Skip to content
CertMapCertMap

CSAEC Council Certified SOC Analyst

EC-CouncilSpecialty certificateSecurity Operations

Created per CertMap methodology · About the editorial team · Official page

Jump to …5 sections

What is CSA?

The CSA certifies work in a security operations centre at the detection and triage level. The exam covers SOC operations and structure, threats, attack methodology and indicators of compromise, log management from collection through normalisation to correlation, incident detection and triage including SIEM fundamentals and use case development, proactive threat detection with threat intelligence and threat hunting, incident response, and SOC operations in cloud environments. According to the provider it addresses tier one and tier two SOC analysts and people aiming for that role.

Quick facts

Languages
RecognitionGlobal

Cost, prerequisites, exam & renewal

Cost over 5 years

Exam fee (acquisition)€414
AMF (5 years)€368
5-year total€782
How is TCO calculated?

CertMap score and matching roles

Rating

Market recognition
1/3
Scheme quality
1/3
Practice evidence
1/3
Maintenance
1/3

Matching NICE roles

Protect and DefendDefensive Cybersecurity
Protect and DefendIncident Response

What are NICE roles? The framework explained

More certifications

Daniel Heessel, CISO of the Year 2026

Personal consulting

Not sure what's next? Ask someone who knows.

Personal strategy instead of weeks of self-research. Vendor-independent, with auditable recommendations and transparent sources.

Open consulting
CSAView in quadrant