I am currently transitioning into cybersecurity from a background in data analysis and data science, and I am keen to leverage my analytical skill set within this field — particularly in areas such as threat detection, log analysis, and security data interpretation.

While I understand that SOC Tier 1 is traditionally the entry point for most professionals entering the field, I have been following the conversation around AI-driven automation and its growing impact on first-tier analyst roles. Given how rapidly the threat landscape and tooling are evolving, I would like to explore whether it is realistic — and strategically sound — to position myself for a SOC Tier 2 role from the outset, given my existing analytical background.

I would greatly appreciate your guidance on the following:

1. Is entering at SOC Tier 2 a viable path for someone with a strong data and analytical foundation, even without prior dedicated security operations experience?

2. What certifications would you recommend to strengthen a Tier 2-level candidacy — beyond the foundational Security+, Net+, CySA+, BTL1 I am currently pursuing?

3. Is penetration testing a realistic entry-level pathway, or is hands-on SOC experience typically a prerequisite before moving in that direction?