Register now for SANS Cyber Defense Initiative 2016 and save $400.


Ryan Johnson

Ryan Johnson is the Head of CSIRT Readiness and Investigations at PricewaterhouseCoopers.  In this role, Ryan is responsible for global CSIRT readiness, insider threat, and strategic threat intelligence.  Previously, Ryan was a Senior Director and lead incident responder in the Cyber Division of consulting firm Alvarez & Marsal.  Ryan has been investigating crimes in the digital realm for more than 12 years including performing media exploitation for the US Army in Iraq.

Ryan has run multiple large-scale breach investigations and has also provided clients with proactive assessments that assisted them in identifying both security gaps, and identifying systems which are already compromised.  Ryan taught digital forensics for the US State Department's Anti-Terrorism Assistance program and was a co-author of several of their digital forensics courses.  Ryan also co-authored Mastering Windows Network Forensics and Investigations, Second Edition.

Ryan's industry credentials include: GIAC Network Forensic Analyst (GNFA), GIAC Continuous Monitoring Certification (GMON), GIAC Certified Incident Handler (GCIH), Certified Information System Security Professional (CISSP), Certified Forensic Computer Examiner (CFCE), Digital Forensics Certified Professional (DFCP), EnCase Certified Examiner (EnCE), and Payment Card Industry Professional (PCIP).  He has earned an M.S. from Dalhousie University and two Bachelor's degrees from Queen's University.

Online options available. Train from any location.

Upcoming Courses Taught By Ryan Johnson
Type Course / Location Date Register

Nov 8, 2016 -
Dec 15, 2016

Training Event
SANS San Francisco 2016 San Francisco, CA
Nov 27, 2016 -
Dec 2, 2016

Cyber Threat Intelligence Summit & Training Arlington, VA
Jan 25, 2017 -
Feb 1, 2017

*Course contents may vary depending upon location, see specific event description for details.