Can you really switch to cybersecurity in Morocco?
Yes, and it is actually one of the most common routes into the field. Many security professionals did not graduate from a specialised programme: they came from IT support, system administration, networking or software development. In Morocco, demand for security skills is growing with Law 05-20, the requirements of foreign clients served by offshoring centres, and the digital transformation of banks, insurers, telecom operators and public bodies.
The short answer: expect 6 to 12 months of steady work if you already hold an IT job, longer if you start from scratch. The typical path has four steps: strengthen the basics (networking, systems), earn a first general certification such as CompTIA Security+, prove your skills with a hands-on portfolio, then aim for an accessible first role (SOC level 1, IT security technician, junior GRC). The rest of this guide covers each step.
Who can make the switch, and which skills transfer?
No profile is ruled out, but your starting point changes how long the journey takes. The key is to identify what you already do that has value in security. A technician who spent years troubleshooting has built an investigative method; a developer reads code and understands web applications; a project manager knows how to document, prioritise and talk to the business.
- IT support / helpdesk: knowledge of workstations, Active Directory, tickets and users. A natural bridge to SOC level 1.
- System administrator: Windows Server, Linux, permissions and backups. An asset for hardening, vulnerability management and incident response.
- Network administrator: TCP/IP, firewalls, VPNs, routing. An ideal base for network security and traffic analysis.
- Developer: understanding of applications, APIs and code. A way into application security (AppSec) and, later, web pentesting.
- Non-IT profile (legal, audit, quality, project management): rigour, writing skills, process knowledge. A logical fit for GRC (governance, risk and compliance), provided you build a minimum technical foundation.
What roadmap should you follow to switch in 6 to 12 months?
A successful career change depends less on intensity than on consistency. Five to ten hours a week, sustained over time, beat a few weeks of sprinting followed by burnout. Here is a realistic breakdown for someone already comfortable with IT; if you start from zero, extend the first step.
- Months 1–2: strengthen the fundamentals. Networking (OSI model, TCP/IP, DNS, HTTP), the Linux command line, Windows administration and Active Directory basics.
- Months 2–4: prepare and pass a first general certification, typically CompTIA Security+, to structure your knowledge and get a title that reads well on your CV.
- Months 3–6: practise continuously. Build a homelab, follow guided paths on training platforms, take part in beginner CTFs and write your first write-ups.
- Months 5–8: choose a specialisation (defence/SOC, offensive, GRC) and start applying for entry-level roles in parallel.
- Months 8–12: land a first job or assignment, then prepare an intermediate certification aligned with your specialisation (CySA+, CEH v13 or ISO 27001 Lead Implementer).
Which first certification should a career changer choose?
For most career changers, CompTIA Security+ is the best starting point. It is a vendor-neutral, beginner-level certification covering threats, secure architecture, security operations and governance. Its SY0-701 exam has up to 90 questions in 90 minutes, including performance-based scenarios. With us, the course runs for 5 days (35 hours) and starts at 10,900 MAD, exam voucher included.
Why not aim higher straight away? Because CEH v13 (from 21,900 MAD) and CySA+ (from 12,900 MAD) assume the very foundations Security+ helps you build. Skipping them risks a costly failure and gaps that recruiters quickly spot in interviews. Once you are in a role, the next step depends on your specialisation: CySA+ for SOC analysis, CEH v13 for offensive work, ISO 27001 Lead Implementer (from 17,900 MAD) for GRC.
How do you build a portfolio that reassures recruiters?
Without security experience, your portfolio partly stands in for the years of practice you do not yet have. It shows a recruiter that you can do the work, not just that you studied. It does not need to be spectacular; it needs to be concrete, documented and honest.
- A homelab: a few virtual machines (a domain controller, a Windows workstation, a Linux box, an open-source SIEM) to generate logs, simulate attacks and write detection rules.
- CTFs: take part in beginner competitions, alone or in a team, and keep a record of your results.
- Write-ups: explain in writing how you solved a challenge or analysed a simulated incident. It is the best proof of your ability to write, a highly valued skill.
- A GitHub repository: your automation scripts, detection rules and lab configuration notes, with a clear README.
- A consistent LinkedIn profile: a headline aimed at the target role, your certifications, links to your write-ups and GitHub.
How do you build a cybersecurity network in Morocco?
A large share of hiring happens through networks, especially for junior or unconventional profiles. Morocco has an active cybersecurity community: student clubs and associations run CTFs and conferences, tech events take place regularly in Casablanca, Rabat and other cities, and many professionals share their experience online.
In practice, follow and thoughtfully comment on posts by Moroccan professionals on LinkedIn, publish your write-ups, join open CTFs and local meetups, and do not hesitate to ask someone who holds the role you are targeting for a short conversation. Present yourself as a career changer with a clear plan: that approach is generally well received.
Which first jobs should you target after switching?
Pentesting is the dream job for many, but it is rarely the first one. The following entry-level roles are more accessible and make excellent stepping stones:
- SOC analyst level 1: alert monitoring, incident triage, escalation. Hired by in-house SOCs at large companies, managed security service providers and offshoring centres.
- IT security technician or administrator: managing firewalls, antivirus/EDR, patches and access. Often reachable internally for a system or network administrator.
- Junior GRC consultant or analyst: risk mapping, security policies, audit preparation, compliance tracking (ISO 27001, Law 05-20). Suited to people from audit, quality or legal backgrounds.
- Internal mobility: if your employer has a security team, moving internally is often the fastest route, since you already know the information system.
How can you fund your cybersecurity training in Morocco?
If you are employed, start by talking to your employer: security upskilling directly benefits the company, which may cover all or part of the training, for example through its training plan. If you pay yourself, spreading the cost and starting with an entry-level certification keeps the initial investment manageable.
At GATech, our courses include the official exam voucher and run in Casablanca, Rabat or live online. Several offers make a career change easier: 10% off for early registration (at least 4 weeks before the session), 15% for students and graduates of less than 12 months, 15% from 3 participants from the same company, and 3 interest-free instalments for individuals. Discounts cannot be combined. A conversation with our advisers will help you pick the right first certification for your profile.
Frequently asked questions
How long does it take to switch to cybersecurity?
If you already work in IT (support, systems, networking, development), expect roughly 6 to 12 months of steady work at 5 to 10 hours a week. Without an IT background, allow more time, since you first need to learn networking and systems basics.
Do you need an engineering degree to work in cybersecurity in Morocco?
Not necessarily. A degree helps with some employers, but many entry-level roles (SOC level 1, IT security technician, junior GRC) are open to people with IT experience, a recognised certification such as Security+ and a hands-on portfolio that proves their skills.
Can you move into cybersecurity without knowing how to code?
Yes. Coding is not essential to get started, especially in a SOC or in GRC. However, being able to read and write small scripts (Bash, Python or PowerShell) quickly becomes an advantage, and it is almost a must if you want to move into pentesting.
Why start with Security+ rather than CEH?
Security+ is a beginner-level certification that lays the foundations (threats, architecture, operations, governance) in up to 90 questions and 90 minutes. CEH v13 is intermediate and assumes those foundations. Starting with Security+ lowers the risk of failing and costs less: from 10,900 MAD versus 21,900 MAD at GATech.
Which first job should you aim for after switching to cybersecurity?
The most accessible roles are SOC analyst level 1, IT security technician or administrator, and junior GRC analyst. The right choice depends on your background: technical profiles usually head to the SOC, while audit, quality or legal profiles tend towards GRC.
GATech teaching team
Cybersecurity trainers and consultants preparing professionals in Morocco for CEH, OSCP+, CISSP, CompTIA and ISO 27001.
Published
