Data Analyst Data Scientist Cybersecurity Analyst

Professional Cybersecurity Analyst — Detection, investigation and incident response

A complete professional pathway for detecting, qualifying, investigating and helping respond to cybersecurity incidents.

A Cybersecurity Analyst monitors systems, identities, networks, endpoints and cloud environments to identify abnormal behavior, qualify alerts and contribute to incident response. The role works from logs, telemetry and digital evidence, separates facts from hypotheses, and documents and escalates conclusions in a traceable way.

This pathway develops practical skills in network, system and identity fundamentals, SIEM, SOC triage, threat intelligence, investigation, incident response, threat hunting, cloud security, detection rules, SOAR, vulnerability management and SOC operations. Exercises remain defensive and controlled: every conclusion must be supported by evidence, verification and an explainable professional decision.

metiers_prof_cybersecurity_analyst_outcome

15 courses • 150 interactive lessons • 45 to 75 hours of conversational learning

5 levels: Level 1 — 24,90 € excl. VAT Level 2 — 29,90 € excl. VAT Level 3 — 34,90 € excl. VAT Level 4 — 39,90 € excl. VAT Level 5 — 45,00 € excl. VAT

Preview of a lesson inside the Learning Workspace

Best offer

Complete Pack — Cybersecurity Analyst

🎓 Certificate : "Professional Cybersecurity Analyst" 523,80 €

📚 15 courses 📖 150 lessons ⏱ 45 to 75 h ⚡ 3000 credits included

399,00 € excl. VAT

Savings : 124,80 €

Cybersecurity Foundations Pack 3 courses Level 1

🎓 Certificate : Cybersecurity Analyst — Cybersecurity Foundations

📚 3 courses 📖 30 lessons ⏱ 9 to 15 h ⚡ 480 credits included

74,70 €

64,90 excl. VAT

Savings : 9,80 €

01 Level 1

Network, system and identity foundations

Understand the technical, network and identity environment required to analyze security events.

Understand the role of the Cybersecurity Analyst, the SOC and incident response teams Map assets, users, data, flows and critical dependencies across an information system Understand the TCP/IP model, ports, protocols and network flows used in investigations Read a DNS resolution and identify the traces left by network communication Understand authentication, authorization, MFA, conditional access, service accounts, sessions and least privilege Understand the OSI model and how it helps locate an attack trace Read a simple packet capture (pcap) and identify fields useful for investigation Understand TLS/HTTPS encryption and its limitations for traffic inspection Map an organization's external exposure surface, including shadow IT Understand zero-trust models and their impact on detection

📚 10 lessons ⏱ 3 to 5 h 🎯 Quiz included ⚡ 160 credits included

Course information

Target audience

IT professionals, security analysts, administrators, system or network engineers and career changers who want to build the operational skills of a Cybersecurity Analyst.

Prerequisites

No advanced prerequisite. General IT awareness and the ability to follow technical instructions are recommended.

Learning objectives

Understand the role of the Cybersecurity Analyst, the SOC and incident response teams
Read a DNS resolution and identify the traces left by network communication
Read a simple packet capture (pcap) and identify fields useful for investigation
Understand zero-trust models and their impact on detection

Target skills

Apply the course methods and tools to a representative professional situation.
Produce a usable and verifiable outcome by combining the concepts covered: Understand zero-trust models and their impact on detection
Check the quality of data, results, evidence or decisions before communication or implementation.
Document the approach, explain limitations and defend the choices made to a professional stakeholder.

Estimated duration

3 to 5 h

Price

24,90 € excl. VAT

02 Level 1

Attack mechanisms, vulnerabilities and log sources

Recognize common attack mechanisms and identify the logging sources available for security analysis.

Identify the main Windows and Linux security components Understand vulnerability, exposure, threat, risk, exploit and security control Recognize phishing, credential theft, malware, ransomware and lateral movement Understand attack phases using a tactics-and-techniques framework Identify log sources: system, authentication, network, endpoint, application and cloud Understand common exploitation mechanisms: injection, buffer overflow and privilege escalation Distinguish malware categories: worm, Trojan, rootkit and spyware Identify common attacker evasion and obfuscation techniques Configure and verify the coverage of an audit policy Understand the role of an EDR and what it captures compared with a SIEM

📚 10 lessons ⏱ 3 to 5 h 🎯 Quiz included ⚡ 160 credits included

Course information

Target audience

IT professionals, security analysts, administrators, system or network engineers and career changers who want to build the operational skills of a Cybersecurity Analyst.

Prerequisites

No advanced prerequisite. General IT awareness and the ability to follow technical instructions are recommended.

Learning objectives

Identify the main Windows and Linux security components
Understand attack phases using a tactics-and-techniques framework
Distinguish malware categories: worm, Trojan, rootkit and spyware
Understand the role of an EDR and what it captures compared with a SIEM

Target skills

Apply the course methods and tools to a representative professional situation.
Produce a usable and verifiable outcome by combining the concepts covered: Understand the role of an EDR and what it captures compared with a SIEM
Check the quality of data, results, evidence or decisions before communication or implementation.
Document the approach, explain limitations and defend the choices made to a professional stakeholder.

Estimated duration

3 to 5 h

Price

24,90 € excl. VAT

03 Level 1

Event interpretation and evidence

Interpret security events rigorously and apply sound evidence collection and preservation principles.

Read a security event and distinguish fact, context, hypothesis and conclusion Understand indicators of compromise and their limitations Apply evidence-collection and integrity-preservation principles Build an initial criticality matrix to prioritize alerts and incidents Distinguish IOC from IOA and understand how they complement each other Apply chain-of-custody principles to digital evidence Write a factual analysis note that clearly separates observation from interpretation Use a tactics-and-techniques framework to classify observed behavior Build a multi-criteria criticality matrix for a heterogeneous environment Professional workshop: reconstruct a simple intrusion from a set of logs

📚 10 lessons ⏱ 3 to 5 h 🎯 Quiz included ⚡ 160 credits included

Course information

Target audience

IT professionals, security analysts, administrators, system or network engineers and career changers who want to build the operational skills of a Cybersecurity Analyst.

Prerequisites

No advanced prerequisite. General IT awareness and the ability to follow technical instructions are recommended.

Learning objectives

Read a security event and distinguish fact, context, hypothesis and conclusion
Build an initial criticality matrix to prioritize alerts and incidents
Write a factual analysis note that clearly separates observation from interpretation
Professional workshop: reconstruct a simple intrusion from a set of logs

Target skills

Apply the course methods and tools to a representative professional situation.
Produce a usable and verifiable outcome by combining the concepts covered: reconstruct a simple intrusion from a set of logs
Check the quality of data, results, evidence or decisions before communication or implementation.
Document the approach, explain limitations and defend the choices made to a professional stakeholder.

Estimated duration

3 to 5 h

Price

24,90 € excl. VAT

Pack Triage SOC, SIEM & détection 3 courses Level 2

🎓 Certificate : Cybersecurity Analyst — Triage SOC, SIEM & détection

📚 3 courses 📖 30 lessons ⏱ 9 to 15 h ⚡ 540 credits included

89,70 €

76,90 excl. VAT

Savings : 12,80 €

04 Level 2

SIEM architecture and log investigation

Use a SIEM and search logs efficiently to build a reliable first view of security events.

Understand SIEM architecture and the path from ingestion to normalization, correlation and alerting Search logs efficiently using filters, aggregations and time windows Build an event timeline from multiple sources Qualify an abnormal-authentication alert and search for related connections Analyze an endpoint alert related to execution of a suspicious process Normalize heterogeneous logs into a common schema before correlation Write efficient search queries using Boolean operators and regular expressions Build monitoring dashboards suited to a SOC analyst workstation Correlate events from multiple sources to confirm a hypothesis Manage log noise and volume without losing detection coverage

📚 10 lessons ⏱ 3 to 5 h 🎯 Quiz included ⚡ 180 credits included

Course information

Target audience

IT professionals, security analysts, administrators, system or network engineers and career changers who want to build the operational skills of a Cybersecurity Analyst.

Prerequisites

A working knowledge of the foundations introduced in the first courses, or equivalent practical experience, is recommended.

Learning objectives

Understand SIEM architecture and the path from ingestion to normalization, correlation and alerting
Qualify an abnormal-authentication alert and search for related connections
Write efficient search queries using Boolean operators and regular expressions
Manage log noise and volume without losing detection coverage

Target skills

Apply the course methods and tools to a representative professional situation.
Produce a usable and verifiable outcome by combining the concepts covered: Manage log noise and volume without losing detection coverage
Check the quality of data, results, evidence or decisions before communication or implementation.
Document the approach, explain limitations and defend the choices made to a professional stakeholder.

Estimated duration

3 to 5 h

Price

29,90 € excl. VAT

05 Level 2

Network, email and threat intelligence analysis

Analyze network and email alerts and use threat intelligence to enrich the context of an alert.

Examine a network event: domain, IP, port, protocol, volume and direction Analyze a suspicious email: sender, headers, links, attachments and context Use threat intelligence: reputation, context, confidence levels, MISP, STIX/TAXII and interpretation limits Distinguish false positive, benign true positive, confirmed incident and undetermined event Apply a triage procedure and document every verification step Analyze a suspicious TLS certificate and command-and-control infrastructure Break down an infection chain from a malicious attachment or link Enrich an indicator with multiple intelligence sources and assess their reliability Build a reusable triage sheet to accelerate qualification of similar alerts Identify potential false negatives from a given detection source

📚 10 lessons ⏱ 3 to 5 h 🎯 Quiz included ⚡ 180 credits included

Course information

Target audience

IT professionals, security analysts, administrators, system or network engineers and career changers who want to build the operational skills of a Cybersecurity Analyst.

Prerequisites

A working knowledge of the foundations introduced in the first courses, or equivalent practical experience, is recommended.

Learning objectives

Examine a network event: domain, IP, port, protocol, volume and direction
Distinguish false positive, benign true positive, confirmed incident and undetermined event
Break down an infection chain from a malicious attachment or link
Identify potential false negatives from a given detection source

Target skills

Apply the course methods and tools to a representative professional situation.
Produce a usable and verifiable outcome by combining the concepts covered: Identify potential false negatives from a given detection source
Check the quality of data, results, evidence or decisions before communication or implementation.
Document the approach, explain limitations and defend the choices made to a professional stakeholder.

Estimated duration

3 to 5 h

Price

29,90 € excl. VAT

06 Level 2

Severity, escalation and detection quality

Prioritize alerts, escalate complex cases and measure the quality and operational cost of detection rules.

Determine severity and priority based on impact, scope, privileges and asset criticality Escalate an investigation with a case file usable by a higher-tier analyst Write a simple detection query and understand the false positives it produces Measure rule quality: precision, coverage, volume and handling cost Build a severity-scoring matrix that is reproducible across analysts Write a complete escalation package that avoids redoing the investigation Measure mean alert-handling time and identify bottlenecks Compare several detection rules on the same dataset Document triage decisions to support retrospective audit Professional workshop: process a SOC alert queue and produce triage decisions

📚 10 lessons ⏱ 3 to 5 h 🎯 Quiz included ⚡ 180 credits included

Course information

Target audience

IT professionals, security analysts, administrators, system or network engineers and career changers who want to build the operational skills of a Cybersecurity Analyst.

Prerequisites

A working knowledge of the foundations introduced in the first courses, or equivalent practical experience, is recommended.

Learning objectives

Determine severity and priority based on impact, scope, privileges and asset criticality
Measure rule quality: precision, coverage, volume and handling cost
Measure mean alert-handling time and identify bottlenecks
Professional workshop: process a SOC alert queue and produce triage decisions

Target skills

Apply the course methods and tools to a representative professional situation.
Produce a usable and verifiable outcome by combining the concepts covered: process a SOC alert queue and produce triage decisions
Check the quality of data, results, evidence or decisions before communication or implementation.
Document the approach, explain limitations and defend the choices made to a professional stakeholder.

Estimated duration

3 to 5 h

Price

29,90 € excl. VAT

Investigation & Incident Response Pack 3 courses Level 3

🎓 Certificate : Cybersecurity Analyst — Investigation & Incident Response

📚 3 courses 📖 30 lessons ⏱ 9 to 15 h ⚡ 600 credits included

104,70 €

89,90 excl. VAT

Savings : 14,80 €

07 Level 3

Investigation initiation and timeline reconstruction

Launch a structured investigation and reconstruct a reliable timeline of attacker activity.

Start an investigation from a confirmed incident and define the initial scope Build a reliable timeline and identify the first known event Search for persistence, privilege escalation and lateral movement Analyze outbound connections, downloads, potential exfiltration and command-and-control Analyze account usage and detect compromise or privilege abuse Define an investigation scope that evolves as new evidence appears Correlate timelines from cloud and on-premises sources Identify persistence techniques specific to Windows and Linux Analyze encrypted or disguised command-and-control traffic Distinguish legitimate use from privilege abuse on a highly privileged account

📚 10 lessons ⏱ 3 to 5 h 🎯 Quiz included ⚡ 200 credits included

Course information

Target audience

IT professionals, security analysts, administrators, system or network engineers and career changers who want to build the operational skills of a Cybersecurity Analyst.

Prerequisites

A working knowledge of the foundations introduced in the first courses, or equivalent practical experience, is recommended.

Learning objectives

Start an investigation from a confirmed incident and define the initial scope
Analyze outbound connections, downloads, potential exfiltration and command-and-control
Correlate timelines from cloud and on-premises sources
Distinguish legitimate use from privilege abuse on a highly privileged account

Target skills

Apply the course methods and tools to a representative professional situation.
Produce a usable and verifiable outcome by combining the concepts covered: Distinguish legitimate use from privilege abuse on a highly privileged account
Check the quality of data, results, evidence or decisions before communication or implementation.
Document the approach, explain limitations and defend the choices made to a professional stakeholder.

Estimated duration

3 to 5 h

Price

34,90 € excl. VAT

08 Level 3

Evidence collection, impact and containment

Collect relevant technical evidence, assess incident impact and decide on proportionate containment measures.

Collect useful endpoint evidence without destroying traces Assess impact on confidentiality, integrity, availability and business operations Decide containment measures for accounts, endpoints, networks, applications or secrets Coordinate secret resets, session revocation and temporary blocking Eradicate identified causes and verify the absence of residual persistence Acquire volatile data from a compromised system Assess the financial and reputational impact of an incident beyond the technical dimension Choose between immediate containment and discreet monitoring based on context Coordinate multi-team containment without losing evidence Verify the effectiveness of a containment measure after implementation

📚 10 lessons ⏱ 3 to 5 h 🎯 Quiz included ⚡ 200 credits included

Course information

Target audience

IT professionals, security analysts, administrators, system or network engineers and career changers who want to build the operational skills of a Cybersecurity Analyst.

Prerequisites

You should already master the pathway foundations or have equivalent experience. Advanced courses build on methods, tools and controls introduced earlier.

Learning objectives

Collect useful endpoint evidence without destroying traces
Coordinate secret resets, session revocation and temporary blocking
Assess the financial and reputational impact of an incident beyond the technical dimension
Verify the effectiveness of a containment measure after implementation

Target skills

Apply the course methods and tools to a representative professional situation.
Produce a usable and verifiable outcome by combining the concepts covered: Verify the effectiveness of a containment measure after implementation
Check the quality of data, results, evidence or decisions before communication or implementation.
Document the approach, explain limitations and defend the choices made to a professional stakeholder.

Estimated duration

3 to 5 h

Price

34,90 € excl. VAT

09 Level 3

Recovery, documentation and lessons learned

Restore services safely, document the incident and turn lessons learned into concrete improvements.

Restore services with checks before returning them to production Document decisions, evidence, people involved and timestamps Prepare communications tailored to technical teams, management and stakeholders Run a lessons-learned review and turn findings into corrective actions Define validation criteria before returning a restored service to production Build a structured incident report for different audiences Adapt a crisis message for technical, management or external audiences Facilitate a lessons-learned workshop without assigning individual blame Turn lessons learned into detection, process or training actions Professional workshop: manage an account-compromise incident with internal propagation

📚 10 lessons ⏱ 3 to 5 h 🎯 Quiz included ⚡ 200 credits included

Course information

Target audience

IT professionals, security analysts, administrators, system or network engineers and career changers who want to build the operational skills of a Cybersecurity Analyst.

Prerequisites

You should already master the pathway foundations or have equivalent experience. Advanced courses build on methods, tools and controls introduced earlier.

Learning objectives

Restore services with checks before returning them to production
Run a lessons-learned review and turn findings into corrective actions
Adapt a crisis message for technical, management or external audiences
Professional workshop: manage an account-compromise incident with internal propagation

Target skills

Apply the course methods and tools to a representative professional situation.
Produce a usable and verifiable outcome by combining the concepts covered: manage an account-compromise incident with internal propagation
Check the quality of data, results, evidence or decisions before communication or implementation.
Document the approach, explain limitations and defend the choices made to a professional stakeholder.

Estimated duration

3 to 5 h

Price

34,90 € excl. VAT

Threat Hunting, Cloud & Detection Pack 3 courses Level 4

🎓 Certificate : Cybersecurity Analyst — Threat Hunting, Cloud & Detection

📚 3 courses 📖 30 lessons ⏱ 9 to 15 h ⚡ 660 credits included

119,70 €

101,90 excl. VAT

Savings : 17,80 €

10 Level 4

Threat hunting hypotheses and suspicious behavior

Formulate and test threat-hunting hypotheses based on behavior rather than isolated indicators.

Formulate a threat-hunting hypothesis from an attack technique or business risk Choose the telemetry sources required to test a hypothesis Build searches around behavior rather than overly specific IOCs Create a baseline of normal activity to identify meaningful deviations Analyze process trees, parent-child relationships and command lines Prioritize hunting hypotheses based on business risk and technical feasibility Build a knowledge base of previously tested hypotheses and results Identify living-off-the-land techniques that use legitimate tools Analyze obfuscated command lines to reveal malicious intent Use an advanced query language to explore large volumes of data

📚 10 lessons ⏱ 3 to 5 h 🎯 Quiz included ⚡ 220 credits included

Course information

Target audience

IT professionals, security analysts, administrators, system or network engineers and career changers who want to build the operational skills of a Cybersecurity Analyst.

Prerequisites

You should already master the pathway foundations or have equivalent experience. Advanced courses build on methods, tools and controls introduced earlier.

Learning objectives

Formulate a threat-hunting hypothesis from an attack technique or business risk
Create a baseline of normal activity to identify meaningful deviations
Build a knowledge base of previously tested hypotheses and results
Use an advanced query language to explore large volumes of data

Target skills

Apply the course methods and tools to a representative professional situation.
Produce a usable and verifiable outcome by combining the concepts covered: Use an advanced query language to explore large volumes of data
Check the quality of data, results, evidence or decisions before communication or implementation.
Document the approach, explain limitations and defend the choices made to a professional stakeholder.

Estimated duration

3 to 5 h

Price

39,90 € excl. VAT

11 Level 4

Cloud, lateral movement and exfiltration investigation

Extend investigations to cloud and hybrid environments and look for lateral movement and exfiltration signals.

Interpret persistence artifacts and execution traces on a system Investigate a cloud incident: IAM, activity logs, misconfigurations, workloads and containers Detect lateral movement through authentication, shares, administration tools and remote services Look for signs of exfiltration through volume, destination, compression or unusual behavior Assess detection coverage against a tactics-and-techniques framework Analyze cloud-provider logs to reconstruct a sequence of actions Identify a cloud IAM misconfiguration exploited by an attacker Investigate a compromised container or workload in an orchestrated environment Distinguish legitimate lateral movement from abuse in a hybrid environment Map telemetry blind spots across on-premises and cloud environments

📚 10 lessons ⏱ 3 to 5 h 🎯 Quiz included ⚡ 220 credits included

Course information

Target audience

IT professionals, security analysts, administrators, system or network engineers and career changers who want to build the operational skills of a Cybersecurity Analyst.

Prerequisites

You should already master the pathway foundations or have equivalent experience. Advanced courses build on methods, tools and controls introduced earlier.

Learning objectives

Interpret persistence artifacts and execution traces on a system
Look for signs of exfiltration through volume, destination, compression or unusual behavior
Identify a cloud IAM misconfiguration exploited by an attacker
Map telemetry blind spots across on-premises and cloud environments

Target skills

Apply the course methods and tools to a representative professional situation.
Produce a usable and verifiable outcome by combining the concepts covered: Map telemetry blind spots across on-premises and cloud environments
Check the quality of data, results, evidence or decisions before communication or implementation.
Document the approach, explain limitations and defend the choices made to a professional stakeholder.

Estimated duration

3 to 5 h

Price

39,90 € excl. VAT

12 Level 4

Detection engineering and SOC automation

Design, test and maintain detection rules and use automation without losing analyst control or traceability.

Design a detection rule with logic, context, exclusions and severity level Test a rule on historical data and measure noise, coverage and stability Manage the lifecycle of a detection: version, owner, documentation, tests and retirement Automate triage and response with SOAR and defensive AI: enrichment, summarization, orchestration, controlled actions and human validation Prioritize a detection-rule backlog based on coverage and maintenance effort Build an automated response playbook with explicit human approval points Measure the reduction in handling time delivered by SOAR automation Identify the risks of poorly calibrated automation: destructive actions and loops Document a defensive-AI use case with its limitations and safeguards Professional workshop: run a complete hunt, investigate a hybrid scenario and deliver a validated detection or automation improvement

📚 10 lessons ⏱ 3 to 5 h 🎯 Quiz included ⚡ 220 credits included

Course information

Target audience

IT professionals, security analysts, administrators, system or network engineers and career changers who want to build the operational skills of a Cybersecurity Analyst.

Prerequisites

You should already master the pathway foundations or have equivalent experience. Advanced courses build on methods, tools and controls introduced earlier.

Learning objectives

Design a detection rule with logic, context, exclusions and severity level
Automate triage and response with SOAR and defensive AI: enrichment, summarization, orchestration, controlled actions and human validation
Measure the reduction in handling time delivered by SOAR automation
Professional workshop: run a complete hunt, investigate a hybrid scenario and deliver a validated detection or automation improvement

Target skills

Apply the course methods and tools to a representative professional situation.
Produce a usable and verifiable outcome by combining the concepts covered: run a complete hunt, investigate a hybrid scenario and deliver a validated detection or automation improvement
Check the quality of data, results, evidence or decisions before communication or implementation.
Document the approach, explain limitations and defend the choices made to a professional stakeholder.

Estimated duration

3 to 5 h

Price

39,90 € excl. VAT

SOC Operations, Vulnerability & Governance Pack 3 courses Level 5

🎓 Certificate : Cybersecurity Analyst — SOC Operations, Vulnerability & Governance

📚 3 courses 📖 30 lessons ⏱ 9 to 15 h ⚡ 720 credits included

135,00 €

114,90 excl. VAT

Savings : 20,10 €

13 Level 5

Vulnerability management and attack surface

Prioritize vulnerabilities and exposure by combining technical severity, business context and evidence of exploitability.

Define a SOC operating model suited to the organization's size, risks and constraints Define roles, escalation paths, on-call duties and responsibilities across SOC, IT, security and business teams Build monitoring priorities from critical assets and threat scenarios Manage a backlog of detections, hunts, playbooks and telemetry debt Measure detection time, qualification time, containment time and decision quality Size a SOC team based on alert volume and asset criticality Choose between an internal, outsourced or hybrid SOC based on organizational context Build a RACI matrix across SOC, IT, security and business teams Track workload and analyst burnout risk Present a continuous-improvement roadmap for the detection capability

📚 10 lessons ⏱ 3 to 5 h 🎯 Quiz included ⚡ 240 credits included

Course information

Target audience

IT professionals, security analysts, administrators, system or network engineers and career changers who want to build the operational skills of a Cybersecurity Analyst.

Prerequisites

You should already master the pathway foundations or have equivalent experience. Advanced courses build on methods, tools and controls introduced earlier.

Learning objectives

Define a SOC operating model suited to the organization's size, risks and constraints
Manage a backlog of detections, hunts, playbooks and telemetry debt
Choose between an internal, outsourced or hybrid SOC based on organizational context
Present a continuous-improvement roadmap for the detection capability

Target skills

Apply the course methods and tools to a representative professional situation.
Produce a usable and verifiable outcome by combining the concepts covered: Present a continuous-improvement roadmap for the detection capability
Check the quality of data, results, evidence or decisions before communication or implementation.
Document the approach, explain limitations and defend the choices made to a professional stakeholder.

Estimated duration

3 to 5 h

Price

45,00 € excl. VAT

14 Level 5

SOC performance and security operations governance

Measure SOC effectiveness, organize operational governance and improve processes, coverage and analyst workload.

Avoid misleading KPIs based only on the volume of alerts handled Build a log-coverage plan and identify visibility blind spots Manage vulnerability management: scanning, CVSS and risk-context prioritization, remediation SLAs and follow-up Organize crisis exercises and technical table-top simulations Prepare playbooks for ransomware, compromised accounts, data leaks and critical outages Define residual-risk indicators that complement operational KPIs Prioritize a plan to close telemetry blind spots based on risk Negotiate vulnerability-remediation timelines with IT and business teams Design a realistic, measurable crisis-exercise scenario Adapt a crisis playbook to a specific regulated sector

📚 10 lessons ⏱ 3 to 5 h 🎯 Quiz included ⚡ 240 credits included

Course information

Target audience

IT professionals, security analysts, administrators, system or network engineers and career changers who want to build the operational skills of a Cybersecurity Analyst.

Prerequisites

You should already master the pathway foundations or have equivalent experience. Advanced courses build on methods, tools and controls introduced earlier.

Learning objectives

Avoid misleading KPIs based only on the volume of alerts handled
Organize crisis exercises and technical table-top simulations
Prioritize a plan to close telemetry blind spots based on risk
Adapt a crisis playbook to a specific regulated sector

Target skills

Apply the course methods and tools to a representative professional situation.
Produce a usable and verifiable outcome by combining the concepts covered: Adapt a crisis playbook to a specific regulated sector
Check the quality of data, results, evidence or decisions before communication or implementation.
Document the approach, explain limitations and defend the choices made to a professional stakeholder.

Estimated duration

3 to 5 h

Price

45,00 € excl. VAT

15 Level 5

Professional cyber investigation and decision-making

Lead a complete defensive investigation, defend conclusions with evidence and communicate decisions to technical and executive stakeholders.

Integrate incident lessons learned into risk and vulnerability management Contribute to notification obligations and evidence preservation under NIS2, DORA and GDPR as applicable Present operational posture to management without hiding uncertainty Build a professional portfolio of anonymized investigations, rules and reports Map applicable regulatory obligations by sector and jurisdiction Prepare an evidence package usable in an audit or legal dispute Build an executive dashboard for senior management Anonymize a real case ethically for inclusion in a professional portfolio Prepare an oral incident-management defense for a mixed technical and management panel Final project: lead a simulated major incident and present the remediation plan and SOC improvement roadmap

📚 10 lessons ⏱ 3 to 5 h 🎯 Quiz included ⚡ 240 credits included

Course information

Target audience

IT professionals, security analysts, administrators, system or network engineers and career changers who want to build the operational skills of a Cybersecurity Analyst.

Prerequisites

You should already master the pathway foundations or have equivalent experience. Advanced courses build on methods, tools and controls introduced earlier.

Learning objectives

Integrate incident lessons learned into risk and vulnerability management
Build a professional portfolio of anonymized investigations, rules and reports
Build an executive dashboard for senior management
Final project: lead a simulated major incident and present the remediation plan and SOC improvement roadmap

Target skills

Apply the course methods and tools to a representative professional situation.
Produce a usable and verifiable outcome by combining the concepts covered: lead a simulated major incident and present the remediation plan and SOC improvement roadmap
Check the quality of data, results, evidence or decisions before communication or implementation.
Document the approach, explain limitations and defend the choices made to a professional stakeholder.

Estimated duration

3 to 5 h

Price

45,00 € excl. VAT