Cyber Security training courses in the UK
 

Security courses for tech & business users, from beginner to expert
 

Live, instructor-led, hands-on courses for corporate developers, data analysts and engineers - beginner to advanced - delivered virtually or face to face in London and across the UK.

Security Training • Updated Aug 2026


EDF logo Capita logo Sky logo NHS logo RBS logo BBC logo CISCO logo

Cyber Security & Application Security Training Courses

The Cyber Security Training Course Group provides access to a comprehensive collection of professional training courses covering application security, secure coding, cloud security, security certifications, and organisational risk management.

This course group spans secure development practices (Threat Modelling, OWASP Top 10, Secure by Design, secure coding in Java, JavaScript, ASP.NET, PHP, and Python), cryptography and infrastructure security (TLS & PKI, Post Quantum Cryptography), governance and compliance (PCI DSS, Information Security, Microsoft Purview), professional certifications (CISSP, CISM, CISA, CCSK, CCAK), and organisational resilience (Social Engineering, Cyber Attack Simulation, Risk Management for Engineering Leaders).

Whether you're a developer building security into your code from day one, a security professional preparing for certification, or a technical leader managing organisational risk, this course group provides a complete learning pathway with practical, hands-on training delivered by experienced security specialists.

Learning Outcomes - What You Will Learn
Core skills and competencies gained across our Security training programmes.

 

✓ Identify security threats and design flaws early using threat modelling techniques

✓ Apply OWASP Top 10 principles to secure web application development

✓ Write secure code in Java, JavaScript, ASP.NET, PHP, and Python

✓ Implement TLS and PKI correctly for encrypted communications and certificate management

✓ Understand Post Quantum Cryptography and plan for quantum-resistant migration

✓ Apply Secure by Design principles across the software development lifecycle

✓ Understand compliance frameworks including PCI DSS, and cloud security standards

✓ Prepare for professional certifications including CISSP, CISM, CISA, CCSK, and CCAK

 

Security Training for Every Role

Courses matched to your background and what you need to build.

🧑‍💻Software Developers

Build security into your code from the outset with secure coding courses for Java, JavaScript, ASP.NET, PHP, and Python, plus threat modelling and OWASP Top 10 training.

🏗️Solutions Architects & Technical Leads

Apply Secure by Design principles, threat modelling, and security architecture patterns to build resilient systems from the ground up.

🔒Security Professionals

Prepare for industry-recognised certifications including CISSP, CISM, CISA, CCSK, and CCAK, and build deep expertise in cloud security, cryptography, and information security management.

🏢IT & Compliance Teams

Understand PCI DSS compliance, information security governance, and data protection frameworks including Microsoft Purview.

🛡️Infrastructure & Network Teams

Implement TLS and PKI correctly, and understand the emerging threat landscape around Post Quantum Cryptography and cryptographic infrastructure.

👔Engineering & Technical Leaders

Understand organisational security risk, social engineering threats, and how to build and lead security-conscious engineering teams.

Whether you're a developer securing your own code, a security professional pursuing certification, or a leader managing organisational risk, this course group provides a complete learning pathway across every layer of application and information security.

What Delegates Say - Testimonials

★★★★★ "The threat modelling course changed how our whole team approaches design reviews. We're catching security issues far earlier now."

Lead DeveloperFinancial Services, London

★★★★★ "Excellent, practical coverage of the OWASP Top 10. Real examples, not just theory — exactly what our development team needed."

Engineering ManagerTechnology Sector, London

★★★★★ "Great preparation for CISSP. Well-structured, thorough, and the instructor's real-world experience made a real difference."

IT Security ManagerPublic Sector, Bristol

 

Training Delivery Options

 

🖥️  Online Live Training

Instructor-led interactive sessions delivered remotely. Same hands-on labs, same expert trainer — no travel required.

📍London Classroom

Attend scheduled public courses at our London training centre. Network with peers from across the industry.

🏢Onsite at Your Premises

We come to you. Ideal for development and security teams who want training tailored directly to their technology stack, language, and compliance requirements.

🎯Bespoke Corporate Programmes

Multi-module security programmes designed around your organisation's technology stack, industry sector, and regulatory obligations.

JBI Training offers a broad range of cyber security and application security courses covering both technical and managerial disciplines. Available courses include Threat Modelling for Developers, Secure Web Application Development, OWASP Top 10 Practical Web Application Security, TLS and PKI in Practice, Secure Coding for Java and JavaScript, Secure Coding in ASP.NET, Secure Coding in PHP, Security for Python, Secure by Design, Post Quantum Cryptography, Social Engineering, Information Security, Cyber Attack Simulation, PCI DSS Compliance, CISSP, CISM, CISA, Certificate of Cloud Security Knowledge (CCSK), and Certificate of Cloud Auditing Knowledge (CCAK). All courses are available as scheduled classroom sessions in London, as live online instructor-led training, or as customised onsite programmes for development and security teams.
Threat modelling is a structured process used to identify security weaknesses in software design and architecture before any code is written. It involves creating an abstraction of the system, profiling potential attackers and their methods, and producing a catalogue of threats so that countermeasures can be defined and prioritised early in the development lifecycle. It is particularly important for developers and architects because it identifies design flaws that code reviews and testing alone may miss, reduces the cost of remediation by detecting issues before deployment, and integrates naturally into Agile and DevOps workflows. JBI's Threat Modelling for Developers course is language-agnostic and suitable for teams working with any modern development process.
The OWASP Top 10 is a widely recognised list of the most critical security risks to web applications, published by the Open Web Application Security Project. It covers vulnerabilities such as injection attacks, broken authentication, insecure design, security misconfigurations, vulnerable components, and others that are commonly exploited in real-world attacks. JBI offers a dedicated OWASP Top 10 Practical Web Application Security course, and OWASP principles are also embedded in the Secure Web Application Development and Threat Modelling courses. These courses are suitable for developers, security engineers, and QA professionals who need to understand and address common web application vulnerabilities.
Yes. A significant part of JBI's security curriculum is specifically designed for developers and software engineers rather than for dedicated security professionals. Courses such as Threat Modelling for Developers, Secure Web Application Development, Secure Coding for Java and JavaScript, Secure Coding in ASP.NET, Secure Coding in PHP, and Security for Python are aimed at development teams who need to build security into their code and architecture from the outset. These courses can be delivered as customised onsite programmes for software teams, tailored to the languages, frameworks, and development processes the team already uses.
JBI offers preparation courses for several internationally recognised security certifications. These include CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager), CISA (Certified Information Systems Auditor), Certificate of Cloud Security Knowledge (CCSK), and Certificate of Cloud Auditing Knowledge (CCAK). These courses are designed to prepare candidates for their respective examinations and are suitable for information security managers, auditors, risk professionals, and senior technical staff who want to demonstrate formal competence in information security management and cloud security.
Post Quantum Cryptography (PQC) refers to cryptographic algorithms designed to be resistant to attacks from quantum computers, which are expected to eventually break many of the encryption standards currently in use — including RSA and elliptic curve cryptography. Organisations in finance, government, defence, and critical infrastructure are beginning to assess and plan their migration to quantum-resistant algorithms in response to guidance from standards bodies including NIST. JBI's Post Quantum Cryptography course covers the threat landscape, the current state of quantum computing, the new PQC standards, and practical approaches to transitioning cryptographic infrastructure.
The Secure by Design course covers the principles and practices of building security into software and systems from the earliest stages of design, rather than adding it as an afterthought after development. Topics include security architecture patterns, design principles such as least privilege and defence in depth, risk-based design decisions, integrating security requirements into user stories and system specifications, and applying secure design thinking within Agile and DevOps environments. The course is aligned with current guidance from bodies including NCSC (National Cyber Security Centre) and is relevant for architects, senior developers, and technical leads.
Yes. All of JBI's security courses can be delivered as customised onsite or online programmes for corporate teams. Content can be tailored to the organisation's technology stack, development language, industry sector, compliance requirements, and security maturity level. JBI has delivered security training for organisations across financial services, healthcare, government, media, and technology, including clients such as the BBC, NHS, Cisco, RBS, and Capita. Organisations with specific regulatory or compliance obligations — such as PCI DSS, GDPR, or sector-specific frameworks — can request content that addresses those requirements directly.
TLS (Transport Layer Security) is the protocol used to encrypt data in transit across networks, and is the technology behind HTTPS and secure communications in modern applications. PKI (Public Key Infrastructure) is the framework of certificates, certificate authorities, and key management processes that underpin TLS and other certificate-based security mechanisms. JBI's TLS and PKI in Practice course covers how these technologies work in real deployment scenarios, common misconfigurations and vulnerabilities, certificate lifecycle management, and practical implementation for developers and infrastructure teams. This is particularly relevant for organisations managing APIs, microservices, internal networks, or customer-facing web applications.
Yes. JBI's security training content is continuously reviewed and updated to reflect the latest threat landscape, newly published vulnerabilities, updated standards, and current regulatory guidance. This includes updates to OWASP guidance, changes to cryptographic standards, emerging attack techniques such as AI-assisted social engineering and supply chain attacks, and the latest PQC standards from NIST. Delegates learn skills and concepts that are directly applicable to the security challenges organisations face today.

CONTACT


+44 (0)20 8446 7555

enquiries@jbinternational.co.uk

 

Copyright © 2026 JBI Training. All Rights Reserved.
JB International Training Ltd  -  Company Registration Number: 08458005
Registered Address: Wohl Enterprise Hub, 2B Redbourne Avenue, London, N3 2BS

Modern Slavery Statement & Corporate Policies | Terms & Conditions | Contact Us

POPULAR

AI training courses                                                                        CoPilot training course

Threat modelling training course   Python for data analysts training course

Power BI training course                                   Machine Learning training course

Spring Boot Microservices training course              Terraform training course

Data Storytelling training course                                               C++ training course

Power Automate training course                               Clean Code training course