Incident Management Job Trends in the Thames Valley

Incident Management
South East > Thames Valley

The table below provides summary statistics and salary benchmarking for jobs advertised in the Thames Valley requiring Incident Management skills. It covers permanent job vacancies from the 6 months leading up to 20 September 2026, with comparisons to the same periods in the previous two years.

6 months to
20 Sep 2026
Same period 2025 Same period 2024
Rank 174 94 161
Rank change year-on-year -80 +67 -56
Permanent jobs citing Incident Management 32 119 40
As % of all permanent jobs in the Thames Valley 0.44% 3.10% 0.82%
As % of the Processes & Methodologies category 0.61% 3.44% 1.00%
Number of salaries quoted 15 25 28
10th Percentile £32,150 £28,000 £33,425
25th Percentile £45,375 £39,625 £40,938
Median annual salary (50th Percentile) £54,000 £45,000 £44,982
Median % change year-on-year +20.00% +0.04% -13.50%
75th Percentile £66,250 £60,000 £58,438
90th Percentile £81,500 £72,200 £72,400
South East median annual salary £54,521 £41,250 £45,000
% change year-on-year +32.17% -8.33% -13.46%

All Process & Methodology Skills
Thames Valley

Incident Management falls under the Processes and Methodologies category. For comparison with the information above, the following table provides summary statistics for all permanent job vacancies requiring process or methodology skills in the Thames Valley.

Permanent vacancies with a requirement for process or methodology skills 5,214 3,456 4,004
As % of all permanent jobs advertised in the Thames Valley 71.04% 89.93% 82.17%
Number of salaries quoted 3,690 1,464 2,067
10th Percentile £30,000 £26,750 £31,250
25th Percentile £40,000 £35,000 £41,235
Median annual salary (50th Percentile) £55,000 £47,520 £55,000
Median % change year-on-year +15.74% -13.60% -
75th Percentile £70,000 £67,500 £70,000
90th Percentile £90,000 £83,750 £82,500
South East median annual salary £55,000 £50,000 £55,000
% change year-on-year +10.00% -9.09% -

Incident Management
Job Vacancy Trend in the Thames Valley

Historical trend showing the proportion of permanent IT job postings citing Incident Management relative to all permanent IT jobs advertised in the Thames Valley.

Incident Management job vacancy trend in the Thames Valley

Incident Management
Salary Trend in the Thames Valley

Salary distribution trend for jobs in the Thames Valley citing Incident Management.

Salary distribution trend for jobs in the Thames Valley citing Incident Management

Incident Management
Salary Histogram in the Thames Valley

Salary distribution for jobs citing Incident Management in the Thames Valley over the 6 months to 20 September 2026.

Salary histogram for Incident Management in the Thames Valley

Incident Management
Job Locations in the Thames Valley

The table below looks at the demand and provides a guide to the median salaries quoted in IT jobs citing Incident Management within the Thames Valley region over the 6 months to 20 September 2026. The 'Rank Change' column provides an indication of the change in demand within each location based on the same 6 month period last year.

Location Rank Change
on Same Period
Last Year
Matching
Permanent
IT Job Ads
Median Salary
Past 6 Months
Median Salary
% Change
on Same Period
Last Year
Live
Jobs
Berkshire -64 18 £53,510 +29.72% 25
Buckinghamshire +4 13 £54,000 -1.82% 11
Oxfordshire -28 1 £75,000 +177.78% 9
Incident Management
South East

Incident Management
Co-Occurring Skills & Capabilities in the Thames Valley by Category

The following tables expand on the one above by listing co-occurrences grouped by category. They cover the same employment type, locality and period, with up to 20 co-occurrences shown in each category:

Application Platforms
1 1 (3.13%) Apache
1 1 (3.13%) CMS
1 1 (3.13%) IIS
1 1 (3.13%) Tomcat
1 1 (3.13%) WordPress
Applications
1 2 (6.25%) Microsoft Excel
1 2 (6.25%) Microsoft Office
Cloud Services
1 5 (15.63%) Azure
2 2 (6.25%) OpenShift
3 1 (3.13%) AWS
3 1 (3.13%) Datadog
3 1 (3.13%) SaaS
Communications & Networking
1 10 (31.25%) Firewall
1 10 (31.25%) TCP/IP
2 9 (28.13%) HTTP
3 8 (25.00%) DNS
4 7 (21.88%) VPN
5 4 (12.50%) Network Security
6 2 (6.25%) FTP
6 2 (6.25%) Internet
6 2 (6.25%) LAN
6 2 (6.25%) SMTP
6 2 (6.25%) WAN
7 1 (3.13%) ATM
Database & Business Intelligence
1 3 (9.38%) PostgreSQL
2 1 (3.13%) MySQL
Development Applications
1 1 (3.13%) Bitbucket
1 1 (3.13%) Git
General
1 12 (37.50%) Analytical Skills
2 6 (18.75%) Finance
3 3 (9.38%) Organisational Skills
3 3 (9.38%) Social Skills
4 1 (3.13%) Banking
4 1 (3.13%) Inclusion and Diversity
Job Titles
1 12 (37.50%) Analyst
2 8 (25.00%) SOC Analyst
3 6 (18.75%) Cyber Threat Analyst
4 5 (15.63%) Lead
5 4 (12.50%) Operational Security Manager
5 4 (12.50%) Security Manager
5 4 (12.50%) Security Operations Manager
6 3 (9.38%) SIEM Analyst
6 3 (9.38%) Vulnerability Manager
7 2 (6.25%) Delivery Manager
7 2 (6.25%) IT Manager
7 2 (6.25%) IT Services Manager
7 2 (6.25%) IT Support
7 2 (6.25%) Principal Engineer
7 2 (6.25%) Service Desk Specialist
7 2 (6.25%) Service Desk Support
7 2 (6.25%) Site Engineer
7 2 (6.25%) Site Reliability Engineer
7 2 (6.25%) SOC Manager
7 2 (6.25%) Support Specialist
Libraries, Frameworks & Software Standards
1 2 (6.25%) LDAP
1 2 (6.25%) Loki
2 1 (3.13%) .NET
2 1 (3.13%) Ajax
2 1 (3.13%) CodeIgniter
2 1 (3.13%) CSS
2 1 (3.13%) CSS3
2 1 (3.13%) HTML
2 1 (3.13%) HTML5
2 1 (3.13%) jQuery
2 1 (3.13%) JSON
2 1 (3.13%) Laravel
2 1 (3.13%) REST
Miscellaneous
1 12 (37.50%) Cyber Defence
2 9 (28.13%) Cyber Threat
3 8 (25.00%) Analytical Mindset
4 3 (9.38%) Cloud Native
5 2 (6.25%) Cyber Kill Chain
5 2 (6.25%) Digital Signage
5 2 (6.25%) IPTV
5 2 (6.25%) Management Information System
5 2 (6.25%) Security Operations Centre
5 2 (6.25%) Security Posture
5 2 (6.25%) Video Conferencing
6 1 (3.13%) CSOC
6 1 (3.13%) Cyberattack
6 1 (3.13%) Distributed Systems
6 1 (3.13%) Enterprise Software
Operating Systems
1 11 (34.38%) Windows
2 8 (25.00%) Linux
3 1 (3.13%) Windows Server
Processes & Methodologies
1 17 (53.13%) Incident Response
2 15 (46.88%) Cybersecurity
3 14 (43.75%) SIEM
4 12 (37.50%) Validation
5 11 (34.38%) Decision-Making
6 10 (31.25%) Cyber Threat Intelligence
6 10 (31.25%) Major Incident Management
6 10 (31.25%) Threat Intelligence
7 9 (28.13%) Continuous Improvement
8 8 (25.00%) Threat Detection
9 7 (21.88%) MITRE ATT&CK
9 7 (21.88%) Security Operations
9 7 (21.88%) Situational Awareness
9 7 (21.88%) Tradecraft
9 7 (21.88%) Use Case
10 6 (18.75%) Blue Team
10 6 (18.75%) Purple Team
10 6 (18.75%) Red Team
10 6 (18.75%) Root Cause Analysis
10 6 (18.75%) Stakeholder Engagement
Programming Languages
1 7 (21.88%) Search Processing Language
2 2 (6.25%) Bash
2 2 (6.25%) Python
2 2 (6.25%) Scala
3 1 (3.13%) C#
3 1 (3.13%) JavaScript
3 1 (3.13%) Kusto Query Language
3 1 (3.13%) PHP
3 1 (3.13%) SQL
Qualifications
1 18 (56.25%) Security Cleared
2 9 (28.13%) SC Cleared
3 8 (25.00%) GIAC
4 7 (21.88%) CREST Certified
4 7 (21.88%) Degree
4 7 (21.88%) DV Cleared
4 7 (21.88%) GCED
4 7 (21.88%) GCIA
4 7 (21.88%) GCIH
4 7 (21.88%) SANS
5 6 (18.75%) OSCP
6 2 (6.25%) CISM
6 2 (6.25%) CISSP
6 2 (6.25%) ITIL Certification
7 1 (3.13%) CompTIA CySA+
7 1 (3.13%) CompTIA Security+
7 1 (3.13%) ITIL Foundation Certificate
Quality Assurance & Compliance
1 3 (9.38%) SLA
2 2 (6.25%) NIST
3 1 (3.13%) ISO 22301
3 1 (3.13%) PCI DSS
Systems Management
1 7 (21.88%) Kibana
2 2 (6.25%) Argo
2 2 (6.25%) Grafana
2 2 (6.25%) Istio
2 2 (6.25%) Kubernetes
2 2 (6.25%) Kustomize
2 2 (6.25%) Prometheus
2 2 (6.25%) QRadar
Vendors
1 11 (34.38%) Microsoft
2 10 (31.25%) Splunk
3 7 (21.88%) CrowdStrike
4 6 (18.75%) Carbon Black
5 2 (6.25%) ArcSight
5 2 (6.25%) Cisco
5 2 (6.25%) Polycom
5 2 (6.25%) Red Hat