/ 6-Month Placement Track

From First Lab to Active SOC Role.

• Placement Rate

SOC-ready on day one

Every placement is into an active operations role — real alert queues, real escalation chains, real incident ownership from shift one.

Placement into a verified security operations role isn't a bonus — it's the programme's designed endpoint. Every lab hour builds toward a day-one shift in a real SOC.

Close-up environmental shot of a cybersecurity lab, angled overhead view of multiple dark workstations with monitors showing SIEM dashboards, cool blue monitor glow reflecting on keyboards and desks, one analyst's hands visible actively typing, ambient dark room with precise task lighting, no text visible

— Structured Placement Pipeline

How the pipeline runs, step by step.

Step 01 — Months 1–3

Step 02 — Month 4

Step 03 — Months 5–6

Live lab immersion

Portfolio review and vetting

Active SOC placement

You join a verified security operations environment on a real shift rotation — handling live alerts, escalating incidents, and writing the same reports you practised in training.

80% of curriculum is hands-on attack simulation and defence drills inside isolated lab environments that mirror enterprise SOC infrastructure.

Mentors review your incident reports and threat assessments with partner SOC leads. Your lab output is the submission — no separate application required.

Close-up of a student's hands at a dark workstation, screen in background showing a terminal with network traffic logs and a partially written incident report, cool monitor glow on fingers and keyboard, depth of field blurs background monitors, documentary-style framing, no readable text

+ What Gets You Hired

Your portfolio is the work itself.

Hiring managers at partner SOCs don't ask for a certificate. They review the incident reports, threat assessments, and lab write-ups you produced during training — documented proof of operational judgement, not exam scores.

By month four, your portfolio reflects real attack scenarios, real escalation decisions, and real remediation steps — the exact artefacts that map to day-one SOC responsibilities.