SOC Analyst Course Online in the UK

Train for security operations centre work: alert triage, SIEM investigations, threat hunting, incident response and reporting, with live online classes in UK evenings and weekends and hands-on labs.

3 Monthsduration
Liveonline classes
46hours
£490fee · save up to 15%

Course fee £490. Save up to 15%: from £415. Ask an advisor about the offer for your batch.

Pick your batch

UK time (GMT / BST)

Recordings shared for revision · we reply within one working day with the start date and fee

How live online classes work

  • Live video classes with a working engineer, with session recordings shared for revision
  • Hands-on labs on cloud accounts you can reach from anywhere
  • 1:1 mentoring sessions booked at a time that suits you
  • Fees in pounds sterling (GBP); we share the payment options when you enrol

Jobs and certifications in the UK

Roles you can apply for

  • SOC Analyst (Tier 1–2)
  • Security Analyst / Cyber Security Analyst
  • Incident Responder
  • Threat Detection Engineer (with experience)

Certifications employers ask for

  • CompTIA Security+ (SY0-701)
  • CompTIA CySA+ (CS0-004)
  • Microsoft Security Operations Analyst (SC-200)

Blue Team Level 1 (BTL1) is also common in UK SOC job ads, and UK teams follow NCSC guidance. Many public-sector SOC roles need SC security clearance, which depends on residency, so check each job ad.

What you'll learn

5 modules · 46 hours · hands-on labs in every module

  1. Networking essentials10 hrs
  2. Security foundations10 hrs
  3. SOC operations12 hrs
  4. Incident response & forensics8 hrs
  5. Career launch6 hrs

See every lesson and lab in the full syllabus →

Projects you'll build

PROJECT 01

Threat-model a web application

Hands-on project from the Security foundations module.

PROJECT 02

Full SOC shift simulation

Hands-on project from the SOC operations module.

PROJECT 03

Ransomware tabletop exercise

Hands-on project from the Incident response & forensics module.

FAQ

Do I need a security background?+
No. Basic networking and operating system knowledge helps; the course starts with security fundamentals before moving to SOC tools and investigations.
Which SIEM tools will I use?+
You practise on SIEM and log tools used in real SOCs. See the full syllabus for the current tool list.
Are the classes live or recorded?+
Live with a trainer. Session recordings are shared with you for revision, so you can catch up if you miss a class.
Will the batch times suit my time zone?+
Batches run in UK evenings and weekend mornings (GMT/BST). Tell us your city and we'll confirm the slot that suits you best.
Do I get a certificate?+
Yes, a SOTT certificate of completion. Vendor exams (CompTIA, Cisco, AWS, Microsoft, CNCF and others) are booked and paid with the provider, and we prepare you for them.

More live online courses in the UK

Free 20-minute call

Not sure which course or batch fits your time zone?

Talk to a trainer. We'll suggest the right course and a batch that works for you.