0 offers · 0 programmes
Careers · Training

Cybersecurity work-study 2026: training and careers

Looking for a sector that is hiring heavily on a work-study basis for the 2026 intake? Cybersecurity ticks every box: a talent shortage, attractive salaries and a high hiring rate at the end of the contract. Here is how to train for it and which career paths to aim for.

In short: cybersecurity is one of the most promising fields of 2026, with 15,000 to 20,000 positions to fill each year in France and a persistent shortage of professionals. You can train for it on a work-study basis from a two-year to a five-year degree (BTS CIEL, bachelor's, master's), for roles such as SOC analyst, penetration tester or security consultant. During the work-study, your pay follows the legal scale (a percentage of the minimum wage); after graduation, salaries rise quickly.

Why train in cybersecurity in 2026?

The surge in cyberattacks, new regulatory obligations (the NIS2 directive) and the digitalisation of businesses create a structural need for skills. The result: the market is short-handed. France is estimated to have between 15,000 and 20,000 hires per year in cybersecurity, a figure that could climb further by 2028.

For a work-study candidate, this is an ideal position. A sector under strain means more openings, less competition at an equal qualification, and better chances of landing a contract — then a permanent job. This is exactly the logic detailed in our analysis of the rebounding work-study market in 2026.

Cybersecurity is one of the few fields where demand lastingly outpaces the supply of candidates. Training now means betting on a job that never knows unemployment.

Which cybersecurity work-study programmes are available?

Good news: there is not just one way in. Depending on your level, several courses can be taken under an apprenticeship or professionalisation contract.

LevelProgrammeEntry
Two yearsBTS CIEL (networks and IT option), BTS SIO (SISR option)After the baccalaureate
Three yearsCybersecurity bachelor's, professional degree in networks & securityAfter a two-year degree
Five yearsCybersecurity master'sAfter a three-year degree

The BTS CIEL (Cybersecurity, IT, Networks, Electronics) is the most common entry route. It takes two years (around 1,350 hours of training) and remains open after an STI2D baccalaureate, a CIEL vocational baccalaureate or a general baccalaureate with a scientific focus. In a work-study format, it alternates periods at the training centre with assignments in the company — often on a rhythm of one week of classes for three weeks on the job.

Not yet decided on your direction? Our career profiles and the catalogue of work-study programmes help you pinpoint the course that fits your profile. And if you are still hesitating over which path to take, revisit our tips on choosing your work-study wisely.

Rack of servers and network cables in a data centre, illustrating the infrastructure protected by cybersecurity roles

Which roles and salaries after the work-study?

A cybersecurity work-study opens the door to a range of concrete jobs:

  • SOC analyst: monitors systems and detects and handles security incidents in real time.
  • Penetration tester (pentester): simulates attacks to spot flaws before hackers do.
  • Security administrator / technician: secures networks, workstations and access on a daily basis.
  • GRC consultant (governance, risk, compliance): supports companies on standards and regulation.
  • Cybersecurity project manager: leads security projects, a role usually reached after a five-year degree.

On pay, two moments must be distinguished. During the work-study, your salary does not depend on the sector but on the legal scale: a percentage of the minimum wage calculated according to your age and contract year. Estimate yours in a few clicks with our salary simulator.

After graduation, levels take off. A junior SOC analyst starts at around €2,600 gross per month, while a penetration tester typically begins between €2,900 and €4,000 gross per month — with strong prospects for progression as experience grows.

How to land your cybersecurity work-study?

The sector is hiring, but a contract does not fall from the sky: you have to apply early and widely. The May–July window concentrates the most openings for a September intake, and you have a three-month window after the course starts to sign.

Check the work-study offers regularly, multiply speculative applications to IT services firms, banks and large groups, and remember to tap into the financial aids (housing, mobility, equipment) that top up your pay.

Cybersecurity is a winning bet for 2026: a future-proof job, strong demand and fast entry into work. Start your search today so you don't miss the September window.

Frequently asked questions

Which cybersecurity programmes can be done as a work-study?

From a two-year to a five-year degree: the BTS CIEL (networks and IT option), the BTS SIO (SISR option), a cybersecurity bachelor's (three years), then a specialised master's (five years). Most of these are available under an apprenticeship or professionalisation contract.

Is cybersecurity really hiring in 2026?

Yes. France has between 15,000 and 20,000 cybersecurity positions to fill each year, and the talent shortage remains severe. It is one of the best sectors for securing a work-study contract.

How much does a cybersecurity apprentice earn?

In a work-study contract, pay follows the legal scale: a percentage of the minimum wage based on your age and contract year, not the sector. Estimate your pay with our salary simulator. After graduation, a junior SOC analyst starts at around €2,600 gross per month.

Do you need to be an IT expert to start?

No. The BTS CIEL is open to holders of an STI2D baccalaureate, a CIEL vocational baccalaureate or a general baccalaureate with a scientific focus. Work-study is precisely designed to build skills gradually, in the workplace and at the training centre.

Which roles does a cybersecurity work-study lead to?

SOC analyst, security technician or administrator, penetration tester (pentester), governance-risk-compliance (GRC) consultant or cybersecurity project manager, depending on your qualification level.

← Back to the blog