National Cyber Security Centre (NCSC)
UK

The following table provides summary statistics for contract job vacancies with a requirement for NCSC skills. Included is a benchmarking guide to the contractor rates offered in vacancies that have cited NCSC over the 6 months to 29 April 2024 with a comparison to the same period in the previous 2 years.

6 months to
29 Apr 2024
Same period 2023 Same period 2022
Rank 418 459 629
Rank change year-on-year +41 +170 -66
Contract jobs citing NCSC 184 260 231
As % of all contract jobs advertised in the UK 0.42% 0.44% 0.26%
As % of the Quality Assurance & Compliance category 2.94% 3.26% 1.96%
Number of daily rates quoted 91 171 153
10th Percentile £500 £500 £450
25th Percentile £563 £603 £513
Median daily rate (50th Percentile) £613 £675 £613
Median % change year-on-year -9.26% +10.20% +8.89%
75th Percentile £694 £731 £688
90th Percentile £738 £838 £802
UK excluding London median daily rate £600 £700 £606
% change year-on-year -14.29% +15.46% +31.79%
Number of hourly rates quoted 2 23 10
10th Percentile £80.34 £59.73 £52.63
25th Percentile £80.85 £62.00 £56.75
Median hourly rate £81.71 £72.98 £61.97
Median % change year-on-year +11.96% +17.78% +6.51%
75th Percentile £82.56 £83.31 £70.77
90th Percentile £83.07 £83.40 £79.25
UK excluding London median hourly rate £80.00 £72.98 £61.97
% change year-on-year +9.62% +17.78% +6.51%

All Quality Assurance and Compliance Skills
UK

NCSC is in the Quality Assurance and Compliance category. The following table is for comparison with the above and provides summary statistics for all contract job vacancies with a requirement for quality assurance or compliance skills.

Contract vacancies with a requirement for quality assurance or compliance skills 6,250 7,982 11,778
As % of all contract IT jobs advertised in the UK 14.34% 13.37% 13.27%
Number of daily rates quoted 3,951 5,482 8,057
10th Percentile £295 £275 £290
25th Percentile £402 £409 £403
Median daily rate (50th Percentile) £510 £525 £513
Median % change year-on-year -2.86% +2.44% +7.89%
75th Percentile £625 £638 £619
90th Percentile £750 £738 £706
UK excluding London median daily rate £488 £475 £450
% change year-on-year +2.63% +5.56% +5.88%
Number of hourly rates quoted 383 225 301
10th Percentile £10.95 £13.21 £11.75
25th Percentile £13.18 £18.70 £16.50
Median hourly rate £21.00 £37.50 £28.00
Median % change year-on-year -44.00% +33.93% +33.02%
75th Percentile £45.00 £62.00 £49.25
90th Percentile £67.38 £77.50 £67.00
UK excluding London median hourly rate £18.00 £36.25 £21.05
% change year-on-year -50.34% +72.21% -

NCSC
Job Vacancy Trend

Job postings citing NCSC as a proportion of all IT jobs advertised.

Job vacancy trend for NCSC in the UK

NCSC
Contractor Daily Rate Trend

3-month moving average daily rate quoted in jobs citing NCSC.

Daily rate trend for NCSC in the UK

NCSC
Daily Rate Histogram

Daily rate distribution for jobs citing NCSC over the 6 months to 29 April 2024.

Daily rate histogram for NCSC in the UK

NCSC
Contractor Hourly Rate Trend

3-month moving average hourly rates quoted in jobs citing NCSC.

Hourly rate trend for NCSC in the UK

NCSC
Top 13 Contract Locations

The table below looks at the demand and provides a guide to the median contractor rates quoted in IT jobs citing NCSC within the UK over the 6 months to 29 April 2024. The 'Rank Change' column provides an indication of the change in demand within each location based on the same 6 month period last year.

Location Rank Change
on Same Period
Last Year
Matching
Contract
IT Job Ads
Median
Daily Rate
Past 6 Months
Median Daily Rate
% Change
on Same Period
Last Year
Live
Jobs
England +33 158 £600 -11.11% 36
UK excluding London +38 109 £600 -14.29% 31
Work from Home +128 105 £600 -7.69% 16
South East +46 59 £613 -12.50% 7
London +59 51 £638 -8.93% 8
South West -8 34 £600 -16.43% 11
North of England +5 7 £575 -11.54% 3
Scotland +32 5 £575 +15.00% 4
North West -2 5 £575 -11.54% 3
Midlands +26 3 £575 -26.98% 1
West Midlands +26 3 £575 -26.98% 1
Yorkshire - 2 £575 -
East of England +4 1 - - 4

NCSC
Co-occurring Skills and Capabilities by Category

The follow tables expand on the table above by listing co-occurrences grouped by category. The same employment type, locality and period is covered with up to 20 co-occurrences shown in each of the following categories:

Application Platforms
1 12 (6.52%) Confluence
2 2 (1.09%) Jupyter
2 2 (1.09%) Microsoft Exchange
2 2 (1.09%) nginx
2 2 (1.09%) SharePoint
2 2 (1.09%) Traefik
3 1 (0.54%) Apache
3 1 (0.54%) JBoss
3 1 (0.54%) Tomcat
3 1 (0.54%) WildFly
Applications
1 8 (4.35%) MS Visio
2 3 (1.63%) Microsoft Excel
2 3 (1.63%) Microsoft Office
2 3 (1.63%) Microsoft PowerPoint
Business Applications
1 3 (1.63%) Sparx Enterprise Architect
Cloud Services
1 52 (28.26%) AWS
2 46 (25.00%) Azure
3 42 (22.83%) IaaS
4 41 (22.28%) PaaS
4 41 (22.28%) SaaS
5 14 (7.61%) GitHub
6 13 (7.07%) Azure DevOps
7 11 (5.98%) GitHub Actions
8 7 (3.80%) Microsoft 365
9 6 (3.26%) Amazon CloudWatch
9 6 (3.26%) GCP
10 4 (2.17%) AWS CloudTrail
10 4 (2.17%) Azure Monitor
10 4 (2.17%) Power Platform
10 4 (2.17%) Virtual Private Cloud
11 3 (1.63%) Amazon EC2
11 3 (1.63%) AWS CloudFormation
11 3 (1.63%) Azure Sentinel
12 2 (1.09%) Amazon GuardDuty
12 2 (1.09%) OneDrive
Communications & Networking
1 32 (17.39%) 5G
2 31 (16.85%) Broadband
3 23 (12.50%) Network Security
4 13 (7.07%) Firewall
5 9 (4.89%) WAN
6 5 (2.72%) DNS
6 5 (2.72%) Intrusion Detection
7 4 (2.17%) LAN
7 4 (2.17%) SSL
7 4 (2.17%) VPN
7 4 (2.17%) Wi-Fi
8 3 (1.63%) 4G
8 3 (1.63%) BGP
8 3 (1.63%) DHCP
8 3 (1.63%) MPLS
8 3 (1.63%) OSPF
8 3 (1.63%) SD-WAN
8 3 (1.63%) SNMP
8 3 (1.63%) TCP/IP
8 3 (1.63%) VLAN
Database & Business Intelligence
1 2 (1.09%) Amazon Athena
1 2 (1.09%) Big Data
2 1 (0.54%) Amazon RDS
2 1 (0.54%) NoSQL
2 1 (0.54%) Oracle Database
2 1 (0.54%) Oracle Database 11g
2 1 (0.54%) Oracle Reports
2 1 (0.54%) RDBMS
2 1 (0.54%) Relational Database
Development Applications
1 13 (7.07%) JIRA
2 10 (5.43%) SonarQube
3 6 (3.26%) Git
4 4 (2.17%) Jenkins
5 2 (1.09%) CircleCI
5 2 (1.09%) GitLab
5 2 (1.09%) RStudio
6 1 (0.54%) JUnit
6 1 (0.54%) Maven
6 1 (0.54%) Subversion
6 1 (0.54%) Terragrunt
General
1 35 (19.02%) Public Sector
2 31 (16.85%) Law
2 31 (16.85%) Organisational Skills
3 24 (13.04%) Social Skills
4 9 (4.89%) Analytical Skills
5 6 (3.26%) Local Government
6 5 (2.72%) Inclusion and Diversity
7 3 (1.63%) Finance
7 3 (1.63%) Legal
7 3 (1.63%) Police
8 2 (1.09%) Aerospace
8 2 (1.09%) Influencing Skills
8 2 (1.09%) Military
9 1 (0.54%) Presentation Skills
9 1 (0.54%) Telecoms
Job Titles
1 49 (26.63%) Architect
2 32 (17.39%) Security Specialist
3 31 (16.85%) Penetration Tester
3 31 (16.85%) Security Penetration Tester
3 31 (16.85%) Security Tester
3 31 (16.85%) Tester
3 31 (16.85%) Testing Specialist
4 29 (15.76%) Security Architect
5 20 (10.87%) Analyst
6 17 (9.24%) Consultant
6 17 (9.24%) Security Consultant
7 14 (7.61%) SOC Analyst
8 11 (5.98%) Senior
9 10 (5.43%) Cybersecurity Consultant
10 8 (4.35%) Lead
10 8 (4.35%) Security Engineer
10 8 (4.35%) Solutions Architect
11 6 (3.26%) IT Architect
11 6 (3.26%) Security Analyst
11 6 (3.26%) Senior Solutions Architect
Libraries, Frameworks & Software Standards
1 31 (16.85%) Web Services
2 10 (5.43%) ARM Templates
2 10 (5.43%) Azure Blueprints
3 6 (3.26%) XML
4 5 (2.72%) JSON
5 3 (1.63%) Jinja
5 3 (1.63%) NETCONF
5 3 (1.63%) PyTorch
5 3 (1.63%) RESTful
5 3 (1.63%) scikit-learn
5 3 (1.63%) TensorFlow
5 3 (1.63%) YANG
6 2 (1.09%) cloud-init
6 2 (1.09%) JSON Schema
6 2 (1.09%) KML
6 2 (1.09%) Regular Expression
6 2 (1.09%) XML Schema
7 1 (0.54%) Hibernate
7 1 (0.54%) Java EE
7 1 (0.54%) Spring
Miscellaneous
1 36 (19.57%) Management Information System
2 31 (16.85%) Mobile App
3 17 (9.24%) Cyber Defence
4 15 (8.15%) CSOC
4 15 (8.15%) Security Operations Centre
4 15 (8.15%) Security Posture
5 11 (5.98%) Public Cloud
6 10 (5.43%) Onboarding
7 7 (3.80%) PKI
8 6 (3.26%) Operational Technology
9 5 (2.72%) SCADA
10 4 (2.17%) Cloud Native
11 3 (1.63%) Algorithms
11 3 (1.63%) Cyber Threat
11 3 (1.63%) NHS
11 3 (1.63%) Product Ownership
12 2 (1.09%) Clustering
12 2 (1.09%) Cyber Security Posture
12 2 (1.09%) Cyberattack
12 2 (1.09%) Greenfield Project
Operating Systems
1 10 (5.43%) Linux
2 4 (2.17%) Windows
3 3 (1.63%) CentOS
4 2 (1.09%) Apple iOS
4 2 (1.09%) Red Hat Enterprise Linux
4 2 (1.09%) Windows Server
5 1 (0.54%) AIX
5 1 (0.54%) Mac OS
5 1 (0.54%) Ubuntu
5 1 (0.54%) Unix
5 1 (0.54%) Windows Server 2012
Processes & Methodologies
1 131 (71.20%) Cybersecurity
2 49 (26.63%) Information Security
3 48 (26.09%) MITRE ATT&CK
4 44 (23.91%) Security Architecture
5 36 (19.57%) Penetration Testing
5 36 (19.57%) Stakeholder Management
6 35 (19.02%) OWASP
7 33 (17.93%) Security Testing
8 32 (17.39%) Application Security
9 29 (15.76%) DevOps
10 28 (15.22%) Security Management
11 27 (14.67%) Incident Response
12 26 (14.13%) Information Assurance
13 22 (11.96%) Information Security Management
14 21 (11.41%) Risk Assessment
14 21 (11.41%) Threat Intelligence
15 20 (10.87%) Risk Register
16 19 (10.33%) Architectural Patterns
16 19 (10.33%) Containerisation
17 18 (9.78%) Cloud Security
Programming Languages
1 6 (3.26%) Python
2 2 (1.09%) Bash
2 2 (1.09%) Go
2 2 (1.09%) Java
2 2 (1.09%) R
2 2 (1.09%) Ruby
3 1 (0.54%) Shell Script
Qualifications
1 144 (78.26%) Security Cleared
2 71 (38.59%) SC Cleared
3 50 (27.17%) DV Cleared
4 39 (21.20%) CREST Certified
5 32 (17.39%) CISSP
6 31 (16.85%) GIAC
6 31 (16.85%) GPEN
6 31 (16.85%) OSCP
6 31 (16.85%) SANS
7 26 (14.13%) CISM
8 15 (8.15%) BPSS Clearance
9 11 (5.98%) CISA
10 10 (5.43%) Cisco Certification
11 8 (4.35%) TOGAF Certification
12 7 (3.80%) Degree
13 6 (3.26%) (ISC)2 CCSP
14 5 (2.72%) CCSK
15 3 (1.63%) Azure Certification
15 3 (1.63%) CESG Certified Professional
15 3 (1.63%) Microsoft Certification
Quality Assurance & Compliance
1 50 (27.17%) GDPR
2 48 (26.09%) NIST
3 36 (19.57%) ISO/IEC 27001
4 33 (17.93%) PCI DSS
5 21 (11.41%) RMADS
6 10 (5.43%) Government Security Classifications
7 7 (3.80%) GRC
8 6 (3.26%) HMG Security Policy Framework
9 4 (2.17%) ISO 31000
9 4 (2.17%) JSP 440
10 3 (1.63%) COBIT
10 3 (1.63%) Cyber Essentials
10 3 (1.63%) GPG13
10 3 (1.63%) ISO 22301
10 3 (1.63%) ISO/IEC 20000
10 3 (1.63%) Sarbanes-Oxley
11 2 (1.09%) Disclosure Scotland
11 2 (1.09%) ISO/IEC 27002 (supersedes ISO/IEC 17799)
11 2 (1.09%) NIST 800
12 1 (0.54%) Cyber Essentials PLUS
System Software
1 17 (9.24%) Docker
2 4 (2.17%) VMware Infrastructure
3 2 (1.09%) Firmware
4 1 (0.54%) Active Directory
Systems Management
1 20 (10.87%) Terraform
2 18 (9.78%) Ansible
3 17 (9.24%) Computer Emergency Response Teams
3 17 (9.24%) Kubernetes
4 4 (2.17%) Docker Swarm
4 4 (2.17%) Trend Micro Deep Security
5 3 (1.63%) Puppet
6 2 (1.09%) Consul
6 2 (1.09%) FortiGate
6 2 (1.09%) Graphite
6 2 (1.09%) HAProxy
6 2 (1.09%) Istio
6 2 (1.09%) linkerd
6 2 (1.09%) Packer
6 2 (1.09%) Podman
6 2 (1.09%) Prometheus
6 2 (1.09%) ZABBIX
7 1 (0.54%) Check_MK
Vendors
1 31 (16.85%) Virgin Media
2 25 (13.59%) Microsoft
3 11 (5.98%) VMware
4 7 (3.80%) Splunk
5 5 (2.72%) Cisco
5 5 (2.72%) Oracle
5 5 (2.72%) Palo Alto
6 4 (2.17%) Atlassian
6 4 (2.17%) Juniper
7 3 (1.63%) Aruba
7 3 (1.63%) Databricks
7 3 (1.63%) Meraki
7 3 (1.63%) Sparx
8 2 (1.09%) Apple
8 2 (1.09%) PagerDuty
9 1 (0.54%) Cadence
9 1 (0.54%) CheckPoint
9 1 (0.54%) CrowdStrike
9 1 (0.54%) ForeScout
9 1 (0.54%) Fortinet