The pathway
How you actually get there, here
How you become one varies far more by country than what one does. This is the UK route. Most people take one of these ways in; the right one depends on where you're starting from.
- 1
IT Helpdesk / Technical Support
1-2 yearsSkills to master
- Customer service, basic troubleshooting, ticket management, understanding of common IT systems and user issues. This is a fantastic foundation for understanding the 'human element' of security.
You're ready to move on when
- You're known for meticulously documenting issues and resolutions.
- You consistently resolve common technical problems efficiently.
- You've shown an interest in security-related queries or issues that come through the helpdesk.
- 2
IT Apprenticeship / Vocational Training
1-3 yearsSkills to master
- Practical application of IT principles, exposure to various IT disciplines, structured learning of technical concepts, professional work ethic. Apprenticeships give you a great blend of theory and hands-on work.
You're ready to move on when
- You've completed relevant modules with strong grades or practical assessments.
- Your apprenticeship placements involved some exposure to system administration or network basics.
- Your mentors highlight your attention to detail and ability to follow procedures.
- 3
Self-Taught Enthusiast / Hobbyist
Varies (0-2 years of dedicated learning)Skills to master
- Deep curiosity, self-discipline, practical experience with home labs or online security challenges (e.g., CTFs). This path shows incredible drive and passion.
You're ready to move on when
- You can demonstrate personal projects involving security tools or concepts (e.g., setting up a home firewall, experimenting with Kali Linux).
- You actively participate in online security communities or capture-the-flag (CTF) events.
- You can articulate fundamental security principles and common attack vectors.