Roadmaps / For students / SOC Analyst (Tier 1)
STU-SOC

SOC Analyst (Tier 1)

Build the defensive security skills to monitor, investigate and respond to real-world threats. Progress from security foundations to SOC operations, detection and incident response.

16 live courses · 7 coming soon 4 competency layers SOC Analyst outcome
Enroll now →
Foundation

Security foundations

  • Networks & endpoints
  • Threat concepts
  • MITRE ATT&CK
  • Security controls
Proficient

SOC operations

  • SIEM investigation
  • Triage & escalation
  • Threat intelligence
  • Incident handling
Mastery

Detection & response

  • Detection engineering
  • Threat hunting
  • Incident response
  • Advanced SOC operations
Credential

Credential readiness

  • Security fundamentals
  • Analyst scenarios
  • Exam practice
  • Career evidence

Each layer builds on the one before it — foundation to credential.

Your journey

The courses that take you there.

Follow the four levels in order, but you do not need to take every course. Core courses form the essential path; Recommended courses add role-based depth. Planned gap-fill courses are clearly marked Coming soon.

How to use this roadmap CoreEssential path RecommendedRole-based depth Primary credentialRecommended certification destination Coming soonPlanned portfolio addition
1
Foundation
Start here — complete the Core courses first.
13 courses · 4 Core
Core

Network Security for Beginners

Build a clear working foundation in the concepts, terminology, risks and practical context of the topic.

Network Security
2
Proficient
Apply the concepts in practitioner workflows.
4 courses · 3 Core
Core Coming soon

Network Security Fundamentals

Apply networking concepts to traffic analysis, segmentation, common attacks and SOC investigations.

Network Security
Core Coming soon

Building Incident Response Plan

Build an actionable incident-response plan covering triage, escalation, containment, communications and lessons learned.

Incident Response
Core Coming soon

Detection Engineering for Professionals: Building & Tuning Detections

Create, test and tune detection logic from threat behavior and telemetry while reducing false positives.

Core Skill
3
Mastery
Go deeper — choose the specializations you need.
3 courses · 0 Core
4
Credential
Finish with the credential that best fits your goal.
3 courses
Primary credential Coming soon

ISC2 Certified in Cybersecurity (CC) Certification Exam Preparation

Prepare entry-level cybersecurity learners for ISC2 CC concepts and exam-style questions.

Security
Suggested approach: complete the Core courses at each layer first. Add Recommended courses where they match your role, projects or certification goal. Coming-soon courses are planned additions from the portfolio gap analysis.
What this roadmap gives you

More than a playlist of courses.

✓ A curated Core path so you know what to learn first.

✓ Recommended depth without making every course mandatory.

✓ Competency-based progression from foundation to mastery.

✓ A clear credential destination and role outcome.

Get the whole path in one bundle

Every live course in this roadmap, bundled — and discounted.

Get the complete live roadmap in one bundle. New courses added to this roadmap later can be included as the path evolves.

SOC Analyst (Tier 1) — Full Bundle

16 live courses, foundation through credential.

13 Foundation
1 Proficient
1 Mastery
1 Credential
  • Core + recommended learning — one structured path.
  • New roadmap courses — the pathway can grow with your role.
  • Structured progression — foundation → proficient → mastery → credential.
  • Better value — simpler than buying each course separately.
Get the full bundle →
Or unlock this bundle and every other roadmap with an all-access membership.
See all 16 courses
Foundation · 13
  • Network Security for Beginners
  • NIST CSF (Cyber Security Framework) for Beginners
  • Understanding Threat Intelligence
  • MITRE ATTACK Framework for Beginners
  • Cyber Kill Chain for Beginners
  • Endpoint Security and EDR for Beginners
  • IDAM for Beginners: Identity & Access Management Explained
  • Encryption and Cryptography for Beginners
  • Zero Trust for Beginners
  • OWASP Top 10 for Beginners
  • Secure SDLC Explained
  • DevSecOps for Beginners
  • OT Security for Beginners
Proficient · 1
  • —
Mastery · 1
  • —
Credential · 1
  • —