Hello, you are using an old browser that's unsafe and no longer supported. Please consider updating your browser to a newer version, or downloading a modern browser.

Global Accelerated Learning • Est. 1999
Glossary Term SOC Tiers

Training Camp • Cybersecurity Glossary

What is SOC Tiers?

SOC tiers are the layered analyst roles in a security operations center, from Tier 1 triage to Tier 3 threat hunting and advanced response.

Glossary > Security Operations > SOC Tiers

Understanding SOC Tiers

SOC tiers describe the layered analyst roles within a security operations center, structured to escalate alerts by severity and complexity. Tier 1 performs initial triage and monitoring, Tier 2 conducts deeper investigation and incident response, and Tier 3 handles advanced analysis, threat hunting, and forensics. This tiered model helps SOCs manage alert volume efficiently and route complex threats to the most experienced staff.

Learn More About SOC Tiers:

Ready to Get Certified?

Turn knowledge into credentials with our instructor-led cybersecurity boot camps.

View All Courses →