eSOCINE Security Operations Certified Level 1
Created per CertMap methodology · Updated 1 September 2026 · About the editorial team → · Official page ↗
▾ Jump to …4 sections
What is eSOC?
The eSOC is the entry-level security operations certification from INE Security, released on 3 March 2026. It targets the work of a Tier 1 analyst: alert triage, log and SIEM analysis, incident detection and escalation, and case documentation. Exam domains are SOC foundations, logging and SIEM, detection and response, SOC tools and workflow integration, case management and reporting, and applied analysis scenarios. The learning path additionally covers working with AI assistance in day-to-day SOC work.
Suitable for
Quick facts
Cost, prerequisites, exam & renewal
Cost over 5 years
Prerequisites
No formal entry requirements, anyone may attempt the exam. The voucher is only available with an INE Premium subscription (799 USD per year). INE addresses the exam to people entering or moving into defensive security roles.
Exam format
Hands-on exam along the SOC workflow: validating alerts, correlating evidence, prioritising incidents and producing escalation-ready documentation. INE does not publish an exam duration or passing score for this exam. The voucher expires 180 days after purchase; one free retake is included and must be taken within 14 days. Grading is automated, and the result including a per-domain breakdown arrives within a few hours.
Renewal & maintenance
Valid for three years from the date awarded. Renewal runs either through 36 CPE credits, through a higher certification in the same INE career path, or by passing the current version of the exam. The fee is 99 USD per certification and cycle and is waived when renewing by passing the current exam. After expiry a 90-day grace period at 199 USD applies; after that only recertification remains.
CertMap score and matching roles
Rating
Matching NICE roles
More certifications
From INE
eAISINE Security AI Systems Security SpecialisteCDFPINE Security Certified Digital Forensics ProfessionaleCIRINE Security Certified Incident RespondereCPPTINE Security Certified Professional Penetration TestereCTHPINE Security Certified Threat Hunting ProfessionaleEDAINE Security Enterprise Defense Administrator
From the knowledge base
View all articles →CISSP or CISM? Two Careers, One Decision
Both require five years of experience, both cost roughly the same at first glance. Yet CISSP and CISM lead to different professions. The comparison with the numbers that course providers don't show.
CISM or CISA? Two ISACA paths, one directional decision
Both come from ISACA, both require five years of experience, and both cost almost the same. The difference is not the price but the role: managing or auditing. The comparison with the numbers and the role mapping.
CC or Security+? The Free Entry Point and the Job-Market Classic
Both are entry-level certifications with no admission barrier, both cover the fundamentals of cybersecurity, and yet they stand for different strategies: one as a low-threshold, temporarily free start, the other as an established credential with weight in the job market. The comparison with the numbers and the opposing cost logic.