Skip to content

FieldsSecurity Analyst

Security Analyst

Monitor, detect, and respond to threats before they become breaches.

Career

What you learn

  • What normal looks like, so abnormal becomes visible
  • Triage that stays accurate on the tenth hour of a queue
  • Investigation that reaches a conclusion you can defend with evidence
  • Incident response that keeps an organisation coordinated

What you will understand

  • The attacker lifecycle, used as a checklist during an investigation
  • True and false positives, and why analysts rarely learn about their misses
  • Evidence preservation and why containment order matters
  • Hunting as hypothesis-driven work rather than browsing

How you will practice

  1. Reconstruct a timeline across host, network, and authentication sources
  2. Work a full alert queue under time pressure and defend every escalation call
  3. Investigate an intrusion to its real scope, including the host the obvious trail misses

What you will build

  • A complete investigation report with scope, patient zero, and stated confidence
  • A hunting engagement with pre-stated hypotheses, including one honest negative

The proof you build

Evidence that you can decide correctly under volume and investigate an intrusion to a conclusion an organisation can act on.

Your work is observed with your consent, scored for independence and assistance, and turned into proof that carries a confidence level. The career path can reach a high-assurance credential, anchored by a scored capstone.

What is not live yet

The desktop app, consent-based observation, scoring, and credentials are in development. Nothing here implies they are live yet.

Get early access