Microsoft Certified: Security Operations Analyst Associate

As a candidate for this certification, you’re a security operations analyst who reduces organizational risk by performing triage, responding to incidents, hunting for threats, and engineering detections.

As a security operations analyst, you monitor, identify, investigate, and respond to threats in multi-cloud and on-premises environments by using Microsoft Defender XDR, Microsoft Sentinel, Microsoft Entra ID, Microsoft Purview, and Microsoft Defender for Cloud workload protections. You perform hunting by using KQL and Sentinel Graph and automate responses to threats.

You collaborate with business and security leadership to define security standards for the organization. You work with other roles across the digital enterprise to implement the standards, to enhance the security posture of an organization, and to raise security awareness.

As a candidate, you should be familiar with:

• Microsoft security, compliance, and identity solutions
• Microsoft 365
• Azure cloud services
• AI agents and Copilots
• Windows, Linux, and mobile operating systems.