Cybersecurity & IT
Qualifications and eligibility
A practical guide to qualifications, costs, timing, and eligibility conditions commonly referenced in this industry.
Qualifications
CompTIA Security+
Entry-level cybersecurity certification often referenced for SOC and junior cyber roles.
- What it does
- Shows baseline understanding of threats, controls, risk, identity, networks, and incident response vocabulary.
- Time it takes
- Usually 1 to 3 months of part-time study depending on prior IT knowledge.
- Price range
- Exam voucher typically around £250-£320, with optional training adding more.
- Where to get it
- CompTIA, training providers, college courses, or self-study with labs and practice exams.
CompTIA Network+
Networking foundation useful for IT support and security roles.
- What it does
- Helps candidates understand TCP/IP, DNS, routing, troubleshooting, and network operations.
- Time it takes
- Usually 1 to 3 months of part-time study.
- Price range
- Exam voucher typically around £250-£320, with optional courses varying widely.
- Where to get it
- CompTIA, colleges, online training providers, and self-study labs.
CompTIA A+
Common entry-level IT support certification.
- What it does
- Covers hardware, operating systems, troubleshooting, support process, and basic security.
- Time it takes
- Usually 2 to 4 months because it has two exams.
- Price range
- Two exam vouchers typically total around £400-£500, before optional training.
- Where to get it
- CompTIA, colleges, apprenticeships, online training providers, and self-study.
Hands-on labs and portfolios
Practical evidence such as home labs, CTF write-ups, ticket examples, or documented troubleshooting projects.
- What it does
- Shows applied ability and gives interviewers concrete examples beyond certificates.
- Time it takes
- Ongoing. A small portfolio can be started in a few weekends.
- Price range
- Free to low-cost if using community labs and free tiers; paid platforms vary.
- Where to get it
- TryHackMe, Hack The Box, GitHub, personal write-ups, vendor sandboxes, and home lab projects.
Eligibility conditions
Right to work
Employers must confirm the candidate can legally work in the relevant country.
- What it means
- This usually means checking immigration status, visa conditions, or citizenship/work permit evidence before employment.
- Who may be ruled out
- People without permission to work, or whose visa conditions do not allow the role or hours.
- How strictly it is enforced
- Applies broadly across employers, not only government jobs. Enforcement is usually strict because employers can face penalties.
Security clearance
Some cyber and IT roles require formal vetting before accessing sensitive systems or government data.
- What it means
- Checks can include identity, employment history, criminal record, finances, and sometimes nationality/residency criteria.
- Who may be ruled out
- Candidates who cannot meet residency/history checks, have disqualifying risk factors, or cannot wait for clearance timing.
- How strictly it is enforced
- Strict for government, defence, critical infrastructure, and some supplier roles. Not required for all private-sector cyber jobs.
Background checks
Employers may check criminal records, references, employment history, or education claims.
- What it means
- The check verifies trustworthiness and whether the candidate can safely access systems, customers, or sensitive information.
- Who may be ruled out
- People with unresolved discrepancies, serious relevant convictions, or unverifiable history may be delayed or rejected.
- How strictly it is enforced
- Varies by employer and role. Usually stricter for finance, security, regulated data, and privileged access roles.