Become a SOC Analyst

Roles this prepares you for

You train for a role UK employers are hiring for, and finish with a portfolio project that proves what you can do.

12 weeks, live. Next cohort starts in October 2026.

Two live evening classes on weekdays plus a Saturday workshop. Around 5 to 6 hours of live time a week, plus practice. Every class is recorded, so you can rewatch anything on our learning platform. Built for people who work.

The 12-week syllabus

Months 1 and 2 are core skills, live. Month 3 is your AI specialisation and a capstone project you present like a professional.

Skills you finish with

By the end of the programme you can do the work, not just describe it. Every outcome below is something you practise on a real business case.

• Explain what a SOC does and where the analyst fits in it
• Read network traffic, host logs and authentication events with confidence
• Triage an alert queue and prioritise by real risk, not severity label
• Query a SIEM to answer a specific investigative question
• Write and tune detection rules that survive a change of tooling
• Map observed activity to MITRE ATT&CK and find the detection gaps
• Run an incident response lifecycle without destroying the evidence
• Write an incident report for technical and executive readers
• Use AI across triage and investigation without trusting it blindly
• Automate enrichment safely, with a human step where it matters
• Complete a portfolio capstone and prepare for UK SOC Analyst interviews

Industry tools, AI throughout

You learn the tools UK teams actually use, and apply AI across the whole workflow from day one.

AI tools woven through every month:

One price. Everything included.

We price for access, on purpose: the people who most need a way into UK tech should be able to take it. What you get is never reduced to match.