https://www.reddit.com/r/netsec/comments/g6r71/getting_start...
This has links to many useful resources such as books and many tools that used such as nmap, Nessus, burp suite etc.
Remember if you don’t have permission to attack something it is against the law, which is why there are the following resources that can be used:
Damn Vulnerable Web App (http://www.dvwa.co.uk/)
and https://www.hackthebox.eu/
Also check out OWASP (The Open Web Application Security Project) https://www.owasp.org/
There are quite a few universities offering cyber security courses in the UK. I have listed a few below:
https://www.abertay.ac.uk/schools/school-of-design-and-infor...
https://www.ncl.ac.uk/undergraduate/degrees/i190/#courseover...
https://www.kingston.ac.uk/undergraduate-course/cyber-securi...
https://www.plymouth.ac.uk/courses/undergraduate/bsc-compute...
https://www.gre.ac.uk/undergraduate-courses/ach/gf54
There are quite a few companies that have graduate schemes as well.
https://www.nccgroup.trust/uk/about-us/careers/graduates/
https://www.mwrinfosecurity.com/assets/resourceFiles/Recruit...
http://www.aonearlycareers.co.uk/graduates-9 - The application period will open again later this year for Cyber Associates.
https://www.contextis.com/en/careers
As for certifications I would say aim to get CREST certified though most of the companies above will help you get the certification. Such as the Crest Register Tester to begin with. https://www.crest-approved.org/examination/registered-tester...