Security Operations Center (SOC)

Core functions of a SOC

The course walks through what a Security Operations Center does day to day, from monitoring and event handling to the incident response workflows that follow an alert. SIEM integration sits at the center of that picture, since it is how raw signals become something an analyst can act on.

Skills that stand out

• Incident response and computer security incident management
• Event monitoring and threat detection
• Cyber threat intelligence and threat hunting
• Stakeholder communication and performance metrics for a SOC

Who should consider it

The listing pitches the course at associate-level analysts. It is most useful for people who already know what an alert is and want the operational side of the job, including how a SOC is managed, not only how a single tool is configured.