Incident Response Contracts in England

Incident Response
UK > England

The following table provides summary statistics for contract job vacancies advertised in England with a requirement for Incident Response skills. Included is a benchmarking guide to the contractor rates offered in vacancies that have cited Incident Response over the 6 months to 10 May 2024 with a comparison to the same period in the previous 2 years.

6 months to
10 May 2024
Same period 2023 Same period 2022
Rank 227 333 516
Rank change year-on-year +106 +183 -68
Contract jobs citing Incident Response 397 351 270
As % of all contract jobs advertised in England 1.08% 0.72% 0.39%
As % of the Processes & Methodologies category 1.25% 0.79% 0.42%
Number of daily rates quoted 287 275 208
10th Percentile £419 £394 £400
25th Percentile £457 £506 £475
Median daily rate (50th Percentile) £550 £600 £550
Median % change year-on-year -8.33% +9.09% +1.85%
75th Percentile £675 £736 £675
90th Percentile £775 £800 £772
UK median daily rate £550 £586 £550
% change year-on-year -6.06% +6.45% +3.53%
Number of hourly rates quoted 6 0 4
10th Percentile £35.06 - £15.86
25th Percentile - - £16.21
Median hourly rate £40.00 - £16.82
75th Percentile - - £17.33
90th Percentile - - £17.52
UK median hourly rate £40.00 - £17.64
% change year-on-year - - -59.68%

All Process and Methodology Skills
England

Incident Response is in the Processes and Methodologies category. The following table is for comparison with the above and provides summary statistics for all contract job vacancies advertised in England with a requirement for process or methodology skills.

Contract vacancies with a requirement for process or methodology skills 31,794 44,158 63,636
As % of all contract IT jobs advertised in England 86.49% 90.16% 90.83%
Number of daily rates quoted 20,826 30,977 45,197
10th Percentile £300 £325 £331
25th Percentile £413 £445 £426
Median daily rate (50th Percentile) £525 £550 £538
Median % change year-on-year -4.55% +2.33% +7.50%
75th Percentile £650 £675 £650
90th Percentile £750 £766 £750
UK median daily rate £525 £550 £530
% change year-on-year -4.55% +3.77% +8.72%
Number of hourly rates quoted 2,249 1,562 1,739
10th Percentile £12.91 £10.64 £12.50
25th Percentile £16.00 £16.25 £15.25
Median hourly rate £37.18 £37.50 £25.00
Median % change year-on-year -0.85% +50.00% +6.38%
75th Percentile £60.00 £65.00 £49.25
90th Percentile £72.50 £75.00 £65.00
UK median hourly rate £36.50 £36.25 £25.68
% change year-on-year +0.69% +41.16% +4.82%

Incident Response
Job Vacancy Trend in England

Job postings citing Incident Response as a proportion of all IT jobs advertised in England.

Job vacancy trend for Incident Response in England

Incident Response
Contractor Daily Rate Trend in England

3-month moving average daily rate quoted in jobs citing Incident Response in England.

Daily rate trend for Incident Response in England

Incident Response
Daily Rate Histogram in England

Daily rate distribution for jobs citing Incident Response in England over the 6 months to 10 May 2024.

Daily rate histogram for Incident Response in England

Incident Response
Contractor Hourly Rate Trend in England

3-month moving average hourly rates quoted in jobs citing Incident Response in England.

Hourly rate trend for Incident Response in England

Incident Response
Contract Job Locations in England

The table below looks at the demand and provides a guide to the median contractor rates quoted in IT jobs citing Incident Response within the England region over the 6 months to 10 May 2024. The 'Rank Change' column provides an indication of the change in demand within each location based on the same 6 month period last year.

Location Rank Change
on Same Period
Last Year
Matching
Contract
IT Job Ads
Median
Daily Rate
Past 6 Months
Median Daily Rate
% Change
on Same Period
Last Year
Live
Jobs
South West +106 106 £582 -6.88% 15
London +13 106 £538 -10.79% 81
South East +75 70 £484 -19.42% 36
North of England +26 52 £567 +3.09% 41
Midlands +34 40 £635 -2.31% 26
West Midlands +32 37 £635 -2.31% 20
Yorkshire +22 27 £582 +10.86% 17
North West +13 25 £525 -10.41% 18
East of England +12 25 £600 +26.32% 6
East Midlands +19 3 £567 -7.65% 6
Incident Response
UK

Incident Response
Co-occurring Skills and Capabilities in England by Category

The follow tables expand on the table above by listing co-occurrences grouped by category. The same employment type, locality and period is covered with up to 20 co-occurrences shown in each of the following categories:

Application Platforms
1 17 (4.28%) CMS
2 11 (2.77%) NetWeaver
3 4 (1.01%) Microsoft Exchange
4 2 (0.50%) Apache Spark
4 2 (0.50%) Confluence
4 2 (0.50%) nginx
5 1 (0.25%) IBM Notes
5 1 (0.25%) SharePoint
Applications
1 3 (0.76%) Microsoft Excel
2 1 (0.25%) Microsoft Office
2 1 (0.25%) Microsoft Project
2 1 (0.25%) Spreadsheet
Business Applications
1 11 (2.77%) SAP IBP
Cloud Services
1 76 (19.14%) Azure
2 42 (10.58%) AWS
3 27 (6.80%) Azure Sentinel
4 12 (3.02%) Microsoft 365
5 10 (2.52%) GCP
6 9 (2.27%) Entra ID
7 8 (2.02%) OpenShift
8 7 (1.76%) Virtual Private Cloud
9 6 (1.51%) Azure Monitor
9 6 (1.51%) Microsoft Purview
10 5 (1.26%) AWS CloudTrail
10 5 (1.26%) Azure DevOps
10 5 (1.26%) CloudFront
11 4 (1.01%) Amazon CloudWatch
11 4 (1.01%) Amazon S3
11 4 (1.01%) AWS CloudFormation
11 4 (1.01%) GitHub
11 4 (1.01%) Google Kubernetes Engine
11 4 (1.01%) PaaS
11 4 (1.01%) Power Platform
Communications & Networking
1 47 (11.84%) Firewall
2 26 (6.55%) Network Security
3 16 (4.03%) Intrusion Detection
4 12 (3.02%) DNS
5 9 (2.27%) TCP/IP
5 9 (2.27%) VPN
6 5 (1.26%) HTTP
6 5 (1.26%) LAN
7 4 (1.01%) Cisco Nexus
7 4 (1.01%) FTP
7 4 (1.01%) SMTP
7 4 (1.01%) WAN
8 3 (0.76%) DHCP
8 3 (0.76%) Intranet
8 3 (0.76%) SSL
9 2 (0.50%) Reverse Proxy
9 2 (0.50%) tcpdump
9 2 (0.50%) Wi-Fi
9 2 (0.50%) Wireshark
10 1 (0.25%) Cisco ASA
Database & Business Intelligence
1 16 (4.03%) Elasticsearch
2 11 (2.77%) SAP BW
2 11 (2.77%) SAP HANA
3 8 (2.02%) PostgreSQL
4 6 (1.51%) SQL Server
5 5 (1.26%) MongoDB
6 4 (1.01%) BigQuery
6 4 (1.01%) Data Lake
6 4 (1.01%) Power BI
7 3 (0.76%) Apache Hive
7 3 (0.76%) Hadoop
8 2 (0.50%) Big Data
8 2 (0.50%) Bigtable
8 2 (0.50%) DynamoDB
8 2 (0.50%) Enterprise Data Warehouse
8 2 (0.50%) HBase
8 2 (0.50%) IBM BigInsights
8 2 (0.50%) NoSQL
8 2 (0.50%) Parquet
8 2 (0.50%) Sqoop
Development Applications
1 13 (3.27%) JIRA
2 6 (1.51%) Jenkins
3 4 (1.01%) Git
4 2 (0.50%) Artifactory
4 2 (0.50%) GitLab
4 2 (0.50%) Liquibase
4 2 (0.50%) Octopus Deploy
4 2 (0.50%) TeamCity
5 1 (0.25%) IDA Disassembler
5 1 (0.25%) Subversion
General
1 113 (28.46%) Social Skills
2 47 (11.84%) Finance
3 43 (10.83%) Analytical Skills
4 29 (7.30%) Public Sector
5 20 (5.04%) Banking
6 19 (4.79%) Legal
7 17 (4.28%) Telecoms
8 9 (2.27%) Retail
9 8 (2.02%) Inclusion and Diversity
9 8 (2.02%) Law
10 5 (1.26%) Financial Institution
11 4 (1.01%) Documentation Skills
11 4 (1.01%) Influencing Skills
12 3 (0.76%) Games
12 3 (0.76%) Manufacturing
13 2 (0.50%) Advertising
13 2 (0.50%) Aerospace
13 2 (0.50%) Electronics
13 2 (0.50%) Marketing
13 2 (0.50%) Retail Banking
Job Titles
1 133 (33.50%) Analyst
2 78 (19.65%) SOC Analyst
3 35 (8.82%) Consultant
3 35 (8.82%) Lead
4 32 (8.06%) Senior
5 30 (7.56%) Security Engineer
6 25 (6.30%) Security Analyst
6 25 (6.30%) SOC Engineer
7 21 (5.29%) Architect
7 21 (5.29%) Senior Analyst
8 16 (4.03%) Cyber Defence Analyst
9 14 (3.53%) Security Architect
9 14 (3.53%) Security Manager
10 12 (3.02%) Security Specialist
10 12 (3.02%) SIEM Consultant
10 12 (3.02%) Site Engineer
10 12 (3.02%) Site Reliability Engineer
11 11 (2.77%) Cybersecurity Analyst
11 11 (2.77%) SAP Basis Consultant
11 11 (2.77%) SAP Consultant
Libraries, Frameworks & Software Standards
1 12 (3.02%) Kafka
2 11 (2.77%) SAP Basis
2 11 (2.77%) SAP Fiori
3 8 (2.02%) Elastic Stack
4 6 (1.51%) OAuth
4 6 (1.51%) OAuth2
4 6 (1.51%) SAML
5 3 (0.76%) JSON
5 3 (0.76%) LDAP
5 3 (0.76%) SailPoint
5 3 (0.76%) XML
6 2 (0.50%) Ajax
6 2 (0.50%) AngularJS
6 2 (0.50%) Apache Avro
6 2 (0.50%) Apache NiFi
6 2 (0.50%) CSS
6 2 (0.50%) HTML
6 2 (0.50%) SOAP
6 2 (0.50%) Web Services
7 1 (0.25%) .NET Core
Miscellaneous
1 92 (23.17%) Management Information System
2 83 (20.91%) Security Operations Centre
3 82 (20.65%) Cyber Threat
4 66 (16.62%) Cyber Kill Chain
5 64 (16.12%) Cyber Defence
6 39 (9.82%) CSOC
7 38 (9.57%) Security Posture
8 28 (7.05%) Cyberattack
9 18 (4.53%) Cloud Native
10 16 (4.03%) Onboarding
11 14 (3.53%) Distributed Denial-of-Service
12 12 (3.02%) Public Cloud
13 5 (1.26%) Analytical Mindset
13 5 (1.26%) CMDB
14 4 (1.01%) Cloud Security Posture
14 4 (1.01%) Data Protection Act
14 4 (1.01%) Hedge funds
15 3 (0.76%) Hybrid Cloud
15 3 (0.76%) Insider Threat
16 2 (0.50%) Data Fabric
Operating Systems
1 58 (14.61%) Windows
2 57 (14.36%) Linux
3 15 (3.78%) Unix
4 7 (1.76%) Windows Server
5 4 (1.01%) zOS
6 3 (0.76%) Mac OS
7 2 (0.50%) Red Hat Enterprise Linux
8 1 (0.25%) Android
8 1 (0.25%) Apple iOS
8 1 (0.25%) Mac OS X
8 1 (0.25%) Windows 10
Processes & Methodologies
1 237 (59.70%) Cybersecurity
2 181 (45.59%) SIEM
3 167 (42.07%) Security Operations
4 111 (27.96%) Information Security
5 99 (24.94%) Use Case
6 90 (22.67%) Threat Intelligence
7 89 (22.42%) Incident Management
8 79 (19.90%) MITRE ATT&CK
9 68 (17.13%) Vulnerability Management
10 65 (16.37%) SOAR
11 64 (16.12%) Cyber Threat Intelligence
11 64 (16.12%) Mentoring
12 58 (14.61%) Protective Monitoring
13 57 (14.36%) Root Cause Analysis
14 54 (13.60%) Problem-Solving
15 47 (11.84%) Case Management
16 44 (11.08%) Analytics
16 44 (11.08%) Data Security
17 38 (9.57%) CRM
18 37 (9.32%) Continuous Improvement
Programming Languages
1 27 (6.80%) PowerShell
2 19 (4.79%) Kusto Query Language
3 18 (4.53%) Python
4 7 (1.76%) JavaScript
4 7 (1.76%) SQL
5 6 (1.51%) Bash
6 5 (1.26%) Search Processing Language
7 3 (0.76%) Perl
8 2 (0.50%) Go
8 2 (0.50%) Shell Script
8 2 (0.50%) U-SQL
9 1 (0.25%) Bicep
9 1 (0.25%) C#
9 1 (0.25%) Java
9 1 (0.25%) Ruby
Qualifications
1 161 (40.55%) Security Cleared
2 97 (24.43%) DV Cleared
3 50 (12.59%) CISSP
3 50 (12.59%) SC Cleared
4 44 (11.08%) Degree
5 26 (6.55%) SANS
6 24 (6.05%) CISM
7 14 (3.53%) Cisco Certification
7 14 (3.53%) CompTIA Security+
7 14 (3.53%) Computer Science Degree
8 13 (3.27%) CEH
9 10 (2.52%) CCNP
10 8 (2.02%) BPSS Clearance
10 8 (2.02%) CCNA
10 8 (2.02%) SAP Certification
11 7 (1.76%) GIAC
12 6 (1.51%) AWS Certification
12 6 (1.51%) CISA
13 5 (1.26%) PMI Certification
13 5 (1.26%) PMP
Quality Assurance & Compliance
1 87 (21.91%) NIST
2 44 (11.08%) NIST 800
3 43 (10.83%) ISO/IEC 27001
4 38 (9.57%) GDPR
5 25 (6.30%) NCSC
6 13 (3.27%) PCI DSS
7 10 (2.52%) GRC
8 7 (1.76%) Cyber Essentials
9 5 (1.26%) HIPAA
10 4 (1.01%) Cyber Essentials PLUS
10 4 (1.01%) ISO/IEC 27002 (supersedes ISO/IEC 17799)
10 4 (1.01%) SLA
11 3 (0.76%) COBIT
11 3 (0.76%) GPG13
12 2 (0.50%) Data Quality
12 2 (0.50%) Sarbanes-Oxley
13 1 (0.25%) GLBA
13 1 (0.25%) ISAE 3402
13 1 (0.25%) SOC 2
System Software
1 18 (4.53%) Active Directory
2 13 (3.27%) Docker
3 5 (1.26%) Virtual Machines
4 4 (1.01%) VMware Infrastructure
5 2 (0.50%) XenApp
6 1 (0.25%) Snort
Systems Management
1 15 (3.78%) Kibana
2 14 (3.53%) Kubernetes
3 12 (3.02%) Prometheus
4 10 (2.52%) Istio
4 10 (2.52%) Terraform
5 9 (2.27%) Grafana
5 9 (2.27%) Nessus
6 8 (2.02%) Argo
7 7 (1.76%) Ansible
7 7 (1.76%) CSIRT
8 6 (1.51%) logstash
9 4 (1.01%) Computer Emergency Response Teams
9 4 (1.01%) Puppet
9 4 (1.01%) QRadar
9 4 (1.01%) Trend Micro Deep Security
10 3 (0.76%) FortiGate
10 3 (0.76%) Progress Chef
11 2 (0.50%) Ambari
11 2 (0.50%) Oozie
11 2 (0.50%) Rancher
Vendors
1 159 (40.05%) Microsoft
2 53 (13.35%) Splunk
3 33 (8.31%) LogRhythm
4 24 (6.05%) Qualys
5 23 (5.79%) Darktrace
6 22 (5.54%) Varonis
7 17 (4.28%) FireEye
8 16 (4.03%) Forcepoint
9 15 (3.78%) Cisco
10 14 (3.53%) SAP
11 10 (2.52%) Rapid7
12 8 (2.02%) CrowdStrike
13 7 (1.76%) Google
13 7 (1.76%) Virgin Media
14 6 (1.51%) Palo Alto
14 6 (1.51%) VMware
15 5 (1.26%) CheckPoint
15 5 (1.26%) Oracle
15 5 (1.26%) Sophos
16 4 (1.01%) Symantec