Bryan Simon
Senior InstructorCEO at Xploit Security Inc.
Specialities
Cybersecurity and IT Essentials, Cyber Defense

Experience SANS training through course previews.
Learn MoreLet us help.
Contact usBecome a member for instant access to our free resources.
Sign UpWe're here to help.
Contact UsCybersecurity and IT Essentials, Cyber Defense

Bryan Simon has spent more than three decades building, breaking, and defending networks, and mentoring others to do the same. As a Senior Instructor at the SANS Institute and author of SANS SEC401: Security Essentials, he equips cybersecurity professionals with the essential skills and mindset to protect modern enterprises. Known for his clarity, energy, and approachability, Bryan transforms foundational cybersecurity concepts into engaging, real-world lessons that help students think and act like defenders from day one.
Bryan’s career spans the full evolution of cybersecurity, from its infancy in the early 1990s to today’s cloud-connected world. Since entering the field in 1991, he has held technical and leadership roles across education, environmental, accounting, and financial services sectors, guiding organizations through the rise of the internet and the challenges of securing it. Over those decades, he has watched cybersecurity transform from a niche discipline to a critical global priority, and has helped shape that transformation every step of the way. His courses have built the skills and confidence of thousands of professionals, from new defenders to the world’s most seasoned analysts. As President and CEO of Xploit Security Inc., he carries that same philosophy into consulting—helping organizations bridge the gap between theory and practice so that security empowers, rather than inhibits, progress. Grounded in decades of experience, his work has taken him across four continents to train personnel from the FBI, NATO, and the United Nations. He is also a faculty member of the SANS Technology Institute, an NSA Center of Academic Excellence in Cyber Defense and a multi-year winner of the National Cyber League competition.
He holds 22 GIAC certifications, including the elite GIAC Security Expert (GSE)—one of the field’s most demanding distinctions—and the CISSP credential. A member of the GIAC Advisory Board, Bryan was recognized as an I.T. Hero by McAfee for his contributions to cybersecurity education and awareness.
Bryan’s teaching philosophy is simple: make cybersecurity human, hands-on, and habit-forming. Students describe him as “engaging, relatable, and inspiring,” praising his energy and ability to connect technical depth to real-world challenges. Many credit his course with launching or accelerating their careers in cybersecurity. Whether guiding a boardroom or a classroom full of new defenders, Bryan applies the same philosophy: effective security starts with education, empathy, and execution. Outside the classroom, he advocates for a world where cybersecurity is more than protection—it’s the foundation for innovation, trust, and human progress. Through decades of work, his influence has helped shape how organizations defend themselves and how the next generation of defenders learns to lead.
Bryan provided a lot of additional value beyond just the material. He broke things down in a way that was easy to understand and follow.
On the first day of a course, it's easy to say that the content is amazing and everything is good, but as the days pass, it really shows how good the instructor is. Bryan is a superhuman in SEC401. He lectures through the night continuously and yet is so friendly and clear.
Here are upcoming opportunities to train with this expert instructor.
Explore content featuring this instructor’s insights and expertise.
Join us for SANS Secure Your Fortress: Building Robust and Resilient Defenses for 2025, where cutting-edge techniques meet hands-on practicality. Designed for cybersecurity professionals at all levels, this event equips you with the tools, strategies, and insights needed to overcome today’s toughest challenges and prepare for tomorrow’s emerging threats.

In this workshop we will begin with a presentation of the cryptographic systems that can be leveraged to create digital signatures and why we want to use these signatures (their importance). We will discuss the more common use cases for signatures (such as digitally signed email) and then move into more recent examples such as DKIM (DomainKeys Identified Mail), as well as their use for incident detection and response.

Step into a world where cutting-edge defense meets practicality in cybersecurity! "SANS Secure Your Fortress" will teach you how to master the latest and most effective defense techniques. Whether you're a seasoned expert or just beginning your cyber journey, this event is for you.

Cyberattacks are evolving, and your defenses need to, too. Join SEC401 author Bryan Simon, GSE, for this webcast unveiling the game-changing 2024 update to SEC401 Security Essentials: Network, Endpoint, and Cloud.

Dalam webcast selama satu jam ini, kami akan memberikan pengantar singkat tentang berbagai ystem kriptografi dalam penggunaan modern serta membahas miskonsepsi seputar kriptografi yang mengakibatkan implementasi yang salah.

Review relevant educational resources made with contribution from this instructor.