Defensive Security & Incident Response
In partnership with
Advance Your Defensive Security Career
This pathway equips cybersecurity professionals with the skills to detect, respond to, and mitigate cyber threats in cloud and on-premises environments. Through hands-on training and real-world scenarios, learners will master incident response, threat intelligence, and attacker techniques. Designed for those with SOC experience looking to move into senior defensive roles, this pathway includes SANS SEC504: Hacker Tools, Techniques, and Incident Handling and the opportunity to earn the GIAC Certified Incident Handler (GCIH) certification.
The Details
For: Professionals with prior experience in defensive security in a SOC environment who are looking to advance into senior defensive roles (L2 or L3).
Intakes: May, June, July, August 2025
Eligibility: Cybersecurity professionals who have a minimum of 1.5 years work experience in a cyber role and are currently employed in cybersecurity.
$1,300 + HST registration fee
50% of class time is dedicated to hands-on exercises, using visual association tools to simplify complex topics.
Participants will obtain the GIAC Certified Incident Handler (GCIH) certification, a globally recognized certification.
Ideal for cybersecurity professionals with SOC experience aiming for L2/L3 defensive security roles.
Timeline
Week 1
The Professional Development Sessions are designed to provide learners with relevant, timely insights into important themes in organizational cybersecurity, such as addressing the challenges of new and emerging technology and critical issues in cybersecurity and compliance. These 2-hour interactive workshops provide opportunities for learners to explore topical issues and help learners identify opportunities to address them within almost any organizational context.
Weeks 2-12
Learners are enrolled into the SANS course and GIAC certification exam that aligns with their pathway. Over the 10 weeks, learners will gain immediately applicable skills through OnDemand self-paced learning platform with dedicated support from Subject Matter Experts (SMEs). The course includes hands-on labs, two practice exams, and a final exam. Learners are expected to commit 15-20 hours per week to successfully complete the course and certification.
Weeks 10-12
The Catalyst Cyber Range offers learners hands-on, ultra-realistic simulations for practicing, training, and assessing their technical cyber response skills. Learners can choose from three 4-hour simulation options, gaining experience as both Red Team and Blue Team members or exploring a cyber attack from the perspectives of the attacker, victim, and SOC analyst.
Weeks 12-14
Through the Careers and Employment Programming, learners gain access to comprehensive career resources covering job search fundamentals and professional growth strategies. Learners will participate in live career workshops on topics like leveraging program learnings, salary negotiations, and job search strategies. Learners will also have the opportunity to engage with industry professionals through networking events, coffee chats, and fireside Q&A panel sessions. In addition, learners will receive personalized guidance through one-on-one career coaching.
