Cybersecurity is everywhere. Data breaches, phishing, and ransomware are in the news every day. Perhaps you have been considering a career in this field for some time and are seriously considering getting started in cybersecurity. The question is how to get started in cybersecurity, especially if you are not (yet) an IT professional or are considering a career change.

The honest answer is that it is entirely possible to start a career in cybersecurity in the Netherlands, even without years of IT experience. At the same time, it is not a magical leap. Entering the field requires a realistic plan, focus, and proof that you can actually do the work.

In this blog, you can read about what a feasible starting point looks like, which roles are realistic, and how you can build a cybersecurity career in the Netherlands step by step.

Starting cybersecurity in 2026: opportunities with nuance

The demand for digital professionals remains high. In 2023, there were more than 104,000 ICT vacancies in the Netherlands. The number of cybersecurity vacancies has grown significantly in recent years, demonstrating that working in cybersecurity remains a structural necessity.

At the same time, the market has become more selective. In 2025, the ICT sector experienced a temporary slowdown. According to Statistics Netherlands (CBS) , the number of jobs fell by approximately 5,000. This does not mean that the shortage will disappear, but it does mean that employers are taking a more critical look at who they hire.

For people who want to retrain in cybersecurity, this means that interest alone is no longer enough. You have to demonstrate that you can be deployed in a realistic role.

Why diplomas mean less than applicable skills

Many organizations are looking for experience, but everyone is fishing in the same pond. Vacancies remain open while essential work continues. Monitoring, incident follow-up, and basic security are not luxuries, but daily necessities.

Nevertheless, many job vacancies continue to place heavy emphasis on diploma requirements. Analyses of Dutch cybersecurity job vacancies show that only a small proportion are explicitly open to applicants without formal IT training. This means that motivated lateral entrants are often excluded from the selection process.

The essence of learning is therefore not only about acquiring knowledge, but also about demonstrating that you can apply that knowledge. Learning cybersecurity in practice makes that difference visible.

Getting started in cybersecurity without an IT background: what you really need

The popularity of the search term "cybersecurity training without an IT background" makes sense. Many people think that you first need to know how to program or have in-depth technical knowledge. In practice, it turns out that many skills from other professions are surprisingly well suited to this field.

People working in healthcare, education, or government often have a strong sense of responsibility and privacy. Those with a background in sales or customer contact are quicker than average to recognize social manipulation. Financial or administrative backgrounds often bring with them accuracy and risk awareness.

What is indispensable, however, is a willingness to take the basics seriously. Networks, accounts, permissions, logging, and cloud principles form the foundation. You can't learn all that in a weekend, but you can learn it step by step if you work consistently.

If you want to get started with cybersecurity today, this is the article you'll want to read over and over again.

From interest to enrollment: what a realistic starting point looks like

A realistic start is less spectacular than many people hope. No movie hacks and no fast titles. The work consists of understanding what is happening, why it is happening, and how to capture it.

In practice, this means that you learn to work with reports, log files, and fixed processes. You follow procedures, document carefully, and learn to recognize patterns. It is precisely this seemingly simple work that forms the basis of trust within security teams.

Those who take this phase seriously progress faster than those who only consume theory.

Working in cybersecurity: the first jobs in the Netherlands

Most newcomers do not start out as consultants or ethical hackers. In the Netherlands, the first real entry-level roles are usually in operational positions. These include junior SOC roles, security operations, or IT positions with a clear focus on security. GRC positions are also a realistic starting point for people with strong communication and analytical skills.

These roles are not a detour. They form the foundation on which further specialization is built. This is also evident from the figures: a significant proportion of new entrants to ICT now come from lateral entry. Retraining in cybersecurity has therefore become an established route.

Why learning cybersecurity in practice is crucial

Employers are looking less and less at how much you know, and more and more at how you work. Practical experience shows whether you can assess situations, justify choices, and take responsibility for your work.

Theory remains important, but without application it remains abstract. Those who focus on learning cybersecurity in practice significantly reduce the gap between learning and working.

From interest to enrollment at Trivian

Trivian guides people who want to start a career in cybersecurity through training courses that focus on doing, understanding, and applying. The focus is not on covering as much material as possible, but on relevant knowledge that ties in with real-world work.

You follow a clear learning path, work on practical assignments, and receive guidance that is honest about what you can and cannot do yet. This helps to keep expectations realistic and to grow in a focused way.

More information about the training routes can be found at https://trivian.nl/.

What employers really expect in 2025–2026

A resume opens doors, but employability determines whether you advance. Employers are looking for people who understand the basics, work carefully, and understand that cybersecurity requires collaboration between IT, business, and management.

Communication plays a bigger role in this than is often thought. You don't have to be a presenter, but you do need to be able to explain clearly what is going on and why it is relevant.

Getting started with cybersecurity without the hype

If you want to get started in cybersecurity , you have to accept that growth starts with doing. Retraining in cybersecurity works if you build up practical experience and show that you are learning from real situations. A cybersecurity training course without an IT background is achievable, as long as you take the basics seriously and are patient with your learning curve.

Working in cybersecurity rarely starts with the title that sounds best, but with the work that builds trust.

If you want to turn interest into enrollment, a down-to-earth approach makes all the difference. Find out which route suits you best via our training courses.