Every certification I'm working toward, grouped by issuer and ordered from foundational to advanced. Certificates unlock here the moment each exam is passed — until then the template stays sealed.
What I getA rigorous, practical blue-team credential earned through a live incident-response exam — strong evidence of defensive skill.
What I learnPhishing analysis, threat intelligence, digital forensics, SIEM log analysis, and end-to-end incident response.
verification link on completion
What I getHands-on SOC-analyst tradecraft in the Microsoft Defender and Sentinel ecosystem — directly aligned with my placement goal.
What I learnThreat hunting and detection with KQL, triaging incidents in Microsoft Sentinel, and mitigating threats across Defender XDR.
verification link on completion
What I getA working map of Microsoft's security, compliance and identity stack — the foundation SC-200 builds on.
What I learnEntra ID identity concepts, Zero Trust, and the roles of Defender and Purview across Microsoft 365 and Azure.
verification link on completion
What I getReal keyboard time on the tools and playbooks a Tier-1 SOC analyst uses every shift.
What I learnLog analysis, SIEM investigation, threat intelligence, digital forensics, and phishing and incident triage.
verification link on completion
What I getThe industry-standard baseline hiring managers look for — proof of solid, broad security fundamentals.
What I learnThreats and attacks, cryptography, secure architecture, risk management, and hands-on security operations.
verification link on completion
What I getAn understanding of how AI/ML is applied — and secured — in the cloud, increasingly relevant to modern detection.
What I learnGenerative-AI and ML fundamentals on AWS, responsible-AI practices, and where these tools fit into security workflows.
verify credential →
What I getFluency in cloud fundamentals and the AWS shared-responsibility model that underpins modern cloud defence.
What I learnCore AWS services, the security and compliance model, IAM basics, and cloud pricing and support concepts.
verify credential →
What I getPractical command of the SIEM most SOCs run on — turning raw logs into searchable, actionable signal.
What I learnWriting SPL searches, building fields and reports, and creating dashboards and alerts from machine data.
verification link on completion
What I getA broad, hands-on introduction to the day-to-day of security operations and the analyst toolkit.
What I learnSIEM tooling, Linux and SQL for security, Python automation basics, and core incident-detection workflows.
verification link on completion
What I getHands-on identity & access management design experience — a core skill for SOC and security-engineering work.
What I learnIAM fundamentals, assessing IAM strategy, crafting custom IAM solutions, and integrating them across platforms.
verification link on completion
What I getPractical phishing-simulation experience — directly relevant to day-to-day SOC phishing triage.
What I learnDesigning a phishing email simulation and interpreting the results to strengthen user awareness.
verification link on completion
What I getExposure to how a global consultancy approaches real client cyber problems.
What I learnApplied cybersecurity analysis to a realistic Deloitte client scenario, from investigation through to recommendations.
verification link on completion
What I getStructured, real-world problem-solving beyond pure security.
What I learnDefect investigation and fixes, plus forecasting material requirements and maintenance planning.
verification link on completion
What I getA working grounding in how to use AI tools effectively and responsibly — increasingly relevant as AI enters security and SOC workflows.
What I learnCore AI-fluency frameworks, effective prompting foundations, and responsible, practical AI use.
verification link on completion