Hacky Certified Social Engineering Analyst
HCSE · Level 2Introduction
Run approved awareness tests and measure the human risk. Three levels, each self-paced, each with its own exam and certificate.
Buy now- Author: Gaurav Sharma
- Level: Level 2 · Practitioner
- Study time: 8 hours
- Certification: Hacky Certified Social Engineering Analyst
Curriculum
6 modules · 4 hours of guided learning · self-paced, with hands-on labs
Job-oriented, scenario-led progression in hacky certified social engineering analyst. Exercises are conducted only in authorized training environments. The level builds on previous levels while adding distinct techniques, deeper evidence requirements and more complex capstones.
Prerequisites: Basic IT literacy and willingness to use Linux/Windows command lines.
Tool stack: GoPhish (approved simulations), mail authentication testers, OSINT tools, awareness LMS, reporting templates
1h guided instruction + 2h guided/independent practical labs + 1h reading, review and assessment. These are total learning hours, not 4 hours of live lectures.
Module 01Legal boundaries, consent and ethics1 h
Coverage. Identify core concepts, demonstrate the workflow, and record reliable evidence.
Practical. Complete a guided lab with baseline and expected evidence.
Evidence. annotated observations, reproducible steps, risk/impact notes and a concise technical recommendation.
Module 02Human risk, influence and pretext analysis1 h
Coverage. Identify core concepts, demonstrate the workflow, and record reliable evidence.
Practical. Complete a guided lab with baseline and expected evidence.
Evidence. annotated observations, reproducible steps, risk/impact notes and a concise technical recommendation.
Module 03Phishing recognition and email anatomy1 h
Coverage. Identify core concepts, demonstrate the workflow, and record reliable evidence.
Practical. Complete a guided lab with baseline and expected evidence.
Evidence. annotated observations, reproducible steps, risk/impact notes and a concise technical recommendation.
Module 04OSINT minimization and privacy1 h
Coverage. Identify core concepts, demonstrate the workflow, and record reliable evidence.
Practical. Complete a guided lab with baseline and expected evidence.
Evidence. annotated observations, reproducible steps, risk/impact notes and a concise technical recommendation.
Module 05Awareness campaign design0 h
Coverage. Identify core concepts, demonstrate the workflow, and record reliable evidence.
Practical. Complete a guided lab with baseline and expected evidence.
Evidence. annotated observations, reproducible steps, risk/impact notes and a concise technical recommendation.
Module 06Approved simulation configuration0 h
Coverage. Identify core concepts, demonstrate the workflow, and record reliable evidence.
Practical. Complete a guided lab with baseline and expected evidence.
Evidence. annotated observations, reproducible steps, risk/impact notes and a concise technical recommendation.
Guided scenario: demonstrate correct methodology, collect evidence and submit a short structured report.
20% knowledge checks, 60% hands-on practical, 20% evidence-based reporting Recommended pass: 70% overall with mandatory completion of safety and evidence checkpoints.
Final exam
A 2-hour online exam with a 70% pass mark. Recommended pass: 70% overall with mandatory completion of safety and evidence checkpoints. Attempts are free until you pass. The exam opens 7 days after purchase.
Curriculum
9 modules · 8 hours of guided learning · self-paced, with hands-on labs
Job-oriented, scenario-led progression in hacky certified social engineering analyst. Exercises are conducted only in authorized training environments. The level builds on previous levels while adding distinct techniques, deeper evidence requirements and more complex capstones.
Prerequisites: Completion of Level 1 or demonstrably equivalent practical skills.
Tool stack: GoPhish (approved simulations), mail authentication testers, OSINT tools, awareness LMS, reporting templates
2h guided instruction + 4h guided/independent practical labs + 2h reading, review and assessment. These are total learning hours, not 8 hours of live lectures.
Module 01OSINT minimization and privacy1 h
Coverage. Investigate a realistic scenario, compare alternative approaches, tune decisions and document remediation.
Practical. Complete a case-based lab using multiple evidence sources and a verification checklist.
Evidence. annotated observations, reproducible steps, risk/impact notes and a concise technical recommendation.
Module 02Awareness campaign design1 h
Coverage. Investigate a realistic scenario, compare alternative approaches, tune decisions and document remediation.
Practical. Complete a case-based lab using multiple evidence sources and a verification checklist.
Evidence. annotated observations, reproducible steps, risk/impact notes and a concise technical recommendation.
Module 03Approved simulation configuration1 h
Coverage. Investigate a realistic scenario, compare alternative approaches, tune decisions and document remediation.
Practical. Complete a case-based lab using multiple evidence sources and a verification checklist.
Evidence. annotated observations, reproducible steps, risk/impact notes and a concise technical recommendation.
Module 04Email security: SPF, DKIM and DMARC1 h
Coverage. Investigate a realistic scenario, compare alternative approaches, tune decisions and document remediation.
Practical. Complete a case-based lab using multiple evidence sources and a verification checklist.
Evidence. annotated observations, reproducible steps, risk/impact notes and a concise technical recommendation.
Module 05Scenario-based vishing and smishing awareness1 h
Coverage. Investigate a realistic scenario, compare alternative approaches, tune decisions and document remediation.
Practical. Complete a case-based lab using multiple evidence sources and a verification checklist.
Evidence. annotated observations, reproducible steps, risk/impact notes and a concise technical recommendation.
Module 06Measurement, reporting and coaching1 h
Coverage. Investigate a realistic scenario, compare alternative approaches, tune decisions and document remediation.
Practical. Complete a case-based lab using multiple evidence sources and a verification checklist.
Evidence. annotated observations, reproducible steps, risk/impact notes and a concise technical recommendation.
Module 07High-risk workflows and business email compromise1 h
Coverage. Investigate a realistic scenario, compare alternative approaches, tune decisions and document remediation.
Practical. Complete a case-based lab using multiple evidence sources and a verification checklist.
Evidence. annotated observations, reproducible steps, risk/impact notes and a concise technical recommendation.
Module 08Defensive controls and escalation1 h
Coverage. Investigate a realistic scenario, compare alternative approaches, tune decisions and document remediation.
Practical. Complete a case-based lab using multiple evidence sources and a verification checklist.
Evidence. annotated observations, reproducible steps, risk/impact notes and a concise technical recommendation.
Module 09Enterprise awareness program capstone0 h
Coverage. Investigate a realistic scenario, compare alternative approaches, tune decisions and document remediation.
Practical. Complete a case-based lab using multiple evidence sources and a verification checklist.
Evidence. annotated observations, reproducible steps, risk/impact notes and a concise technical recommendation.
Multi-system case: independently correlate artifacts, prioritize findings and propose tested remediation.
20% knowledge checks, 60% hands-on practical, 20% evidence-based reporting Recommended pass: 70% overall with mandatory completion of safety and evidence checkpoints.
Final exam
A 24-hour practical exam in a hosted lab, then 24 hours to submit your report. Recommended pass: 70% overall with mandatory completion of safety and evidence checkpoints. Attempts are free until you pass. The exam opens 7 days after purchase.
Curriculum
5 modules · 12 hours of guided learning · self-paced, with hands-on labs
Job-oriented, scenario-led progression in hacky certified social engineering analyst. Exercises are conducted only in authorized training environments. The level builds on previous levels while adding distinct techniques, deeper evidence requirements and more complex capstones.
Prerequisites: Completion of Level 2 or equivalent professional experience; comfortable with independent investigations.
Tool stack: GoPhish (approved simulations), mail authentication testers, OSINT tools, awareness LMS, reporting templates
3h guided instruction + 7h guided/independent practical labs + 2h reading, review and assessment. These are total learning hours, not 12 hours of live lectures.
Module 01Scenario-based vishing and smishing awareness3 h
Coverage. Lead an integrated assessment, validate assumptions, automate repeatable checks and produce defensible findings.
Practical. Complete a scenario-driven challenge, defend findings, and validate controls or mitigations.
Evidence. annotated observations, reproducible steps, risk/impact notes and a concise technical recommendation.
Module 02Measurement, reporting and coaching3 h
Coverage. Lead an integrated assessment, validate assumptions, automate repeatable checks and produce defensible findings.
Practical. Complete a scenario-driven challenge, defend findings, and validate controls or mitigations.
Evidence. annotated observations, reproducible steps, risk/impact notes and a concise technical recommendation.
Module 03High-risk workflows and business email compromise2 h
Coverage. Lead an integrated assessment, validate assumptions, automate repeatable checks and produce defensible findings.
Practical. Complete a scenario-driven challenge, defend findings, and validate controls or mitigations.
Evidence. annotated observations, reproducible steps, risk/impact notes and a concise technical recommendation.
Module 04Defensive controls and escalation2 h
Coverage. Lead an integrated assessment, validate assumptions, automate repeatable checks and produce defensible findings.
Practical. Complete a scenario-driven challenge, defend findings, and validate controls or mitigations.
Evidence. annotated observations, reproducible steps, risk/impact notes and a concise technical recommendation.
Module 05Enterprise awareness program capstone2 h
Coverage. Lead an integrated assessment, validate assumptions, automate repeatable checks and produce defensible findings.
Practical. Complete a scenario-driven challenge, defend findings, and validate controls or mitigations.
Evidence. annotated observations, reproducible steps, risk/impact notes and a concise technical recommendation.
Professional engagement: plan, execute and defend a complex scenario with peer review and executive/technical reporting.
20% knowledge checks, 60% hands-on practical, 20% evidence-based reporting Recommended pass: 70% overall with mandatory completion of safety and evidence checkpoints.
Final exam
A 48-hour scenario exam, assessed on your written report. Recommended pass: 70% overall with mandatory completion of safety and evidence checkpoints. Attempts are free until you pass. The exam opens 7 days after purchase.
What you receive
Course author
Gaurav Sharma
Founder & CISO, Hacky SecurityOffensive and Defensive Security Expert
Gaurav founded Hacky Security and leads its SOC, curriculum and AI security work. He has trained more than 40,000 professionals and has taught AI security at IIT Madras.
Frequently asked questions
Do I need to buy any software?
When does my course open?
Can I start at Level 2?
More from the offensive track
Hacky Certified Penetration Tester
Test company networks and write reports clients can act on.
Hacky Certified Web Application Pentester
Test websites and APIs against the OWASP Top 10.
Hacky Certified Mobile Pentester
Test Android and iOS apps and the servers behind them.