Incident Response Contracts in the UK excluding London

Incident Response
UK > UK excluding London

The following table provides summary statistics for contract job vacancies advertised in the UK excluding London with a requirement for Incident Response skills. Included is a benchmarking guide to the contractor rates offered in vacancies that have cited Incident Response over the 6 months to 3 June 2024 with a comparison to the same period in the previous 2 years.

6 months to
3 Jun 2024
Same period 2023 Same period 2022
Rank 145 276 351
Rank change year-on-year +131 +75 +14
Contract jobs citing Incident Response 304 168 164
As % of all contract jobs advertised in the UK excluding London 1.46% 0.73% 0.53%
As % of the Processes & Methodologies category 1.76% 0.82% 0.60%
Number of daily rates quoted 213 123 133
10th Percentile £425 £333 £379
25th Percentile £463 £450 £463
Median daily rate (50th Percentile) £567 £585 £574
Median % change year-on-year -3.08% +2.01% +4.27%
75th Percentile £688 £644 £650
90th Percentile £798 £725 £725
UK median daily rate £569 £590 £553
% change year-on-year -3.64% +6.64% +6.39%
Number of hourly rates quoted 5 0 6
10th Percentile - - £16.02
25th Percentile - - £16.41
Median hourly rate £40.00 - £17.23
75th Percentile - - £19.41
90th Percentile - - £31.46
UK median hourly rate £40.00 - £17.64
% change year-on-year - - -35.85%

All Process and Methodology Skills
UK excluding London

Incident Response is in the Processes and Methodologies category. The following table is for comparison with the above and provides summary statistics for all contract job vacancies advertised in the UK excluding London with a requirement for process or methodology skills.

Contract vacancies with a requirement for process or methodology skills 17,263 20,432 27,469
As % of all contract IT jobs advertised in the UK excluding London 83.19% 89.17% 89.26%
Number of daily rates quoted 10,230 14,021 19,224
10th Percentile £246 £260 £240
25th Percentile £375 £400 £396
Median daily rate (50th Percentile) £500 £500 £488
Median % change year-on-year - +2.56% +8.33%
75th Percentile £600 £600 £580
90th Percentile £688 £694 £663
UK median daily rate £525 £550 £538
% change year-on-year -4.55% +2.33% +7.50%
Number of hourly rates quoted 2,129 1,241 1,350
10th Percentile £12.41 £10.63 £12.43
25th Percentile £15.39 £15.21 £14.25
Median hourly rate £38.12 £35.00 £20.00
Median % change year-on-year +8.91% +75.00% -4.76%
75th Percentile £61.30 £64.50 £47.50
90th Percentile £72.50 £75.00 £62.28
UK median hourly rate £36.50 £36.00 £25.68
% change year-on-year +1.39% +40.19% +10.45%

Incident Response
Job Vacancy Trend in the UK excluding London

Job postings citing Incident Response as a proportion of all IT jobs advertised in the UK excluding London.

Job vacancy trend for Incident Response in the UK excluding London

Incident Response
Contractor Daily Rate Trend in the UK excluding London

3-month moving average daily rate quoted in jobs citing Incident Response in the UK excluding London.

Daily rate trend for Incident Response in the UK excluding London

Incident Response
Daily Rate Histogram in the UK excluding London

Daily rate distribution for jobs citing Incident Response in the UK excluding London over the 6 months to 3 June 2024.

Daily rate histogram for Incident Response in the UK excluding London

Incident Response
Contractor Hourly Rate Trend in the UK excluding London

3-month moving average hourly rates quoted in jobs citing Incident Response in the UK excluding London.

Hourly rate trend for Incident Response in the UK excluding London

Incident Response
Contract Job Locations in the UK excluding London

The table below looks at the demand and provides a guide to the median contractor rates quoted in IT jobs citing Incident Response within the UK excluding London region over the 6 months to 3 June 2024. The 'Rank Change' column provides an indication of the change in demand within each location based on the same 6 month period last year.

Location Rank Change
on Same Period
Last Year
Matching
Contract
IT Job Ads
Median
Daily Rate
Past 6 Months
Median Daily Rate
% Change
on Same Period
Last Year
Live
Jobs
South West +102 119 £614 +2.33% 12
South East +82 86 £500 -18.03% 39
North of England +17 54 £525 -10.41% 50
Midlands +34 44 £635 -2.31% 27
West Midlands +31 40 £636 -2.12% 16
Yorkshire +22 28 £604 +9.73% 18
East of England +4 26 £650 +49.43% 9
North West -7 26 £500 -15.72% 29
Scotland +43 12 £525 +16.67% 19
East Midlands +8 4 £534 -13.11% 11
Incident Response
UK

Incident Response
Co-occurring Skills and Capabilities in the UK excluding London by Category

The follow tables expand on the table above by listing co-occurrences grouped by category. The same employment type, locality and period is covered with up to 20 co-occurrences shown in each of the following categories:

Application Platforms
1 18 (5.92%) CMS
2 9 (2.96%) NetWeaver
3 2 (0.66%) nginx
4 1 (0.33%) Confluence
4 1 (0.33%) SharePoint
Applications
1 1 (0.33%) Microsoft Excel
1 1 (0.33%) Microsoft Project
Business Applications
1 9 (2.96%) SAP IBP
Cloud Services
1 40 (13.16%) Azure
2 23 (7.57%) AWS
3 20 (6.58%) Azure Sentinel
4 10 (3.29%) OpenShift
5 8 (2.63%) Entra ID
6 6 (1.97%) GCP
7 5 (1.64%) CloudFront
7 5 (1.64%) Microsoft 365
7 5 (1.64%) Virtual Private Cloud
8 4 (1.32%) Amazon CloudWatch
8 4 (1.32%) AWS CloudTrail
8 4 (1.32%) Azure Monitor
8 4 (1.32%) Microsoft Purview
9 3 (0.99%) Amazon GuardDuty
9 3 (0.99%) Azure DevOps
10 2 (0.66%) Amazon S3
10 2 (0.66%) Datadog
10 2 (0.66%) Google Kubernetes Engine
10 2 (0.66%) PaaS
10 2 (0.66%) Sumo Logic
Communications & Networking
1 20 (6.58%) Firewall
2 16 (5.26%) Network Security
3 12 (3.95%) DNS
4 10 (3.29%) NX-OS
4 10 (3.29%) SD-WAN
5 7 (2.30%) TCP/IP
6 6 (1.97%) Intrusion Detection
6 6 (1.97%) VPN
7 4 (1.32%) Cisco Nexus
7 4 (1.32%) FTP
7 4 (1.32%) HTTP
7 4 (1.32%) SMTP
7 4 (1.32%) SSL
8 3 (0.99%) DHCP
8 3 (0.99%) WAN
9 2 (0.66%) LAN
9 2 (0.66%) Reverse Proxy
9 2 (0.66%) Wi-Fi
10 1 (0.33%) tcpdump
10 1 (0.33%) Wireshark
Database & Business Intelligence
1 12 (3.95%) Elasticsearch
2 10 (3.29%) PostgreSQL
3 9 (2.96%) SAP BW
3 9 (2.96%) SAP HANA
4 8 (2.63%) SQL Server
5 3 (0.99%) BigQuery
5 3 (0.99%) Data Hub
5 3 (0.99%) DB2
5 3 (0.99%) Enterprise Data Warehouse
5 3 (0.99%) MongoDB
6 1 (0.33%) Apache Hive
6 1 (0.33%) Hadoop
6 1 (0.33%) Tableau
Development Applications
1 13 (4.28%) JIRA
2 2 (0.66%) Git
3 1 (0.33%) Artifactory
3 1 (0.33%) GitLab
3 1 (0.33%) IDA Disassembler
3 1 (0.33%) Jenkins
3 1 (0.33%) Octopus Deploy
3 1 (0.33%) TeamCity
General
1 102 (33.55%) Social Skills
2 33 (10.86%) Public Sector
3 28 (9.21%) Analytical Skills
4 18 (5.92%) Finance
5 16 (5.26%) Telecoms
6 10 (3.29%) Banking
7 9 (2.96%) Legal
8 8 (2.63%) Inclusion and Diversity
9 6 (1.97%) Retail
10 3 (0.99%) Games
10 3 (0.99%) Manufacturing
11 2 (0.66%) Aerospace
11 2 (0.66%) Electronics
11 2 (0.66%) Marketing
11 2 (0.66%) Military
12 1 (0.33%) Aviation
12 1 (0.33%) Documentation Skills
12 1 (0.33%) Influencing Skills
12 1 (0.33%) Law
12 1 (0.33%) Spanish Language
Job Titles
1 107 (35.20%) Analyst
2 66 (21.71%) SOC Analyst
3 30 (9.87%) Lead
4 29 (9.54%) Consultant
5 22 (7.24%) Security Engineer
6 18 (5.92%) Senior
7 16 (5.26%) SOC Engineer
8 15 (4.93%) Architect
9 14 (4.61%) Cyber Defence Analyst
9 14 (4.61%) Security Analyst
9 14 (4.61%) Senior Analyst
10 13 (4.28%) SIEM Consultant
11 12 (3.95%) Site Engineer
11 12 (3.95%) Site Reliability Engineer
12 11 (3.62%) Security Specialist
13 10 (3.29%) Cloud Engineer
13 10 (3.29%) IT Security Specialist
13 10 (3.29%) Network Architect
13 10 (3.29%) Security Operations Specialist
14 9 (2.96%) Data Compliance Analyst
Libraries, Frameworks & Software Standards
1 14 (4.61%) Kafka
2 12 (3.95%) Elastic Stack
3 9 (2.96%) SAP Basis
3 9 (2.96%) SAP Fiori
4 5 (1.64%) OAuth
4 5 (1.64%) OAuth2
4 5 (1.64%) SAML
5 4 (1.32%) LDAP
6 1 (0.33%) .NET
6 1 (0.33%) Ajax
6 1 (0.33%) AngularJS
6 1 (0.33%) CSS
6 1 (0.33%) HTML
6 1 (0.33%) J2EE
6 1 (0.33%) JSON
6 1 (0.33%) OLE
6 1 (0.33%) SailPoint
6 1 (0.33%) SOAP
6 1 (0.33%) Web Services
6 1 (0.33%) XML
Miscellaneous
1 90 (29.61%) Management Information System
2 71 (23.36%) Cyber Threat
3 70 (23.03%) Security Operations Centre
4 68 (22.37%) Cyber Defence
4 68 (22.37%) Cyber Kill Chain
5 39 (12.83%) CSOC
6 30 (9.87%) Cloud Native
7 21 (6.91%) Security Posture
8 20 (6.58%) Cyberattack
9 11 (3.62%) Distributed Denial-of-Service
10 10 (3.29%) Data Centre
11 9 (2.96%) Public Cloud
12 7 (2.30%) Onboarding
13 5 (1.64%) Analytical Mindset
14 4 (1.32%) CMDB
15 3 (0.99%) Data Fabric
15 3 (0.99%) Operational Technology
16 2 (0.66%) Data Protection Act
16 2 (0.66%) Insider Threat
17 1 (0.33%) Replication
Operating Systems
1 50 (16.45%) Linux
2 44 (14.47%) Windows
3 11 (3.62%) Unix
4 7 (2.30%) zOS
5 4 (1.32%) Windows Server
6 1 (0.33%) Mac OS X
Processes & Methodologies
1 175 (57.57%) Cybersecurity
2 141 (46.38%) SIEM
3 118 (38.82%) Security Operations
4 94 (30.92%) Use Case
5 88 (28.95%) Incident Management
6 83 (27.30%) Information Security
7 81 (26.64%) Threat Intelligence
8 77 (25.33%) MITRE ATT&CK
9 64 (21.05%) SOAR
10 63 (20.72%) Mentoring
11 61 (20.07%) Protective Monitoring
12 60 (19.74%) Vulnerability Management
13 59 (19.41%) Cyber Threat Intelligence
14 56 (18.42%) Root Cause Analysis
15 49 (16.12%) Case Management
16 44 (14.47%) CRM
17 43 (14.14%) Data Security
18 37 (12.17%) Continuous Improvement
19 36 (11.84%) Analytics
20 33 (10.86%) Problem-Solving
Programming Languages
1 13 (4.28%) Kusto Query Language
2 9 (2.96%) PowerShell
3 6 (1.97%) Python
4 5 (1.64%) Bash
4 5 (1.64%) SQL
5 4 (1.32%) Search Processing Language
6 3 (0.99%) JavaScript
7 2 (0.66%) Shell Script
8 1 (0.33%) Bicep
8 1 (0.33%) C
8 1 (0.33%) C#
8 1 (0.33%) C++
8 1 (0.33%) Go
8 1 (0.33%) Java
8 1 (0.33%) R
Qualifications
1 160 (52.63%) Security Cleared
2 99 (32.57%) DV Cleared
3 46 (15.13%) SC Cleared
4 31 (10.20%) Degree
5 25 (8.22%) SANS
6 16 (5.26%) CISSP
7 10 (3.29%) Cisco Certification
7 10 (3.29%) CompTIA Security+
8 8 (2.63%) SAP Certification
9 7 (2.30%) CCNP
9 7 (2.30%) CISM
10 6 (1.97%) Azure Certification
11 5 (1.64%) AWS Certification
11 5 (1.64%) CCNA
11 5 (1.64%) CEH
12 4 (1.32%) CCIE
12 4 (1.32%) Computer Science Degree
13 3 (0.99%) CCSA
13 3 (0.99%) CCSE
13 3 (0.99%) Microsoft Certification
Quality Assurance & Compliance
1 64 (21.05%) NIST
2 47 (15.46%) NIST 800
3 27 (8.88%) GDPR
4 23 (7.57%) NCSC
5 20 (6.58%) ISO/IEC 27001
6 5 (1.64%) GRC
6 5 (1.64%) ISO/IEC 27002 (supersedes ISO/IEC 17799)
6 5 (1.64%) PCI DSS
7 2 (0.66%) Cyber Essentials
7 2 (0.66%) HIPAA
7 2 (0.66%) SLA
8 1 (0.33%) Data Quality
8 1 (0.33%) Disclosure Scotland
8 1 (0.33%) SOC 2
System Software
1 14 (4.61%) VMware Infrastructure
2 10 (3.29%) VMware NSX
2 10 (3.29%) vSphere
3 8 (2.63%) Active Directory
3 8 (2.63%) Docker
4 2 (0.66%) XenApp
5 1 (0.33%) Firmware
5 1 (0.33%) Snort
5 1 (0.33%) Virtual Desktop
Systems Management
1 22 (7.24%) Kibana
2 13 (4.28%) Kubernetes
2 13 (4.28%) Prometheus
3 12 (3.95%) Istio
4 11 (3.62%) Grafana
4 11 (3.62%) logstash
5 10 (3.29%) Argo
5 10 (3.29%) CSIRT
6 5 (1.64%) Terraform
7 4 (1.32%) Nessus
7 4 (1.32%) Trend Micro Deep Security
8 3 (0.99%) Computer Emergency Response Teams
9 2 (0.66%) Ansible
9 2 (0.66%) Kiali
9 2 (0.66%) Nagios
9 2 (0.66%) Network Intrusion Detection System
9 2 (0.66%) Puppet
9 2 (0.66%) ZABBIX
10 1 (0.33%) Progress Chef
10 1 (0.33%) SCOM
Vendors
1 125 (41.12%) Microsoft
2 51 (16.78%) Splunk
3 34 (11.18%) LogRhythm
4 22 (7.24%) Darktrace
5 21 (6.91%) Qualys
6 20 (6.58%) Cisco
6 20 (6.58%) Varonis
7 18 (5.92%) FireEye
8 16 (5.26%) Forcepoint
9 15 (4.93%) VMware
10 11 (3.62%) SAP
10 11 (3.62%) Tanium
11 7 (2.30%) F5
11 7 (2.30%) Virgin Media
12 5 (1.64%) CheckPoint
12 5 (1.64%) Symantec
13 4 (1.32%) CrowdStrike
13 4 (1.32%) IronPort
14 3 (0.99%) Databricks
14 3 (0.99%) Rapid7