Security Analyst Level 2 (SAL2)

Issued by TryHackMe

Security Analyst Level 2 (SAL2) exam is an advanced defensive certification designed for SOC analysts ready to prove next-level capability. It validates your ability to investigate complex, multi-stage incidents across realistic environments. Unlike theory-based certifications, SAL2 assesses real investigative workflows, prioritisation, SLA awareness, and professional communication. By passing, you demonstrate investigation maturity and readiness for greater responsibility in mode

Type Certification
Level Advanced
Time Days
Cost Paid

Skills

Contextual Reasoning
cross domain investigation
Decision Making
Incident Response
Multi-Stage Incident Investigation
Prioritization
Professional Communication
Service Level Agreements (SLA)
SOC tooling
Threat Analysis
Workflows

Certification Criteria

Candidates who pass the SAL2 exam complete a 72 hour, to validate ability to investigate complex, multi-stage incidents across realistic environments.