Walnut DataTech
Create account

Cybersecurity analyst (SOC level 1)

Monitor, triage and respond to security alerts as a level 1 analyst in a security operations centre.

No reviews yetTaught by Walnut Jobs course team
Level
Intermediate
Language
English
Duration
28 hours
Lessons
12

Last updated 22 Oct 2026

What you'll learn.

  • Explain the CIA triad and map attacker behaviour to MITRE ATT&CK tactics and techniques.
  • Read network and Windows security logs and recognise the event IDs behind common attacks.
  • Write SIEM queries to investigate alerts and reduce false positives.
  • Triage phishing and malware alerts and extract indicators of compromise.
  • Follow the NIST SP 800-61 incident response lifecycle and write a clear escalation.
  • Relate SOC work to ISO/IEC 27001:2022 controls, CVSS scoring and GDPR breach notification.

How this course is taught.

Every module comes to you in four parts, so you can watch, read, discuss and check what you have learned.

  1. Quadrant I

    e-Tutorial

    Watch a short video lecture for each module, with full text notes beside it so you can review or translate at your own pace.

  2. Quadrant II

    e-Content

    Download or print the reading material for each module, with key terms, case studies and links to further resources.

  3. Quadrant III

    Discussion forum

    Ask questions and clear your doubts with other learners. The course team guides the discussion and answers questions.

  4. Quadrant IV

    Assessment

    Check your understanding with quizzes, short and long-answer practice and FAQs, then take the final test.

Curriculum.

4 modules · 12 lessons
1Security and network fundamentals3 lessons · 44 mine-Content (notes)2Assessment1
  • Note: The CIA triad, threats and MITRE ATT&CK16 min
  • Note: Networking for analysts18 min
  • Quiz: Module 1 quiz10 min
2SIEM and log analysis3 lessons · 48 mine-Content (notes)2Assessment1
  • Note: Windows and identity logs18 min
  • Note: Writing SIEM queries18 min
  • Quiz: Module 2 quiz12 min
3Incident response3 lessons · 44 mine-Content (notes)2Assessment1
  • Note: The incident response lifecycle16 min
  • Note: Phishing and malware triage18 min
  • Quiz: Module 3 quiz10 min
4Governance, vulnerabilities and compliance3 lessons · 52 mine-Content (notes)2Final test1
  • Note: ISO/IEC 27001:2022 for analysts16 min
  • Note: Vulnerability management and breach notification16 min
  • Final test: Final assessment20 min

Your certificate.

This is the certificate you receive when you complete the course and pass its final test.

Certificate No.

WDT-WJCA-2026-000000

Certificate of completion

Cybersecurity Analyst (SOC Level 1)

This is to certify that

Learner Name

has successfully completed the course and passed its assessment, and is recognised as a

Cybersecurity analyst (SOC level 1)

4 modules12 lessons28 hours of learningOnline, on Walnut LMS

DD Month YYYY

Date of issue

Noida, India

Authorised Signatory

Walnut DataTech Private Limited

Verify this certificate at walnutdatatech.com/verify-certificate with certificate number WDT-WJCA-2026-000000. Issued on Walnut LMS.

Specimen — not a valid certificate
Cybersecurity analyst (SOC level 1)View full size

What you need to receive it.

Complete every lesson and pass the final assessment with at least 70%.

Every certificate carries its own number that anyone can check on the verification page.

About this course.

Security operations centres in banks, telecoms, managed security providers and global capability centres hire level 1 analysts in large numbers, and they look for the same things: you can read a log, separate a real attack from noise, follow a playbook and write an escalation another analyst can act on. This course builds exactly those skills.

You will learn the network and Windows fundamentals behind most alerts, write SIEM queries in Splunk SPL and KQL, map activity to MITRE ATT&CK, analyse phishing emails, and follow the NIST incident response lifecycle. The final module places your work in context with ISO/IEC 27001:2022, vulnerability management and breach notification duties under the GDPR.

Who this is for

  • IT support and network staff moving into security.
  • Graduates targeting SOC analyst, security monitoring or incident response trainee roles.
  • Analysts preparing for certifications such as CompTIA Security+ or CySA+.

Skills this certificate proves: Network security (Proficient), SIEM (Proficient), Incident response (Proficient), ISO 27001 (Working).

Linked to Walnut Jobs: complete this course to earn the certificate employers ask for.

Your instructor.

Walnut Jobs course teamJob-ready courses designed with hiring companies

Learner reviews.

No reviews yet

No reviews yet. Learners can review a course after completing half of it.

Questions about enrolling.

Is this course really free?

Yes. Create an account and enrol with one click. There's no payment step.

How long can I access this course?

You keep access for as long as the course is offered on Walnut LMS.

Do I get a certificate?

Yes. The certificate section above shows the certificate and sets out what you need to receive it.

Security