Tech with Jono
>
Get in touch
Collaborations, questions, or help with a course
FAQ
The SOC Lab and the courses
What is the SOC Lab?
A full mock-up of a real organisation, running a real security tool stack. You log in as the analyst on shift and work the tickets that roll in (phishing emails, suspicious account activity, malicious firewall traffic) with the whole toolkit at your fingertips.
It's a safe, controlled environment, but every skill works exactly like it would on the job. Closed tickets earn you points on the leaderboard, and everything you do becomes a project for your résumé.
What's the difference between Beginner Cyber Analyst and Cyber Engineer?
Beginner Cyber Analyst teaches you to use the tools: work an analyst's queue in the TWJ Lab and triage, investigate and escalate alerts.
Cyber Engineer teaches you to build them: alert rules that catch real threats without the noise, dashboards and reports, SOAR playbooks and automated threat hunting.
Which one should I start with?
New to cybersecurity or SOC work? Start with Beginner Cyber Analyst. Already comfortable with the analyst basics? Go straight to Cyber Engineer.
Do I need any experience?
Not for Beginner Cyber Analyst: it's fully guided, from your very first login to closing your first ticket. Cyber Engineer assumes you know the analyst basics.
Is it hands-on?
Yes. In Beginner Cyber Analyst you work inside the TWJ Lab, a mock-up of a real organisation running a real security tool stack, with a walkthrough for every tool.
When can I start?
Both courses are coming soon. Questions before then? Email [email protected].