-
The Certified SOC Analyst (CSA) program is the first step to becoming a Security Operations Center (SOC). It is designed for current and aspiring Tier I and Tier II SOC analysts to gain the skills to perform entry and mid-level operations.
The course covers the fundamentals of SOC operations before sharing knowledge on log management and correlation, SIEM deployment, advanced incident detection and incident response. In addition, you will learn to manage various SOC processes and collaborate with the CSIRT when necessary.
-
Course Contents
-
- Security Operations and Management
- Understanding Cyber Threats, IoCs, and Attack Methodology
- Incidents, Events, and Logging
- Incident Detection with Security Information and Event Management (SIEM)
- Enhanced Incident Detection with Threat Intelligence
- Incident Response
-
Target Group
-
- SOC analysts (Tier I and Tier II)
- Network and security administrators and engineers, network defense analysts and engineers, network security specialists and operators, and all security professionals involved in network security operations
- Cybersecurity analyst
- Beginners in the field of cybersecurity
- Anyone who wants to become a SOC analyst
-
Classroom training
- Do you prefer the classic training method? A course in one of our Training Centers, with a competent trainer and the direct exchange between all course participants? Then you should book one of our classroom training dates!
-
Hybrid training
- Hybrid training means that online participants can additionally attend a classroom course. The dynamics of a real seminar are maintained, and the online participants are able to benefit from that. Online participants of a hybrid course use a collaboration platform, such as WebEx Training Center or Saba Meeting. To do this, a PC with browser and Internet access is required, as well as a headset and ideally a Web cam. In the seminar room, we use specially developed and customized audio- and video-technologies. This makes sure that the communication between all persons involved works in a convenient and fault-free way.
-
Online training
- You wish to attend a course in online mode? We offer you online course dates for this course topic. To attend these seminars, you need to have a PC with Internet access (minimum data rate 1Mbps), a headset when working via VoIP and optionally a camera. For further information and technical recommendations, please refer to.
-
Tailor-made courses
-
You need a special course for your team? In addition to our standard offer, we will also support you in creating your customized courses, which precisely meet your individual demands. We will be glad to consult you and create an individual offer for you.

-
The Certified SOC Analyst (CSA) program is the first step to becoming a Security Operations Center (SOC). It is designed for current and aspiring Tier I and Tier II SOC analysts to gain the skills to perform entry and mid-level operations.
The course covers the fundamentals of SOC operations before sharing knowledge on log management and correlation, SIEM deployment, advanced incident detection and incident response. In addition, you will learn to manage various SOC processes and collaborate with the CSIRT when necessary.
-
Course Contents
-
- Security Operations and Management
- Understanding Cyber Threats, IoCs, and Attack Methodology
- Incidents, Events, and Logging
- Incident Detection with Security Information and Event Management (SIEM)
- Enhanced Incident Detection with Threat Intelligence
- Incident Response
-
Target Group
-
- SOC analysts (Tier I and Tier II)
- Network and security administrators and engineers, network defense analysts and engineers, network security specialists and operators, and all security professionals involved in network security operations
- Cybersecurity analyst
- Beginners in the field of cybersecurity
- Anyone who wants to become a SOC analyst
-
Classroom training
- Do you prefer the classic training method? A course in one of our Training Centers, with a competent trainer and the direct exchange between all course participants? Then you should book one of our classroom training dates!
-
Hybrid training
- Hybrid training means that online participants can additionally attend a classroom course. The dynamics of a real seminar are maintained, and the online participants are able to benefit from that. Online participants of a hybrid course use a collaboration platform, such as WebEx Training Center or Saba Meeting. To do this, a PC with browser and Internet access is required, as well as a headset and ideally a Web cam. In the seminar room, we use specially developed and customized audio- and video-technologies. This makes sure that the communication between all persons involved works in a convenient and fault-free way.
-
Online training
- You wish to attend a course in online mode? We offer you online course dates for this course topic. To attend these seminars, you need to have a PC with Internet access (minimum data rate 1Mbps), a headset when working via VoIP and optionally a camera. For further information and technical recommendations, please refer to.
-
Tailor-made courses
-
You need a special course for your team? In addition to our standard offer, we will also support you in creating your customized courses, which precisely meet your individual demands. We will be glad to consult you and create an individual offer for you.
