Security Information and Event Management (SIEM)
UK

The following table provides summary statistics for contract job vacancies with a requirement for SIEM skills. Included is a benchmarking guide to the contractor rates offered in vacancies that have cited SIEM over the 6 months to 15 May 2024 with a comparison to the same period in the previous 2 years.

6 months to
15 May 2024
Same period 2023 Same period 2022
Rank 162 168 328
Rank change year-on-year +6 +160 -32
Contract jobs citing SIEM 638 874 730
As % of all contract jobs advertised in the UK 1.50% 1.53% 0.83%
As % of the Processes & Methodologies category 1.74% 1.70% 0.92%
Number of daily rates quoted 461 612 503
10th Percentile £425 £438 £401
25th Percentile £513 £500 £493
Median daily rate (50th Percentile) £600 £600 £580
Median % change year-on-year - +3.45% +10.48%
75th Percentile £700 £696 £688
90th Percentile £825 £775 £775
UK excluding London median daily rate £582 £560 £575
% change year-on-year +3.93% -2.61% +9.52%
Number of hourly rates quoted 6 7 5
10th Percentile - £62.75 -
25th Percentile - £67.63 £56.25
Median hourly rate £40.00 £75.00 £65.80
Median % change year-on-year -46.67% +13.98% +19.64%
75th Percentile £63.44 £77.63 £68.75
90th Percentile £74.63 £88.15 £74.00
UK excluding London median hourly rate £40.00 £75.00 £65.80
% change year-on-year -46.67% +13.98% +31.60%

All Process and Methodology Skills
UK

SIEM is in the Processes and Methodologies category. The following table is for comparison with the above and provides summary statistics for all contract job vacancies with a requirement for process or methodology skills.

Contract vacancies with a requirement for process or methodology skills 36,687 51,295 79,236
As % of all contract IT jobs advertised in the UK 86.22% 89.83% 90.60%
Number of daily rates quoted 23,611 35,552 55,630
10th Percentile £300 £325 £343
25th Percentile £413 £438 £430
Median daily rate (50th Percentile) £525 £550 £530
Median % change year-on-year -4.55% +3.77% +8.16%
75th Percentile £638 £650 £638
90th Percentile £750 £750 £738
UK excluding London median daily rate £500 £500 £476
% change year-on-year - +5.04% +8.51%
Number of hourly rates quoted 2,428 1,693 1,906
10th Percentile £12.75 £10.77 £12.50
25th Percentile £16.00 £16.13 £15.63
Median hourly rate £36.05 £36.00 £25.68
Median % change year-on-year +0.13% +40.19% +4.82%
75th Percentile £60.00 £65.00 £49.52
90th Percentile £72.50 £75.00 £65.00
UK excluding London median hourly rate £37.50 £35.00 £20.00
% change year-on-year +7.14% +75.00% -6.98%

SIEM
Job Vacancy Trend

Job postings citing SIEM as a proportion of all IT jobs advertised.

Job vacancy trend for SIEM in the UK

SIEM
Contractor Daily Rate Trend

3-month moving average daily rate quoted in jobs citing SIEM.

Daily rate trend for SIEM in the UK

SIEM
Daily Rate Histogram

Daily rate distribution for jobs citing SIEM over the 6 months to 15 May 2024.

Daily rate histogram for SIEM in the UK

SIEM
Contractor Hourly Rate Trend

3-month moving average hourly rates quoted in jobs citing SIEM.

Hourly rate trend for SIEM in the UK

SIEM
Hourly Rate Histogram

Hourly rate distribution of jobs citing SIEM over the 6 months to 15 May 2024.

Hourly rate histogram for SIEM in the UK

SIEM
Top 15 Contract Locations

The table below looks at the demand and provides a guide to the median contractor rates quoted in IT jobs citing SIEM within the UK over the 6 months to 15 May 2024. The 'Rank Change' column provides an indication of the change in demand within each location based on the same 6 month period last year.

Location Rank Change
on Same Period
Last Year
Matching
Contract
IT Job Ads
Median
Daily Rate
Past 6 Months
Median Daily Rate
% Change
on Same Period
Last Year
Live
Jobs
England +17 589 £600 - 180
UK excluding London +32 389 £582 +3.93% 122
London -3 191 £600 -6.83% 74
South West +64 162 £570 +6.05% 16
Work from Home -44 136 £550 -12.00% 99
South East +29 119 £615 +4.68% 30
Midlands +44 81 £600 - 13
West Midlands +42 79 £600 - 10
North of England -66 31 £700 +24.38% 37
Yorkshire -15 21 £800 +39.13% 18
Scotland +48 16 £515 -10.43% 14
North West -43 10 £625 +13.64% 17
East of England +13 5 £600 +41.18% 6
Wales +13 2 £298 -38.18% 4
East Midlands +1 2 £596 -1.65% 3

SIEM
Co-occurring Skills and Capabilities by Category

The follow tables expand on the table above by listing co-occurrences grouped by category. The same employment type, locality and period is covered with up to 20 co-occurrences shown in each of the following categories:

Application Platforms
1 11 (1.72%) Confluence
2 5 (0.78%) SharePoint
3 4 (0.63%) Microsoft Exchange
4 1 (0.16%) IBM Notes
Applications
1 3 (0.47%) Microsoft Office
1 3 (0.47%) Microsoft PowerPoint
2 2 (0.31%) Microsoft Project
2 2 (0.31%) Spreadsheet
3 1 (0.16%) Microsoft Excel
Cloud Services
1 110 (17.24%) Azure
2 45 (7.05%) AWS
3 37 (5.80%) Azure Sentinel
4 19 (2.98%) Microsoft 365
5 17 (2.66%) SaaS
6 12 (1.88%) IaaS
7 11 (1.72%) Entra ID
8 9 (1.41%) Azure DevOps
8 9 (1.41%) GCP
9 8 (1.25%) Amazon CloudWatch
9 8 (1.25%) Azure Monitor
10 7 (1.10%) AWS CloudTrail
11 4 (0.63%) Amazon GuardDuty
11 4 (0.63%) PaaS
12 3 (0.47%) AWS KMS
12 3 (0.47%) Azure ExpressRoute
12 3 (0.47%) Mimecast
12 3 (0.47%) Serverless
13 2 (0.31%) AWS Lambda
13 2 (0.31%) OneDrive
Communications & Networking
1 120 (18.81%) Firewall
2 71 (11.13%) Network Security
3 34 (5.33%) TCP/IP
4 29 (4.55%) Intrusion Detection
5 21 (3.29%) DNS
5 21 (3.29%) SD-WAN
6 15 (2.35%) WAN
7 14 (2.19%) DHCP
8 12 (1.88%) Cisco ISE
9 11 (1.72%) Wireshark
10 10 (1.57%) HTTP
11 9 (1.41%) VPN
12 5 (0.78%) Cisco ASA
12 5 (0.78%) FTP
12 5 (0.78%) LAN
12 5 (0.78%) SMTP
12 5 (0.78%) tcpdump
13 4 (0.63%) HTTPS
13 4 (0.63%) POP3
13 4 (0.63%) SNMP
Database & Business Intelligence
1 53 (8.31%) Elasticsearch
2 15 (2.35%) Big Data
3 5 (0.78%) SQL Server
4 4 (0.63%) Apache Hive
4 4 (0.63%) Hadoop
4 4 (0.63%) NonStop SQL
4 4 (0.63%) Tableau
5 2 (0.31%) Amazon RDS
5 2 (0.31%) Amazon Redshift
5 2 (0.31%) Power BI
6 1 (0.16%) Data Lake
6 1 (0.16%) MySQL
Development Applications
1 20 (3.13%) JIRA
2 4 (0.63%) IDA Disassembler
3 3 (0.47%) Jenkins
4 2 (0.31%) Artifactory
4 2 (0.31%) Git
General
1 143 (22.41%) Social Skills
2 97 (15.20%) Finance
3 93 (14.58%) Analytical Skills
4 48 (7.52%) Public Sector
5 41 (6.43%) Banking
6 20 (3.13%) Telecoms
7 19 (2.98%) Manufacturing
8 17 (2.66%) Legal
9 12 (1.88%) Military
10 4 (0.63%) Presentation Skills
11 3 (0.47%) Documentation Skills
11 3 (0.47%) Inclusion and Diversity
12 2 (0.31%) Financial Institution
12 2 (0.31%) Fire and Rescue
12 2 (0.31%) Law
12 2 (0.31%) Police
12 2 (0.31%) Retail
13 1 (0.16%) Aerospace
13 1 (0.16%) Electronics
13 1 (0.16%) Publishing
Job Titles
1 193 (30.25%) Analyst
2 91 (14.26%) SOC Analyst
3 79 (12.38%) Security Engineer
4 74 (11.60%) Architect
5 59 (9.25%) SIEM Engineer
6 48 (7.52%) Security Analyst
6 48 (7.52%) Senior
7 42 (6.58%) Lead
8 39 (6.11%) Consultant
9 38 (5.96%) SOC Engineer
10 34 (5.33%) Network Architect
11 31 (4.86%) Threat Intelligence Analyst
12 30 (4.70%) Cybersecurity Analyst
13 28 (4.39%) Security Architect
14 26 (4.08%) Security Consultant
15 22 (3.45%) ArcSight Engineer
16 20 (3.13%) Cyber Threat Analyst
16 20 (3.13%) Cyber Threat Intelligence Analyst
17 19 (2.98%) Cyber Defence Analyst
17 19 (2.98%) Cybersecurity Engineer
Libraries, Frameworks & Software Standards
1 31 (4.86%) Elastic Stack
2 15 (2.35%) Apache NiFi
3 8 (1.25%) SAML
4 6 (0.94%) JSON
4 6 (0.94%) OAuth
5 5 (0.78%) Regular Expression
5 5 (0.78%) XML
6 4 (0.63%) Ajax
6 4 (0.63%) AngularJS
6 4 (0.63%) CSS
6 4 (0.63%) HTML
6 4 (0.63%) Kafka
6 4 (0.63%) OLE
6 4 (0.63%) OpenID
7 3 (0.47%) SOAP
7 3 (0.47%) Web Services
8 2 (0.31%) AWS SAM
8 2 (0.31%) REST
8 2 (0.31%) RESTful
8 2 (0.31%) YAML
Miscellaneous
1 121 (18.97%) Cyber Threat
2 103 (16.14%) Cyber Defence
2 103 (16.14%) Management Information System
3 87 (13.64%) Cyber Kill Chain
4 86 (13.48%) Security Operations Centre
5 35 (5.49%) Security Posture
6 27 (4.23%) CSOC
7 25 (3.92%) PKI
8 21 (3.29%) Distributed Applications
9 16 (2.51%) Cloud Native
10 12 (1.88%) Linux Command Line
11 10 (1.57%) Onboarding
11 10 (1.57%) Operational Technology
11 10 (1.57%) Public Cloud
12 9 (1.41%) Analytical Mindset
12 9 (1.41%) Hybrid Cloud
13 8 (1.25%) Cyberattack
14 7 (1.10%) Distributed Denial-of-Service
14 7 (1.10%) Private Cloud
15 6 (0.94%) Data Centre
Operating Systems
1 88 (13.79%) Linux
2 87 (13.64%) Windows
3 29 (4.55%) Unix
4 21 (3.29%) Red Hat Enterprise Linux
5 18 (2.82%) Windows Server
6 13 (2.04%) Android
6 13 (2.04%) Apple iOS
7 12 (1.88%) Mac OS X
8 11 (1.72%) Ubuntu
9 3 (0.47%) zOS
10 2 (0.31%) Windows 10
11 1 (0.16%) Mac OS
11 1 (0.16%) Oracle Linux
Processes & Methodologies
1 340 (53.29%) Cybersecurity
2 196 (30.72%) Security Operations
3 194 (30.41%) Incident Response
4 141 (22.10%) Information Security
5 130 (20.38%) Use Case
6 118 (18.50%) MITRE ATT&CK
7 110 (17.24%) Vulnerability Management
8 109 (17.08%) Threat Intelligence
9 106 (16.61%) Incident Management
10 105 (16.46%) SOAR
11 95 (14.89%) Cyber Threat Intelligence
12 73 (11.44%) Security Architecture
13 72 (11.29%) Mentoring
14 68 (10.66%) Cloud Security
15 67 (10.50%) Protective Monitoring
16 64 (10.03%) Analytics
17 57 (8.93%) Root Cause Analysis
18 54 (8.46%) Problem-Solving
19 53 (8.31%) Data Loss Prevention
20 50 (7.84%) Threat Detection
Programming Languages
1 43 (6.74%) PowerShell
2 31 (4.86%) Python
3 19 (2.98%) Kusto Query Language
4 12 (1.88%) C#
5 9 (1.41%) Bash
6 8 (1.25%) R
7 7 (1.10%) Java
7 7 (1.10%) JavaScript
8 4 (0.63%) SQL
9 3 (0.47%) VBScript
10 2 (0.31%) Go
11 1 (0.16%) Perl
11 1 (0.16%) Ruby
11 1 (0.16%) Shell Script
Qualifications
1 335 (52.51%) Security Cleared
2 242 (37.93%) DV Cleared
3 79 (12.38%) Degree
3 79 (12.38%) SC Cleared
4 76 (11.91%) CISSP
5 31 (4.86%) Computer Science Degree
5 31 (4.86%) SANS
6 30 (4.70%) CISM
7 24 (3.76%) CEH
8 20 (3.13%) Cisco Certification
9 18 (2.82%) CompTIA Security+
10 13 (2.04%) GIAC
11 10 (1.57%) CCNA
12 9 (1.41%) CCNP
12 9 (1.41%) Microsoft Certification
13 7 (1.10%) Azure Certification
14 6 (0.94%) CCSP
14 6 (0.94%) PMP
15 5 (0.78%) GCIA
15 5 (0.78%) GCIH
Quality Assurance & Compliance
1 140 (21.94%) NIST
2 74 (11.60%) ISO/IEC 27001
3 60 (9.40%) NIST 800
4 23 (3.61%) GDPR
5 19 (2.98%) PCI DSS
6 17 (2.66%) ISO/IEC 27002 (supersedes ISO/IEC 17799)
7 15 (2.35%) Actionable Recommendations
8 14 (2.19%) HIPAA
9 10 (1.57%) California Consumer Privacy Act
10 9 (1.41%) HMG Security Policy Framework
11 7 (1.10%) GRC
11 7 (1.10%) NCSC
12 4 (0.63%) COBIT
12 4 (0.63%) Cyber Essentials
12 4 (0.63%) QA
13 3 (0.47%) Cyber Essentials PLUS
13 3 (0.47%) Disclosure Scotland
13 3 (0.47%) ISO 9001
14 2 (0.31%) ISA99
14 2 (0.31%) ISO 22301
System Software
1 37 (5.80%) Active Directory
2 12 (1.88%) VMware Infrastructure
3 9 (1.41%) iptables
4 7 (1.10%) Virtual Machines
4 7 (1.10%) VMware ESXi
4 7 (1.10%) VMware NSX
5 6 (0.94%) Docker
6 5 (0.78%) Snort
7 2 (0.31%) XenApp
Systems Management
1 30 (4.70%) Kibana
2 26 (4.08%) logstash
3 17 (2.66%) QRadar
4 15 (2.35%) Terraform
5 11 (1.72%) SCCM
6 10 (1.57%) Nessus
7 7 (1.10%) Ansible
7 7 (1.10%) ArcSight ESM
7 7 (1.10%) Kubernetes
7 7 (1.10%) Microsoft Intune
7 7 (1.10%) vCenter Server
8 6 (0.94%) Single Sign-On
9 4 (0.63%) Computer Emergency Response Teams
9 4 (0.63%) Nagios
9 4 (0.63%) OpenView
9 4 (0.63%) Trend Micro Deep Security
10 3 (0.47%) CASB
10 3 (0.47%) FortiGate
10 3 (0.47%) Grafana
10 3 (0.47%) Nmap
Vendors
1 173 (27.12%) Microsoft
2 64 (10.03%) Splunk
3 38 (5.96%) ArcSight
3 38 (5.96%) LogRhythm
4 31 (4.86%) Cisco
5 25 (3.92%) Qualys
6 18 (2.82%) Varonis
7 17 (2.66%) Forcepoint
8 14 (2.19%) Red Hat
9 13 (2.04%) VMware
10 12 (1.88%) Rapid7
11 11 (1.72%) CrowdStrike
12 10 (1.57%) Palo Alto
13 9 (1.41%) Fortinet
13 9 (1.41%) Google
14 8 (1.25%) AlienVault
14 8 (1.25%) SolarWinds
15 7 (1.10%) Sophos
15 7 (1.10%) Veeam
15 7 (1.10%) Zscaler