Rocheston Certified Cybersecurity Engineer (RCCE) Level 2
Course Overview
When customers send money, check balances, or log in to a service, they trust that the platform behind it has been tested properly. RCCE Level 2 training prepares security professionals to provide that assurance. The Rocheston Certified Cybersecurity Engineer (RCCE) Level 2 course is a five-day advanced programme in penetration testing, vulnerability assessment, cyber defence and reporting. Its capstone is built around a simulated bank.
That capstone, JuggyBank, sets the tone for the week. Learners carry out a full assessment of a banking environment, then implement and defend the security measures it needs. It mirrors the work done by teams protecting digital banking, payments, and customer accounts.
The days leading up to it build the necessary skills. Cyber Range Sphere offers capture-the-flag style challenges across more than 100 machines. Learners find, validate, and remediate weaknesses in each one. Vulnerability Vines focuses on the controls that protect users today: identity and access management, zero trust, VPN security, DevSecOps pipelines, and vulnerability scanning. ZombieCop.Run adds Red Team vs Blue Team exercises, so learners see how an attack on a service is detected and contained. The Rocheston Certified Penetration Tester (RCPT) framework ties the work together.
All exercises run in authorised, simulated Rocheston lab environments, and attack techniques are practised only to improve defence.
For organisations serving large customer bases, the benefit is fewer surprises. Engineers who have tested identity, access and banking workflows in the lab can spot similar weaknesses in production. They can then explain the risk clearly to teams who can fix it. Explore related options in our Rocheston programmes section.
Course Objectives
- Assess a simulated banking environment end-to-end and implement defences for the weaknesses found.
- Evaluate identity and access management and zero trust controls protecting user accounts.
- Analyse VPN and remote access security for common weaknesses.
- Identify vulnerabilities in DevSecOps pipelines that could affect customer-facing services.
- Validate weaknesses through capture-the-flag challenges on a large lab range.
- Detect and contain attacks on services during Red vs Blue exercises.
- Apply the RCPT framework to structure authorised testing and remediation.
- Report risks in clear business terms for service owners and management.
Built on Trust, Driven by Excellence
ANAB ISO/IEC 17024 Accredited
- RCCE is accredited by the ANSI National Accreditation Board to the global personnel-certification standard, listed in the official ANAB directory.
U.S. DoD 8140 Approved
- Officially approved under the Department of Defense 8140 DCWF framework, mapped to cyber workforce job roles.
Verifiable Credentials
- Every RCCE certificate can be independently verified by employers in seconds through Rocheston Roxy.
Target Audience
- Penetration testers and ethical hackers who want structured, full-engagement practice.
- Red Team members refining coordinated offensive operations in a safe range.
- Blue Team, SOC and security operations staff who want live defensive experience.
- Incident responders and threat intelligence staff who need a deeper view of attacker behaviour.
- Cybersecurity engineers and analysts testing their own control designs.
- Vulnerability management teams moving from scanning to validated, risk-based findings.
- Security consultants and auditors who produce assessment reports for clients.
- RCCE Level 1 holders ready for the advanced stage of the Rocheston track.
Course Content
4 modules · 45 topics01Module 1: Cyber Range Sphere, Capture-the-flag-style exercises across 100+ lab machines with different vulnerabilities, operating systems, and defensive conditions11 topics
- You will learn
- Target analysis
- Vulnerability discovery
- Evidence collection
- Risk prioritization
- Remediation thinking
- You will produce
- Vulnerability notes
- Findings summary
- Technical evidence
- Remediation recommendations
02Module 2: ZombieCop.Run — Red Team vs Blue Team, Team-based exercises where Red Teams simulate adversary behavior and Blue Teams investigate, defend, and respond.11 topics
- You will learn
- Red Team planning
- Blue Team detection
- Incident response thinking
- Team communication
- Adversary simulation strategy
- You will produce
- Attack/defense timeline
- Detection notes
- Lessons-learned report
- Response summary
03Module 3: Vulnerability Vines, Train on Rocheston's VAPT platform for vulnerability scanning, assessment, reporting, and remediation workflows.10 topics
- You will learn
- The VAPT lifecycle
- Vulnerability scanning
- Cloud firewall concepts
- DevSecOps basics
- IAM & zero-trust alignment
- You will produce
- VAPT report
- Risk ranking
- Remediation plan
04Module 4: JuggyBank — The Capstone, Step into a simulated banking environment with realistic systems, exposed services, user workflows, business risk, and security weaknesses. Assess, validate, document, recommend, and present — like a working penetration tester.13 topics
- You will learn
- Full-cycle engagement workflow
- Technical validation
- Business-risk communication
- Professional reporting
- Final presentation
- You will produce
- Scope summary & target inventory
- Vulnerability findings + severity ratings
- Evidence screenshots & business impact notes
- Remediation recommendations
- Executive summary + technical appendix
- Final presentation
Schedule Dates
4 upcoming batches| Batch Dates | Duration | Batch Options | Language | Action |
|---|---|---|---|---|
| 21 December 2026 - 25 December 2026 | 5 Days | 4 hours & 8 hours | English / Arabic | |
| 22 March 2027 - 26 March 2027 | 5 Days | 4 hours & 8 hours | English / Arabic | |
| 28 June 2027 - 02 July 2027 | 5 Days | 4 hours & 8 hours | English / Arabic | |
| 04 October 2027 - 08 October 2027 | 5 Days | 4 hours & 8 hours | English / Arabic |
Can’t find a suitable date? Request a schedule that fits your team.
Request More InformationPenetration Testing Course in Dar es Salaam and Arusha for Mobile Money and Banking Security
The country’s digital economy relies heavily on mobile money, digital banking and telecom services, so weaknesses in those platforms can affect millions of users at once. The Personal Data Protection Act, 2022 requires organisations to safeguard the personal data they process. Meanwhile, the Tanzania Communications Regulatory Authority (TCRA) oversees the communications sector and hosts the national CERT, TZ-CERT. RCCE Level 2 training in Tanzania prepares security professionals in Dar es Salaam, Arusha and Dodoma to test banking, identity and payment systems in an authorised way and report risks clearly. Banks, telecom operators and fintech providers gain the most from engineers who have assessed and defended a simulated bank. View upcoming sessions on our Dar es Salaam training schedule or ask about tailored training for your security team. Contact us for the course outline and start dates.
FAQs
What is JuggyBank in RCCE Level 2?
JuggyBank is the capstone project of RCCE Level 2, a simulated banking environment that learners assess from start to finish. After identifying weaknesses, they implement and defend security measures to protect it. The scenario brings together skills from the whole week and reflects the threats that financial services and payment platforms face.
How long is the RCCE Level 2 certificate valid?
Rocheston’s RCCE Level 2 course page does not state a validity period or renewal requirement for the Level 2 certificate. Rocheston’s general recertification policy for RCCE describes a two-year cycle renewed through continuing education credits, but this should be confirmed for Level 2 specifically. Our team can check current details with Rocheston before you enrol.
Why is zero trust covered in an advanced penetration testing course?
Zero trust assumes no user or device is trusted by default, so every request is verified. Many organisations now rely on it to protect accounts and data, which makes it a key target for assessment. Testing zero trust controls in the lab shows learners where implementations fall short, for example, through overly broad permissions or weak device checks.
Is RCCE Level 2 suitable for security teams at banks in Dar es Salaam?
Yes, it is particularly relevant to banking security teams, provided members have completed RCCE Level 1 or have equivalent experience. The JuggyBank capstone and the identity and access topics map closely to the systems banks run. Teams return better prepared to test online banking, payment, and back-office platforms in an authorised, structured way.
What does the RCCE Level 2 exam involve?
The RCCE Level 2 exam contains 100 questions, combining multiple-choice, true/false, and short-answer formats. Candidates have two hours and need 70% to pass. It is held online with RamSys proctoring on the final day of the course. The training builds the skills, but only candidates who pass the exam receive the certificate.
Do I need programming skills for RCCE Level 2?
Advanced programming is not listed as a requirement, but comfort with the command line and reading simple scripts helps a great deal. Rocheston’s stated prerequisite is RCCE Level 1 or an equivalent foundation. Learners who want to strengthen their skills first can take our Linux and scripting fundamentals course.
Why does threat intelligence matter in penetration testing?
Threat intelligence shows which attackers, techniques, and weaknesses are actively being used against organisations like yours. Testers who follow it can focus their assessments on realistic threats rather than theoretical ones. Defenders can then prioritise the fixes most likely to stop a real attack, which makes limited security budgets go further.
What can I do after completing RCCE Level 2?
Apply the skills in authorised internal assessments and help your organisation build a regular testing programme. Many professionals also deepen related skills, such as AI security or cloud security, through further training. Career progress depends on experience and employer needs, so RCCE Level 2 is best treated as one important step rather than a guarantee.
Flexible Training Options to Meet Your Needs
Choose how you learn — live online, in-classroom, at your workplace, or internationally. CounselTrain delivers certified IT training in the format that fits your team.
Select the method that best suits your needs.
Online Instructor-Led Training
Learn from the comfort of your workplace or at home through live virtual sessions led by expert trainers.
Learn moreHighlights
Classroom Training
Participate in interactive, face-to-face training in our top 5-star training facilities in Dubai.
Learn moreHighlights
Onsite Training
Learn a customised curriculum in your workplace to ensure the most impact and team participation.
Learn moreHighlights
Overseas Training
Participate in our international training sessions and improve your abilities with world-class instructors.
Learn moreHighlights
Related Courses
Other courses in the same category that might interest you.
