Incident Response Jobs in the UK excluding London

Incident Response
UK > UK excluding London

The following table provides summary statistics for permanent job vacancies advertised in the UK excluding London with a requirement for Incident Response skills. Included is a benchmarking guide to the salaries offered in vacancies that have cited Incident Response over the 6 months to 20 May 2024 with a comparison to the same period in the previous 2 years.

6 months to
20 May 2024
Same period 2023 Same period 2022
Rank 308 376 411
Rank change year-on-year +68 +35 -10
Permanent jobs citing Incident Response 595 459 566
As % of all permanent jobs advertised in the UK excluding London 0.83% 0.78% 0.78%
As % of the Processes & Methodologies category 0.99% 0.81% 0.83%
Number of salaries quoted 443 297 386
10th Percentile £38,500 £34,500 £36,000
25th Percentile £47,500 £43,546 £41,250
Median annual salary (50th Percentile) £55,000 £52,500 £52,500
Median % change year-on-year +4.76% - -
75th Percentile £70,000 £69,750 £67,500
90th Percentile £80,000 £77,500 £82,500
UK median annual salary £65,000 £65,000 £62,500
% change year-on-year - +4.00% +4.17%

All Process and Methodology Skills
UK excluding London

Incident Response is in the Processes and Methodologies category. The following table is for comparison with the above and provides summary statistics for all permanent job vacancies advertised in the UK excluding London with a requirement for process or methodology skills.

Permanent vacancies with a requirement for process or methodology skills 59,818 56,534 68,369
As % of all permanent jobs advertised in the UK excluding London 83.50% 95.59% 94.17%
Number of salaries quoted 41,261 29,197 41,375
10th Percentile £27,250 £30,500 £30,000
25th Percentile £36,250 £40,000 £38,750
Median annual salary (50th Percentile) £50,000 £55,000 £52,500
Median % change year-on-year -9.09% +4.76% +10.53%
75th Percentile £65,000 £70,000 £67,500
90th Percentile £77,500 £82,500 £80,000
UK median annual salary £55,000 £61,180 £60,000
% change year-on-year -10.10% +1.97% +9.09%

Incident Response
Job Vacancy Trend in the UK excluding London

Job postings citing Incident Response as a proportion of all IT jobs advertised in the UK excluding London.

Job vacancy trend for Incident Response in the UK excluding London

Incident Response
Salary Trend in the UK excluding London

3-month moving average salary quoted in jobs citing Incident Response in the UK excluding London.

Salary trend for Incident Response in the UK excluding London

Incident Response
Salary Histogram in the UK excluding London

Salary distribution for jobs citing Incident Response in the UK excluding London over the 6 months to 20 May 2024.

Salary histogram for Incident Response in the UK excluding London

Incident Response
Job Locations in the UK excluding London

The table below looks at the demand and provides a guide to the median salaries quoted in IT jobs citing Incident Response within the UK excluding London region over the 6 months to 20 May 2024. The 'Rank Change' column provides an indication of the change in demand within each location based on the same 6 month period last year.

Location Rank Change
on Same Period
Last Year
Matching
Permanent
IT Job Ads
Median Salary
Past 6 Months
Median Salary
% Change
on Same Period
Last Year
Live
Jobs
North of England +140 200 £52,084 -13.19% 51
North West +71 132 £52,084 -13.19% 22
Midlands +1 121 £60,000 +20.00% 33
South East -17 114 £60,000 +9.09% 53
West Midlands +31 89 £60,000 +9.09% 25
South West +31 78 £50,000 - 17
Yorkshire +112 59 £60,000 - 25
Scotland -58 45 £63,750 +27.50% 13
East Midlands -29 31 £65,000 +36.84% 8
Wales -2 14 £62,500 +13.64% 3
East of England +1 12 £50,000 +11.11% 15
North East +5 9 £70,000 +3.70% 4
Isle of Man -14 8 £46,500 +3.33% 2
Northern Ireland +22 2 - - 1
Channel Islands - 1 £100,000 -
Incident Response
UK

Incident Response
Co-occurring Skills and Capabilities in the UK excluding London by Category

The follow tables expand on the table above by listing co-occurrences grouped by category. The same employment type, locality and period is covered with up to 20 co-occurrences shown in each of the following categories:

Application Platforms
1 12 (2.02%) Microsoft Exchange
2 9 (1.51%) IIS
3 6 (1.01%) Apache
4 5 (0.84%) SharePoint
5 1 (0.17%) Confluence
Applications
1 31 (5.21%) Microsoft Office
2 25 (4.20%) Microsoft Excel
2 25 (4.20%) Microsoft PowerPoint
Business Applications
1 1 (0.17%) SAP S/4HANA
Cloud Services
1 142 (23.87%) Azure
2 87 (14.62%) AWS
3 60 (10.08%) Microsoft 365
4 38 (6.39%) SaaS
5 28 (4.71%) Azure Sentinel
6 17 (2.86%) Amazon CloudWatch
7 15 (2.52%) Amazon GuardDuty
7 15 (2.52%) AWS CloudTrail
8 12 (2.02%) Amazon S3
8 12 (2.02%) AWS CloudFormation
8 12 (2.02%) Cloud Computing
9 11 (1.85%) Amazon EC2
9 11 (1.85%) Serverless
10 10 (1.68%) AWS Lambda
10 10 (1.68%) IaaS
10 10 (1.68%) PaaS
10 10 (1.68%) Virtual Private Cloud
11 9 (1.51%) Amazon ECS
11 9 (1.51%) Entra ID
12 8 (1.34%) Cloudflare
Communications & Networking
1 167 (28.07%) Firewall
2 71 (11.93%) Intrusion Detection
3 45 (7.56%) Network Security
4 28 (4.71%) TCP/IP
5 27 (4.54%) Internet
6 23 (3.87%) VPN
7 16 (2.69%) DNS
8 15 (2.52%) WAN
9 13 (2.18%) LAN
10 11 (1.85%) SAN
11 6 (1.01%) DHCP
11 6 (1.01%) HTTP
11 6 (1.01%) SMTP
12 5 (0.84%) SSL
12 5 (0.84%) VLAN
12 5 (0.84%) Wireshark
13 4 (0.67%) NetScaler
14 3 (0.50%) DMZ
14 3 (0.50%) tcpdump
14 3 (0.50%) Wireless
Database & Business Intelligence
1 17 (2.86%) MySQL
2 14 (2.35%) RDBMS
2 14 (2.35%) Relational Database
3 11 (1.85%) Amazon RDS
4 4 (0.67%) SQL Server
5 3 (0.50%) Power BI
6 2 (0.34%) Metabase
6 2 (0.34%) Oracle Database
6 2 (0.34%) PostgreSQL
6 2 (0.34%) Redis
7 1 (0.17%) Hadoop
7 1 (0.17%) MariaDB
7 1 (0.17%) MongoDB
Development Applications
1 5 (0.84%) Burp Suite
1 5 (0.84%) Metasploit
2 3 (0.50%) sqlmap
3 1 (0.17%) Git
3 1 (0.17%) GitLab
3 1 (0.17%) JIRA
3 1 (0.17%) Snyk
General
1 172 (28.91%) Social Skills
2 95 (15.97%) Analytical Skills
3 72 (12.10%) Finance
4 42 (7.06%) Military
5 40 (6.72%) Manufacturing
6 32 (5.38%) Law
7 31 (5.21%) Public Sector
8 26 (4.37%) Legal
9 14 (2.35%) Inclusion and Diversity
9 14 (2.35%) Retail
10 13 (2.18%) Spanish Language
11 12 (2.02%) Games
11 12 (2.02%) Marketing
12 9 (1.51%) Documentation Skills
13 8 (1.34%) French Language
13 8 (1.34%) Influencing Skills
14 6 (1.01%) Presentation Skills
15 5 (0.84%) Automotive
16 4 (0.67%) Banking
17 3 (0.50%) Local Government
Job Titles
1 152 (25.55%) Analyst
2 74 (12.44%) Senior
3 72 (12.10%) Security Analyst
4 60 (10.08%) Lead
5 46 (7.73%) Cybersecurity Analyst
6 43 (7.23%) Consultant
6 43 (7.23%) Senior Analyst
7 40 (6.72%) Security Consultant
8 39 (6.55%) Security Engineer
9 36 (6.05%) SOC Analyst
10 33 (5.55%) Architect
11 32 (5.38%) Security Architect
12 29 (4.87%) Cybersecurity Consultant
12 29 (4.87%) Security Manager
13 23 (3.87%) Incident Manager
13 23 (3.87%) Service Manager
13 23 (3.87%) Vulnerability Manager
14 21 (3.53%) Delivery Manager
14 21 (3.53%) Infrastructure Engineer
14 21 (3.53%) Service Delivery Manager
Libraries, Frameworks & Software Standards
1 8 (1.34%) Laravel
2 6 (1.01%) .NET
2 6 (1.01%) .NET Framework
2 6 (1.01%) XML
3 5 (0.84%) Web Services
4 4 (0.67%) EDI
5 3 (0.50%) Node.js
6 2 (0.34%) CSS
6 2 (0.34%) D3.js
6 2 (0.34%) HTML
6 2 (0.34%) React
6 2 (0.34%) Vue
7 1 (0.17%) ARM Templates
7 1 (0.17%) Elastic Stack
7 1 (0.17%) PHP-FPM
7 1 (0.17%) REST
7 1 (0.17%) SOAP
7 1 (0.17%) YAML
Miscellaneous
1 109 (18.32%) Cyber Threat
2 105 (17.65%) Management Information System
3 68 (11.43%) Security Operations Centre
4 51 (8.57%) Security Posture
5 48 (8.07%) Cyberattack
5 48 (8.07%) Operational Technology
6 33 (5.55%) Industrial Internet of Things
7 26 (4.37%) Driving Licence
8 21 (3.53%) Data Centre
9 19 (3.19%) Cyber Kill Chain
10 13 (2.18%) Client/Server
11 11 (1.85%) Cyber Defence
11 11 (1.85%) Data Protection Act
12 10 (1.68%) Analytical Mindset
12 10 (1.68%) Public Cloud
13 8 (1.34%) SCADA
13 8 (1.34%) Social Media
14 7 (1.18%) Onboarding
14 7 (1.18%) PropTech
14 7 (1.18%) Self-Motivation
Operating Systems
1 114 (19.16%) Windows
2 78 (13.11%) Linux
3 35 (5.88%) Unix
4 31 (5.21%) Windows Server
5 17 (2.86%) Mac OS X
6 10 (1.68%) Kali Linux
7 4 (0.67%) Ubuntu
7 4 (0.67%) Windows 10
8 3 (0.50%) Windows Server 2012
8 3 (0.50%) Windows Server 2016
9 2 (0.34%) Windows 7
10 1 (0.17%) Apple iOS
10 1 (0.17%) Data ONTAP
10 1 (0.17%) Mac OS
Processes & Methodologies
1 427 (71.76%) Cybersecurity
2 173 (29.08%) Security Operations
3 160 (26.89%) Information Security
4 150 (25.21%) SIEM
5 136 (22.86%) Problem-Solving
6 132 (22.18%) Incident Management
7 114 (19.16%) Risk Management
8 108 (18.15%) Vulnerability Management
9 97 (16.30%) Threat Intelligence
10 96 (16.13%) Cyber Threat Intelligence
11 72 (12.10%) Penetration Testing
12 68 (11.43%) Computer Science
13 63 (10.59%) Change Management
14 62 (10.42%) Service Delivery
15 57 (9.58%) ITIL
16 55 (9.24%) Mentoring
17 49 (8.24%) Vulnerability Assessment
18 47 (7.90%) Root Cause Analysis
19 46 (7.73%) DevOps
20 45 (7.56%) SOAR
Programming Languages
1 48 (8.07%) Python
2 37 (6.22%) PowerShell
3 17 (2.86%) Bash
4 9 (1.51%) PHP
4 9 (1.51%) SQL
5 8 (1.34%) Rust
6 6 (1.01%) JavaScript
7 4 (0.67%) Java
8 3 (0.50%) Kusto Query Language
9 2 (0.34%) C#
9 2 (0.34%) Lisp
10 1 (0.17%) Bicep
10 1 (0.17%) C++
10 1 (0.17%) Go
10 1 (0.17%) Ruby
10 1 (0.17%) Shell Script
Qualifications
1 186 (31.26%) Degree
2 138 (23.19%) CISSP
3 89 (14.96%) CISM
4 81 (13.61%) Security Cleared
5 37 (6.22%) Computer Science Degree
6 36 (6.05%) SC Cleared
7 34 (5.71%) CompTIA Security+
8 31 (5.21%) GIAC
9 27 (4.54%) Cisco Certification
10 26 (4.37%) CEH
11 24 (4.03%) OSCP
12 23 (3.87%) CREST Certified
13 22 (3.70%) AWS Certification
14 20 (3.36%) GCIH
15 18 (3.03%) CISA
16 17 (2.86%) GCIA
16 17 (2.86%) GREM
17 16 (2.69%) Master's Degree
18 14 (2.35%) CCNA
19 12 (2.02%) CCSP
Quality Assurance & Compliance
1 154 (25.88%) ISO/IEC 27001
2 89 (14.96%) NIST
3 64 (10.76%) Cyber Essentials
4 46 (7.73%) GDPR
5 36 (6.05%) PCI DSS
6 28 (4.71%) ISO/IEC 27002 (supersedes ISO/IEC 17799)
7 26 (4.37%) ISO 9001
7 26 (4.37%) ISO/IEC 17025
8 20 (3.36%) JSP 440
9 13 (2.18%) NCSC
10 9 (1.51%) Cyber Essentials PLUS
10 9 (1.51%) GRC
11 8 (1.34%) Accessibility
12 7 (1.18%) Sarbanes-Oxley
12 7 (1.18%) SLA
13 6 (1.01%) SOC 2
14 5 (0.84%) COBIT
15 3 (0.50%) HIPAA
15 3 (0.50%) QA
16 2 (0.34%) NEBOSH
System Software
1 31 (5.21%) Active Directory
2 19 (3.19%) VMware Infrastructure
3 13 (2.18%) Hyper-V
4 4 (0.67%) Docker
4 4 (0.67%) VMware NSX
5 3 (0.50%) Terminal Services
5 3 (0.50%) Virtual Machines
5 3 (0.50%) VMware ESXi
6 2 (0.34%) Virtual Desktop
6 2 (0.34%) Virtual Servers
7 1 (0.17%) XenApp
Systems Management
1 24 (4.03%) EnCase
2 15 (2.52%) Terraform
3 13 (2.18%) Microsoft Intune
4 9 (1.51%) CSIRT
5 6 (1.01%) Ansible
5 6 (1.01%) Kubernetes
6 5 (0.84%) Suricata
7 4 (0.67%) Cacti
8 3 (0.50%) Computer Emergency Response Teams
8 3 (0.50%) Grafana
8 3 (0.50%) Nessus
8 3 (0.50%) Prometheus
8 3 (0.50%) SELinux
9 2 (0.34%) Host Intrusion Detection System
9 2 (0.34%) Nmap
9 2 (0.34%) QRadar
10 1 (0.17%) Network Intrusion Detection System
10 1 (0.17%) PaperCut
10 1 (0.17%) SCCM
10 1 (0.17%) systemd
Vendors
1 148 (24.87%) Microsoft
2 42 (7.06%) VMware
3 23 (3.87%) Cisco
3 23 (3.87%) Dell
4 16 (2.69%) Oracle
5 15 (2.52%) Splunk
6 10 (1.68%) ServiceNow
7 9 (1.51%) Datto
7 9 (1.51%) Juniper
8 8 (1.34%) BT
8 8 (1.34%) Citrix
8 8 (1.34%) Veeam
9 6 (1.01%) AlienVault
9 6 (1.01%) LogRhythm
9 6 (1.01%) PagerDuty
9 6 (1.01%) Palo Alto
10 5 (0.84%) CrowdStrike
10 5 (0.84%) Darktrace
11 4 (0.67%) New Relic
11 4 (0.67%) SolarWinds