The Certified Cyber Security Analyst Course stacks two TechDX certifications, taken in order. Stage 1, the Certified Cybersecurity Associate, sets up everything that Stage 2 assumes: reading traffic and logs, running and securing machines, and determining which alerts deserve a closer look. Stage 2, the Certified Cybersecurity Analyst, is what most people enrol for, taking you into threat detection, incident escalation and evidence-based investigation. Together that is 200 hours and six units, split 60% hands-on labs and 40% lessons. Study is fully online and self-paced inside the browser-based TDX Arena platform, and entry asks only for basic computer literacy, so no prior cyber security or IT experience is needed.
Analyst work is judgement work. Deciding whether an alert is real means knowing what normal traffic, normal logins and a normal process list look like, and you cannot spot a deviation from a baseline you have never seen. Jump straight to detection and you end up memorising playbooks you cannot reason your way past. Stage 1 puts 100 hours of command line, networking, systems and alert-handling practice underneath you first, so Stage 2 spends its 100 hours on investigation rather than backfilling gaps.
Is this cyber security course accredited?
No. The Certified Cyber Security Analyst Course is non-accredited training. You finish with two TechDX certifications, Certified Cybersecurity Associate and Certified Cybersecurity Analyst, awarded by TechDX and recognised by industry. What you do not get is a nationally recognised qualification under the Australian Qualifications Framework. It is not a Statement of Attainment, it is not delivered under Upskilled's RTO scope, and it does not licence you to perform a regulated role.
Plenty of employers hire analysts on demonstrated capability, which is what an applied, lab-assessed program is built to show. But if a nationally recognised credential is what you actually need, for an employer requirement, a visa, a government role or credit towards further study, Upskilled delivers accredited IT qualifications as well. Start with the ICT40120 Certificate IV in Information Technology (Focus on Cyber Security), or compare the whole range of cyber security qualifications.
Upskilled runs three versions of the same TechDX pathway, and this page is the middle one: 200 hours, two certifications, Associate then Analyst. The other two are the first stage on its own, and the full four-stage pathway. Each one contains the one before it, so the only question is how far you want to go now.
| Program | Hours | Certifications | Best for |
|---|---|---|---|
| Certified Cybersecurity Associate | 100 hours | 1 TechDX certification, 3 units | Best if you want to test whether security work suits you before committing further. It is the same first stage this course opens with, at the smallest commitment. |
| Certified Cyber Security Analyst Course (this page) | 200 hours | 2 TechDX certifications, 6 units | Best if you already know you want analyst work. Two stages take you from foundations through threat detection, incident escalation and investigation, in one enrolment. |
| Cyber Security Online Bootcamp | 400 hours | 4 TechDX certifications, 12 units | Best if you are set on a full security career and want the specialist stages that follow this one, escalation-level operations work and threat intelligence, in the same enrolment. |
Stage 1 is the Certified Cybersecurity Associate, and it runs first so that nothing in Stage 2 arrives unexplained. Over 100 hours and three units you learn how machines and networks behave, how they are locked down, and how odd activity gets checked. Basic computer literacy is the only starting point.
Lab work starts at the terminal: moving through directories, checking permissions and watching processes run. You then map addressing, ports and name resolution, open a saved traffic capture to follow protocols in sequence, and weigh small scenarios against confidentiality, integrity and availability.
You run the machines. Labs cover building accounts on least privilege, switching off services nobody needs, limiting remote access and setting host firewall rules. You read logs to rebuild what someone did, rank flaws by CVSS severity and check a build against Essential Eight controls.
Now you defend. You work a queue of alerts from log data, decide which deserve attention and write the escalation. You pull a phishing email apart header by header, check cloud identity and storage exposure, and name behaviour using MITRE ATT&CK and the kill chain.
Stage 1 is also sold on its own as the Certified Cybersecurity Associate if you would rather start there and decide about analyst work later.
The Certified Cybersecurity Analyst takes the groundwork laid in Stage 1 and moves you onto the detection side, learning the workflows a security operations centre depends on by doing them: reading a queue, separating noise from genuine intrusion, handing over findings that hold up. It runs 100 hours across three units, weighted towards labs, and closes with an applied exam.
Fundamentals sets you up before you are trusted with a live queue. In the labs you work out where evidence actually lives: authentication records, endpoint telemetry, name resolution and web proxy history, and what each source can and cannot tell you. You build a picture of a host, its services, its users and its normal traffic, then query a log platform to pull one session back out of millions of lines. You also align events recorded across different time zones, and learn where first-line responsibility ends.
Essentials is the working day itself. The labs hand you a queue that keeps filling: signature hits, unusual sign-ins, blocked downloads, staff reports. You take each item, gather what surrounds it, and reach a decision, closing what is benign, raising what is not, and recording your reasoning in words a colleague can follow. You pull apart reported emails and detonate their attachments in a sandbox. You rank weaknesses by CVSS so patching goes where it matters, and you tune detections that fire constantly and are never right.
Analysis is where alerts become a case. Given an environment already compromised, you work backwards: which account was used first, what it touched, what was installed to keep access, and how the attacker spread. You stitch endpoint, network and identity records into one ordered account of events, open captured traffic when the logs stop short, and check addresses and hashes against open sources. You name the behaviour using MITRE ATT&CK and the cyber kill chain, then set out what was reached, what it cost, and what needs cutting off.
Both certifications sit inside one training environment. Stage 1 and Stage 2 share the same account, so all six units, every lab and both applied exams are tracked in the one place, with nothing new to set up when Stage 2 opens. Access runs for 10 months from the enrolment date.
Two hundred hours of lab work and two TechDX certifications give you something specific to show: tasks you have performed rather than subjects you have read about. These are industry certifications, not a qualification, so how much weight they carry depends on the employer. What they reliably give you is the vocabulary of detection and escalation work, and your own examples to talk through at interview.
The roles above are the ones TechDX aligns the Certified Cybersecurity Analyst certification to. The related roles are positions where these skills are useful, not roles this course qualifies you for on its own.
Your cyber security analyst course is just the start. Our internship program can help you turn study into real work, real contacts and real outcomes.
Turn your qualification into real Australian work experience. Complete 80% of your course and apply for a 12-week internship with a top host company, delivered with Career Success Australia. Past placements include NAB, BHP, PwC, Telstra and IBM.
Get in touch to know more.*
*Terms and conditions apply.
Your Certified Cyber Security Analyst certification
Pass the final applied exam, and you receive the Certified Cybersecurity Analyst certification from TechDX, along with credentials for all six units, a Skills List setting out what you can do, the case studies from the work you completed, and an Achievement Report. Together these give an employer something more specific than a course title on a resume: evidence of tasks you have actually performed in a lab environment.
This certification is issued by TechDX and recognises completion of applied assessment. It is not AQF or ASQA accreditation.
It is a single enrolment covering two stacked TechDX certifications: the Certified Cybersecurity Associate first, then the Certified Cybersecurity Analyst. Together, that is 200 hours and six units, weighted 60% to hands-on labs, run by Upskilled with TechDX inside the TDX Arena. Stage 1 teaches the networking, systems and operations groundwork; Stage 2 puts you into threat detection, incident escalation and analyst-level investigation. You begin with no experience and finish able to work an alert queue and document what you found.
No. This is non-accredited training that delivers two TechDX certifications and six units. There is no AQF level attached; it is not a Statement of Attainment; it sits outside Upskilled's RTO scope; and it is not a licence to perform regulated work. What you get instead is industry certification backed by applied assessment, which many employers accept as evidence of practical skill. If a nationally recognised credential is what your situation requires, Upskilled also delivers nationally recognised IT qualifications, so check what your target roles actually ask for before enrolling.
Yes. Entry asks for everyday computer skills and a connection that stays up, nothing more. Stage 1 is the Certified Cybersecurity Associate, which opens at computing fundamentals and networking, so nothing is used before it has been defined. That matters here, because Stage 2 assumes you can already read logs and traffic with confidence, and Stage 1 is where you build that. Career changers, help desk staff and complete beginners all start in the same place.
Around 200 hours in total, which is about 20 weeks at the suggested pace of 10 hours a week. Study is online and self-paced, and the timetable is yours: evenings, weekends, or a heavier week when work allows. Your platform access lasts 10 months from the day you enrol, roughly double the suggested schedule, so a busy stretch at work does not put the course at risk. There are no intake dates and no scheduled classes to attend.
They are the Certified Cybersecurity Associate and the Certified Cybersecurity Analyst, and yes, they run in order. Stage 1 covers Foundations, Systems and Operations: computing and networking basics, system administration and hardening, then alert triage and threat defence. Stage 2 covers Fundamentals, Essentials, and Analysis: log collection and normalisation, monitoring and escalation, and then full investigation across endpoint, network, and identity evidence. Stage 2 is written on the assumption that Stage 1 has been completed, so the sequence is not optional.
Sixty per cent of your hours are labs. Across the two certifications, that is about 120 hours spent doing security work and 80 hours in lessons, and each lesson is followed by a task that asks you to apply it. The labs adapt to how you perform, so time goes where your skills are weakest. Assessment matches the format: both stages finish with a hands-on, scenario-based exam where you are marked on the decisions you make inside a live-style situation, not on recall.
This is the focused analyst route: 200 hours, two certifications, six units, taking you from no experience to threat detection and incident escalation work, then stopping there. The Cyber Security Online Bootcamp is the full 400 hour pathway. It contains everything on this page and then adds two further TechDX certifications, Certified SOC Analyst and Certified CTI Analyst, which move into escalation-level investigation and threat intelligence specialisations. Choose this route if analyst-level capability is your goal; choose the full pathway if the specialist end of security is where you are headed.
