Gain the knowledge, skills and certifications required to combat the rising number of sophisticated cyber threats in the UK by undertaking relevant cyber security training

What is cyber security?

Cyber security involves protecting the computer systems, networks, and data used by individuals and organisations against digital attacks.

These attacks are deliberate attempts by criminals to access, change, steal or damage the sensitive information held on these systems. They aim to extort users' money through ransomware or by sabotaging business processes.

The government has warned that half of businesses and a third of charities experienced some form of cyber attack or data security breach over the last 12 months to January 2024. Its Cyber Security Breaches Survey 2024 demanded greater cyber awareness and urged organisations to tighten their defences.

While the ISC2 Cybersecurity Workforce Study 2024 showed that the UK's cyber security workforce grew by almost a tenth (8.3%) over the past year and now stands at 367,300, it also revealed that 73,439 cyber security jobs still needed to be filled. This was an increase of nearly a third (29.3%) on the previous year. It shows that the workforce gap is widening due to a shortage of qualified professionals.

How to get into cyber security

Graduates typically have two primary routes into cyber security:

  • Entry-level role/Apprenticeship - build your experience by learning on the job.
  • Certifications - develop your technical skills through education.

Existing IT professionals can achieve relevant certifications after holding positions in:

  • IT support
  • networking
  • telecoms.

Cyber security salaries in the UK

There is a high demand for cyber security professionals in the UK. Due to the shortage of qualified candidates, those with the right certifications and level of experience can earn £30,000 to £75,000 per year. At leadership level, this can reach £100,000.

As salaries across the sector are rising (£22,000-£52,000 for entry-level roles), there's never been a better time to choose cyber security as a career.

Here are some of the salaries on offer:

  • Cyber security analyst - In your first three years of employment, you can earn £37,500 to £52,000. Senior analysts can take home £65,000 to £80,000, with higher-level managers and leaders commanding £72,500 to £100,000.
  • Forensic computer analyst - Typical starting salaries range from £25,000 to £30,000, rising to £80,000 at senior level.
  • Network engineer - New starters can expect £22,000 to £28,000, while senior network engineers are paid £55,000 to £75,000.
  • Penetration tester - Starting out, you can earn £25,000 to 40,000. This increases to £60,000 to £80,000 for senior and team leader roles.

Key cyber security skills

The technical skills you'll gain through studying industry-recognised certifications include having a strong grasp of:

  • computer networks
  • cyber security tools
  • firewalls and routers
  • intrusion detection and prevention systems
  • operating systems
  • programming languages
  • remote access
  • virtual private networks (VPNs).

Non-technical professionals often have a range of transferable skills that are also required for cyber security, especially in management and training.

In addition to achieving the required certifications, you'll also need to be:

  • a person with a commercial outlook
  • an analytical thinker and problem-solver
  • an excellent communicator with good people skills
  • dedicated to continuous learning
  • someone with initiative and an entrepreneurial spirit.

Cyber security courses

To forge a successful cyber security career, you'll need a balance between practical skills and qualifications.

While a specific cyber security degree or Masters isn't essential for getting a job in the industry, it would give you greater awareness of the landscape. This would be ideal if you're unsure what to specialise in or want to develop a broader knowledge.

Bachelors degrees in cyber security are available from:

Many of these three and four-year (those including a work placement year) Bachelor of Science (BSc) courses are accredited by BCS, The Chartered Institute for IT and/or the Chartered Institute of Information Security (CIISec).

For entry onto a programme, you'll be expected to hold a combination of the following qualifications:

  • GCSEs
  • A-levels
  • BTEC National Diploma
  • Access to HE (Higher Education.

For those who have already completed a degree, here are some of the institutions offering the MSc Cyber Security:

These one-year, full-time postgraduate courses typically look for graduates with a 2:1 or a 2:2 in a related subject, such as:

Some institutions will also accept other qualifications or relevant work experience in an area closely related to cyber security.

Search for Masters degrees in cyber security.

Take a look at the list of certified undergraduate and Masters degree programmes at the National Cyber Security Centre (NCSC), part of the Government Communications Headquarters (GCHQ).

Read more about the professional standards for cyber security qualifications at IT courses.

Cyber security certifications

Certifications are great tools for career progression and don't just build technical skills. These qualifications also teach you the value of your own expertise and build communication skills - crucial if you consider moving from a technical to a managerial role.

There are a number of well-regarded certifications you should be aiming for as a cyber-security professional:

  • Certified Ethical Hacker (CEH) - the CEH is a popular entry-level cyber security certification that introduces you to the hacking tools and techniques used by real cyber criminals. By familiarising yourself with how hackers think, you'll be better at fixing vulnerabilities and flaws you might otherwise miss.
  • Certified Information Security Manager (CISM) - there's growing recognition for the CISM, offered by ISACA. As the name suggests, the qualification is designed for security managers. It's an expert-level certification that proves skills in risk management and enterprise security systems while teaching the language of business.
  • Certified Information Systems Security Professional (CISSP) - the CISSP from ISC2 is among the most sought-after certifications in security. Achieving the CISSP certification is a career highlight and is aimed at the top tier of cyber security professionals.

You'll need five years of cyber security work experience to even sit the exam. Graduates who enter the industry directly after university can achieve this certification sooner.

When progressing your cyber security career, consider additional qualifications that could broaden your skillset, including:

Cyber security internships

A number of major employers, including BAE Systems Deloitte UK and Tesco, offer summer internships in cyber security.

They typically last 10 to 12 weeks between May and September.

Explore the cyber security internships available in 2025 and get the lowdown on IT work experience.

Cyber security apprenticeships

Another great option for graduates aiming to break into the industry is a cyber security apprenticeship. This provides an ideal mix of on and off-the-job learning, resulting in a qualification and masses of industry experience.

While on a cyber security apprenticeship, you'll receive training and certification from industry-leading vendors, such as Microsoft and ISC2. Training is provided through government-approved training providers.

You're eligible to apply for a cyber security apprenticeship if you don't already hold a qualification in a technical field at a higher level, such as a computer science degree.

For details on the types of cyber security apprenticeship roles available, visit the Institute for Apprenticeships & Technical Education.

There's also CyberFirst, a government education programme for 11 to 19-year-olds run by the NCSC.

Discover which leading employers are offering cyber security and other IT apprenticeships.

Search for cyber security apprenticeships.

Cyber security job roles

Cyber security is broad and provides opportunities for professionals with varying backgrounds, but there are some common career paths:

  • Cyber security - protect your organisation by monitoring networks and systems, detecting threats or signs of illegal activity and reporting on them. Get the lowdown on working as a cyber security analyst or forensic computer analyst.
  • Network security - data must flow smoothly and securely for IT to work. Networking and security are tightly bound together in modern IT ecosystems. Discover more about the role of a network engineer.
  • Security management - security managers oversee the security strategies across an entire business, including risk management, data privacy, and firewalls. By understanding the client and identifying their vulnerabilities, whether human or technological, you'll help build, update, and deploy the client's IT security strategy to ensure business-critical data is protected.
  • Penetration testing - aims to find vulnerabilities in a client's security system before an attacker can exploit them. This involves simulating cyber attacks and other authorised tests on computer systems. Find out more about what a penetration tester does.

Explore other IT graduate jobs.

Search for cyber security graduate jobs.

Find out more

How would you rate this page?

On a scale where 1 is dislike and 5 is like

success feedback

Thank you for rating the page