Cyber Security Technician Level 3 (23/24)

This occupation is found in all sectors where information is held digitally and where that information is an asset that needs to be protected including but not limited to finance, retail, telecoms, health, media, manufacturing and local authorities.   

The broad purpose of the occupation is to provide first line cyber security support. This requires individuals to monitor and detect potential security threats and escalate as necessary and to support secure and uninterrupted business operations of an organisation through the implementation of cyber security mechanisms and the application of cyber security procedures and controls. 

Specific cyber security mechanisms and controls that an individual would be required to implement would include: patching software, installing software updates, implementing access control, configuring firewalls, security incident and event management tools (SIEM) tools and protection tools (Anti-virus, Anti-malware, Anti-spam). They will be responsible for their own activities with other resources made available to them as required. As directed, the employee will engage with specific cyber security events. The employee will be expected to work with internal and external stakeholders under general direction. They will use discretion in identifying and responding to complex issues and assignments and will usually receive specific instructions and will have work reviewed at frequent milestones. They will be expected to determine when issues should be escalated to a higher level.  

Ideal for those with 12 months or more experience working in a IT and Digital Technologies role, this Level 3 apprenticeship programme is a great opportunity for apprentices that have already completed the a Level 2 Digital and IT apprenticeship programme or full-time course and would like to further enhance their knowledge and skills. This programme is ideal for young people with work experience right through to mature apprentices wanting to retrain.

Procedures and controls 

Production and development of security culture 

Confidentiality, integrity and availability of digital information 

Installation and maintenance of technical security controls 

Identify, report and escalate information security incidents 

Cryptographic and certificate management activities 

Access rights to digital information assets 

Controlled environments 

Backup and recovery processes 

Vulnerability assessments and risk assessments 

Threat intelligence gathering 

Event information and incident, exception and management reports 

Cyber security policies, procedures, standards and guidelines 

Cyber security compliance 

Collaborative working 

Continuous Personal Development 

Detecting potential security threats