Tech Degree Apprenticeship.

Core Skills but not exhaustive are: Software Engineer The primary role of a software engineer is to be able to design, build and test high-quality software solutions. The software engineer role is broader and with higher levels of responsibility than a software developer as they need to apply engineering principles to all stages of the software development process, from requirements, analysis and design, development and data requirements whilst ensuring security robustness is built in. They will typically be working as part of a larger collaborative team and will have responsibility for significant elements of software projects. Skills  Create effective and secure software solutions using contemporary software development languages to deliver the full range of functional and non-functional requirements using relevant development methodologies. Undertake analysis and design to create artefacts, such as use cases to produce robust software designs. Produce high quality code with sound syntax in at least one language following best practices and standards. Perform code reviews, debugging and refactoring to improve code quality and efficiency. Test code to ensure that the functional and non-functional requirements have been met. Deliver software solutions using industry standard build processes, and tools for configuration management, version control and software build, release and deployment into enterprise environments. Technical Knowledge Knows and understands: How to operate at all stages of the software development lifecycle. How teams work effectively to develop software solutions embracing agile and other development approaches. How to apply software analysis and design approaches. How to interpret and implement a design, compliant with functional, non-functional and security requirements. How to perform functional and unit testing. How to use and apply the range of software tools used in Software engineering. Cyber Security Specialist A cyber security analyst is responsible for the implementation, maintenance and support of the security controls that protect an organisation’s systems and data assets from threats and hazards. They ensure that security technologies and practices are operating in accordance with the organisation’s policies and standards to provide continued protection. They require a broad understanding of network infrastructure, software and data to identify where threat and hazard can occur. They are responsible for performing periodic vulnerability assessments to evaluate the organisation’s ongoing security posture and will provide visibility to management of the main risks and control status on an ongoing basis. They respond to security incidents and implement resolution activities across the organisation. Skills: Able to analyse and evaluate security threats and vulnerabilities to planned and installed information systems or services and identify how these can be mitigated against. Perform security risk assessments for a range of information systems and propose solutions. Develop a security case against recognised security threats, and recommend mitigation, security controls and appropriate processes. Define and justify a user access policy for an information system given knowledge of the system architecture, security requirements and threat/risk environment. This should be in terms of what they can do, resources they can access, and operations they are allowed to perform. Perform a business impact analysis in response to a security incident and follow a disaster recovery plan to meet elements of a given business continuity policy. Conduct a range of cyber security audit activities to demonstrate security control effectiveness Technical Knowledge Knows and understands: The types of security (confidentiality, authentication; non-repudiation; service integrity) and security big picture (network security; host OS security; physical security). The main types of common attack techniques, including phishing, social engineering, malware, network interception, blended techniques, denial of service and theft. How to recognise and assess risk including performing a risk assessment. How to apply penetration testing effectively and how it contributes to assurance. The different approaches to risk treatment and management in practice. What the ‘cyber security culture’ in an organisation is, and how it may contribute to security risk. Data analyst The primary role of a data analyst is to collect, organise and study data to provide new business insight. They are responsible for providing up-to-date, accurate and relevant data analysis for the organisation. They are typically involved with managing, cleansing, abstracting and aggregating data across the network infrastructure. They have a good understanding of data structures, software development procedures and the range of analytical tools used to undertake a wide range of standard and custom analytical studies, providing data solutions to a range of business issues. They document and report the results of data analysis activities making recommendations to improve business performance. They need a broad grounding in technology solutions to be effective in their role. Skills  Able to Import, cleanse, transform, and validate data with the purpose of understanding or making conclusions from the data for business decision making purposes. Present data visualisation using charts, graphs, tables, and more sophisticated visualisation tools. Perform routine statistical analyses and ad-hoc queries. Use a range of analytical techniques such as data mining, time series forecasting and modelling techniques to identify and predict trends and patterns in data. Report on conclusions gained from analysing data using a range of statistical software tools. Summarise and present results to a range of stakeholders making recommendations. Technical Knowledge Knows and understands: The quality issues that can arise with data and how to avoid and/or resolve these. The processes involved in carrying out data analysis projects. How to use and apply industry standard tools and methods for data analysis. The range of data protection and legal issues. The fundamentals of data structures, database system design, implementation and maintenance. The organisation's data architecture.