Incident Response Contracts in England

Incident Response
UK > England

The following table provides summary statistics for contract job vacancies advertised in England with a requirement for Incident Response skills. Included is a benchmarking guide to the contractor rates offered in vacancies that have cited Incident Response over the 6 months to 2 June 2024 with a comparison to the same period in the previous 2 years.

6 months to
2 Jun 2024
Same period 2023 Same period 2022
Rank 205 317 484
Rank change year-on-year +112 +167 -57
Contract jobs citing Incident Response 423 364 326
As % of all contract jobs advertised in England 1.15% 0.76% 0.46%
As % of the Processes & Methodologies category 1.34% 0.85% 0.51%
Number of daily rates quoted 304 281 252
10th Percentile £421 £400 £400
25th Percentile £456 £500 £475
Median daily rate (50th Percentile) £550 £600 £553
Median % change year-on-year -8.33% +8.45% +5.38%
75th Percentile £675 £745 £671
90th Percentile £771 £813 £751
UK median daily rate £569 £590 £553
% change year-on-year -3.64% +6.64% +5.38%
Number of hourly rates quoted 6 0 4
10th Percentile £35.06 - £15.86
25th Percentile - - £16.21
Median hourly rate £40.00 - £16.82
75th Percentile - - £17.33
90th Percentile - - £17.52
UK median hourly rate £40.00 - £17.64
% change year-on-year - - -35.85%

All Process and Methodology Skills
England

Incident Response is in the Processes and Methodologies category. The following table is for comparison with the above and provides summary statistics for all contract job vacancies advertised in England with a requirement for process or methodology skills.

Contract vacancies with a requirement for process or methodology skills 31,636 42,957 64,216
As % of all contract IT jobs advertised in England 85.67% 89.97% 90.85%
Number of daily rates quoted 20,638 30,177 45,793
10th Percentile £300 £325 £338
25th Percentile £413 £444 £431
Median daily rate (50th Percentile) £525 £550 £545
Median % change year-on-year -4.55% +0.92% +9.00%
75th Percentile £650 £675 £650
90th Percentile £750 £769 £750
UK median daily rate £525 £550 £538
% change year-on-year -4.55% +2.33% +7.50%
Number of hourly rates quoted 2,325 1,518 1,713
10th Percentile £12.85 £10.63 £12.50
25th Percentile £16.00 £15.66 £15.25
Median hourly rate £37.50 £37.15 £25.00
Median % change year-on-year +0.94% +48.60% +11.11%
75th Percentile £61.30 £65.00 £49.41
90th Percentile £72.50 £75.50 £65.00
UK median hourly rate £36.50 £36.00 £25.68
% change year-on-year +1.39% +40.19% +9.70%

Incident Response
Job Vacancy Trend in England

Job postings citing Incident Response as a proportion of all IT jobs advertised in England.

Job vacancy trend for Incident Response in England

Incident Response
Contractor Daily Rate Trend in England

3-month moving average daily rate quoted in jobs citing Incident Response in England.

Daily rate trend for Incident Response in England

Incident Response
Daily Rate Histogram in England

Daily rate distribution for jobs citing Incident Response in England over the 6 months to 2 June 2024.

Daily rate histogram for Incident Response in England

Incident Response
Contractor Hourly Rate Trend in England

3-month moving average hourly rates quoted in jobs citing Incident Response in England.

Hourly rate trend for Incident Response in England

Incident Response
Contract Job Locations in England

The table below looks at the demand and provides a guide to the median contractor rates quoted in IT jobs citing Incident Response within the England region over the 6 months to 2 June 2024. The 'Rank Change' column provides an indication of the change in demand within each location based on the same 6 month period last year.

Location Rank Change
on Same Period
Last Year
Matching
Contract
IT Job Ads
Median
Daily Rate
Past 6 Months
Median Daily Rate
% Change
on Same Period
Last Year
Live
Jobs
South West +101 119 £614 +2.33% 12
London +15 106 £525 -12.86% 109
South East +78 86 £500 -18.03% 38
North of England +19 54 £525 -10.41% 51
Midlands +36 44 £635 -2.31% 26
West Midlands +30 40 £636 -2.12% 16
Yorkshire +28 28 £604 +9.73% 18
East of England +7 27 £650 +49.43% 9
North West -1 26 £500 -15.72% 30
East Midlands +8 4 £534 -13.11% 10
Incident Response
UK

Incident Response
Co-occurring Skills and Capabilities in England by Category

The follow tables expand on the table above by listing co-occurrences grouped by category. The same employment type, locality and period is covered with up to 20 co-occurrences shown in each of the following categories:

Application Platforms
1 19 (4.49%) CMS
2 11 (2.60%) NetWeaver
3 4 (0.95%) Microsoft Exchange
4 2 (0.47%) Apache Spark
4 2 (0.47%) Confluence
4 2 (0.47%) nginx
4 2 (0.47%) SharePoint
5 1 (0.24%) IBM Notes
Applications
1 2 (0.47%) Microsoft Excel
2 1 (0.24%) Microsoft Office
2 1 (0.24%) Microsoft Project
Business Applications
1 11 (2.60%) SAP IBP
Cloud Services
1 78 (18.44%) Azure
2 42 (9.93%) AWS
3 26 (6.15%) Azure Sentinel
4 14 (3.31%) Microsoft 365
5 13 (3.07%) Entra ID
6 11 (2.60%) GCP
7 10 (2.36%) OpenShift
8 8 (1.89%) Microsoft Purview
9 7 (1.65%) Virtual Private Cloud
10 6 (1.42%) Azure DevOps
10 6 (1.42%) Azure Monitor
11 5 (1.18%) AWS CloudTrail
11 5 (1.18%) CloudFront
12 4 (0.95%) Amazon CloudWatch
12 4 (0.95%) Amazon S3
12 4 (0.95%) AWS CloudFormation
12 4 (0.95%) GitHub
12 4 (0.95%) Google Kubernetes Engine
12 4 (0.95%) PaaS
13 3 (0.71%) Power Platform
Communications & Networking
1 45 (10.64%) Firewall
2 29 (6.86%) Network Security
3 18 (4.26%) Intrusion Detection
4 16 (3.78%) DNS
5 14 (3.31%) NX-OS
6 13 (3.07%) SD-WAN
7 12 (2.84%) TCP/IP
7 12 (2.84%) VPN
8 8 (1.89%) HTTP
9 6 (1.42%) DHCP
9 6 (1.42%) FTP
10 5 (1.18%) LAN
10 5 (1.18%) SMTP
11 4 (0.95%) Cisco Nexus
11 4 (0.95%) SSL
11 4 (0.95%) WAN
12 2 (0.47%) Intranet
12 2 (0.47%) Reverse Proxy
12 2 (0.47%) tcpdump
12 2 (0.47%) Wi-Fi
Database & Business Intelligence
1 18 (4.26%) Elasticsearch
2 11 (2.60%) SAP BW
2 11 (2.60%) SAP HANA
3 10 (2.36%) PostgreSQL
4 7 (1.65%) SQL Server
5 6 (1.42%) MongoDB
6 5 (1.18%) BigQuery
7 4 (0.95%) Data Lake
8 3 (0.71%) Apache Hive
8 3 (0.71%) Data Hub
8 3 (0.71%) DB2
8 3 (0.71%) Enterprise Data Warehouse
8 3 (0.71%) Hadoop
9 2 (0.47%) Big Data
9 2 (0.47%) Data Warehouse
9 2 (0.47%) HBase
9 2 (0.47%) IBM BigInsights
9 2 (0.47%) NoSQL
9 2 (0.47%) Parquet
9 2 (0.47%) Power BI
Development Applications
1 13 (3.07%) JIRA
2 4 (0.95%) Git
2 4 (0.95%) Jenkins
3 2 (0.47%) Artifactory
3 2 (0.47%) GitLab
3 2 (0.47%) Liquibase
3 2 (0.47%) Octopus Deploy
3 2 (0.47%) TeamCity
4 1 (0.24%) IDA Disassembler
4 1 (0.24%) Subversion
General
1 124 (29.31%) Social Skills
2 46 (10.87%) Finance
3 44 (10.40%) Analytical Skills
4 38 (8.98%) Public Sector
5 19 (4.49%) Legal
5 19 (4.49%) Telecoms
6 18 (4.26%) Banking
7 9 (2.13%) Retail
8 8 (1.89%) Inclusion and Diversity
8 8 (1.89%) Law
9 5 (1.18%) Documentation Skills
10 3 (0.71%) Financial Institution
10 3 (0.71%) Games
10 3 (0.71%) Manufacturing
11 2 (0.47%) Aerospace
11 2 (0.47%) Electronics
11 2 (0.47%) Influencing Skills
11 2 (0.47%) Marketing
11 2 (0.47%) Military
12 1 (0.24%) Presentation Skills
Job Titles
1 138 (32.62%) Analyst
2 79 (18.68%) SOC Analyst
3 40 (9.46%) Consultant
4 34 (8.04%) Architect
4 34 (8.04%) Security Engineer
4 34 (8.04%) Senior
5 32 (7.57%) Lead
6 27 (6.38%) Security Analyst
7 22 (5.20%) Senior Analyst
8 19 (4.49%) SOC Engineer
9 15 (3.55%) Cyber Defence Analyst
9 15 (3.55%) Security Architect
10 14 (3.31%) SIEM Consultant
10 14 (3.31%) Site Engineer
10 14 (3.31%) Site Reliability Engineer
11 13 (3.07%) Cybersecurity Analyst
11 13 (3.07%) Security Manager
12 12 (2.84%) Network Architect
12 12 (2.84%) Security Specialist
13 11 (2.60%) SAP Basis Consultant
Libraries, Frameworks & Software Standards
1 17 (4.02%) Elastic Stack
2 14 (3.31%) Kafka
3 11 (2.60%) SAP Basis
3 11 (2.60%) SAP Fiori
4 6 (1.42%) OAuth
4 6 (1.42%) OAuth2
4 6 (1.42%) SAML
5 5 (1.18%) SailPoint
6 4 (0.95%) LDAP
7 3 (0.71%) JSON
7 3 (0.71%) Web Services
7 3 (0.71%) XML
8 2 (0.47%) .NET
8 2 (0.47%) Ajax
8 2 (0.47%) AngularJS
8 2 (0.47%) Apache Avro
8 2 (0.47%) Apache NiFi
8 2 (0.47%) CSS
8 2 (0.47%) HTML
8 2 (0.47%) SOAP
Miscellaneous
1 105 (24.82%) Management Information System
2 95 (22.46%) Cyber Threat
3 80 (18.91%) Security Operations Centre
4 76 (17.97%) Cyber Defence
5 75 (17.73%) Cyber Kill Chain
6 39 (9.22%) CSOC
7 37 (8.75%) Security Posture
8 33 (7.80%) Cloud Native
9 27 (6.38%) Cyberattack
10 16 (3.78%) Onboarding
11 15 (3.55%) Distributed Denial-of-Service
12 13 (3.07%) Data Centre
12 13 (3.07%) Public Cloud
13 6 (1.42%) CMDB
14 5 (1.18%) Analytical Mindset
14 5 (1.18%) Data Protection Act
15 4 (0.95%) Cloud Security Posture
15 4 (0.95%) Hedge funds
16 3 (0.71%) Hybrid Cloud
16 3 (0.71%) Operational Technology
Operating Systems
1 62 (14.66%) Linux
2 59 (13.95%) Windows
3 15 (3.55%) Unix
4 6 (1.42%) Windows Server
5 5 (1.18%) zOS
6 2 (0.47%) Mac OS
6 2 (0.47%) Red Hat Enterprise Linux
7 1 (0.24%) Mac OS X
7 1 (0.24%) Windows 10
Processes & Methodologies
1 247 (58.39%) Cybersecurity
2 185 (43.74%) SIEM
3 165 (39.01%) Security Operations
4 120 (28.37%) Information Security
5 108 (25.53%) Use Case
6 102 (24.11%) Incident Management
7 99 (23.40%) Threat Intelligence
8 90 (21.28%) MITRE ATT&CK
9 74 (17.49%) Cyber Threat Intelligence
10 72 (17.02%) Mentoring
11 71 (16.78%) SOAR
12 69 (16.31%) Root Cause Analysis
12 69 (16.31%) Vulnerability Management
13 68 (16.08%) Protective Monitoring
14 56 (13.24%) Case Management
15 53 (12.53%) Problem-Solving
16 48 (11.35%) CRM
17 44 (10.40%) Data Security
18 41 (9.69%) Analytics
19 39 (9.22%) Data Loss Prevention
Programming Languages
1 29 (6.86%) PowerShell
2 21 (4.96%) Python
3 19 (4.49%) Kusto Query Language
4 9 (2.13%) SQL
5 8 (1.89%) Bash
6 7 (1.65%) JavaScript
7 6 (1.42%) Search Processing Language
8 4 (0.95%) Perl
9 3 (0.71%) Go
10 2 (0.47%) Bicep
10 2 (0.47%) C#
10 2 (0.47%) Java
10 2 (0.47%) Shell Script
10 2 (0.47%) U-SQL
11 1 (0.24%) C
11 1 (0.24%) C++
11 1 (0.24%) R
11 1 (0.24%) Ruby
Qualifications
1 184 (43.50%) Security Cleared
2 107 (25.30%) DV Cleared
3 62 (14.66%) SC Cleared
4 43 (10.17%) Degree
5 38 (8.98%) CISSP
6 27 (6.38%) SANS
7 17 (4.02%) CISM
8 15 (3.55%) Cisco Certification
9 11 (2.60%) CEH
10 10 (2.36%) CCNP
10 10 (2.36%) CompTIA Security+
10 10 (2.36%) Computer Science Degree
11 9 (2.13%) CCNA
11 9 (2.13%) GIAC
12 8 (1.89%) SAP Certification
13 7 (1.65%) BPSS Clearance
14 6 (1.42%) GCIA
14 6 (1.42%) GCIH
15 5 (1.18%) PMI Certification
15 5 (1.18%) PMP
Quality Assurance & Compliance
1 91 (21.51%) NIST
2 53 (12.53%) NIST 800
3 42 (9.93%) GDPR
4 40 (9.46%) ISO/IEC 27001
5 25 (5.91%) NCSC
6 12 (2.84%) PCI DSS
7 9 (2.13%) GRC
8 7 (1.65%) Cyber Essentials
9 5 (1.18%) HIPAA
10 4 (0.95%) ISO/IEC 27002 (supersedes ISO/IEC 17799)
10 4 (0.95%) SLA
11 3 (0.71%) Cyber Essentials PLUS
11 3 (0.71%) GPG13
12 2 (0.47%) Sarbanes-Oxley
13 1 (0.24%) COBIT
13 1 (0.24%) Data Quality
13 1 (0.24%) GLBA
13 1 (0.24%) ISAE 3402
13 1 (0.24%) SOC 2
System Software
1 21 (4.96%) Active Directory
2 17 (4.02%) VMware Infrastructure
3 13 (3.07%) VMware NSX
3 13 (3.07%) vSphere
4 12 (2.84%) Docker
5 6 (1.42%) Virtual Machines
6 2 (0.47%) XenApp
7 1 (0.24%) Firmware
7 1 (0.24%) Snort
7 1 (0.24%) Virtual Desktop
Systems Management
1 26 (6.15%) Kibana
2 21 (4.96%) CSIRT
3 17 (4.02%) Kubernetes
4 15 (3.55%) logstash
5 14 (3.31%) Prometheus
6 13 (3.07%) Terraform
7 12 (2.84%) Istio
8 11 (2.60%) Grafana
9 10 (2.36%) Argo
10 9 (2.13%) Nessus
11 7 (1.65%) Ansible
12 5 (1.18%) QRadar
13 4 (0.95%) Computer Emergency Response Teams
13 4 (0.95%) Puppet
13 4 (0.95%) Trend Micro Deep Security
14 3 (0.71%) Progress Chef
15 2 (0.47%) Ambari
15 2 (0.47%) FortiGate
15 2 (0.47%) Oozie
15 2 (0.47%) ZABBIX
Vendors
1 175 (41.37%) Microsoft
2 53 (12.53%) Splunk
3 35 (8.27%) LogRhythm
4 28 (6.62%) Cisco
5 25 (5.91%) Darktrace
6 23 (5.44%) Qualys
7 22 (5.20%) Varonis
8 19 (4.49%) FireEye
8 19 (4.49%) VMware
9 16 (3.78%) Forcepoint
10 13 (3.07%) SAP
11 11 (2.60%) Tanium
12 9 (2.13%) CrowdStrike
13 7 (1.65%) Google
13 7 (1.65%) Oracle
13 7 (1.65%) Virgin Media
14 6 (1.42%) Rapid7
15 5 (1.18%) CheckPoint
15 5 (1.18%) F5
15 5 (1.18%) Palo Alto