Incident Response Contracts in England

Incident Response
UK > England

The table below provides summary statistics for contract job vacancies advertised in England requiring Incident Response skills. It includes a benchmarking guide to the contractor rates offered in vacancies that cited Incident Response over the 6 months leading up to 12 June 2024, comparing them to the same period in the previous two years.

6 months to
12 Jun 2024
Same period 2023 Same period 2022
Rank 208 316 486
Rank change year-on-year +108 +170 -42
Contract jobs citing Incident Response 431 360 326
As % of all contract jobs advertised in England 1.15% 0.77% 0.46%
As % of the Processes & Methodologies category 1.35% 0.85% 0.51%
Number of daily rates quoted 315 280 252
10th Percentile £419 £400 £400
25th Percentile £450 £500 £475
Median daily rate (50th Percentile) £550 £600 £551
Median % change year-on-year -8.33% +8.84% +6.01%
75th Percentile £675 £745 £665
90th Percentile £763 £826 £749
UK median daily rate £550 £593 £550
% change year-on-year -7.29% +7.86% +5.77%
Number of hourly rates quoted 7 0 4
10th Percentile £36.05 - £15.86
25th Percentile - - £16.21
Median hourly rate £40.00 - £16.82
75th Percentile - - £17.33
90th Percentile £47.50 - £17.52
UK median hourly rate £40.00 - £17.64
% change year-on-year - - -35.85%

All Process and Methodology Skills
England

Incident Response falls under the Processes and Methodologies category. For comparison with the information above, the following table provides summary statistics for all contract job vacancies requiring process or methodology skills in England.

Contract vacancies with a requirement for process or methodology skills 32,030 42,283 63,775
As % of all contract IT jobs advertised in England 85.40% 89.90% 90.87%
Number of daily rates quoted 20,779 29,697 45,496
10th Percentile £300 £325 £338
25th Percentile £413 £440 £435
Median daily rate (50th Percentile) £525 £550 £550
Median % change year-on-year -4.55% - +10.00%
75th Percentile £650 £675 £650
90th Percentile £750 £775 £750
UK median daily rate £525 £550 £538
% change year-on-year -4.55% +2.33% +7.50%
Number of hourly rates quoted 2,363 1,526 1,693
10th Percentile £12.79 £10.69 £12.50
25th Percentile £16.01 £15.75 £15.63
Median hourly rate £37.50 £36.00 £25.68
Median % change year-on-year +4.17% +40.19% +14.13%
75th Percentile £61.30 £64.59 £50.00
90th Percentile £72.50 £75.71 £65.00
UK median hourly rate £37.00 £35.65 £26.00
% change year-on-year +3.79% +37.12% +13.04%

Incident Response
Job Vacancy Trend in England

Job postings citing Incident Response as a proportion of all IT jobs advertised in England.

Job vacancy trend for Incident Response in England

Incident Response
Contractor Daily Rate Trend in England

3-month moving average daily rate quoted in jobs citing Incident Response in England.

Daily rate trend for Incident Response in England

Incident Response
Daily Rate Histogram in England

Daily rate distribution for jobs citing Incident Response in England over the 6 months to 12 June 2024.

Daily rate histogram for Incident Response in England

Incident Response
Contractor Hourly Rate Trend in England

3-month moving average hourly rates quoted in jobs citing Incident Response in England.

Hourly rate trend for Incident Response in England

Incident Response
Hourly Rate Histogram in England

Hourly rate distribution of jobs citing Incident Response in England over the 6 months to 12 June 2024.

Hourly rate histogram for Incident Response in England

Incident Response
Contract Job Locations in England

The table below looks at the demand and provides a guide to the median contractor rates quoted in IT jobs citing Incident Response within the England region over the 6 months to 12 June 2024. The 'Rank Change' column provides an indication of the change in demand within each location based on the same 6 month period last year.

Location Rank Change
on Same Period
Last Year
Matching
Contract
IT Job Ads
Median
Daily Rate
Past 6 Months
Median Daily Rate
% Change
on Same Period
Last Year
Live
Jobs
South West +95 113 £614 +2.33% 18
London +1 111 £525 -17.65% 74
South East +92 97 £500 -18.03% 32
North of England +8 55 £525 -11.47% 36
Midlands +31 47 £636 -2.12% 30
West Midlands +36 43 £639 -1.73% 21
North West -2 28 £493 -16.90% 22
Yorkshire +23 27 £604 +9.73% 13
East of England +6 26 £600 +51.90% 13
East Midlands +5 4 £534 -13.11% 9
Incident Response
UK

Incident Response
Co-occurring Skills and Capabilities in England by Category

The follow tables expand on the table above by listing co-occurrences grouped by category. The same employment type, locality and period is covered with up to 20 co-occurrences shown in each of the following categories:

Application Platforms
1 17 (3.94%) CMS
2 12 (2.78%) NetWeaver
3 6 (1.39%) Microsoft Exchange
4 4 (0.93%) SharePoint
5 2 (0.46%) Confluence
5 2 (0.46%) nginx
6 1 (0.23%) Apache Spark
6 1 (0.23%) IBM Notes
Applications
1 2 (0.46%) Microsoft Excel
2 1 (0.23%) Microsoft Office
2 1 (0.23%) Microsoft Project
Business Applications
1 12 (2.78%) SAP IBP
Cloud Services
1 78 (18.10%) Azure
2 41 (9.51%) AWS
3 26 (6.03%) Azure Sentinel
4 16 (3.71%) Microsoft 365
5 15 (3.48%) Entra ID
6 13 (3.02%) OpenShift
7 11 (2.55%) Microsoft Purview
8 10 (2.32%) GCP
9 6 (1.39%) Azure DevOps
9 6 (1.39%) Azure Monitor
9 6 (1.39%) Virtual Private Cloud
10 5 (1.16%) AWS CloudTrail
10 5 (1.16%) CloudFront
10 5 (1.16%) Power Platform
11 4 (0.93%) Amazon CloudWatch
11 4 (0.93%) Datadog
11 4 (0.93%) PaaS
12 3 (0.70%) AWS CloudFormation
12 3 (0.70%) GitHub
12 3 (0.70%) IaaS
Communications & Networking
1 46 (10.67%) Firewall
2 31 (7.19%) Network Security
3 19 (4.41%) Intrusion Detection
4 18 (4.18%) DNS
5 16 (3.71%) NX-OS
6 15 (3.48%) SD-WAN
7 13 (3.02%) TCP/IP
8 12 (2.78%) VPN
9 10 (2.32%) HTTP
10 8 (1.86%) FTP
11 7 (1.62%) DHCP
12 6 (1.39%) SMTP
13 5 (1.16%) LAN
13 5 (1.16%) SSL
14 4 (0.93%) Cisco Nexus
14 4 (0.93%) WAN
15 2 (0.46%) Intranet
15 2 (0.46%) Reverse Proxy
15 2 (0.46%) tcpdump
15 2 (0.46%) Wireshark
Database & Business Intelligence
1 19 (4.41%) Elasticsearch
2 12 (2.78%) PostgreSQL
2 12 (2.78%) SAP BW
2 12 (2.78%) SAP HANA
3 7 (1.62%) SQL Server
4 5 (1.16%) MongoDB
5 4 (0.93%) BigQuery
6 3 (0.70%) Data Hub
6 3 (0.70%) Data Lake
6 3 (0.70%) DB2
6 3 (0.70%) Enterprise Data Warehouse
7 2 (0.46%) Apache Hive
7 2 (0.46%) Hadoop
7 2 (0.46%) Power BI
8 1 (0.23%) Big Data
8 1 (0.23%) HBase
8 1 (0.23%) IBM BigInsights
8 1 (0.23%) NoSQL
8 1 (0.23%) Parquet
8 1 (0.23%) Tableau
Development Applications
1 13 (3.02%) JIRA
2 6 (1.39%) Git
3 3 (0.70%) Jenkins
4 2 (0.46%) Artifactory
4 2 (0.46%) GitLab
4 2 (0.46%) Octopus Deploy
4 2 (0.46%) TeamCity
5 1 (0.23%) IDA Disassembler
5 1 (0.23%) Liquibase
5 1 (0.23%) Subversion
General
1 129 (29.93%) Social Skills
2 48 (11.14%) Analytical Skills
3 47 (10.90%) Finance
4 39 (9.05%) Public Sector
5 19 (4.41%) Banking
5 19 (4.41%) Legal
6 18 (4.18%) Telecoms
7 9 (2.09%) Retail
8 8 (1.86%) Inclusion and Diversity
8 8 (1.86%) Law
9 5 (1.16%) Documentation Skills
10 4 (0.93%) Manufacturing
11 3 (0.70%) Financial Institution
11 3 (0.70%) Games
12 2 (0.46%) Aerospace
12 2 (0.46%) Electronics
12 2 (0.46%) Influencing Skills
12 2 (0.46%) Marketing
12 2 (0.46%) Military
13 1 (0.23%) Spanish Language
Job Titles
1 132 (30.63%) Analyst
2 71 (16.47%) SOC Analyst
3 41 (9.51%) Architect
3 41 (9.51%) Consultant
4 36 (8.35%) Security Engineer
5 33 (7.66%) Lead
5 33 (7.66%) Senior
6 26 (6.03%) Security Analyst
7 19 (4.41%) Senior Analyst
7 19 (4.41%) SOC Engineer
8 17 (3.94%) Site Engineer
8 17 (3.94%) Site Reliability Engineer
9 16 (3.71%) Security Architect
10 15 (3.48%) Cyber Defence Analyst
11 14 (3.25%) Network Architect
11 14 (3.25%) SIEM Consultant
12 13 (3.02%) Cybersecurity Analyst
12 13 (3.02%) Security Specialist
13 12 (2.78%) Cybersecurity Engineer
13 12 (2.78%) SAP Consultant
Libraries, Frameworks & Software Standards
1 18 (4.18%) Elastic Stack
2 15 (3.48%) Kafka
3 12 (2.78%) SAP Basis
3 12 (2.78%) SAP Fiori
4 6 (1.39%) OAuth
4 6 (1.39%) OAuth2
4 6 (1.39%) SAML
5 5 (1.16%) LDAP
5 5 (1.16%) SailPoint
6 3 (0.70%) Google JAX
6 3 (0.70%) JSON
6 3 (0.70%) PyTorch
6 3 (0.70%) scikit-learn
6 3 (0.70%) TensorFlow
6 3 (0.70%) Web Services
6 3 (0.70%) XML
7 2 (0.46%) AngularJS
7 2 (0.46%) CSS
7 2 (0.46%) HTML
7 2 (0.46%) SOAP
Miscellaneous
1 100 (23.20%) Management Information System
2 98 (22.74%) Cyber Threat
3 77 (17.87%) Cyber Defence
4 76 (17.63%) Cyber Kill Chain
5 72 (16.71%) Security Operations Centre
6 40 (9.28%) Security Posture
7 37 (8.58%) Cloud Native
8 34 (7.89%) CSOC
9 26 (6.03%) Cyberattack
10 17 (3.94%) Onboarding
11 14 (3.25%) Data Centre
12 13 (3.02%) Public Cloud
13 12 (2.78%) Distributed Denial-of-Service
14 6 (1.39%) CMDB
15 5 (1.16%) Analytical Mindset
15 5 (1.16%) Data Protection Act
16 4 (0.93%) Cloud Security Posture
16 4 (0.93%) Hedge funds
16 4 (0.93%) Self-Motivation
17 3 (0.70%) Algorithms
Operating Systems
1 62 (14.39%) Linux
2 57 (13.23%) Windows
3 16 (3.71%) Unix
4 6 (1.39%) Windows Server
5 5 (1.16%) zOS
6 2 (0.46%) Mac OS
6 2 (0.46%) Red Hat Enterprise Linux
7 1 (0.23%) Mac OS X
7 1 (0.23%) Windows 10
Processes & Methodologies
1 245 (56.84%) Cybersecurity
2 188 (43.62%) SIEM
3 160 (37.12%) Security Operations
4 117 (27.15%) Information Security
5 104 (24.13%) Incident Management
6 102 (23.67%) Use Case
7 97 (22.51%) Threat Intelligence
8 87 (20.19%) MITRE ATT&CK
9 78 (18.10%) Cyber Threat Intelligence
10 77 (17.87%) Mentoring
11 73 (16.94%) SOAR
12 72 (16.71%) Vulnerability Management
13 70 (16.24%) Root Cause Analysis
14 69 (16.01%) Protective Monitoring
15 57 (13.23%) Case Management
15 57 (13.23%) Problem-Solving
16 49 (11.37%) CRM
17 44 (10.21%) Data Security
18 41 (9.51%) Analytics
19 39 (9.05%) Data Loss Prevention
Programming Languages
1 28 (6.50%) PowerShell
2 25 (5.80%) Python
3 19 (4.41%) Kusto Query Language
4 8 (1.86%) Bash
4 8 (1.86%) JavaScript
4 8 (1.86%) SQL
5 6 (1.39%) Search Processing Language
6 5 (1.16%) Perl
7 4 (0.93%) Go
7 4 (0.93%) Java
8 3 (0.70%) C
8 3 (0.70%) C++
8 3 (0.70%) R
9 2 (0.46%) Bicep
9 2 (0.46%) C#
9 2 (0.46%) Shell Script
10 1 (0.23%) Ruby
10 1 (0.23%) U-SQL
Qualifications
1 184 (42.69%) Security Cleared
2 102 (23.67%) DV Cleared
3 66 (15.31%) SC Cleared
4 44 (10.21%) Degree
5 36 (8.35%) CISSP
6 28 (6.50%) SANS
7 16 (3.71%) CISM
8 15 (3.48%) Cisco Certification
9 11 (2.55%) CompTIA Security+
9 11 (2.55%) GIAC
10 10 (2.32%) CCNP
10 10 (2.32%) CEH
10 10 (2.32%) Computer Science Degree
11 9 (2.09%) CCNA
12 8 (1.86%) GCIA
12 8 (1.86%) GCIH
12 8 (1.86%) SAP Certification
13 7 (1.62%) BPSS Clearance
14 5 (1.16%) AWS Certification
14 5 (1.16%) CISA
Quality Assurance & Compliance
1 92 (21.35%) NIST
2 54 (12.53%) NIST 800
3 40 (9.28%) ISO/IEC 27001
4 37 (8.58%) GDPR
5 19 (4.41%) NCSC
6 11 (2.55%) PCI DSS
7 8 (1.86%) GRC
8 7 (1.62%) Cyber Essentials
9 5 (1.16%) HIPAA
10 4 (0.93%) ISO/IEC 27002 (supersedes ISO/IEC 17799)
10 4 (0.93%) SLA
11 3 (0.70%) Cyber Essentials PLUS
11 3 (0.70%) GPG13
12 2 (0.46%) Sarbanes-Oxley
13 1 (0.23%) Data Quality
13 1 (0.23%) GLBA
13 1 (0.23%) ISAE 3402
13 1 (0.23%) SOC 2
System Software
1 23 (5.34%) Active Directory
2 18 (4.18%) VMware Infrastructure
3 15 (3.48%) VMware NSX
3 15 (3.48%) vSphere
4 12 (2.78%) Docker
5 7 (1.62%) Virtual Machines
6 2 (0.46%) XenApp
7 1 (0.23%) Firmware
7 1 (0.23%) Snort
7 1 (0.23%) Virtual Desktop
Systems Management
1 29 (6.73%) Kibana
2 25 (5.80%) CSIRT
3 23 (5.34%) Kubernetes
4 16 (3.71%) logstash
4 16 (3.71%) Prometheus
5 14 (3.25%) Istio
5 14 (3.25%) Terraform
6 13 (3.02%) Grafana
7 12 (2.78%) Argo
8 11 (2.55%) Nessus
9 6 (1.39%) Ansible
9 6 (1.39%) QRadar
10 4 (0.93%) Computer Emergency Response Teams
10 4 (0.93%) Puppet
10 4 (0.93%) Trend Micro Deep Security
11 3 (0.70%) Progress Chef
12 2 (0.46%) FortiGate
12 2 (0.46%) Network Intrusion Detection System
12 2 (0.46%) Rancher
12 2 (0.46%) ZABBIX
Vendors
1 180 (41.76%) Microsoft
2 52 (12.06%) Splunk
3 33 (7.66%) LogRhythm
4 29 (6.73%) Cisco
5 23 (5.34%) Darktrace
5 23 (5.34%) Qualys
6 22 (5.10%) Varonis
7 20 (4.64%) VMware
8 18 (4.18%) FireEye
9 16 (3.71%) Forcepoint
10 14 (3.25%) SAP
11 12 (2.78%) Tanium
12 10 (2.32%) CrowdStrike
13 8 (1.86%) Oracle
14 7 (1.62%) Google
14 7 (1.62%) Symantec
14 7 (1.62%) Virgin Media
15 6 (1.39%) Rapid7
15 6 (1.39%) ServiceNow
16 5 (1.16%) F5