SANS Technology Institute

What you'll study

The curriculum emphasizes practical controls and defensive techniques across the software supply chain. Core learning outcomes highlighted by the program include supply chain threat modeling, secure CI/CD pipeline practices, dependency and artifact risk analysis, and detection and response to supply chain attacks.

• Core courses (9 credits): ISE 6650 — Cloud Security and DevSecOps Automation (SEC540 + GCSA); ISE 6612 — Cloud Security Controls and Mitigations (SEC510 + GPCS); ISE 6615 — Defending Web Applications Security Essentials (SEC522 + GWEB).
• Elective (3 credits, choose one): ISE 6315 — Web App Penetration Testing and Ethical Hacking (SEC542 + GWAPT); ISE 6537 — Automating Information Security with Python (SEC573 + GPYC); ISE 6502 — Cloud Security Essentials (SEC502 + GCLD); ISE 6630 — Cloud Penetration Testing (SEC588 + GCPN).

Entry requirements

Applicants must have professional experience and hold a current software, cloud, or application development role. Apply by the 15th of any month to receive a decision within 30 days and potentially start courses as soon as one month after admission.

Career prospects

The program is designed to prepare practitioners to secure software build and delivery pipelines and to detect and respond to supply chain attacks. Coursework is tied to GIAC certifications employers recognize; graduates commonly apply these hands‑on skills in roles such as application security, DevSecOps, cloud security, and incident response within organizations that prioritize secure software supply chains.

Scholarships & funding angle (general)

SANS.edu notes dedicated student advising and academic pricing on SANS courses and GIAC certifications. The program description references alignment with employer‑valued GIAC credentials and DoD/NSA approvals, which may support employer tuition assistance or recognition for workforce programs; prospective students should consult SANS.edu admissions for specific funding options.