Certification sheet · № 013
Blue Team Level 1
About this cert
Practical blue-team certification focused on log analysis, SIEM workflows, and incident triage for SOC analysts.
- Prep time
- 4–8 weeks (~60h)
- Exam
- 24h
- Validity
- 3 yr
- Required training
- No
Your action plan
Prerequisites, preparation paths, readiness checks, and funding — tailored to your profile.
01·Certification sheet
Prerequisites
Education, prior credentials, and vendor requirements before you sit the exam.
Diploma / education
Required training
Knowledge & experience
- →Basic networking
- →Linux CLI
02·Certification sheet
How to prepare
Estimated prep: 4–8 weeks (~60h) · Lab: Security Blue Team labs
- Visit website
Offensive Security
Vendor - Visit website
SANS
Bootcamp - Visit website
Cybrary
Online
03·Certification sheet
Could you pass BTL1?
Self-assessment aligned with enriched profile for Blue Team Level 1.
● BTL1 readiness quiz
Could you pass BTL1?
Self-assessment aligned with enriched profile for Blue Team Level 1.
Answer scale
- Yes — Yes — I can explain it and/or I have hands-on experience.
- Somewhat — Somewhat — I know the basics and could look it up, but limited practice.
- No — No — I would not know where to start.
04·Certification sheet
Funding & support
Programs and pathways for candidates in United States. Always confirm eligibility before applying.
Employer support
Employer tuition reimbursement
Many employers reimburse certification costs when tied to your role. Ask HR about L&D budgets or professional development allowances.
Public employment services
Workforce Innovation grants (WIOA)
State workforce boards may fund approved training for eligible unemployed or career-switching candidates.
National incentives
Veterans GI Bill & SkillBridge
Veterans may use education benefits for approved cyber training and certification prep.
Student loans & financing
Income-share & bootcamp loans
Some bootcamps partner with lenders; compare total cost vs self-paced study.
Community comments
Reviews and discussion from people who recommend this certification. Top-level comments are ranked by community votes.
Log in and recommend this certification to join the discussion.
…