Domain 01 · BT
Blue Team
Defend, detect and respond. Blue Team roles watch the tooling, investigate alerts and stop attackers before they land. You learn SIEM, triage, endpoint detection and incident handling.
6 roles All domains
Roles
Roles in Blue Team.
SOC Analyst
Incident Response
Threat Hunter
Detection Engineer
Vulnerability Analyst
Security Operations Engineer
Role spotlight
SOC Analyst.
SOC Analysts watch security tooling around the clock, investigate alerts, separate true threats from noise and escalate incidents. About 40 hours across 10 modules.
A day in the life
- Review the SIEM alert queue
- Investigate phishing reports
- Write the shift handover
Key tools
- Splunk
- Microsoft Sentinel
- CrowdStrike
- Wireshark
Related certifications
- CompTIA Security+
- CompTIA CySA+
- BTL1
Where it leads
- Incident Response
- Threat Hunter
- Detection Engineer
Early access
Be first through the door.
Xyber One is coming to iOS and Android. Join the waitlist and we will email you the day it opens.