SOC Analyst
Monitor, investigate, and respond to security alerts as the first line of defense on a security operations team.
What They Do
A SOC (Security Operations Center) Analyst watches over an organization's systems and networks, looking for signs of trouble. When an alert fires — an unusual login, a suspicious file, a spike in outbound traffic — the analyst is the one who checks whether it's a false alarm or the start of an incident.
It is one of the most common entry points into cybersecurity because it rewards curiosity and pattern-recognition more than years of experience, and it exposes you to nearly every other specialty — detection engineering, incident response, threat hunting, and forensics all grow out of SOC work.
Core Skills
Your Roadmap
The stages of this career path, in order.
- Completed IT Fundamentals
- Completed Networking
- Completed Linux
- Completed Security Fundamentals
-
You are here
SOC Analyst
- Upcoming Detection Engineering
Start here
Resources chosen for this career path, roughly in the order they help most.
No resources have been linked to this career path yet.
Prove it with a project
Hands-on work for this career path -- something to show, not just something to read.
Create Sigma Rules
Write detection rules and test them against log data.
Build a Mini SOC
Set up a small lab, collect logs, and monitor activity.
Run Atomic Red Team
Simulate adversary behavior safely and evaluate detection.
Write an Incident Report
Analyze a scenario and document findings professionally.
Certifications worth considering
Certifications can support your career journey, but they are not a substitute for practical skills or experience.
No certifications have been added for this career path yet.
Find your community
People learning and working in this space in Vietnam.
No organizations have been added to the directory yet.
Where this leads
- Typical entry roles: SOC Analyst (Tier 1), Security Monitoring Analyst
- Adjacent positions: Incident Responder, Threat Hunter, Detection Engineer
- Common progression: Tier 1 -> Tier 2/3 Analyst -> Detection Engineering or Incident Response -> Security Engineering