Earn professional GIAC certifications as you complete the program.
Designed for working professionals with 100% online option available.
Median salary of $139,000 USD based on reported earnings from program graduates.
SANS.edu is an NSA Center of Academic Excellence in Cyber Defense.
This program supports DoD cybersecurity workforce readiness.
Be ready when incidents occur. Develop real-world investigation and response skills you can use immediately to contain threats, reduce impact, and support recovery efforts in your organization.
Incident Response Skills You’ll Develop
Apply by the 15th of any month.
Receive a decision 30 days later.
Start courses as soon as one month after admission.
Discover why 99% of our graduates would recommend SANS.edu to their peers.
Our programs are packed with hands-on labs and include GIAC certifications that employers trust.
Learn the latest skills and techniques from the world's top cybersecurity practitioners.
Start when you want to and learn on a schedule that fits your life—with 100% online options.
Make connections with some of the most talented students and teachers in the industry.
Get personalized guidance from experienced success coaches who support you from enrollment to graduation.
Receive SANS.edu academic pricing on SANS courses and GIAC certifications.
“I chose the SANS graduate program because the technical content and faculty are unparalleled, and the mix of live and online instruction fit into my work life.”
In this hands-on program, you’ll begin with a foundational course, progress through 3 advanced graduate courses—including a specialized elective of your choice—to learn the real-world tools and techniques of incident response. This is the curriculum order for this program.
Students select one of the following courses.
The Alumni Outcomes Report highlights how SANS Technology Institute graduates are launching and advancing cybersecurity careers with high satisfaction, strong ROI, and real-world impact.
SANS Technology Institute faculty members are rock stars of the cybersecurity field, with a broad base of expertise in government and industry. Their up-to-date examples and deep knowledge ensure what you learn in class is immediately applicable on the job.
Katie is the Director of Intelligence at Red Canary. She has worked on cyber threat intelligence, network defense, and incident response for nearly a decade for the U.S. Department of Defense, MITRE, Raytheon, and ManTech.
Learn more about Katie Nickels
With FOR577, Taz has authored the first course to systematize threat hunting on Linux systems. His operational leadership—from military intelligence to heading a FTSE100 CSIRT—has fortified global cyber defense capabilities across sectors.
Learn more about Tarot (Taz) Wake
Lenny Zeltser is a leader in developing resilient security programs. His invaluable tools, like REMnux, a widely used Linux distribution for malware analysis, have become industry standards in combating malicious software.
Learn more about Lenny Zeltser
Eric has redefined digital forensics with open-source tools like KAPE, now global standards for cybercrime investigations. He has directly enabled faster evidence analysis, rescued exploited children, and set new benchmarks in forensic response.
Learn more about Eric ZimmermanSANS.edu offers a career-focused cybersecurity education with a lot more flexibility and personalized support than you'll find in a "traditional" college. Join a free online info session to learn how our world-class programs can help you meet your cybersecurity career goals.
Your mind has no borders. Why should your college? Our online and in-person course options are designed to fit your life and how you like to learn.
Our most flexible online option gives you 24/7 access to courses recorded by top cybersecurity practitioners. You can rewind and repeat content, including hands-on labs, quizzes, and exercises.
Study from home—and save on travel and lodging expenses—through live, interactive scheduled online courses with SANS instructors and hands-on labs in a virtual environment.
Immersive weeklong courses are held across the country and around the world throughout the year. Meet fellow students and instructors and attend exclusive in-person events.
“SANS.edu's course material is delivered by best-in-breed instructors who are experts in their field. I had a SANS instructor who is industry-recognized as one of the top 10 experts in the world on penetration testing.”
“I looked into several programs. None could truly match SANS.edu’s real-world relevance and the quality of its instruction.”
“SANS is the Oxford of security studies, so expectations are naturally quite high. Living up to those is not a trivial accomplishment!”
“Having a SANS degree tells employers that you have what it takes to do the job. You have the hands-on experience to get the job done from day one. The SANS name truly opens doors.”
The SANS Technology Institute has been recognized as a global leader in cybersecurity education by Help Net Security, joining the ranks of top institutions like Stanford, MIT, Carnegie Mellon and Oxford.
“The CAE-CD designation is a testament to the quality of our cybersecurity faculty and programs. Our graduates are helping to meet the urgent cybersecurity needs of the U.S. government, industry, academia, and research, and we are proud to be part of a select group of cyber programs to have received this important designation.”
- Ed Skoudis, SANS Technology Institute President
If you're a Department of Defense (DoD) employee or contractor who wants to earn a career-focused cybersecurity degree or certificate, our DoD 8140-approved programs provide a pathway aligned with workforce requirements.
DoD 8140 establishes baseline standards for qualifications that directly support operational needs and workforce readiness. All DoD personnel assigned to positions requiring the performance of cyberspace work are affected by DoD 8140.
Competing against more than 7,800 students and 1,200 teams across the US, the SANS.edu Sentinels delivered another standout performance, confirming their reputation as leaders in collegiate cybersecurity.
Highlights include earning the #1 Power Ranking and fielding the #1, #2, and #4 individual players in the Experienced Student bracket.
Tuition includes the cost of the course, textbooks, and certification tests that serve as mid-term or final exams for courses.
Application Fee: $35 USD
Students who have taken SANS training classes and have active GIAC certifications may be able to waive one course and GIAC certification into the program.
Save on a master's: Eligible courses and GIAC certifications from this program can be applied to the our master's degree program saving you time and money.
Stack your credentials: After completing this program, you can enroll in another graduate certificate program within one year without submitting a full application.
A degree or certificate from SANS.edu is a great investment in your career. Explore funding options that can make your cybersecurity education more accessible.
Students pay tuition per course which allows you the financial flexibility to pay smaller amounts as you go.
Because we are regionally accredited, our tuition is eligible for most employer-sponsored education benefit programs.
All SANS.edu programs are eligible for US and Canadian Veterans Education Benefits.
Eligible students can spread out the cost of their degree or certificate program in monthly installments with no interest.
All SANS.edu programs are eligible for the education benefits available to US Federal Government employees.
529 College Savings Plan funds may be used to pay tuition for any SANS.edu cybersecurity degree or certificate program.
If you’d like to use a SANS Universal Voucher Account, confirm with your voucher administrator that course tuition is an eligible expense.
All SANS.edu programs are eligible for the Ontario Student Assistance Program (OSAP) and Canadian veterans’ education benefits.
Explore independent cybersecurity scholarships administered outside of SANS.edu.
We’re happy to help. Join us for a free info session or request more information today.
