Creating SAL1 with employers and experts
Newsroom
5 min read

Creating SAL1 with employers and experts

Sarah Johnson

Sarah Johnson

Director of CertificationsFeb 15, 2025

When we set out to create the Security Analyst Level 1 (SAL1) certification, we knew we wanted to build something different. A certification that truly reflects the skills employers are looking for in entry-level security analysts.

To achieve this, we partnered with over 30 industry professionals from organizations like Deloitte, PwC, NatWest, and many more. These experts shared their insights on what skills are most valuable for entry-level security analysts, what challenges they face when hiring, and what they look for in candidates.

Understanding the industry need

Our research with employers revealed some key insights:

  1. There's a significant gap between what traditional certifications teach and what employers actually need
  2. Practical, hands-on experience is highly valued but difficult to find in entry-level candidates
  3. Defensive security skills are in high demand but underrepresented in the certification landscape

These insights guided our approach to creating SAL1, focusing on practical skills and real-world scenarios that directly translate to the workplace.

Designing a practical assessment

With input from industry experts, we designed the SAL1 exam to simulate a day in the life of a tier 1 security analyst. This approach allows candidates to demonstrate their skills in a realistic environment, giving employers confidence that certified individuals can hit the ground running.

The exam includes tasks such as:

  • Investigating security alerts
  • Analyzing logs from various sources
  • Using SIEM tools to identify potential threats
  • Following incident response procedures
  • Documenting findings and escalating when appropriate

Continuous improvement

Our commitment to maintaining SAL1's relevance doesn't end with its launch. We've established an industry advisory board that will help us keep the certification aligned with evolving industry needs and emerging threats.

This collaborative approach ensures that SAL1 will continue to be a valuable credential for both job seekers and employers in the years to come.

Join the SAL1 community

Whether you're an employer looking to hire skilled security analysts, or someone aspiring to start a career in defensive security, SAL1 provides a practical and recognized path forward.

We're proud to have created a certification that bridges the gap between education and employment, and we're excited to see how SAL1-certified individuals will contribute to the cyber security industry.

Join over 640 organisations upskilling their workforce with TryHackMe

TryHackMe for Business