SOC Analyst, Tier II readiness,
scored the way the job is.
Alert triage to crisis comms — the Tier II seat scored on the job.
4 things this role has to do. 4 things we measure.
Nobody cares how many hours your team spent in a course. They care whether the decision was sound. That's what we score.
Alert triage speed
Reading an alert fast and calling the right next move. Measured from triage and classification reps on SOC courses.
Incident classification
Putting incidents in the right bucket. Derived from threat and ops sessions across Sec+ / CySA+ material.
Escalation judgment
Knowing when to page the IR lead vs. when to chase the lead yourself.
Stakeholder comms
Clean subject-verb-object updates under time pressure.
Why this role, and why now.
Tier II analyst turnover is 40–60% annually. Replacing one analyst costs a mid-sized SOC between $40k and $80k. The existing training market is bifurcated: video-and-MCQ cert courses or raw labs. Neither measures whether an analyst can hold the actual seat.
CISOs who have a Sec+/CySA+ pipeline feeding their SOC but still watch Tier II hires wash out in 90 days. Readiness telemetry tells you who's job-ready before you promote them.
Our pilot gives you a readiness score per team member per axis, updated live from every completed rep, plus a weekly cadence of scenario-based PBQs aligned to your team's playbook. Pay per seat, not per course.