CSA
EC Council Certified SOC Analyst
EC Council Certified SOC Analyst
› Quality score
Four-axis SecProve rubric, each 0–10. SecProve editorial assessment — each axis carries a written justification so you can push back on any single call without dismissing the whole score.
› Exam format
100 multiple-choice questions, 3 hours, proctored. Passing score: 70%.
First retake immediate; 14 days between attempts 2-3, 1 month between 3-4, 3 months between 4-5. Max 5 attempts/year.
› Recertification
Valid for 3 years. 120 ECE credits over 3 years + annual AMF (80 USD).
› 3-year cost of ownership
Excludes study materials, training, retake risk, and lost-wage opportunity. Use as a floor estimate.
› NICE Framework work roles
The NIST NICE work-role IDs this cert maps to. NICCS lookup.
› Core domains covered
The 2 domains this cert is centrally about. Passing the exam demonstrates working knowledge of each.
› Prerequisites
No formal prerequisites. Recommended: CEH or CND.
› Careers that commonly pursue this cert
Secure cloud infrastructure across AWS, Azure, and GCP. Specialize in the shared responsibility model and cloud-native controls.
Embed security into the software development lifecycle. Shift left to catch vulnerabilities before they reach production.
A hybrid role growing out of the realisation that SOCs need engineers who understand cloud-native telemetry, IAM-first threat models, and how to instrument AWS/Azure/GCP for detection.
Secures the platform that trains, stores, and serves ML models — multi-tenant GPU isolation, pipeline integrity, feature-store hygiene, secrets management in ML workflows.
See this cert’s domains highlighted on the interactive map, or compare it against the rest of the catalog.