Rocheston Certified Cybersecurity Engineer (RCCE) Level 2
Course Overview
A web portal, a mobile banking app, and a cloud workload can each pass a basic scan and still fail under a determined attacker. RCCE Level 2 training is built for professionals who need to find those deeper weaknesses before anyone else does. The Rocheston Certified Cybersecurity Engineer (RCCE) Level 2 course is a five-day advanced programme. It focuses on penetration testing, vulnerability assessment, cyber defence and the professional reporting that turns findings into fixes.
The course builds directly on RCCE Level 1. Where Level 1 introduces attacker techniques, Level 2 asks learners to apply them in a structured, authorised way across realistic targets. The method follows the Rocheston Certified Penetration Tester (RCPT) framework, from reconnaissance and service discovery through to prioritised remediation.
The programme is organised in four parts. Cyber Range Sphere offers capture-the-flag style exercises across more than 100 lab machines with different weaknesses. ZombieCop.Run sets Red Team against Blue Team, so learners practise attack and defence under pressure. Vulnerability Vines focuses on vulnerability assessment and penetration testing (VAPT), including DevSecOps, identity and access management, zero trust and VPN security. The JuggyBank capstone brings everything together in a simulated banking environment, where learners test the systems and then defend them.
Every exercise runs in authorised, simulated Rocheston lab environments, never against live systems. For enterprise security teams, the gain is depth. Engineers return able to scope a test, validate findings, rank them by business risk, and write a report that development and infrastructure teams can act on.
Course Objectives
- Apply the RCPT penetration testing framework from reconnaissance to reporting.
- Identify and validate vulnerabilities across a range of more than 100 authorised lab machines.
- Assess web, network and cloud-hosted systems through structured VAPT exercises.
- Prioritise findings by risk and recommend practical remediation steps.
- Defend systems in Red Team vs Blue Team exercises, detecting and containing simulated attacks.
- Evaluate DevSecOps, IAM, zero trust, and VPN controls for weaknesses.
- Conduct an end-to-end assessment of a simulated banking environment and implement defences.
- Produce professional penetration testing reports for technical and management readers.
Built on Trust, Driven by Excellence
ANAB ISO/IEC 17024 Accredited
- RCCE is accredited by the ANSI National Accreditation Board to the global personnel-certification standard, listed in the official ANAB directory.
U.S. DoD 8140 Approved
- Officially approved under the Department of Defense 8140 DCWF framework, mapped to cyber workforce job roles.
Verifiable Credentials
- Every RCCE certificate can be independently verified by employers in seconds through Rocheston Roxy.
Target Audience
- Penetration testers and ethical hackers who want structured, full-engagement practice.
- Red Team members refining coordinated offensive operations in a safe range.
- Blue Team, SOC and security operations staff who want live defensive experience.
- Incident responders and threat intelligence staff who need a deeper view of attacker behaviour.
- Cybersecurity engineers and analysts testing their own control designs.
- Vulnerability management teams moving from scanning to validated, risk-based findings.
- Security consultants and auditors who produce assessment reports for clients.
- RCCE Level 1 holders ready for the advanced stage of the Rocheston track.
Course Content
4 modules · 45 topics01Module 1: Cyber Range Sphere, Capture-the-flag-style exercises across 100+ lab machines with different vulnerabilities, operating systems, and defensive conditions11 topics
- You will learn
- Target analysis
- Vulnerability discovery
- Evidence collection
- Risk prioritization
- Remediation thinking
- You will produce
- Vulnerability notes
- Findings summary
- Technical evidence
- Remediation recommendations
02Module 2: ZombieCop.Run — Red Team vs Blue Team, Team-based exercises where Red Teams simulate adversary behavior and Blue Teams investigate, defend, and respond.11 topics
- You will learn
- Red Team planning
- Blue Team detection
- Incident response thinking
- Team communication
- Adversary simulation strategy
- You will produce
- Attack/defense timeline
- Detection notes
- Lessons-learned report
- Response summary
03Module 3: Vulnerability Vines, Train on Rocheston's VAPT platform for vulnerability scanning, assessment, reporting, and remediation workflows.10 topics
- You will learn
- The VAPT lifecycle
- Vulnerability scanning
- Cloud firewall concepts
- DevSecOps basics
- IAM & zero-trust alignment
- You will produce
- VAPT report
- Risk ranking
- Remediation plan
04Module 4: JuggyBank — The Capstone, Step into a simulated banking environment with realistic systems, exposed services, user workflows, business risk, and security weaknesses. Assess, validate, document, recommend, and present — like a working penetration tester.13 topics
- You will learn
- Full-cycle engagement workflow
- Technical validation
- Business-risk communication
- Professional reporting
- Final presentation
- You will produce
- Scope summary & target inventory
- Vulnerability findings + severity ratings
- Evidence screenshots & business impact notes
- Remediation recommendations
- Executive summary + technical appendix
- Final presentation
Schedule Dates
4 upcoming batches| Batch Dates | Duration | Batch Options | Language | Action |
|---|---|---|---|---|
| 15 March 2027 - 19 March 2027 | 5 Days | 4 hours & 8 hours | English / Arabic | |
| 21 June 2027 - 25 June 2027 | 5 Days | 4 hours & 8 hours | English / Arabic | |
| 27 September 2027 - 01 October 2027 | 5 Days | 4 hours & 8 hours | English / Arabic | |
| 27 December 2027 - 31 December 2027 | 5 Days | 4 hours & 8 hours | English / Arabic |
Can’t find a suitable date? Request a schedule that fits your team.
Request More InformationAdvanced Penetration Testing Course in Riyadh and Jeddah for Vision 2030 Security Teams
Vision 2030 has moved banking, government, energy, and telecom services online at speed, and each new platform must be tested before it faces real attackers. The National Cybersecurity Authority’s Essential Cybersecurity Controls include regular penetration testing and vulnerability management, so organisations need engineers who can run those assessments properly. RCCE Level 2 training in Saudi Arabia prepares security professionals in Riyadh, Jeddah and Dammam to plan authorised tests, validate findings and report risks clearly. Banks running digital channels and government entities with public portals benefit most from staff who can test like an attacker and defend like an engineer. The JuggyBank banking capstone is especially relevant for financial institutions. Check upcoming dates on our RCCE training calendar in Riyadh or arrange an on-site advanced security batch for your team. Review the course outline and contact our advisors to plan your start date.
FAQs
What is the RCCE Level 2 course?
RCCE Level 2 is Rocheston’s advanced five-day cybersecurity engineering programme, centred on penetration testing, vulnerability assessment, cyber defence and reporting. It follows RCCE Level 1 and is almost entirely practical. Learners work through cyber range exercises, Red vs Blue team battles and a banking capstone, all in authorised, simulated environments built for training.
Do I need RCCE Level 1 before joining RCCE Level 2 in Riyadh?
Rocheston lists RCCE Level 1, or an equivalent foundation, as the entry requirement for Level 2. The course is advanced and not intended for beginners. Learners new to cybersecurity should complete the RCCE Level 1 course first, so they arrive comfortable with scanning, common attack types, and core defensive controls.
What is the RCCE Level 2 exam format?
The RCCE Level 2 exam has 100 questions, combining multiple-choice, true/false, and short-answer formats, with two hours allowed and a passing score of 70%. It is delivered online with RamSys proctoring on the last day of the course. Attending the training does not grant certification on its own, because the certificate is issued only after passing.
What is the RCPT framework?
RCPT stands for Rocheston Certified Penetration Tester, the methodology Rocheston uses to structure penetration testing on the course. It guides learners through each stage of an engagement, from reconnaissance and service identification through validation, prioritisation, and remediation. A consistent framework makes tests repeatable and reports easier to compare across systems.
Is the RCCE Level 2 cyber range safe and legal to use?
Yes, every exercise runs in authorised, simulated Rocheston lab environments created for training. Learners never test live third-party systems. The same rule applies after the course: penetration testing should only be performed with written authorisation and an agreed scope, which is the standard professional testers work to.
How does RCCE Level 2 help banks and financial institutions?
The JuggyBank capstone places learners in a simulated banking environment where they assess the systems, then implement and defend security measures. That mirrors the work financial security teams do when testing online banking, payment, and back-office platforms. The experience helps engineers understand banking threat scenarios before they meet them in production.
What reporting skills does RCCE Level 2 develop?
Learners practise turning technical findings into professional reports. That means describing each issue clearly, providing evidence, rating risk, and recommending specific remediation. Strong reporting matters because a penetration test only improves security when developers, administrators, and managers understand what to fix first and why.
What career value does RCCE Level 2 offer security professionals?
RCCE Level 2 gives practitioners structured experience in full penetration testing engagements, Red vs Blue exercises and VAPT reporting. That can strengthen their case for leading assessments or joining a dedicated testing team. Career outcomes still depend on experience, performance and employer needs, so no course can guarantee a promotion or new role.
Flexible Training Options to Meet Your Needs
Choose how you learn — live online, in-classroom, at your workplace, or internationally. CounselTrain delivers certified IT training in the format that fits your team.
Select the method that best suits your needs.
Online Instructor-Led Training
Learn from the comfort of your workplace or at home through live virtual sessions led by expert trainers.
Learn moreHighlights
Classroom Training
Participate in interactive, face-to-face training in our top 5-star training facilities in Dubai.
Learn moreHighlights
Onsite Training
Learn a customised curriculum in your workplace to ensure the most impact and team participation.
Learn moreHighlights
Overseas Training
Participate in our international training sessions and improve your abilities with world-class instructors.
Learn moreHighlights
Related Courses
Other courses in the same category that might interest you.
