Skip to content

How to become a cyber security analyst

Cyber security analysts protect an organisation's computer systems and data from attacks, theft and misuse — monitoring for threats, investigating alerts and fixing weaknesses.

You could work in a company's security team, a security operations centre (SOC), a consultancy, the public sector or the police.

There is no licence to practise. You could get in through an apprenticeship, a degree or by moving across from IT support or networking.

  • Multiple routes
  • No licence needed
  • Earn while learning possible

4 routes into this career

Each route is a real, published way in. None is guaranteed, and requirements vary by employer. Select up to 3 to compare side by side.

Choose “View full journey” on a route to see every step, cost and source.

Good to know

Questions people ask

Do I need a degree to work in cyber security?

No. You could start through a cyber security apprenticeship, move across from IT support or networking, or take a degree. Some employers ask for a degree; many value skills and experience.

How do I become a penetration tester (ethical hacker)?

Penetration testing, also called security testing, is a specialism. Many people start as a security analyst or in IT, then specialise with experience and training. The National Careers Service has no separate penetration tester profile, so we do not show separate pay figures.

Is UK Cyber Security Council registration required?

No. Registration is voluntary for most jobs. The entry-level Associate title costs £99 plus VAT to apply for, according to the Council's 2026 guidance.

Sources

Evidence checked 14 Oct 2026. Every fee and requirement on this page links to one of these.

UK reference: median full-time pay for all employees was £39,039 in April 2025 (ONS ASHE, provisional).

Compare routes side by side