UNF Professional and Lifelong Learning
UNF Professional and Lifelong Learning · Security Blue Team

Security Blue Team Level 2 (BTL2) Training

LevelAdvanced
Duration6 Days
Experience2+ years: Security Operations
Average Salary$115,000
LabsYes

Jacksonville professionals earn BTL2 through the University of North Florida's Professional and Lifelong Learning partnership with Applied Technology Academy. This is Security Blue Team's advanced defensive certification, delivered live online or in person by ATA's practitioner instructors.

Coursework centers on advanced threat hunting, detection engineering, malware analysis and deeper incident response — the preparation Northeast Florida employers expect for experienced defenders stepping up to senior SOC and threat-hunting roles. UNF PLL students get ATA's hands-on labs, unlimited mentoring and 5-star student support from first class to certification.

The UNF Professional and Lifelong Learning team handles enrollment — pick a session below or reach out and we'll map your schedule, funding and prep together.

Course Overview

This course provides Advanced Security Operations training, equipping experienced defenders with specialized skills across multiple disciplines. The certification focuses on techniques actively used by threat hunters and incident response teams, covering Malware Analysis, Threat Hunting, Vulnerability Management, and Advanced SIEM. Students will learn to conduct static and dynamic analysis, perform adversary emulation, and build proactive SIEM detections to reduce organizational risk effectively.

Course Outline
  • Module 1: Malware Analysis
    • Setting up a Malware Analysis Home Lab
    • Static Malware Analysis (Header, Strings, Functions)
    • Dynamic Malware Analysis (Sandboxing, Debugging)
    • Assembly Language Fundamentals
    • Reverse Engineering - C Code Constructs
    • Advanced Analysis Techniques
    • Different Malware Types (Ransomware, Loaders, Backdoors)
    • Malware Analysis Practice Scenarios
  • Module 2: Threat Hunting
    • Setting up a Threat Hunting Home Lab
    • Endpoint Threat Hunting (Processes, Registry, File System Artifacts)
    • Network Threat Hunting (Traffic Analysis, Protocols, Anomalies)
    • Hunting at Scale (Using centralized platforms)
    • Hunt Reflection and Report Writing
  • Module 3: Advanced SIEM
    • SIEM Deployment (Architecture, Data Ingestion, Optimization)
    • Proactive SIEM (Building advanced correlation and detection rules)
    • Adversary Emulation (Simulating TTPs to validate SIEM coverage)
  • Module 4: Vulnerability Management
    • Host Discovery and Asset Inventory
    • Vulnerability Discovery and Scanning
    • Analysis, Prioritization, & Threat Intelligence Integration
    • Reporting and Remediation Strategies
Intended Audience
  • Mid-Senior Security Analysts
  • Mid-Senior Incident Responders
  • DFIR Specialists
  • Threat Hunters, and Malware Analysts
Prerequisites

2+ years security experience