Sabastian Hague, Director of Content and Training, says of the new certification:
The way modern SOCs operate is changing. Now, more than ever, analysts and incident responders have core detection engineering elements within their roles. With the growing expectation for junior analysts to have these skills, we wanted to create an affordable but robust course that equips them with everything they need.
Developed by Sabastian and his experienced team of industry veterans, CJDE builds skills in threat intelligence integration, YARA/Sigma rule creation, Zeek essentials, and detection rule tuning. This will give students the confidence to grow into automation and detection engineering.
Sabastian expects the certification to become a trusted benchmark for junior detection engineers.
He adds: “Detection engineering has been underserved in training and certifications, despite being central to SOC operations. For organizations, having junior analysts trained in these skills means streamlined operations, fewer false positives, and the internal capability to build and tune effective detections and adopt Detection as Code practices.”
Priced at just £399 (but with an introductory offer price of £299, valid until October 9th), CJDE takes 40-60 hours to complete, and is rounded off by a hands-on exam. It comprises 120+ lab hours, over 400 lessons, and realistic threat scenarios.
Your Questions Answered: Understanding Detection Engineering
If this area of cybersecurity is still relatively new to you, we’ve answered some frequently asked questions.
What is detection engineering?
Detection engineering is the process of designing systems to identify and respond to cyber threats. Think creating SIEM rules, alerts, and analytics to catch bad actors. With CJDE, you'll learn to build these systems, making you a key player in any SOC.
What is the difference between threat hunting and detection engineering?
Threat hunting is about proactively searching for hidden threats that slip past defenses, often requiring creative, investigative skills. Detection engineering focuses on building and fine-tuning systems, like SIEM alerts and detection rules, to catch threats automatically. CJDE gives you the foundation to master detection engineering and sets you up to explore threat hunting later.
Is threat hunting the same as threat detection?
Not quite. Threat detection involves spotting threats using automated tools and alerts, which detection engineers design. Threat hunting requires digging deeper to find threats that evade these systems. CJDE trains you to build robust detection systems, preparing you for both detection and future hunting roles.
What is the difference between intrusion detection and threat hunting?
Intrusion detection uses automated systems, like IDS/IPS, to flag unauthorized access or attacks in real time. Threat hunting is more proactive, involving manual searches for sophisticated threats that might not trigger alerts. CJDE focuses on crafting detection systems, giving you the skills to support intrusion detection and beyond.