Free cybersecurity training in Germany is possible through the Bildungsgutschein, a government-issued voucher from the Agentur für Arbeit that covers 100% of tuition at AZAV-certified providers. This is not a discount or a partial subsidy. It means your course fees, exam vouchers, and learning materials are paid for entirely by the German federal employment system, without any cost to you.
For career changers, this changes the calculation entirely. You don’t have to save up for a bootcamp. You don’t take on debt. You attend a full-time, professionally structured training program for 12-14 months and come out the other side with industry-recognised certifications and an internship on your CV. This guide covers exactly who qualifies, how to apply, and what the training actually includes.
What Is Free Cybersecurity Training in Germany?
The Bildungsgutschein: Germany’s Fully-Funded Training Voucher Explained
The Bildungsgutschein is a voucher system established under German employment law (SGB III) that funds professional retraining for people who are unemployed or at risk of unemployment. It is issued by the Agentur für Arbeit (federal employment agency) or the Jobcenter (for Bürgergeld recipients) after a counselling session where you discuss your career goals. The voucher has a specific value that covers the cost of a defined AZAV-certified program. AZAV stands for Akkreditierungs- und Zulassungsverordnung Arbeitsförderung and is the government accreditation standard for training providers. Only programs from AZAV-certified providers are eligible for Bildungsgutschein funding.
What ‘Free’ Actually Means (Tuition, Materials, and What’s Covered)
The Bildungsgutschein covers tuition, exam vouchers, and training materials in full. It does not cover your living expenses during the program. If you’re receiving unemployment benefits (Arbeitslosengeld I or Bürgergeld), those continue while you train. If you’re employed but the Bildungsgutschein is issued through the Qualifizierungschancengesetz, your employer and the employment agency share the training cost. You need to confirm the exact coverage with your counsellor, but for most participants the training itself is genuinely free.
Why 2026 Is the Best Year to Start Free Cybersecurity Training
NIS2: 30,000 German Companies Now Legally Required to Hire Security Staff
The NIS-2 implementation law, officially the NIS2UmsuCG, came into force in Germany on 6 December 2025. It places around 29,500 companies and public bodies across sectors, including energy, healthcare, banking, transport, and digital infrastructure, under binding cybersecurity obligations. These organisations must maintain qualified IT security staff, implement risk management processes, report significant incidents within 24 hours, and demonstrate compliance when audited. Many of them are not adequately staffed. According to the ISC2 2024 Cybersecurity Workforce Study, Germany has approximately 120,000 unfilled cybersecurity positions. NIS-2 obligations have accelerated that demand considerably. You are entering a job market that structurally needs more people than it currently has.
106,000 Open Cybersecurity Roles in Germany (ISC² Workforce Study)
The ISC2 2024 Cybersecurity Workforce Study reports approximately 120,000 unfilled cybersecurity positions in Germany. For career changers, this means you’re not competing for scarce slots. Employers in banking, healthcare, logistics, and government are actively recruiting people who have the foundational qualifications and the practical skills to contribute quickly. Roles like SOC Analyst Level 1, IT Security Administrator, GRC Analyst, and Compliance Specialist are consistently listed with entry-level requirements that a well-prepared Weiterbildung graduate can meet. For a current picture of what these roles pay, see the cybersecurity salary guide.
Who Qualifies for Free Cybersecurity Training via Bildungsgutschein?
Eligibility Requirements from the Agentur für Arbeit
You qualify for the Bildungsgutschein if you are currently registered as unemployed with the Agentur für Arbeit, if you are employed but your position is likely to become redundant within the next 12 months, or if you are in a Kurzarbeit (short-time work) arrangement. Your counsellor will assess eligibility based on your employment situation and the relevance of the proposed training to your future employment. There is no minimum age, and prior education level does not disqualify you. You do not need any IT background to qualify for a cybersecurity training program.
Can Foreigners and Non-German Speakers Qualify?
Yes. You do not need to be a German citizen. You need to have the legal right to reside and work in Germany, which covers EU citizens, people with valid residence permits, and people on Niederlassungserlaubnis. Non-German speakers can qualify and can train at programs that deliver instruction in English. The Cybersteps program runs in English, making it suitable for international residents in Germany who meet the employment-status eligibility criteria. See the Bildungsgutschein courses in English overview for more on this.
How to Get Your Cybersecurity Training Fully Funded (Step by Step)
Step 1 — Apply to an AZAV-Certified Program
Before you visit the employment agency, identify the AZAV-certified program you want to attend. This gives your counsellor a concrete proposal to evaluate. Cybersteps is AZAV-certified through CERTQUA and accepts the Bildungsgutschein. Start by reviewing the Cybersteps program overview and the admission requirements, then complete a program application.
Step 2 — Book Your Agentur für Arbeit Appointment
Contact your local Agentur für Arbeit or Jobcenter and request a counselling appointment for a Weiterbildungsberatung (training counselling session). Explain that you want to retrain for a cybersecurity career. Bring documentation of your employment situation and information about the program you’ve chosen. Mention that it is AZAV-certified, as this is a prerequisite that the counsellor will verify.
Step 3 — Receive and Redeem Your Bildungsgutschein
If your counsellor approves the training, they issue a Bildungsgutschein with a specific value and validity period (usually three months). The voucher specifies the educational objective and the approved cost ceiling. You submit this voucher to the training provider when you enrol. Cybersteps has a team that helps applicants through this step. The Bildungsgutschein guide covers the full application process in detail.
Step 4 — Start Training and Access Career Support
Once enrolled, your training begins. At Cybersteps, career support starts from Day 1 and runs through the internship and beyond. The Careersteps program includes CV and LinkedIn profile development, technical and behavioural interview preparation, job search strategy coaching, and access to a network of 400+ partner companies in Germany and Europe. Career support continues until you find a job.
What Does a Free Cybersecurity Training Program Include?
Curriculum: From Fundamentals to Specialization Tracks
The Cybersteps curriculum runs across four modules. Module 1 builds computer fundamentals, networking, operating systems, cryptography, and AI essentials from zero. Module 2 covers core cybersecurity, including threat analysis, web application security, SIEM tools, incident response, and GRC frameworks, culminating in CompTIA Security+ preparation. Module 3 covers cloud and enterprise security with Azure, DevSecOps, Microsoft Sentinel, and identity management. Module 4 is a specialised track you choose with your mentor’s guidance, from six options: Security Operations (SOC), Cloud Security, Penetration Testing, GRC, Project Management, or Application Security. Read the full syllabus for the complete module breakdown.
Certifications Included (CompTIA Security+, Azure, and More)
Every exam voucher is included in the funded program cost. You work toward CompTIA Tech+ in Module 1, CompTIA Security+ in Module 2, Microsoft Azure Fundamentals (AZ-900) and Microsoft Security, Compliance and Identity Fundamentals (SC-900) in Module 3, and a specialisation certification in Module 4. Specialisation options include Azure SC-200, HTB CPTS (Certified Penetration Testing Specialist), PECB ISO/IEC 27001 Lead Implementer, BSI IT-Grundschutz Practitioner, CompTIA Project+, and HTB Certified Offensive AI Expert (COAE). See the certifications overview for the full list.
Career Support: Mentoring, Internships, and Job Placement
The 8-week full-time internship is placed through a network of 400+ partner companies across Germany and Europe. Placement is guaranteed for students who meet performance requirements. Internship fields include Cybersecurity Analyst, SOC Analysis, IT Security Administration, Network Security, Cybersecurity Consulting, and GRC Compliance. Employers, including BeyondTrust, SIXT, Vega, and CyberR, interview Cybersteps’ graduates for internships and full-time roles. Many offer permanent employment after the placement. After the internship, career coaching continues until you sign an employment contract.
Is Free Cybersecurity Training in Germany Really Free?
The training itself is free when funded by the Bildungsgutschein. Tuition, exam vouchers, and learning materials are covered entirely. Your living costs during the program are not covered by the voucher, but unemployment benefits continue for eligible recipients. For most participants, the net cost of attending is the time invested rather than money out of pocket.
Can I Start Cybersecurity Training with No IT Background?
Yes. The Cybersteps program starts from zero in Module 1, which covers computing fundamentals, networking, operating systems, and basic security concepts. You don’t need prior IT experience to enrol or to succeed in the program. Student feedback consistently notes that the instructors are accessible for beginners while maintaining enough technical depth to produce job-ready graduates. People who come from non-technical backgrounds, including retail, administration, finance, and teaching, have successfully completed the program and found cybersecurity employment.
What Jobs Can I Get After Free Cybersecurity Training in Germany?
After completing the Cybersteps program, graduates are qualified for entry-level roles, including SOC Analyst Level 1, IT Security Administrator, GRC Analyst, Cloud Security Engineer, Cybersecurity Consultant, and Compliance Analyst. The role you target depends largely on the specialisation track you choose in Module 4. A SOC Analyst is a common first role for program graduates, with entry salaries between €45,000 and €55,000 in Germany. Read the job-after-weiterbildung guide for specific strategies, and the SOC Analyst career guide for a detailed breakdown of that role.
Conclusion
Free cybersecurity training in Germany through the Bildungsgutschein is one of the most accessible career transitions available right now. The combination of NIS-2 demand, a structural skills shortage, and full government funding makes the economics unusually favourable for career changers. If you’re eligible, the cost of not acting is an opportunity cost. Start by checking whether you qualify, then review the Cybersteps program to see if the curriculum and certifications match your career goals. The Bildungsgutschein page has everything you need to start the application.
Ready to Build a Career in Cybersecurity?
