Save $350 on Cyber Security Training at SANS Anaheim 2019. Ends 12/19!


John TerBush

John TerBush currently works as a senior cyber threat intelligence (CTI) analyst and subject matter expert with consulting firm Booz Allen, serving multi-national enterprises in a variety of industries including finance, manufacturing, retail and energy. In this role he conducts open-source and dark web investigations, malware and traffic analysis, tracking of threat actors and their tactics, techniques and procedures, and many other tasks in order to provide analytical and technical support to clients and other Booz Allen teams. Previous to his role as a CTI analyst, he worked as a security operations center (SOC) analyst with a large managed security service organization handling response for numerous Fortune 500 companies. While working through a sea of alerts and research, he developed a focus on creating network detections and tracking attacks. His first role in cyber security consisted of conducting vulnerability and security assessments for small- and medium-sized businesses.

Prior to entering the information security field, John worked for over two decades in legal research and private investigations, providing open-source research, surveillance, court testimony, undercover operations and other investigatory work of all types. John acted as the director of investigations and lead investigator for two well-known regional investigation companies for over a decade, before starting his own investigations firm.

John's background as both a private investigator and cyber threat intelligence analyst make him uniquely suited to share a well-rounded perspective on open-source investigations and other forms of research.

John assisted with the development of the SEC487: Open-Source Intelligence Gathering and Analysis course.

He is a member of both the SANS GIAC Advisory Board and the SANS Open Source Intelligence Summit Advisory Board, and holds the GIAC GCIA and GREM certifications as well as the Certified Information Systems Security Professional (CISSP). John is also active within the information security and investigative communities.

John is an avid outdoorsman and when not at work, teaching, or helping out in the community he may be found camping, mountain biking, kayaking or doing other such activities as far from civilization as possible.

Upcoming Courses Taught By John TerBush
Type Course / Location Date Register

Cyber Threat Intelligence Summit & Training 2019 Arlington, VA
Jan 21, 2019 -
Jan 28, 2019

*Course contents may vary depending upon location, see specific event description for details.