A technical, practice-focused graduate certificate that teaches defensive cybersecurity operations, detection and incident response. Suited to experienced IT or information-security professionals who currently work in an infosec-related role and want hands-on blue-team skills and GIAC certification pathways.
The curriculum combines two required core courses (6 credits) and two electives (6 credits) chosen from a set of technical courses. Core courses:
Elective options (choose two):
The program emphasizes threat detection, alert triage, network and endpoint defensive techniques, adversary behavior analysis and operational monitoring/response workflows. Students earn GIAC certifications as they complete courses.
Applications are accepted monthly; applicants should have professional experience and hold a current information-security or related role. Apply by the 15th of any month to receive a decision roughly 30 days later; courses may begin as soon as one month after admission.
The program targets blue-team and defensive roles; reported median salary for program graduates is $130,000 USD. Graduates may pursue duties in threat detection, SOC analysis, incident response, defensive engineering, cloud threat detection and related operational cybersecurity positions. The curriculum and included GIAC certifications are positioned to meet employer expectations and DoD 8140 requirements.
SANS Technology Institute offers SANS.edu academic pricing on SANS courses and GIAC certifications. The program page references career-focused outcomes and an alumni outcomes report for ROI and career impact; specific scholarships or external funding options are not listed on the provided source text.
Shortlist scholarships and plan your application — free guidance from our advisors.