Skip to main content
Question

Where are the SIEM training options?

  • January 28, 2026
  • 2 replies
  • 63 views

CoryCousins
Forum|alt.badge.img

I want the option for multiple days of instructor led training with labs and exams.  This should cover topics like writing custom parsers, configuring custom ingestion, general administration, dashboards, search, etc.

 

Instead, we have this video that spends less than 15 minutes discussing detection rules - https://www.skills.google/paths/187.  The documentation alone isn’t enough for someone like me to magically understand how everything works.  I’ve also highlighted documentation issues with our sales team + support over the  past year where information was missing or just wrong, which is even less of an incentive to use the documentation for anything beyond basic reference.

 

I’m hearing the same complaints from the company we partnered with to help migrate to SecOps.  They’re hearing the same complaints from other SecOps customers they support.  I’m under the impression there’s a certification option for SecOps now.  Who is the audience for this cert and how do they even prepare for it?

2 replies

kentphelps
Staff
Forum|alt.badge.img+11
  • Staff
  • January 28, 2026

Here is the link for the  Professional Security Operations Engineer exam details which includes links to training and the exam topic outline so that may be of some help.  There is a learning path on Cloud Skills Boost for the exam.  The training and exam also cover Google Threat Intel and Security Command Center but the majority of the material is SecOps SIEM & SOAR.

There is also a lot of material on the Community including some on demand Webinars that deep dive into some of the topics you mention above.  I highly recommend ​@jstoner ‘s New to Google SecOps Blog series and also ​@cmmartin_google ‘s @thatsiemguy on Medium.


joshuabguthrie

The SecOps training content is underwhelming and outdated. The blogs are appreciated, but most of us do not have time to piece together critical platform knowledge from scattered posts.

Other SIEM vendors provide robust, structured customer training so teams can actually maximize their investment. It is surprising that Google has not delivered high-quality, in-depth training across core SecOps capabilities.

We have been on this platform for about a year, and the most consistent feedback I see from customers is a request for real training. When will Google provide structured training, including serious, end-to-end video courses?