Rocheston Certified Cybersecurity Engineer (RCCE) Level 2
Course Overview
Reading about an exploit chain is very different from finding one on a network you have never seen. RCCE Level 2 training closes that gap with five days of hands-on work on a cyber range of more than 100 machines. The Rocheston Certified Cybersecurity Engineer (RCCE) Level 2 course is designed for professionals who already know the fundamentals and now need to apply them under realistic conditions.
The five days follow a clear sequence. Day 1 introduces the Rocheston Certified Penetration Tester (RCPT) framework and orients learners to the range. Day 2 moves into Cyber Range Sphere, a set of capture-the-flag style challenges. Each machine carries a different weakness to identify, validate, and fix.
Day 3 is given to ZombieCop.Run, where Red and Blue teams compete. One side attacks while the other detects, contains, and recovers, which teaches communication as much as technique. Day 4 covers Vulnerability Vines, a VAPT programme spanning vulnerability scanning, DevSecOps, identity and access management, zero trust and VPN security. Day 5 closes with JuggyBank, a simulated bank that learners assess end-to-end before hardening, followed by exam preparation.
All of this happens in authorised, simulated Rocheston lab environments. The focus throughout is ethical hacking that leads to stronger defences.
The habits learners build carry straight back to work. These include methodical reconnaissance, careful validation before reporting, and ranking findings by business impact. Network security, incident response and vulnerability assessment teams all gain from engineers who test this way. Rocheston’s wider portfolio is listed on our Rocheston training page.
Course Objectives
- Navigate a large cyber range and plan an authorised assessment using the RCPT framework.
- Solve capture-the-flag challenges by identifying and validating vulnerabilities on lab machines.
- Recommend remediation for each validated weakness and rank fixes by risk.
- Coordinate offensive and defensive actions as part of a Red or Blue team.
- Detect, contain, and recover from simulated attacks during team exercises.
- Assess DevSecOps pipelines, IAM controls, zero trust designs, and VPN configurations.
- Complete a full assessment and hardening exercise on a simulated banking environment.
- Prepare structured findings for the RCCE Level 2 exam and for professional reports.
Built on Trust, Driven by Excellence
ANAB ISO/IEC 17024 Accredited
- RCCE is accredited by the ANSI National Accreditation Board to the global personnel-certification standard, listed in the official ANAB directory.
U.S. DoD 8140 Approved
- Officially approved under the Department of Defense 8140 DCWF framework, mapped to cyber workforce job roles.
Verifiable Credentials
- Every RCCE certificate can be independently verified by employers in seconds through Rocheston Roxy.
Target Audience
- Penetration testers and ethical hackers who want structured, full-engagement practice.
- Red Team members refining coordinated offensive operations in a safe range.
- Blue Team, SOC and security operations staff who want live defensive experience.
- Incident responders and threat intelligence staff who need a deeper view of attacker behaviour.
- Cybersecurity engineers and analysts testing their own control designs.
- Vulnerability management teams moving from scanning to validated, risk-based findings.
- Security consultants and auditors who produce assessment reports for clients.
- RCCE Level 1 holders ready for the advanced stage of the Rocheston track.
Course Content
4 modules · 45 topics01Module 1: Cyber Range Sphere, Capture-the-flag-style exercises across 100+ lab machines with different vulnerabilities, operating systems, and defensive conditions11 topics
- You will learn
- Target analysis
- Vulnerability discovery
- Evidence collection
- Risk prioritization
- Remediation thinking
- You will produce
- Vulnerability notes
- Findings summary
- Technical evidence
- Remediation recommendations
02Module 2: ZombieCop.Run — Red Team vs Blue Team, Team-based exercises where Red Teams simulate adversary behavior and Blue Teams investigate, defend, and respond.11 topics
- You will learn
- Red Team planning
- Blue Team detection
- Incident response thinking
- Team communication
- Adversary simulation strategy
- You will produce
- Attack/defense timeline
- Detection notes
- Lessons-learned report
- Response summary
03Module 3: Vulnerability Vines, Train on Rocheston's VAPT platform for vulnerability scanning, assessment, reporting, and remediation workflows.10 topics
- You will learn
- The VAPT lifecycle
- Vulnerability scanning
- Cloud firewall concepts
- DevSecOps basics
- IAM & zero-trust alignment
- You will produce
- VAPT report
- Risk ranking
- Remediation plan
04Module 4: JuggyBank — The Capstone, Step into a simulated banking environment with realistic systems, exposed services, user workflows, business risk, and security weaknesses. Assess, validate, document, recommend, and present — like a working penetration tester.13 topics
- You will learn
- Full-cycle engagement workflow
- Technical validation
- Business-risk communication
- Professional reporting
- Final presentation
- You will produce
- Scope summary & target inventory
- Vulnerability findings + severity ratings
- Evidence screenshots & business impact notes
- Remediation recommendations
- Executive summary + technical appendix
- Final presentation
Schedule Dates
4 upcoming batches| Batch Dates | Duration | Batch Options | Language | Action |
|---|---|---|---|---|
| 07 December 2026 - 11 December 2026 | 5 Days | 4 hours & 8 hours | English / Arabic | |
| 08 March 2027 - 12 March 2027 | 5 Days | 4 hours & 8 hours | English / Arabic | |
| 14 June 2027 - 18 June 2027 | 5 Days | 4 hours & 8 hours | English / Arabic | |
| 20 September 2027 - 24 September 2027 | 5 Days | 4 hours & 8 hours | English / Arabic |
Can’t find a suitable date? Request a schedule that fits your team.
Request More InformationCyber Range Penetration Testing Course in Oman for Vision 2040
Oman Vision 2040 places the digital economy at the heart of diversification, and the ports, logistics hubs, oil and gas operators, and banks driving that growth are attractive targets. Oman National CERT, part of the Ministry of Transport, Communications and Information Technology, coordinates incident response and security guidance for public and private organisations. RCCE Level 2 training in Oman gives security engineers in Muscat, Sohar and Duqm the range-based practice needed to test those environments properly and report risks clearly. A port operator, for example, benefits from staff who can assess its connected systems in an authorised test before an attacker probes them. Upcoming dates appear on our Muscat course timetable, and employers can request a dedicated cyber range batch for their security team. Ask our team for the full outline and a suitable start date.
FAQs
How many days is the RCCE Level 2 course?
RCCE Level 2 is a five-day intensive programme. Rocheston’s published plan runs from RCPT and range orientation on day one through Cyber Range Sphere, ZombieCop.Run and Vulnerability Vines, ending with the JuggyBank capstone and exam preparation on day five. The exam itself is held on the last day of the course.
Is RCCE Level 2 more practical than RCCE Level 1?
Yes, Level 2 is even more focused on applied work. Level 1 introduces a wide range of attack and defence topics, while Level 2 assumes that knowledge and puts it to use across complete engagements. Most time is spent on the range, in team exercises, and on the capstone, rather than in topic-by-topic instruction.
What is a capture-the-flag exercise in cybersecurity training?
A capture-the-flag exercise is a challenge in which learners locate a hidden marker on a lab system by finding and validating a weakness. In RCCE Level 2, Cyber Range Sphere uses this format across many machines, each with different vulnerabilities. The format rewards careful reconnaissance and patience, and it ends with remediation rather than simply capture.
Is RCCE Level 2 suitable for Blue Team analysts in Muscat?
Yes, Blue Team and SOC analysts gain a great deal, particularly from ZombieCop.Run. Defending against a live Red Team in a controlled range shows how real attacks unfold and which signals reveal them early. Analysts return with sharper detection instincts and a better sense of how to coordinate containment with colleagues.
How should I prepare for RCCE Level 2?
Complete RCCE Level 1 or build an equivalent foundation first, since Rocheston lists this as the entry requirement. Refresh networking, Linux command-line skills, and common web vulnerabilities before the course starts. Learners who need to rebuild those basics can take our Linux administration fundamentals course first.
What happens in the JuggyBank capstone?
JuggyBank is a simulated banking environment where learners carry out an end-to-end assessment, then implement and defend security measures. It combines skills from the whole week into one realistic scenario. Because banking systems involve many connected services, the capstone tests both technical depth and the ability to prioritise under time pressure.
How is the RCCE Level 2 exam delivered and passed?
The exam is delivered online with RamSys proctoring on the last day of the course. It contains 100 questions, mixing multiple-choice, true/false, and short-answer questions, and candidates have two hours. A score of 70% is needed to pass. The certificate is issued only to candidates who pass, not to everyone who attends.
Why do vulnerability assessment and penetration testing matter for defence?
Vulnerability assessment finds potential weaknesses, and penetration testing shows which of them can actually be used to cause harm. Together, they tell defenders where to spend limited time and budget. Without that validation, teams often patch low-risk findings while a single exploitable path remains open.
Flexible Training Options to Meet Your Needs
Choose how you learn — live online, in-classroom, at your workplace, or internationally. CounselTrain delivers certified IT training in the format that fits your team.
Select the method that best suits your needs.
Online Instructor-Led Training
Learn from the comfort of your workplace or at home through live virtual sessions led by expert trainers.
Learn moreHighlights
Classroom Training
Participate in interactive, face-to-face training in our top 5-star training facilities in Dubai.
Learn moreHighlights
Onsite Training
Learn a customised curriculum in your workplace to ensure the most impact and team participation.
Learn moreHighlights
Overseas Training
Participate in our international training sessions and improve your abilities with world-class instructors.
Learn moreHighlights
Related Courses
Other courses in the same category that might interest you.
