SANS Technology Institute

What you'll study

Courses are arranged into four sequential blocks so prerequisites are completed before advanced work. Core and practicum elements emphasize technical skills, leadership, group projects and original research.

• Block 1 (9 credit hours): foundational practitioner skills including Security Essentials (ISE 5101: SEC401 + GSEC), Hacker Tools & Incident Handling (ISE 5201: SEC504 + GCIH), and IT Security Planning, Policy & Leadership (ISE 5601: LDR514 + GSTRT).
• Block 2 (9.5 credit hours): intermediate organizational-level skills and a hands-on group project, featuring Defensible Security Architecture (ISE 6255: SEC530 + GDSA), Managing Human Risk (ISE 5433: LDR433 + SSAP), Intrusion Detection In-Depth (ISE 5401: SEC503 + GCIA), a Situational Response Practicum (ISE 5701) and a Core Comprehensive Exam (ISE 5002).
• Block 3 (9 credit hours): advanced management and electives including Security Leadership for Managers (ISE 5001: LDR512 + GSLC) plus two elective SANS classes (ISE 6___) with associated GIAC exams; optional Special Focus Areas can be started here.
• Block 4 (8.5 credit hours): culminating practicums and research—Research Methods I (ISE 5009), Security Project Practicum (ISE 6101), NetWars Continuous Practicum (ISE 6300), Advanced Technical Research & Communication Practicum (ISE 5901) and a final elective.

Electives and Special Focus Areas: Students choose three 3-credit technical electives (3-month term each). Elective options support a generalist path or optional Special Focus Areas such as Cloud Security (courses include Cloud Security Essentials SEC502 + GCLD; Cloud Penetration Testing SEC588 + GCPN; Cloud Security and DevSecOps Automation SEC540 + GCSA, among others), Cyber Defense Operations, and Incident Response (examples include FOR500 Windows Forensic Analysis + GCFE; FOR508 Advanced Incident Response + GCFA; FOR509 Enterprise Cloud Forensics + GCFR).

Entry requirements

The program requires applicants to have professional experience and to be currently employed in an information security or related role. Applications are accepted quarterly with set submission dates and admissions decisions issued roughly 30 days after applying.

Career prospects

Graduates report strong earning potential—the program page cites a median reported salary of $162,000 for alumni—and the curriculum awards GIAC certifications alongside coursework. The degree is positioned for professionals seeking leadership, advanced technical specialist, incident response, cloud security or enterprise defense roles in industry, government and defense contexts (the program is NSA-designated and supports DoD 8140).

Scholarships & funding angle (general)

SANS.edu notes academic pricing for SANS courses and GIAC certifications for degree students and offers personalized student advising and career-focused support; prospective students should contact admissions for current funding, sponsorship and employer-reimbursement options.