Become your organisation’s security specialist

Learn to monitor threats, assess vulnerabilities, harden systems and respond to incidents in a self-paced programme built for full-time professionals.

Book a free consultation

Cyber security apprentice working at a laptop, framed by logos of the tools the programme covers: Burp Suite, Python, Wazuh, Suricata, Wireshark and Nessus

Learn with 1:1 feedback from dozens of experts with experience at:

Apprenticeship standardCyber Security Technician Level 3

Duration18 months delivery

End Point Assessment (EPA)3 months

Worth£ 11,000

Fully-funded with Levy funding

Who is this training for?

This programme is for people who already work close to security but have not had formal training in it. Typical learners work in IT support, helpdesk, system administration, networking, compliance, risk or operations, and some are returning to work after a break.

You do not need a cyber security qualification or a coding background. The focus is on practical first-line security work rather than technical specialisation.

Eligibility criteria:

Employed in England for 30+ hours per week
Current role involves IT systems, data or security responsibilities
Aged 16+ (no upper age limit)
Able to commit to a minimum of 6 hours of off-the-job training per week

Blended learning with 10 practical projects
Future-proofed curriculum
Self-paced, 100% online
1:1 mentoring and community access

Flexible learning that works for you

The programme is designed to run alongside a full-time role, with 6 hours per week of guided learning. You will study online, at your own pace, with clear milestones to keep you moving forward.

From day one you will have a personal tutor for regular 1-to-1 check-ins, plus access to dozens of industry mentors who review your work and help you apply what you are learning to real situations.

Learner studying online alongside their job

Learn the tools real security teams run

You will build your own lab and work with the same tooling a real security team runs, from a SIEM and vulnerability scanners through to packet capture and malware sandboxes. Almost all of it is open source, so you can keep practising after the programme ends.

Leave with a portfolio as well as a certificate

Every module ends in a project reviewed 1-to-1 by a practitioner, from a vulnerability assessment through to a full incident response exercise. By the end you have 10 pieces of work you can show a hiring manager.

Gain a recognised qualification

On completion you will earn the nationally recognised Level 3 Cyber Security Technician qualification, worth £11,000. Both are recognised well beyond your current employer.

See if you’re eligible

Programme overview

Cyber Security is a work-based programme designed to take you from security fundamentals to running a working Security Operations Centre, even if you have never written a line of code.

Over 18 months you will build the judgment and skills to monitor for threats, assess and prioritise vulnerabilities, harden systems and respond to incidents. Learning is structured around focused modules and hands-on sprints, with every project tied to a real organisational scenario.

Tools and languages

WazuhElastic StackOpenVASNessusWiresharkpfSenseiptablesSnortSuricataMITRE ATT&CKOpenSSLGPGBurp SuiteOWASP WebGoatDVWAREMnuxPython

Core modules

01Cyber Security Foundations & Landscape

You will start by getting a clear picture of the security landscape: what the threats are, how controls work and where organisations are exposed. You will map real attack patterns, capture live network traffic and produce your first security assessment.

02Threats, Actors & Social Engineering

You will use MITRE ATT&CK to map the threat actors relevant to your sector, analyse real phishing campaigns, run malware analysis in a sandbox and write threat intelligence reports for business stakeholders.

03Vulnerabilities, Attacks & Assessment

You will run vulnerability scans, score findings using CVSS and produce remediation roadmaps. You will also assess AI and LLM-specific risks, which now matter to every organisation deploying AI tools.

04Identity, Data Protection & Asset Management

You will configure Active Directory with role-based access control, enforce MFA, build data classification schemes and analyse logs for insider threat indicators.

05Cryptography

You will encrypt files and communications, manage RSA key pairs, create and deploy TLS certificates and verify file integrity. Practical and hands-on from the first lesson.

06Hardening, Network Security & Monitoring

You will harden servers against CIS benchmarks, configure firewalls and intrusion detection, set up email authentication and deploy a full SIEM, ending with a working monitoring setup you built yourself.

07Security Architecture, Resilience & Change Management

You will design secure network architectures, configure VPNs and segmentation, implement Zero Trust access, build disaster recovery plans with RTO and RPO targets and document change management processes.

08Incident Response & Digital Forensics

You will run incident response tabletop exercises, create forensic disk images, reconstruct incident timelines from SIEM data and write reports for both technical and executive audiences.

09GRC, Compliance & Security Awareness

You will build risk registers with quantitative analysis, map policies against UK legislation, conduct vendor assessments, run mock compliance audits and design phishing simulation campaigns with real success metrics.

10Capstone Project

You will bring every domain together in one integrated security assessment, compile and present a professional portfolio.

Optional modules
Apprentices can add a CompTIA Security+ pathway covering all five exam domains: Security Concepts, Threats and Vulnerabilities, Security Architecture, Security Operations, and Governance, Risk and Compliance. Boom provides the learning content and exam preparation. The exam fee sits outside Levy funding, so it is paid by the employer or the apprentice. Security+ is recognised internationally, which is useful when clients and insurers ask who is handling your security.
End Point Assessment (EPA)
The programme finishes with an independent End Point Assessment. You will present a portfolio of projects and complete scenario-based tasks to demonstrate your competence. By this stage you will already have applied your skills at work, so the EPA formalises that. Passing earns the nationally recognised Level 3 Cyber Security Technician qualification.

How to get in

Our application process consists of three steps.

1
Book a free, non-binding consultation
Get all the information about the programme and funding.
2
Speak to your manager
We will help you bring this opportunity up to your manager, including how your role can cover first-line security duties.
3
Complete your application
Tell us about your role and career goals. We will help ensure the programme is right for you.

Learn from industry experts

Get feedback from dozens of mentors from top global companies. Every project you complete is reviewed 1:1, giving you personalised, practical advice you can apply immediately in your role.

What our customers say about us

“We have to be at the competitive edge to keep performing. Being leaders in AI and training our people feels like exactly the right moment — and we chose Boom Training because they've provided us with the capability we believe we need over the next three to four years.”

Andrew Jones

President @ ASR Group (Tate & Lyle Sugars) (Europe)

“There's a risk to not upskilling teams in AI. We want to give our workforce the confidence and competence to be ready — and Boom Training's specialisation in AI, combined with the interactive platform and mentor support throughout, made them the right partner for us.”

Gaynor Powley

Senior Director, Human Resources @ ASR Group (Tate & Lyle Sugars)

FAQ

Who can apply?

The programme is open to employees in England working 30+ hours per week whose role involves IT systems, data or security responsibilities, and who can commit at least 6 hours per week to off-the-job training. No prior cyber security or coding experience is required.

Do I have to pay?

No, the programme is fully funded through the Apprenticeship Levy for Levy-paying employers. If your employer does not pay into the Levy, a 5% co-investment may apply, and a Levy transfer can often cover even that. We will help you check options. For learners there is no cost at all.

How much time is required?

A minimum of 6 hours per week of off-the-job training, around 450 hours across the programme. There is no classroom attendance and no fixed timetable, so learning fits around real work.

What support will I get?

You will receive regular 1:1 check-ins with a personal tutor, project feedback from technical mentors from companies like Google, Spotify and Meta, and ongoing guidance through structured learning materials and milestones.

What qualification do I gain?

On completion you will earn the Level 3 Cyber Security Technician qualification, a nationally recognised apprenticeship certificate that aligns with Associate membership of BCS, The Chartered Institute for IT.

Ready to start a career in cyber security?

Book your free consultation today. No obligation. Just a clear plan on how to secure funding and start the programme.

Book my consultation call