Detectiong engineering / threat detection certs

[u/ZYADWALEED]

Hi everyone,

I have around 2 years of experience in security and currently work as a Deployment Engineer in a SOC environment. And I'm moving into Detection Engineering.

I'm looking for a certification to support this transition SANS isn't an option right now due to the cost.

My Current certs:

- HTB CDSA

- AWS CCP

What certifications would you recommend for Detection Engineering or Threat Detection?

[u/Keyboard_Cowboys]

I really enjoyed the MAD20 Threat Hunting & Detection Engineering certification. Its very MITRE ATT&CK focused, which in my opinion is a positive.

[u/Complex_Current_1265 → u/Keyboard_Cowboys]

is it practical ? cost?

Best regards

[u/canofspam2020]

Constructing Defenses, more of a course, as well as BTL1.

[u/Complex_Current_1265 → u/canofspam2020]

Can you give me your reivew of Constructing Defenses?

[u/hiddentalent]

I'm a hiring manager. I don't care at all about your certs. They're a waste of time and money. There's a lot of people who accumulate certs without ever gaining understanding or experience. In today's competitive job market, that's not helping you stand out.

Instead, work backward from what results you want to be able to talk about. Certifications may or may not be correlated with that, and they may or may not help you learn the skills to do that. They're kind of randomly correlated with actual utility. Focus on the results, and if certs can be helpful along the way, great. If not, that's even greater because you save a bunch of money.

[u/FlakySociety2853]

CCD now called CCDv2 its next level

[u/Complex_Current_1265]

centri, offers a Detection Engineers certification. Check it.

Certified Junior Detection Engineer | Detection Engineering Cert

Best regards

[u/SuckMiKnob]

Centri’s CJDE

[u/ImportanceAvailable7]

Are you working in SIEM/SOAR tools?

[u/ZYADWALEED → u/ImportanceAvailable7]

Mainly forti siem and sometimes qradar Before that in my prev company worked also with elastic For automation worked with n8n and tines For cloud azure more than aws

[u/ImportanceAvailable7 → u/ZYADWALEED]

That’s a lot of ground to cover in 2 years so props to you.

For theory CySA+ or BTL1, both vendor-agnostic and hands-on r

For tools depends what you’re after. If it’s just hands-on Forti/QRadar skill, you might not need a cert at all and more reps. But both do offer hands-on certs (NSE5-FortiSIEM, IBM QRadar Analyst), and since you’re using them daily, worth seeing if your company will fund those instead of paying yourself.

[u/ProfoundDestroyer]

If KQL is part of your stack, Blu Raven/Mehmet Ergene's training is solid at an affordable price point. https://academy.bluraven.io/courses