// CAREER PATH / BLUE TEAM
SOC Analyst.
First responder of the digital world.
When alarms fire at 2 AM, SOC Analysts are the ones triaging the alert, reconstructing the kill chain, and stopping the breach before it spreads.
// THE ROLE
What does a SOC Analyst actually do?
A Security Operations Center (SOC) Analyst monitors an organisation's networks, endpoints, and cloud workloads for malicious activity. They are the human signal behind every SIEM, the analyst behind every escalated EDR detection, and the communicator who turns raw telemetry into actionable intelligence.
Monitor
24/7 telemetry watch
Triage
Validate & escalate alerts
Investigate
Reconstruct attacks
Respond
Contain & remediate
// WHERE YOU FIT
The cybersecurity landscape
// CYBERSECURITY DOMAINS
Cybersecurity
Defensive Security
- └─SOC Analyst◀ YOU
- └─Threat Hunter
- └─Incident Response
- └─DFIR
Offensive Security
- └─Penetration Tester
- └─Red Team
- └─Bug Bounty
- └─Exploit Dev
Governance & Risk
- └─GRC
- └─Auditor
- └─Risk Analyst
- └─Compliance
Application Security
- └─AppSec
- └─DevSecOps
- └─Code Review
- └─SAST/DAST
Cloud & Infra
- └─Cloud Security
- └─Container Sec
- └─IAM
- └─Zero Trust
OT / IoT Security
- └─ICS/SCADA
- └─OT SOC
- └─IoT
- └─Critical Infra
// MARKET DEMAND
SOC roles are the most-hired position in cyber.
67%
Of cyber job postings are SOC-related
src: BLS 2024
$112K
Median SOC Analyst salary (US)
src: Glassdoor
+32%
Job growth projected through 2032
src: BLS
5.5M
Open SOC roles globally
src: ISC2
// HANDS-ON STACK
Tools you'll master
Splunk / Elastic SIEM
Log aggregation, search, dashboards
CrowdStrike / SentinelOne EDR
Endpoint detection & response
Wireshark / Zeek
Network forensics & packet analysis
MISP / OpenCTI
Threat intelligence platforms
Sigma / YARA
Detection rule writing
TheHive / Cortex
Incident response & SOAR
// CURRICULUM
Skills you'll walk out with.
From foundational concepts to live-fire incidents — every skill is taught with hands-on labs and real telemetry.
- 01Cybersecurity fundamentals (networks, OS, crypto)
- 02Specialized Security Operations training
- 03Hands-on with SIEM, EDR & SOAR platforms
- 04Detection rule creation (Sigma, YARA, KQL)
- 05Incident investigation methodologies
- 06Tactics, Techniques & Procedures (MITRE ATT&CK)
- 07Threat hunting & intelligence
- 08Incident reporting & executive communication
How BlueGuardia builds you into a SOC Analyst.
Two months of specialised SOC training following the foundational month. Real SIEM environments, simulated breaches, and mentorship from active SOC practitioners.