Capability over attendance
Progress is judged through what a resident can investigate, decide and explain.
WHY THIS EXISTS
The missing layer is often the transition from knowing to doing.
Academic education and certifications can build valuable foundations. Early-career candidates are still often left to connect tools, practical investigation, communication and interview readiness on their own.
Knowing a definition is not the same as investigating an uncertain alert. Candidates need repeated opportunities to follow evidence, make proportionate decisions and explain what they found.
The SOC Residency is designed as that transition layer: remote-first, practice-led and explicit about the standard being assessed.
WHO IS BUILDING THIS
Built by someone who has done this work.
Owner input needed: replace the placeholders below with a real name, role and background before this page goes live.
[Founder name to be added]
[Founder role/title to be added]
[2–3 sentences: relevant SOC/security background, why this problem, and any credentials worth naming. To be added by the owner before launch.]
OPERATING PRINCIPLES
Standards that keep the residency useful and honest.
Evidence over claims
Claims are supported by assessed work and visible conditions.
Communication is part of technical competence
A finding is incomplete until the right audience can act on it.
Job-ready status is earned through assessment
Readiness is demonstrated at the required standard, not granted for attendance.
Transparency over placement guarantees
The residency does not promise placement or manufacture outcomes.
Continuous industry relevance
Content and assessment should continue to reflect changing SOC practice.