You can do a degree or postgraduate qualification in one of the following subjects:

• computer science
• computer or cyber security
• mathematics
• network engineering and security

You could take a postgraduate course in computing or cyber security if your first degree is not in a related subject, or if you have a lot of industry experience.

Entry requirements

You'll usually need:

• 2 to 3 A levels, or equivalent, for a degree
• a degree in a relevant subject for postgraduate study

You could apply to do an apprenticeship, such as:

• Cyber Security Technologist Level 4 Higher Apprenticeship
• Digital Forensic Technician Level 4 Higher Apprenticeship
• Protective Security Adviser Level 4 Higher Apprenticeship
• Cyber Security Technical Professional Level 6 Degree Apprenticeship
• Advanced Digital Forensic Professional Level 7 Degree Apprenticeship

Entry requirements

You'll usually need:

• 4 or 5 GCSEs at grades 9 to 4 (A* to C) and A levels, or equivalent, for a higher or degree apprenticeship

• a degree in a relevant subject

You could start work with an IT security firm, for example as a support technician after doing GCSEs or A levels, then work your way up while studying for further qualifications on the job.

If you have a degree or relevant work experience, you could apply for the MI5 Intelligence and Data Analyst Development Programme.

You'll need:

• knowledge of computer operating systems, hardware and software
• complex problem-solving skills
• the ability to use your initiative
• the ability to accept criticism and work well under pressure
• telecommunications knowledge
• to be thorough and pay attention to detail
• persistence and determination
• maths skills
• to have a thorough understanding of computer systems and applications

For public sector work, you may need to go through UK Security Vetting. This includes:

• a counter terrorist check
• a security check (SC) - for access to information classified as 'secret'
• developed vetting (DV) - for access to information classified as 'top secret'

For private sector work, you may not need to be vetted unless you're working on government systems.

In this role you may:

• identify common weaknesses in IT networks
• use digital resources to gather information and evidence
• use computer forensics to identify attackers and their methods
• analyse threats to major security systems
• monitor new threats and assess their impact
• keep databases of threats and hackers
• produce threat assessment reports and recommend actions
• develop relationships with other organisations and share security knowledge
• update your skills and knowledge

You could work in an office or at a client's business.