A little learning. A little more confidence.Your next step starts here
mycybertutor.

BEGINNER CAREER TRACK · U.S. FOCUS

SOC Analyst

Investigate alerts, connect evidence, and write a clear incident handoff.

You enjoy puzzles, technical detail, and explaining what happened.

Start with the foundation ↓Go to the career lessons

01 · SHARED FOUNDATION

Start with what connects everything.

Complete these once for all three tracks. Already comfortable? Revisit the check-ins or explore a career lesson now.

What are we actually protecting?Read, reflect, and check your understandingYour identity is more than a passwordRead, reflect, and check your understandingPause before the clickRead, reflect, and check your understandingFrom a name to a destinationRead, reflect, and check your understandingWhat HTTPS does, and does not, meanRead, reflect, and check your understandingSmall permissions, smaller blast radiusRead, reflect, and check your understanding

02 · THE ROLE IN PRACTICE

Build the skills, step by step.

Working an alert queueRead, reflect, and check your understandingSearching security eventsRead, reflect, and check your understandingComparing authentication signalsRead, reflect, and check your understandingInvestigating a reported messageRead, reflect, and check your understandingReading endpoint evidenceRead, reflect, and check your understandingBuilding an evidence timelineRead, reflect, and check your understandingEscalating with a clear handoffRead, reflect, and check your understandingClosing an alert responsiblyRead, reflect, and check your understanding

03 · GUIDED EXERCISES

Make a decision. Explain why.

Each fictional case has three decisions with feedback. Correct each step to record the exercise as complete.

  • 3 guided decisions
  • 3 guided decisions
  • 3 guided decisions

04 · YOUR PORTFOLIO PROJECT

Harbor Books incident handoff

Write a junior analyst handoff using this fictional case. Do not assume an attack succeeded or take actions on real systems.

Read the case evidence

AUTH-41: 09:02 UTC, finance account jlee, success after 18 failures from 203.0.113.24, unfamiliar device, session S17. APP-08: 09:07 UTC, S17 requested an orders export. APP-09: 09:08 UTC, export failed. Owner verification is pending. No containment is recorded. Customer orders support the store’s daily operations.

Write five short sections, compare your work with the review checklist, and download your work sample. Drafts save in this browser and are included in your progress backup.

Not started

05 · KEEP BUILDING EXPERIENCE

Take your practice further.

Practice searches in a security monitoring tool using sample logs. Prepare to explain your evidence, uncertainty, and escalation choices in an interview.

Use only authorized training environments. You can explore entry certifications such as Security+ or ISC2 CC alongside hands-on practice; this track is not official exam preparation.

YOUR LEARNING SPACE