Course Overview
SOC Career Path L2 is designed for analysts moving beyond Tier 1 triage into deeper investigation and response ownership. You will learn how to develop stronger hypotheses, build timelines across multiple data sources, and decide when to contain, when to monitor, and when to escalate.
Delivered through mentor-led sessions, the course uses practical scenarios that reflect real SOC operations: incomplete data, time pressure, multi-stakeholder coordination, and handovers between shifts. You will practise running investigations to a clear conclusion, maintaining disciplined documentation, and producing response-ready outputs.
Over three days, you will build a repeatable Tier 2 workflow and produce case packs that demonstrate investigation depth, response thinking, and professional communication. Aligned with recognised best practices including ISO, GDPR, NIST and SOC 2, ensuring skills remain practical and deployable in real organisations. All prices are exclusive of VAT (where applicable). Group enrolments and custom packages available.
Hands-On Learning
Multi-stage investigation scenarios, response decision drills, and case simulations with evidence packs and containment recommendations.
Mentor-Led Sessions
Mentor-led walkthroughs, investigation clinics, and feedback on analyst judgement, timelines, and case quality.
Career-Ready Skills
Tier 2 workflows for investigation depth, response coordination, and consistent case outcomes.
Learning Outcomes
Design a Tier 2 investigation workflow with clear decision points.
Analyse complex cases to build defensible timelines and scope.
Implement response recommendations using process-led containment options.
Lead coordinated escalation with clear tasks and ownership.
Communicate investigation status to stakeholders professionally.
Evaluate case outcomes to improve playbooks and reduce repeat noise.
Prerequisites
Experience with SOC triage fundamentals
Basic understanding of Windows and networking
Familiarity with security alert terminology
Detailed Syllabus
Step-by-step learning journey from basics to professional practice
Topics Covered
- Tier 2 expectations: ownership, judgement, and quality
- Evidence standards, case hygiene, and shift handover discipline
- Investigation framework: hypothesis, validate, conclude, improve
Skills You'll Gain
Master these in-demand skills through hands-on practice
Career Progression
A clear view of the roles this programme supports, what typically comes next, and where learners progress over time
Ways to Learn
Choose the learning format that works best for you and your team
Live Online
Instructor-Led Training
Join live instructor-led sessions from anywhere. Interactive, engaging, and flexible.
- Live instructor interaction (real-time)
- Trainer-led walkthroughs and real examples
- Guided resources and session notes provided
- Structured Q&A and practical discussion
Price per person
Group enrolments and early planning options available.
Also Available
Custom quotes for teams and organisations
Onsite Training
Quote RequiredWe come to you. Training delivered at your workplace for teams of 6 or more.
Custom pricing based on:
- • Team size & location
- • Training dates & duration
- • Customisation requirements
- Training at your location
- Customised content for your team
- Flexible scheduling
No obligation. Response within 1 business day.
Venue-Based
Quote RequiredClassroom training at a professional venue. Ideal for focused, immersive learning.
Custom pricing based on:
- • Team size & location
- • Training dates & duration
- • Customisation requirements
- Professional training venue
- Face-to-face instruction
- Networking opportunities
No obligation. Response within 1 business day.
Blended
Quote RequiredCombine online and in-person learning for maximum flexibility and impact.
Timeline tailored to learner availability
Custom pricing based on:
- • Team size & location
- • Training dates & duration
- • Customisation requirements
- Mix of online and classroom
- Self-paced pre-work
- Intensive practical sessions
No obligation. Response within 1 business day.
All prices are exclusive of VAT where applicable. Group enrolments and custom packages available on request.
Prefer a Faster, Personalised Route into IT?
Not everyone learns best in a group. If you want focused guidance, faster clarity, and confidence you can use on the job, our 1-to-1 Fast-Track Training gives you private, mentor-led support tailored to your experience and goals.
"Many learners choose 1-to-1 when they want understanding, not memorisation."
Exam & Certification Information
Everything you need to know about the certification exams
Important Information
ou will receive an Xcademia certificate of completion based on participation and successful completion of multi-stage scenario simulations and Tier 2 case pack deliverables.
Credential
Certificate of Completion
On successful completion of SOC Career Path L2 (Investigation and Response Workflows), learners receive an Xcademia Certificate of Completion. This standalone certificate is issued directly by Xcademia and is aligned with globally recognised frameworks and best practices.
Frequently Asked Questions
Everything you need to know about this course
It is best for analysts who already understand Tier 1 triage and want to move into deeper investigations and response ownership, or for new Tier 2 analysts who want a structured workflow.
Ready to Start Your Learning Journey?
Take the next step in your professional development