Security Blue Team Certified Security Operations Manager Training
Offered to the Jacksonville and Northeast Florida community through UNF Professional and Lifelong Learning in partnership with Applied Technology Academy — live online or in person, taught by ATA's practitioner instructors.
Security Blue Team training to build, staff, and mature security operations, covering metrics, threat modeling, and MITRE ATT&CK strategy.
Course Overview
This Security Operations Management training is designed for leaders, focusing on how to plan, build, and mature security operations teams within an enterprise. You will gain the strategic and managerial knowledge required to effectively lead functions like Incident Response, Threat Hunting, and SIEM. The course emphasizes governance, metrics, and managing people and processes to mature the entire security operations capability.
Course Outline
- Module 1: Modern Security Operations
- Business Objectives, Legal Enablers, and Considerations (Aligning SOC with Governance)
- Security Operations Team (Roles, Structure, and Collaboration Models)
- Module 2: Building a Security Operations Team
- Threat Modelling (Techniques and methodologies for identifying organizational threats)
- Building Your Team (Staffing, Training, and Organizational Placement)
- SIEM & Detection Engineering (Strategic planning and selection of detection technologies)
- Case Management (Process, standardization, and tooling)
- Other Tooling & Administration (Vulnerability Scanners, Endpoint tools, etc.)
- Processes and Documentation (Playbooks, Runbooks, SOPs)
- Module 3: Capability Development
- Incident Response (Building the full lifecycle capability)
- Threat Intelligence (Integration into SOC workflows and strategic decision-making)
- Vulnerability Management (Process ownership and cross-functional remediation)
- Digital Forensics (Establishing forensic readiness and collection capabilities)
- Malware Analysis (Integrating analysis output into detection)
- Threat Hunting (Establishing a hunting program and team structure)
- Module 4: Metrics, Maturity, and Measuring Success
- Maturity Models (Using frameworks to assess and advance SOC capability)
- Operationalizing MITRE ATT&CK (Mapping detections and controls to adversary tactics)
- Cyber Deception (Implementing deception techniques like honeypots)
- Security Orchestration, Automation, and Response (SOAR) (Strategy and implementation)
- Reporting and Metrics (KPIs, KRIs, Executive Reporting, and Dashboards)
- Security Research & Presentation (Staying current and communicating risk to leadership)
- Retaining Talent (Strategies for team morale and skill development)
Intended Audience
- Security Managers
- SOC Managers
- Heads of Security Operations
- Directors of Security Operations
- Consultants
Prerequisites
2+ years security management experience
