SEC595: Applied Data Science and AI/Machine Learning for Cybersecurity Professionals
SEC595Cyber Defense
SANS Community Benefits
Connect, learn, and share with other cybersecurity professionals
Theat Intelligence
Roles: Cybersecurity Threat Intelligence Analyst and Cyber Product Line Threat Analyst
Role Definition: The Cyber Threat Intelligence Analyst produces integrated threat and technical intelligence products (threat assessments, briefings, intelligence studies, country studies, etc.) regarding cyber threats of relevance to Chevron. Requires demonstrated excellent written and oral communication skills and the ability to effectively interact with persons from a range of backgrounds and positions. Requires analytical skills, specifically in intelligence analysis methodologies as applied to cyber threats, critical thinking, research, and report production. Requires the analyst to execute an intelligence life cycle, including requirements gathering, intelligence collection, analysis, targeted distribution, and feedback to produce relevant, timely, accurate, and actionable intelligence providing the who, what, when, where, why, how, and importance of cyber threats including those associated with espionage, hacktivism, cybercrime, malware, geopolitics, social engineering, and emerging threats.
Courses By Proficiency Level
Awareness
FOR589: Cybercrime Intelligence
Learn how to investigate cybercrime from end to end — uncover attacker tactics, trace financial activity, and analyze digital evidence to support attribution and incident response.
ICS310: ICS Cybersecurity Foundations
Gain foundational ICS and OT security knowledge and hands-on experience in this one-day course.
SEC301: Introduction to Cyber Security
SEC301 introduces cybersecurity fundamentals for non-technical professionals, empowering them to understand risks, terminology, and best practices to support security in any role.
SEC401: Security Essentials - Network, Endpoint, and Cloud
Gain essential cybersecurity skills to quickly detect, respond to, and remediate threats. Learn how to protect critical information and technology assets, whether on-premises or in the cloud.
SEC467: Social Engineering for Security Professionals
Plan, execute, and defend against social engineering attacks by mastering the psychology, tools, and techniques used by adversaries and professional testers.
SEC497: Practical Open-Source Intelligence (OSINT)
Learn to perform effective, secure OSINT research with practical techniques. Explore critical OSINT tools and apply your skills in hands-on labs based on real-world scenarios.
Fundamental
FOR578: Cyber Threat Intelligence
Master tactical, operational, and strategic cyber threat intelligence skills. Improve analytic processes and incident response effectiveness to support your detection and response programs.
ICS410: ICS/SCADA Security Essentials
Reinforce critical cybersecurity skills to secure industrial control systems and operational technology against emerging threats while maintaining operational resilience in industrial environments.
SEC301: Introduction to Cyber Security
SEC301 introduces cybersecurity fundamentals for non-technical professionals, empowering them to understand risks, terminology, and best practices to support security in any role.
SEC502: Cloud Security Tactical Defense
Gain tactical expertise to configure, monitor, and defend cloud environments while addressing data security and compliance challenges.
SEC510: Cloud Security Engineering and Controls
Prevent cloud incidents from becoming breaches with attack-driven controls. Explore real-world case studies, build multicloud defenses, and secure emerging GenAI workloads through hands-on labs.
Skilled
SEC504: Hacker Tools, Techniques, and Incident Handling
Transform your incident response skills; think like an attacker as you investigate cybersecurity incidents, develop threat intelligence, and apply defense strategies against real-world threats.
FOR578: Cyber Threat Intelligence
Master tactical, operational, and strategic cyber threat intelligence skills. Improve analytic processes and incident response effectiveness to support your detection and response programs.
ICS515: ICS Visibility, Detection, and Response
Acquire critical visibility, detection, and response capabilities to protect ICS/OT environments against sophisticated threats while ensuring the safety and reliability of operations.
SEC497: Practical Open-Source Intelligence (OSINT)
Learn to perform effective, secure OSINT research with practical techniques. Explore critical OSINT tools and apply your skills in hands-on labs based on real-world scenarios.
SEC522: Application Security: Securing Web Applications, APIs, and Microservices
Gain the skills you need to understand and mitigate vulnerabilities and secure web applications, APIs, and microservices.
SEC573: Automating Information Security with Python
Learn Python in depth and gain essential skills for customizing and developing your own information security tools.
SEC575: iOS and Android Application Security Analysis and Penetration Testing
Learn to comprehensively assess and test the security of iOS and Android devices and applications through hands-on analysis and penetration testing techniques.
Mastery
FOR508: Advanced Incident Response, Threat Hunting, and Digital Forensics
Learn the advanced incident response and threat hunting skills you need to identify, counter, and recover from a wide range of threats within enterprise networks.
FOR572: Advanced Network Forensics: Threat Hunting, Analysis, and Incident Response
Deepen your advanced network forensics experience, including threat hunting, analysis, and incident response. Explore the tools, technology, and processes needed to integrate network evidence sources.
ICS612: ICS Cybersecurity In-Depth
Develop comprehensive defenses in industrial control systems, and master methodologies through hands-on exercises in a simulated operational technology environment with real-world components.
ICS613: ICS Penetration Testing and Assessments
Security professionals gain critical skills to conduct safe, effective penetration tests and assessments in ICS/OT environments without compromising operational integrity.
LDR512: Security Leadership Essentials for Managers
Gain essential technical and leadership skills to effectively manage security programs, covering key topics like security architecture, vulnerability management, cloud security, and GenAI security.
LDR514: Security Strategic Planning, Policy, and Leadership
This course offers an MBA-level approach, preparing cybersecurity leaders to build strategic plans, craft effective policies, and lead across technical and business teams.
LDR516: Building and Leading Vulnerability Management Programs
Learn to implement the most effective ways to mature your vulnerability management program and move from identifying vulnerabilities to successfully treating them.
LDR521: Security Culture for Leaders
Learn to leverage the principles of organizational change to develop, maintain, and measure a strong security culture.
SEC542: Web App Penetration Testing and Ethical Hacking
Learn a repeatable process for web application penetration testing and gain the skills to uncover vulnerabilities and communicate their business impact.
SEC560: Enterprise Penetration Testing
Master enterprise-scale penetration testing; learn to identify, exploit, and assess real business risks across on-prem, Azure, and Entra ID environments through hands-on labs and an intensive CTF.
SEC565: Red Team Operations and Adversary Emulation
Master Red Team operations by leveraging adversary emulation, cyber threat intelligence, and Red Team tradecraft to execute consistent, repeatable engagements that improve defense effectiveness.
SEC599: Defeating Advanced Adversaries - Purple Team Tactics & Kill Chain Defenses
Learn advanced defensive techniques through hands-on labs and real-world scenarios to effectively prevent, detect, and respond to sophisticated cyber-attacks through a purple team strategy.
SEC660: Advanced Penetration Testing, Exploit Writing, and Ethical Hacking
Learn advanced penetration testing skills to develop custom exploits, perform network attacks, analyze cryptographic implementations, and master advanced exploitation techniques.
SEC699: Advanced Purple Teaming - Adversary Emulation & Detection Engineering
Advanced purple team training empowers security professionals to simulate sophisticated threat actor techniques through comprehensive adversary emulation across complex enterprise environments.
