UK

NCFE · RQF Level 4

NCFE Level 4 Diploma: Cyber Security Engineer

You don’t just earn this. You learn to use it, one-to-one, on your own real work.

  • LevelRQF Level 4
  • Total credits120
  • Guided learning510 hours
  • Units in this qualification6

Awarded by NCFE · on the Ofqual register

Start here

See how this course maps onto your role

Ten quick questions, one per Future Fluency, asked against this qualification rather than a generic one.

Check my fluency, free

About 5 minutes · No card · Nothing to commit to

What you’ll learn

What each unit actually teaches you to do

This qualification is designed to give learners the knowledge and associated skills and behaviours required to work in a variety of roles in cyber security. It will also prepare learners to progress to further study and apprenticeships in this area.

These are the units NCFE registers against this qualification. It is a catalogue, not a syllabus. Which of them you take depends on the combination the qualification requires, and that is set by the awarding body rather than by us. Every unit here is regulated, and every one you earn is yours to keep.

Cyber security architectureReal unit · NCFE
You'll explore networking models and protocols, applying characteristics of digital system components to implement security controls. The unit also covers the application of cryptography concepts to enhance cyber security architecture.

What you'll be able to do

  • Explore networking model and protocols
  • Apply the characteristics of digital system components, implementing security controls
  • Apply the concepts of cryptography
Cyber security managementReal unit · NCFE
You'll analyse employer and end-user requirements in cyber security management and apply principles of incident investigation. They will develop security cases aligned with design constraints and critically evaluate approaches to managing security requirements.

What you'll be able to do

  • Analyse employer and end user requirements
  • Apply principles of incident investigation in cyber security management
Legislation, policies and procedures in cyber securityReal unit · NCFE
This unit covers the fundamentals of cyber security legislation, policies, and procedures. You'll explore relevant legislation and standards, examine key factors in security management, and apply IT service management principles to enhance cyber security practices.

What you'll be able to do

  • Explore the fundamentals of common legislation and standards applicable to cyber security
  • Examine common factors of security management
  • Apply the fundamentals of IT service management (ITSM)
Principles of cyber securityReal unit · NCFE
It teaches you to examine cyber security principles within organisations and society, exploring factors contributing to security functionality. You'll apply programming and scripting languages to meet design or end-user security requirements.

What you'll be able to do

  • Examine principles of cyber security within organisations and society
  • Explore factors that contribute to security functionality in cyber security
  • Apply programming and scripting languages to design or end user requirements
Risk assessment in cyber securityReal unit · NCFE
It teaches you to examine security features of different operating systems and assess risk management in cyber security. You'll define the scope of risk assessments, explain risk treatment decisions, and design comprehensive risk management strategies.

What you'll be able to do

  • Examine operating system security features
  • Assess risk management in cyber security
Threat intelligence in cyber securityReal unit · NCFE
You'll explore common cyber security threats and attack techniques, examine vulnerabilities and their mitigations, and analyse emerging trends in cyber security. They will develop an understanding of threat actors, their motivations, and the risks posed to organisations.

What you'll be able to do

  • Explore common cyber security threats and attack techniques
  • Examine vulnerabilities and mitigations
  • Analyse the horizon of cyber security trends

The honest bit

You’ve started things before

Most courses were built for a room full of people who aren’t you. A cohort moves on whether or not your week allowed it, and by the third week the thing you’re behind on becomes the reason you stop opening it.

There’s no cohort here, and no timetable to fall behind. Before anything starts, Zavmo asks when you’re sharpest and how long you can realistically sit down for, then builds the sessions around those answers. A bad fortnight changes your pace. It doesn’t put you behind.

And you only pay once you start learning. Searching and planning are free, and you can cancel any time — so the cost of finding out is an afternoon, not a year.

Your passport

Every credit is a stamp you keep

Level 4 credits are regulated. They don’t vanish when a subscription ends or a website closes. They travel to any employer, and Zavmo keeps the map of what you’ve earned and what’s next.

Cyber security architectureCyber security managementLegislation, policies and procedures in cyber securityPrinciples of cyber securityRisk assessment in cyber securityThreat intelligence in cyber security

Each stamp is a real unit registered against this qualification.

Who’d teach you this

The Evidence Evaluator

Assessor

Helps you show what you can actually do, gathering the evidence that proves it as you learn.

Meet all twelve tutors

Where this connects

Where these credits take you

A qualification is never a dead end here. See the jobs its credits open, the national occupational standards its units map to, and the future skills they quietly build.

See Your Progress GrowIllustration
NCFE Level 4 Diploma: Cyber Security Engineer
  • Carry out information security architecture activities
  • Carry out the security risk assessment for the client and its stakeholders
  • Carry out threat intelligence assessments
  • Contribute to information security architecture activities
  • Direct Security Architecture Development
  • Direct information security architecture activities
  • Directing Information Risk Assessment and Management
  • Manage Information Security Risk Assessment and Management Activities
This is your Mind Palace on learn.zavmo.ai. Every skill above comes from this role's own record, not an example borrowed from another job. A node lights up when you evidence it, and what you build stays yours between jobs. That is the part a course cannot do.

Where this can lead

Cybersecurity Engineer Manager

Your career path here is really what you make it. We provide the opportunities, the challenges, and the support; you bring the drive and the vision. This role is a significant stepping stone to the very top of the security profession, or even broader executive leadership.

See the whole journey →
Opens the roleCybersecurity Engineer ManagerOne of the jobs this qualification is a route intoSee the role →Opens the roleCybersecurity ManagerOne of the jobs this qualification is a route into · 1 near-identical record folded inSee the role →Opens the roleCybersecurity Specialist ManagerOne of the jobs this qualification is a route intoSee the role →Opens the roleAssociate Cybersecurity EngineerOne of the jobs this qualification is a route intoSee the role →Opens the roleDirector, Threat Detection & ResponseOne of the jobs this qualification is a route intoSee the role →Opens the roleCybersecurity EngineerOne of the jobs this qualification is a route intoSee the role →Future FluencyAll ten future skillsSee how every unit is contextualised by the tenExplore →

Showing 6 roles, drawn from 427 job records mapped to this qualification.

Skills it covers

What the job actually needs. These are the standards the units are built against, in the words employers and awarding bodies already use for the work itself.

Carry out information security architecture activitiesCarry out the security risk assessment for the client and its stakeholdersCarry out threat intelligence assessmentsContribute to information security architecture activitiesDirect Security Architecture DevelopmentDirect information security architecture activitiesDirecting Information Risk Assessment and ManagementManage Information Security Risk Assessment and Management ActivitiesManage information security architecture activitiesManage threat intelligence activitiesNot specified (nan)Undertake Cyber Threat Hunting Assignments

How you’ll actually learn this

One-to-one, on your own real work

A qualification is usually something done to you: sit the class, sit the exam, hope it sticks. Here it’s the opposite. You learn it one-to-one with a companion, on your own real work, and you keep going until you can use it, not just recall it.

One-to-one, on your real workNo lectures, no past-papers. Every unit is practised on the actual tasks your job throws at you, a tutor beside you, not a video in front of you.
Taught to the top, not the testMost courses stop at remembering. Your companion keeps climbing: analysing, judging, creating. That’s the part a machine can’t do for you.
Credits you keep, a map that continuesEvery unit is regulated and yours for good. The day you finish, Zavmo already knows the next role your new credits open.
Cyber security architectureLevel 4

Applied to your work in any of these jobs

Which job do you mean?
Cybersecurity Engineer ManagerCybersecurity ManagerCybersecurity Specialist ManagerAssociate Cybersecurity EngineerDirector, Threat Detection & ResponseCybersecurity Engineer

Learners will explore networking models and protocols, applying characteristics of digital system components to implement security controls. The unit also covers the application of cryptography concepts to enhance cyber security architecture.

How the thinking builds
  1. Remember
  2. Understand
  3. Apply
  4. Analyse
  5. Evaluate
  6. Create
An illustration of a Zavmo lesson, built from this role’s own route. The unit, its objective and every criterion above are the awarding body’s own words, not an example.
Your PlanIllustration

Built for NCFE Level 4 Diploma: Cyber Security Engineer

6 units in this credential, in the order it lists them, awarded by NCFE.

  1. Cyber security architecture
  2. Cyber security management
  3. Legislation, policies and procedures in cyber security
  4. Principles of cyber security
  5. Risk assessment in cyber security
  6. Threat intelligence in cyber security
These are the real units of this credential, in its own order. Nothing here is marked done, because this plan has not been started by anyone yet. Yours would fill in as you go.

One to one, not one to many

No two people run this the same way

A course is written once and handed to everyone. This is assembled around you, and keeps changing as it learns you. Five things it reads, and what each one changes.

  1. Your actual work Every unit is taught against a live piece of your own work, not a worked example from a textbook.
  2. What you already know The first conversation finds your starting point, so you skip what you can already do and spend the time on what you cannot.
  3. The conditions you learn under Not a learning-styles quiz. The evidence does not support those. The dimensions the research does back, read once and used to shape the plan.
  4. How far you got last time It picks up mid-thought. The tutor knows what you said, what you struggled with, and what it asked you to try.
  5. Which tutor suits the moment Twelve of them, each for a different kind of thinking. The one who walks you through a first idea is not the one who stress-tests it.

See how you learn, free. Eight questions, no sign-up. A directional taster; the diagnostic inside Zavmo goes deeper and keeps adapting.

Why it sticks

Most courses stop at remembering

There’s a well-known ladder of how deeply you learn something, called Bloom’s Taxonomy. Most courses get you up the first two rungs: you remember some facts, you pass a test, you forget it. Real skill lives at the top. Judging, deciding, creating. And this isn’t a generic ladder: every rung has a named Zavmo tutor who walks you up it.

  1. 6CreateThe Creative Catalyst
  2. 5EvaluateThe Evidence Evaluator
  3. 4AnalyseThe Analyst
  4. 3ApplyThe Coach
  5. 2UnderstandThe Connector
  6. 1RememberThe Builder

Where most courses leave you Where Zavmo takes you

Why this matters: AI can already remember and understand for you. What it can’t do is take your real problem and judge the right call. So the only learning worth paying for is the learning that takes you to the top. That’s exactly what a tutor doing it with you, on your real work, is for.

The value

Why the companion is worth £70 a month

You’re not paying for the units. They’re regulated, and the same wherever you earn them. You’re paying for the one thing that decides whether you actually get there: a companion that makes them stick, on your real work.

That is one-to-one on this qualification, every day, on the work you already do, for £70 a month. Your first module is free, so you can see the teaching before you pay for any of it. Billed monthly, cancel any time and billing stops.

Earned on your own work, taught to the top.

Everything you just read, learned one-to-one on the job you already do. Your first module is free, so you can see the teaching before you pay for any of it.

Build my plan, free

No card. See how this qualification maps onto your role and meet the tutors who’d teach it, free. The learning begins when you subscribe. It’s £70 a month, billed monthly. Cancel any time and billing stops.