Cyber security jobs with no experience in the UK: where to start

Yes, you can get a cyber security job in the UK with no experience, but it's rarely a straight jump into a security analyst role. Most people get in through a side door: IT support, a service desk job, an apprenticeship or a trainee SOC scheme. Plan for that and you'll get there faster.

The reason is simple. Employers mostly hire people who've already done some of the work, and there aren't many genuinely junior seats.

How many cyber jobs are open to beginners?

Fewer than you'd hope. The government's 2026 cyber security skills report counted 66,964 relevant job postings across all cyber roles in 2025. But only 16% of core cyber postings were aimed at people with under a year's experience, down from 25% in 2022. The most common ask (64% of postings) was two to six years.

That doesn't mean the door is shut. It means you're competing for a smaller pool, so the "apply to everything with 'cyber' in the title" approach burns time. Be targeted.

Which jobs actually hire people with no cyber experience?

These are the roles I'd go after, roughly in order of how often they take beginners.

First-line IT support or service desk analyst. This is the most common route in. You'll reset passwords, manage accounts in Active Directory and Microsoft 365, and deal with users who've clicked dodgy links. That last part is real security work, even if the job title doesn't say so. IT Jobs Watch put the median advertised salary at £28,375 for UK permanent 1st line support jobs in the six months to November 2026.

Trainee or junior SOC analyst. Some managed security providers and larger organisations run trainee schemes. They're competitive and often involve shifts. Check carefully whether a "trainee" scheme is a real salaried job or a paid course in disguise. If you're asked to pay upfront for a job, walk away.

Apprenticeships. Prospects lists Level 3 and Level 4 cyber apprenticeships, plus Level 6 degree apprenticeships. You earn while you learn and finish with real experience. The catch: places are limited, and the DSIT report noted cyber-specific apprenticeship enrolments fell 15% between 2023/24 and 2024/25.

Adjacent roles. IT security administrator, vulnerability management assistant, GRC (governance, risk and compliance) assistant and junior IT auditor jobs sometimes take people with strong IT basics and no security title on their CV. If you've worked in compliance, finance or audit, the GRC route can be a shortcut.

Our entry-level cyber security jobs guide goes through more job titles and what each one pays.

Can you get into cyber security without a degree in the UK?

Yes. Many job ads still list a degree (DSIT found 77% of employers asked for at least a bachelor's in core cyber postings), but what employers do and what ads say aren't always the same thing. In the same report, 65% of cyber firms that had recruited since the start of 2024 said they'd hired through non-degree routes.

So don't rule yourself out because an ad mentions a degree. Apply anyway if you can show the skills. What you can't skip is proof that you can do the job, which brings us to the real problem.

What do employers want to see if you have no experience?

They want evidence that you'll be useful quickly. On a CV with no security job on it, that evidence comes from three places.

A recognised certification. CompTIA Security+ is the one I'd start with for analyst roles. It turned up in 15.4% of the 149 permanent SOC analyst ads tracked by IT Jobs Watch in the six months to November 2026. It won't get you hired on its own, but it gets you past a lot of filters.

Hands-on work you can explain. A home lab is the minimum. Set up a free SIEM such as Splunk's trial or Microsoft Sentinel in a test environment, send logs to it, trigger some test alerts and write up what you found. Practice platforms like TryHackMe and Hack The Box help too, but write-ups of your own investigations beat badges.

Transferable experience, framed properly. If you've handled complaints, followed procedures under pressure, written reports or worked shifts, say so in plain terms. SOC work involves all of that.

A realistic plan for the next six months

Here's the order I'd tackle it in if I were starting from zero:

1. Learn networking basics properly: IP, DNS, ports, common protocols.
2. Start applying for first-line IT support roles now, while you study. Don't wait to feel ready.
3. Work towards Security+.
4. Build one home lab project and write it up on GitHub or a simple blog.
5. Once you're in an IT role, ask to help the security team. Volunteer for phishing reviews, patching reports or access audits.
6. After six to twelve months, apply for junior SOC or security analyst roles internally and externally.

Step 2 is the one people skip. Getting paid IT experience while you study is usually faster than studying for a year and then hunting for a security job with nothing to show.

Keep a simple log as you go: what you built, what broke, how you fixed it. When an interviewer asks about your experience, you'll have specific stories ready instead of vague claims about being passionate about security.

Is it worth going for remote cyber jobs with no experience?

You can try, but expect more competition. Fully remote junior roles attract applications from across the country. If you live near a city with security operations centres or managed service providers, an office-based or hybrid junior role is often easier to land, and you'll learn faster sitting next to experienced analysts.

When you search job boards, try several titles rather than one. "Junior SOC analyst", "security operations analyst", "cyber security apprentice", "IT support" and "service desk analyst" all surface different ads.

If you're still weighing up whether the field is right for you at all, read our take on whether cyber security is a good career first.

Mistakes that keep beginners stuck

A few patterns come up again and again. Collecting certificates without building anything. Applying only to "cyber security analyst" roles and ignoring IT support. Paying thousands for a course that promises a job but doesn't say how. Writing a CV that lists tools without showing what you did with them.

Fix those four and your odds go up a lot.

How Experiencely can help

If the missing piece is experience, our cyber security programme is designed to supply it. It combines training with five CompTIA certifications (A+, Network+, Security+, CySA+ and PenTest+), exam vouchers included, plus a live security project. You're placed on the project within 48 hours and put in roughly an hour a day for three months, fully remote. It costs £2,495, and if you're not hired within 60 days of finishing, you get your money back (conditions apply). You end up with real work to point to on your CV.

Frequently asked questions

Sources

Figures are taken from the sources below. Salary ranges are indicative and individual offers vary. Last checked 9 November 2026.

1. DSIT: Cyber security skills in the UK labour market 2026
2. IT Jobs Watch: 1st Line Support jobs, UK
3. IT Jobs Watch: SOC Analyst jobs, UK
4. Prospects: Cyber security analyst job profile