8 1 (0.36%) Go
Qualifications
1 87 (31.52%) CISSP
2 57 (20.65%) Security Cleared
3 37 (13.41%) Cisco Certification
4 34 (12.32%) SC Cleared
5 33 (11.96%) Degree
6 29 (10.51%) CISM
7 22 (7.97%) (ISC)2 CCSP
7 22 (7.97%) Computer Science Degree
7 22 (7.97%) DV Cleared
8 21 (7.61%) GIAC
9 20 (7.25%) CompTIA Security+
9 20 (7.25%) GCIH
10 19 (6.88%) GCIA
11 18 (6.52%) CCSP
12 16 (5.80%) Microsoft Certification
13 15 (5.43%) CCNP
13 15 (5.43%) CEH
14 13 (4.71%) OSCP
15 12 (4.35%) CompTIA CySA+
15 12 (4.35%) SANS
Quality Assurance & Compliance
1 72 (26.09%) ISO/IEC 27001
2 56 (20.29%) NIST
3 26 (9.42%) GDPR
4 13 (4.71%) Cyber Essentials
5 12 (4.35%) GRC
6 11 (3.99%) PCI DSS
6 11 (3.99%) SLA
7 5 (1.81%) Data Quality
7 5 (1.81%) Sarbanes-Oxley
7 5 (1.81%) SOC 2
8 4 (1.45%) Cyber Essentials PLUS
9 3 (1.09%) Accessibility
9 3 (1.09%) NIST 800
10 2 (0.72%) Def Stans
10 2 (0.72%) ISO 22301
10 2 (0.72%) QA
11 1 (0.36%) Actionable Recommendations
11 1 (0.36%) NCSC
System Software
1 33 (11.96%) Active Directory
2 7 (2.54%) VMware Infrastructure
3 5 (1.81%) Virtual Machines
4 2 (0.72%) vSphere
5 1 (0.36%) Docker
Systems Management
1 17 (6.16%) Single Sign-On
2 14 (5.07%) Kubernetes
3 9 (3.26%) Kibana
3 9 (3.26%) QRadar
4 7 (2.54%) Microsoft Intune
5 6 (2.17%) Terraform
6 5 (1.81%) McAfee ePO
6 5 (1.81%) Nagios
6 5 (1.81%) Red Hat Satellite
7 4 (1.45%) Ansible
7 4 (1.45%) Computer Emergency Response Teams
8 3 (1.09%) CSIRT
9 2 (0.72%) FortiGate
9 2 (0.72%) Stealthwatch
9 2 (0.72%) WhatsUp Gold
10 1 (0.36%) Grafana
10 1 (0.36%) Istio
10 1 (0.36%) linkerd
10 1 (0.36%) Nessus
10 1 (0.36%) Prometheus
Vendors
1 109 (39.49%) Microsoft
2 51 (18.48%) Splunk
3 41 (14.86%) CrowdStrike
4 39 (14.13%) Cisco
4 39 (14.13%) Palo Alto
5 29 (10.51%) Qualys
6 19 (6.88%) Aruba
7 15 (5.43%) Fortinet
8 12 (4.35%) Tenable
9 11 (3.99%) Carbon Black
10 9 (3.26%) Zscaler
11 7 (2.54%) Google
11 7 (2.54%) LogRhythm
11 7 (2.54%) VMware
12 6 (2.17%) Oracle
13 5 (1.81%) Forcepoint
13 5 (1.81%) Ivanti
13 5 (1.81%) McAfee
13 5 (1.81%) Red Hat
13 5 (1.81%) Sophos