Hybrid/Remote NIST Job Trends

National Institute of Standards and Technology (NIST)
UK > Work from Home

The table below provides summary statistics and salary benchmarking for remote or hybrid work requiring NIST skills. It covers permanent job vacancies from the 6 months leading up to 7 December 2025, with comparisons to the same periods in the previous two years.

6 months to
7 Dec 2025
Same period 2024 Same period 2023
Rank 102 251 281
Rank change year-on-year +149 +30 +69
Permanent jobs citing NIST 406 228 206
As % of all permanent jobs with remote/hybrid work options 2.65% 1.21% 1.00%
As % of the Quality Assurance & Compliance category 15.23% 7.54% 6.51%
Number of salaries quoted 227 143 186
10th Percentile £47,500 £39,000 £46,132
25th Percentile £50,250 £49,881 £52,500
Median annual salary (50th Percentile) £67,500 £65,000 £70,000
Median % change year-on-year +3.85% -7.14% -3.45%
75th Percentile £90,000 £81,250 £85,000
90th Percentile £105,940 £88,500 £95,000
UK median annual salary £70,000 £70,000 £69,000
% change year-on-year - +1.45% -1.43%

All Quality Assurance and Compliance Skills
Work from Home

NIST falls under the Quality Assurance and Compliance category. For comparison with the information above, the following table provides summary statistics for all permanent job vacancies with remote or hybrid options requiring quality assurance or compliance skills.

Permanent vacancies with a requirement for quality assurance or compliance skills 2,665 3,022 3,164
As % of all permanent jobs with a WFH option 17.43% 16.07% 15.34%
Number of salaries quoted 1,628 1,685 2,494
10th Percentile £34,500 £35,000 £37,000
25th Percentile £47,500 £46,250 £47,500
Median annual salary (50th Percentile) £62,500 £62,500 £60,249
Median % change year-on-year - +3.74% +4.78%
75th Percentile £80,000 £77,500 £80,000
90th Percentile £97,500 £95,000 £95,000
UK median annual salary £57,500 £60,000 £60,000
% change year-on-year -4.17% - +4.35%

NIST
Job Vacancy Trend for Remote/Hybrid Jobs

Historical trend showing the proportion of permanent IT job postings citing NIST and offering remote or hybrid work options relative to all permanent IT jobs advertised.

NIST job vacancy trend for remote/hybrid jobs

NIST
Salary Trend for Remote/Hybrid Jobs

Salary distribution trend for jobs with remote/hybrid work options citing NIST.

Salary distribution trend for jobs with remote/hybrid work options citing NIST

NIST
Salary Histogram for Remote/Hybrid Jobs

Salary distribution for jobs with remote/hybrid work options citing NIST over the 6 months to 7 December 2025.

NIST salary histogram for jobs with remote/hybrid work options

NIST
Co-Occurring Skills & Capabilities in Remote/Hybrid Jobs by Category

The following tables expand on the one above by listing co-occurrences grouped by category. They cover the same employment type, locality and period, with up to 20 co-occurrences shown in each category:

Application Platforms
1 17 (4.19%) IIS
2 10 (2.46%) Microsoft Exchange
3 9 (2.22%) SharePoint
4 1 (0.25%) Confluence
Applications
1 2 (0.49%) Microsoft Office
2 1 (0.25%) GNU Octave
2 1 (0.25%) Microsoft Excel
2 1 (0.25%) Microsoft PowerPoint
2 1 (0.25%) MS Visio
Business Applications
1 1 (0.25%) Elite 3E
Cloud Services
1 101 (24.88%) Azure
2 51 (12.56%) AWS
3 24 (5.91%) Microsoft 365
4 21 (5.17%) Entra ID
5 16 (3.94%) SaaS
6 15 (3.69%) GCP
7 12 (2.96%) PaaS
8 10 (2.46%) Microsoft Purview
9 9 (2.22%) Nutanix
10 8 (1.97%) Azure DevOps
10 8 (1.97%) Azure Logic Apps
10 8 (1.97%) Azure Sentinel
11 7 (1.72%) dbt
12 6 (1.48%) Google Workspace
13 5 (1.23%) Power Platform
14 4 (0.99%) Amazon GuardDuty
15 3 (0.74%) AWS CloudFormation
16 2 (0.49%) Azure Key Vault
16 2 (0.49%) Azure Stack
16 2 (0.49%) IaaS
Communications & Networking
1 47 (11.58%) Network Security
2 31 (7.64%) Firewall
3 16 (3.94%) VPN
4 11 (2.71%) Wireshark
5 10 (2.46%) WAN
6 9 (2.22%) Broadband
6 9 (2.22%) LAN
6 9 (2.22%) SD-WAN
7 8 (1.97%) Unified Communications
7 8 (1.97%) VoIP
8 7 (1.72%) Wi-Fi
9 6 (1.48%) CHAP
9 6 (1.48%) Intrusion Detection
10 5 (1.23%) DNS
10 5 (1.23%) SSL
11 4 (0.99%) DMZ
12 1 (0.25%) EIGRP
12 1 (0.25%) OSPF
12 1 (0.25%) S/MIME
12 1 (0.25%) X.509
Database & Business Intelligence
1 5 (1.23%) NoSQL
1 5 (1.23%) Power BI
1 5 (1.23%) Tableau
Development Applications
1 1 (0.25%) Burp Suite
1 1 (0.25%) Git
1 1 (0.25%) JIRA
1 1 (0.25%) Metasploit
General
1 163 (40.15%) Finance
2 109 (26.85%) Social Skills
3 69 (17.00%) Banking
4 64 (15.76%) Public Sector
5 61 (15.02%) Telecoms
6 58 (14.29%) Analytical Skills
7 51 (12.56%) Manufacturing
8 50 (12.32%) Electronics
8 50 (12.32%) Marketing
9 26 (6.40%) Law
10 16 (3.94%) Legal
10 16 (3.94%) Organisational Skills
11 15 (3.69%) Inclusion and Diversity
12 13 (3.20%) Financial Institution
13 9 (2.22%) Games
14 6 (1.48%) Influencing Skills
14 6 (1.48%) Retail
15 4 (0.99%) Documentation Skills
16 3 (0.74%) Back Office
17 2 (0.49%) Presentation Skills
Job Titles
1 79 (19.46%) Consultant
1 79 (19.46%) Lead
2 78 (19.21%) Security Consultant
3 48 (11.82%) Senior
4 47 (11.58%) Cybersecurity Consultant
5 31 (7.64%) Analyst
6 24 (5.91%) Security Manager
7 23 (5.67%) Security Engineer
8 22 (5.42%) Architect
9 20 (4.93%) Security Analyst
10 19 (4.68%) Security Specialist
11 16 (3.94%) Senior Consultant
11 16 (3.94%) Senior Cybersecurity Consultant
11 16 (3.94%) Senior Security Consultant
12 14 (3.45%) Security Architect
13 13 (3.20%) Information Security Manager
14 11 (2.71%) Cybersecurity Specialist
14 11 (2.71%) Head of IT
14 11 (2.71%) Information Manager
14 11 (2.71%) IT Manager
Libraries, Frameworks & Software Standards
1 24 (5.91%) SAP CAF
2 9 (2.22%) YAML
3 8 (1.97%) GraphQL
3 8 (1.97%) JSON
3 8 (1.97%) REST
3 8 (1.97%) SOAP
4 6 (1.48%) LDAP
4 6 (1.48%) OAuth
4 6 (1.48%) OpenID
4 6 (1.48%) React
4 6 (1.48%) SAML
4 6 (1.48%) Spring Boot
5 3 (0.74%) EDI
6 2 (0.49%) Django
6 2 (0.49%) SLSA
7 1 (0.25%) ARM Templates
7 1 (0.25%) EJB
7 1 (0.25%) PyTorch
7 1 (0.25%) TensorFlow
Miscellaneous
1 102 (25.12%) Cyber Threat
2 87 (21.43%) Cyber Kill Chain
3 84 (20.69%) Operational Technology
4 81 (19.95%) Security Operations Centre
5 44 (10.84%) Management Information System
6 42 (10.34%) Security Posture
7 28 (6.90%) Analytical Mindset
8 18 (4.43%) Cloud Native
9 16 (3.94%) CESG
10 11 (2.71%) Hybrid Cloud
11 9 (2.22%) Cyberattack
11 9 (2.22%) Enterprise Software
11 9 (2.22%) Product Ownership
12 7 (1.72%) PKI
13 6 (1.48%) Cloud Security Posture
13 6 (1.48%) Cyber Defence
13 6 (1.48%) Taxonomies
14 5 (1.23%) Onboarding
15 4 (0.99%) Data Centre
15 4 (0.99%) SCADA
Operating Systems
1 16 (3.94%) Windows
2 12 (2.96%) Linux
3 6 (1.48%) Unix
4 2 (0.49%) VMS
4 2 (0.49%) Windows Server
5 1 (0.25%) Kali Linux
Processes & Methodologies
1 237 (58.37%) Risk Management
2 211 (51.97%) Cybersecurity
3 156 (38.42%) Vulnerability Management
4 147 (36.21%) Information Security
5 142 (34.98%) Roadmaps
6 123 (30.30%) Mentoring
7 103 (25.37%) Security Operations
8 99 (24.38%) Threat Intelligence
9 95 (23.40%) Cyber Threat Intelligence
10 91 (22.41%) Stakeholder Management
11 84 (20.69%) ITIL
12 82 (20.20%) Technology Roadmap
13 80 (19.70%) Coaching
14 76 (18.72%) Incident Response
14 76 (18.72%) SABSA
15 73 (17.98%) Cyber Intelligence
15 73 (17.98%) Risk Assessment
16 72 (17.73%) Threat and Vulnerability Management
17 70 (17.24%) Business Strategy
18 68 (16.75%) Change Advisory Board
Programming Languages
1 40 (9.85%) PowerShell
2 22 (5.42%) Python
3 16 (3.94%) SQL
4 11 (2.71%) Java
5 10 (2.46%) Bash
6 7 (1.72%) Kusto Query Language
7 6 (1.48%) T-SQL
8 5 (1.23%) C#
9 3 (0.74%) Bicep
10 2 (0.49%) Go
10 2 (0.49%) Groovy
Qualifications
1 185 (45.57%) CISSP
2 107 (26.35%) CISM
3 84 (20.69%) Security Cleared
4 72 (17.73%) CRISC
5 71 (17.49%) CISA
6 50 (12.32%) SC Cleared
7 43 (10.59%) CEH
7 43 (10.59%) Degree
8 40 (9.85%) CompTIA Security+
9 32 (7.88%) ISO 27001 Lead Implementer
10 24 (5.91%) Azure Certification
11 22 (5.42%) AWS Certification
12 21 (5.17%) CISMP
13 19 (4.68%) Cisco Certification
14 16 (3.94%) CESG Certified Professional
14 16 (3.94%) IISP
15 13 (3.20%) DV Cleared
15 13 (3.20%) Master's Degree
16 12 (2.96%) AWS Certified Solutions Architect
16 12 (2.96%) ISO 27001 Lead Auditor
Quality Assurance & Compliance
1 257 (63.30%) ISO/IEC 27001
2 98 (24.14%) PCI DSS
3 70 (17.24%) ISO/IEC 27005
4 69 (17.00%) GDPR
5 61 (15.02%) GRC
6 55 (13.55%) NCSC
7 33 (8.13%) Cyber Essentials
7 33 (8.13%) NIST 800
8 26 (6.40%) JSP 440
9 22 (5.42%) SOC 2
10 16 (3.94%) COBIT
10 16 (3.94%) HMG Security Policy Framework
10 16 (3.94%) RMADS
11 12 (2.96%) Cyber Essentials PLUS
12 7 (1.72%) HIPAA
12 7 (1.72%) ISO 22301
12 7 (1.72%) ISO/IEC 42001
13 6 (1.48%) SOC 1
14 5 (1.23%) ISO/IEC 27002 (supersedes ISO/IEC 17799)
14 5 (1.23%) ITGC
System Software
1 13 (3.20%) Active Directory
2 8 (1.97%) Virtual Desktop
3 6 (1.48%) Docker
4 5 (1.23%) VMware Infrastructure
5 1 (0.25%) Hyper-V
Systems Management
1 19 (4.68%) Terraform
2 10 (2.46%) Kubernetes
3 9 (2.22%) Microsoft Intune
4 7 (1.72%) RSA Archer
5 4 (0.99%) QRadar
6 2 (0.49%) Nmap
6 2 (0.49%) Single Sign-On
6 2 (0.49%) Suricata
7 1 (0.25%) Ansible
7 1 (0.25%) Computer Emergency Response Teams
7 1 (0.25%) Nessus
7 1 (0.25%) Proxmox
Vendors
1 50 (12.32%) SAP
2 44 (10.84%) Microsoft
3 14 (3.45%) VMware
4 9 (2.22%) Commvault
5 8 (1.97%) Cisco
6 6 (1.48%) Google
6 6 (1.48%) Splunk
7 2 (0.49%) CyberArk
7 2 (0.49%) Rapid7
7 2 (0.49%) ServiceNow
8 1 (0.25%) AlienVault
8 1 (0.25%) arcserve
8 1 (0.25%) CrowdStrike
8 1 (0.25%) Darktrace
8 1 (0.25%) LogRhythm
8 1 (0.25%) Palo Alto
8 1 (0.25%) Qualys
8 1 (0.25%) SolarWinds
8 1 (0.25%) Sophos
8 1 (0.25%) Thales