Security Blue Team Level 2 (BTL2) Training
BTL2 at FAU Continuing Education brings Security Blue Team's advanced defensive certification to South Florida. Offered through Florida Atlantic University's partnership with Applied Technology Academy, the course is taught live — online or in the Boca Raton classroom — by ATA practitioner instructors who work in the field they teach.
The program develops advanced threat hunting, detection engineering, malware analysis and deeper incident response. It is built for experienced defenders stepping up to senior SOC and threat-hunting roles, and FAU Continuing Education students train alongside working professionals from across South Florida's technology and defense employers.
Enrollment runs through the FAU Continuing Education team — register for a scheduled session below, or contact us to plan the right start date, funding path and preparation plan.
Course Overview
This course provides Advanced Security Operations training, equipping experienced defenders with specialized skills across multiple disciplines. The certification focuses on techniques actively used by threat hunters and incident response teams, covering Malware Analysis, Threat Hunting, Vulnerability Management, and Advanced SIEM. Students will learn to conduct static and dynamic analysis, perform adversary emulation, and build proactive SIEM detections to reduce organizational risk effectively.
Course Outline
- Module 1: Malware Analysis
- Setting up a Malware Analysis Home Lab
- Static Malware Analysis (Header, Strings, Functions)
- Dynamic Malware Analysis (Sandboxing, Debugging)
- Assembly Language Fundamentals
- Reverse Engineering - C Code Constructs
- Advanced Analysis Techniques
- Different Malware Types (Ransomware, Loaders, Backdoors)
- Malware Analysis Practice Scenarios
- Module 2: Threat Hunting
- Setting up a Threat Hunting Home Lab
- Endpoint Threat Hunting (Processes, Registry, File System Artifacts)
- Network Threat Hunting (Traffic Analysis, Protocols, Anomalies)
- Hunting at Scale (Using centralized platforms)
- Hunt Reflection and Report Writing
- Module 3: Advanced SIEM
- SIEM Deployment (Architecture, Data Ingestion, Optimization)
- Proactive SIEM (Building advanced correlation and detection rules)
- Adversary Emulation (Simulating TTPs to validate SIEM coverage)
- Module 4: Vulnerability Management
- Host Discovery and Asset Inventory
- Vulnerability Discovery and Scanning
- Analysis, Prioritization, & Threat Intelligence Integration
- Reporting and Remediation Strategies
Intended Audience
- Mid-Senior Security Analysts
- Mid-Senior Incident Responders
- DFIR Specialists
- Threat Hunters, and Malware Analysts
Prerequisites
2+ years security experience