Rocheston Certified Cybersecurity Engineer (RCCE) Level 2
Course Overview
RCCE Level 1 teaches how attacks work and how to stop them. The natural question afterwards is how to put that knowledge to work on a real assessment, from first scan to final report. RCCE Level 2 training answers it. The Rocheston Certified Cybersecurity Engineer (RCCE) Level 2 course is a five-day advanced programme for professionals who have the foundations and are ready to apply them in a structured, authorised way.
The biggest shift is from topics to engagements. Level 1 covers areas such as scanning, web attacks, and malware one at a time. Level 2 asks learners to combine them, guided by the Rocheston Certified Penetration Tester (RCPT) framework: plan, discover, validate, prioritise and report.
Practice happens in four stages. Cyber Range Sphere presents capture-the-flag style challenges across more than 100 lab machines, each with its own weaknesses. ZombieCop.Run divides learners into Red and Blue teams, so they experience both attack and defence. Vulnerability Vines builds VAPT skills, from vulnerability scanning to assessing DevSecOps, identity and access management, zero trust and VPN security. JuggyBank, a simulated banking environment, closes the week as a capstone that learners assess and then defend.
All exercises run in authorised, simulated Rocheston labs. The course trains ethical hacking for defence, not attacks on real systems.
The skill that matters most back at work is often the report. A clear, evidence-based penetration testing report helps administrators and managers act quickly. It turns ethical hacking into measurable improvements in network security.
- Apply RCCE Level 1 knowledge across complete, authorised penetration testing engagements.
- Plan and scope an assessment using the RCPT framework.
- Identify, validate and document vulnerabilities on varied lab systems.
- Assess modern security controls, including IAM, zero trust, VPN, and DevSecOps pipelines.
- Defend systems against active attack as part of a Blue Team.
- Prioritise vulnerabilities by business risk and propose practical fixes.
- Complete a full assessment and defence of a simulated banking environment.
- Write clear penetration testing and VAPT reports for technical and non-technical readers.
Built on Trust, Driven by Excellence
ANAB ISO/IEC 17024 Accredited
- RCCE is accredited by the ANSI National Accreditation Board to the global personnel-certification standard, listed in the official ANAB directory.
U.S. DoD 8140 Approved
- Officially approved under the Department of Defense 8140 DCWF framework, mapped to cyber workforce job roles.
Verifiable Credentials
- Every RCCE certificate can be independently verified by employers in seconds through Rocheston Roxy.
Target Audience
- Penetration testers and ethical hackers who want structured, full-engagement practice.
- Red Team members refining coordinated offensive operations in a safe range.
- Blue Team, SOC and security operations staff who want live defensive experience.
- Incident responders and threat intelligence staff who need a deeper view of attacker behaviour.
- Cybersecurity engineers and analysts testing their own control designs.
- Vulnerability management teams moving from scanning to validated, risk-based findings.
- Security consultants and auditors who produce assessment reports for clients.
- RCCE Level 1 holders ready for the advanced stage of the Rocheston track.
Course Content
4 modules · 45 topics01Module 1: Cyber Range Sphere, Capture-the-flag-style exercises across 100+ lab machines with different vulnerabilities, operating systems, and defensive conditions11 topics
- You will learn
- Target analysis
- Vulnerability discovery
- Evidence collection
- Risk prioritization
- Remediation thinking
- You will produce
- Vulnerability notes
- Findings summary
- Technical evidence
- Remediation recommendations
02Module 2: ZombieCop.Run — Red Team vs Blue Team, Team-based exercises where Red Teams simulate adversary behavior and Blue Teams investigate, defend, and respond.11 topics
- You will learn
- Red Team planning
- Blue Team detection
- Incident response thinking
- Team communication
- Adversary simulation strategy
- You will produce
- Attack/defense timeline
- Detection notes
- Lessons-learned report
- Response summary
03Module 3: Vulnerability Vines, Train on Rocheston's VAPT platform for vulnerability scanning, assessment, reporting, and remediation workflows.10 topics
- You will learn
- The VAPT lifecycle
- Vulnerability scanning
- Cloud firewall concepts
- DevSecOps basics
- IAM & zero-trust alignment
- You will produce
- VAPT report
- Risk ranking
- Remediation plan
04Module 4: JuggyBank — The Capstone, Step into a simulated banking environment with realistic systems, exposed services, user workflows, business risk, and security weaknesses. Assess, validate, document, recommend, and present — like a working penetration tester.13 topics
- You will learn
- Full-cycle engagement workflow
- Technical validation
- Business-risk communication
- Professional reporting
- Final presentation
- You will produce
- Scope summary & target inventory
- Vulnerability findings + severity ratings
- Evidence screenshots & business impact notes
- Remediation recommendations
- Executive summary + technical appendix
- Final presentation
Schedule Dates
4 upcoming batches| Batch Dates | Duration | Batch Options | Language | Action |
|---|---|---|---|---|
| 18 January 2027 - 22 January 2027 | 5 Days | 4 hours & 8 hours | English / Arabic | |
| 19 April 2027 - 23 April 2027 | 5 Days | 4 hours & 8 hours | English / Arabic | |
| 19 July 2027 - 23 July 2027 | 5 Days | 4 hours & 8 hours | English / Arabic | |
| 25 October 2027 - 29 October 2027 | 5 Days | 4 hours & 8 hours | English / Arabic |
Can’t find a suitable date? Request a schedule that fits your team.
Request More InformationAdvanced Cybersecurity Course in Addis Ababa Supporting Digital Ethiopia 2030
Digital Ethiopia 2030 names cybersecurity among its strategic priorities as banking, telecom, and public services move online. The Information Network Security Administration (INSA) leads national cybersecurity efforts, and organisations expanding digital services need engineers who can test them rigorously. RCCE Level 2 training in Ethiopia helps security professionals in Addis Ababa, Hawassa and Bahir Dar move beyond foundational skills to full, authorised assessments and professional VAPT reporting. Banks growing their digital payment channels and telecom operators extending their networks gain the most from staff who can find and prioritise weaknesses before attackers do. The course also suits organisations building their own internal testing teams. Learners can choose a start date from our Addis Ababa course calendar or ask about workplace training for security teams. Get in touch for the full outline and advice on prerequisites.
FAQs
Is RCCE Level 2 suitable for beginners?
No, RCCE Level 2 is an advanced programme and is not intended for beginners. Rocheston lists RCCE Level 1, or an equivalent foundation, as the entry requirement. Beginners should complete Level 1 first, because Level 2 assumes familiarity with reconnaissance, common attack types, and defensive controls from the first day.
What is the difference between RCCE Level 1 and Level 2?
RCCE Level 1 covers a wide range of cybersecurity topics one at a time, from scanning to malware analysis. Level 2 combines them into complete engagements on a large cyber range, with Red vs. Blue exercises and a banking capstone. Level 1 builds knowledge, while Level 2 builds the judgment needed to apply it professionally.
How do I write a good penetration testing report?
A good report starts with a summary for managers, then lists each finding with evidence, a risk rating, and a specific recommendation. It explains impact in business terms and avoids unnecessary jargon. RCCE Level 2 gives learners practice producing reports from their range work, so they can communicate results clearly to every audience.
Who should attend RCCE Level 2 training in Addis Ababa?
The course suits security professionals who have completed RCCE Level 1 or have equivalent experience. That includes penetration testers, security engineers, SOC analysts, incident responders, and vulnerability management staff. It is especially useful for teams in banking, telecom, and government that need in-house capability to test and defend critical systems.
What is VAPT and why is it important?
VAPT stands for vulnerability assessment and penetration testing. The assessment identifies potential weaknesses across systems, and the penetration test confirms which ones can actually be exploited. Combining both gives organisations a realistic view of their risk. That helps them fix the issues that matter most first, rather than spreading effort across every scanner finding.
How should I prepare for the RCCE Level 2 exam?
Take an active part in every range exercise, because the exam draws on the practical work covered during the week. The exam has 100 questions in multiple-choice, true/false, and short-answer formats, with two hours and a 70% pass mark. Revisiting your Level 1 notes on core attack types and controls is also useful preparation.
Which tools and environments are used on the course?
Learners work in Rocheston’s authorised lab environments, including a cyber range of more than 100 machines and the ZombieCop.Run Vulnerability Vines and JuggyBank scenarios. These are purpose-built for training and isolated from live systems. Learners who need to strengthen their command-line skills first can take our Linux system administration course.
How does RCCE Level 2 support professional growth?
RCCE Level 2 adds advanced, engagement-level experience on top of Level 1 knowledge, which can support a move into penetration testing, Red Team or senior security engineering work. Passing the exam earns a Rocheston certificate. However, outcomes depend on experience, performance and employer needs, so no course can guarantee a particular job or promotion.
Flexible Training Options to Meet Your Needs
Choose how you learn — live online, in-classroom, at your workplace, or internationally. CounselTrain delivers certified IT training in the format that fits your team.
Select the method that best suits your needs.
Online Instructor-Led Training
Learn from the comfort of your workplace or at home through live virtual sessions led by expert trainers.
Learn moreHighlights
Classroom Training
Participate in interactive, face-to-face training in our top 5-star training facilities in Dubai.
Learn moreHighlights
Onsite Training
Learn a customised curriculum in your workplace to ensure the most impact and team participation.
Learn moreHighlights
Overseas Training
Participate in our international training sessions and improve your abilities with world-class instructors.
Learn moreHighlights
Related Courses
Other courses in the same category that might interest you.
