SOC Engineer
Follow this curated learning path to build and maintain the security tooling your SOC relies on as a SOC Engineer.
These five courses guide you through configuring and tuning Datadog's security products and automating response actions at scale. Engage in hands-on practice within live demo environments to gain experience analyzing real-time data using a free Datadog trial account.
This path is designed specifically for SOC Engineers and other roles responsible for configuring, tuning, and maintaining the security tools and automations used across the SOC.
You’ll learn how to do the following:
Configure Cloud SIEM for AWS
Secure your cloud environments with Datadog Cloud SIEM. Enable Cloud SIEM, ingest cloud audit logs, and install a Content Pack. The lab and examples in this course feature AWS. The concepts are applicable to multiple cloud providers.
Enable and Manage Workload Protection
Enable Workload Protection for your cloud workloads and detect infrastructure threats in real time. Manage out-of-the-box Security Agent rules and detection rules to customize Workload Protection for your environment.
Write Custom Cloud SIEM Detection Rules
Create custom detection rules for Datadog Cloud SIEM. Write detection rule queries using key log attributes and create notification rules to automatically alert stakeholders. Write suppression queries and manage detection rules as code.
Automate Threat Investigation and Remediation with Security Workflows
Automate security investigation and remediation tasks with Datadog Workflow Automation and Cloud SIEM. Create security workflows using Cloud SIEM Content Packs and SOAR blueprints. Automate threat remediation in AWS using security workflows.
Automating Meaningful Actions with Datadog Workflow Automation
Learn how to automate security responses and operational remediation using Datadog Workflow Automation, from rolling back faulty deployments to maintaining tag hygiene and fixing cloud misconfigurations.
