Resecurity® Certified SOC Operations Manager

A management-level programme focused on designing, managing and improving Security Operations Center capabilities. The course addresses SOC operating models, people and staffing, operational processes, triage and escalation, detection strategy, SIEM/SOAR/CTI architecture, cross-functional coordination, performance metrics, maturity and executive reporting.

• SOC Managers • SOC Team Leaders / Supervisors • Senior SOC Analysts • Security Operations Architects • IT Security Managers • Cybersecurity Managers • Detection Engineering Leads • Incident Response Leads • Security Operations Leads • Cybersecurity professionals transitioning into SOC management

• Participants should be able to:
• • Design an effective SOC operating model.
• • Define SOC roles, responsibilities, staffing and shift structures.
• • Design alert triage, escalation and case-management workflows.
• • Develop threat-informed detection strategies.
• • Evaluate SIEM, SOAR, CTI and security-tooling architecture.
• • Coordinate SOC, DFIR, CTI and fraud/security functions.
• • Establish SOC KPIs, SLAs, risk indicators and maturity measures.
• • Evaluate detection effectiveness and analyst workload.
• • Communicate SOC performance and risk to senior management.
• • Develop SOC transformation and improvement roadmaps.
• • Lead management-level SOC decision-making during operational challenges.

Participants should ideally have: • Previous cybersecurity education, training or professional experience • Familiarity with SOC concepts and security operations • Understanding of security monitoring and incident-management processes • Basic awareness of SIEM, SOAR, CTI and security telemetry • Experience working in or alongside a security-operations environment