Katie Nickels
Certified InstructorDirector of Intelligence at Red Canary
Specialities
Digital Forensics and Incident Response

Experience SANS training through course previews.
Learn MoreLet us help.
Contact usBecome a member for instant access to our free resources.
Sign UpWe're here to help.
Contact UsDigital Forensics and Incident Response

Katie is the Director of Intelligence at Red Canary and a Nonresident Senior Fellow at the Atlantic Council. With over a decade of experience in cyber threat intelligence, network defense, and incident response, she has supported organizations including the U.S. Department of Defense, MITRE, Raytheon, and ManTech. She serves as an instructor for SANS FOR578: Cyber Threat Intelligence and is the former host of the SANS Threat Analysis Rundown (STAR) livestream series, which she helped shape into a trusted source of analyst-driven insight on the evolving cyber threat landscape.
The human element of cybersecurity, rather than the technical aspect, is what first attracted Katie Nickels to the field. Initially drawn to a career in journalism, Katie found a job at the U.S. Department of Defense (DoD) in cybersecurity that piqued her interest, and then she was hooked.
"I fell into this field somewhat by accident almost 10 years ago, and I've never looked back," she says. "There are humans behind those keyboards, and tracking what they do and how they do it fascinates me."
Today, Katie is the Principal Intelligence Analyst for Red Canary. She has worked on cyber threat intelligence (CTI), network defense, and incident response for nearly a decade for the DoD, MITRE, Raytheon, and ManTech.
Katie also serves as an instructor for the SANS FOR578: Cyber Threat Intelligence course, enabling her to share her passion for CTI more broadly. Additionally, she is a faculty member of the SANS Technology Institute, an NSA Center of Academic Excellence in Cyber Defense and multiple winner of the National Cyber League competition. "Early on in my own career, I took SANS SEC401: Security Essentials - Network, Endpoint, and Cloud with Dr. Eric Cole, and learning from his insights helped shape the entire course of my career," Katie says. Now as a SANS instructor, she hopes to provide the same career-shaping support for her students.
As an instructor, Katie shares her passion for CTI by giving students practical skills they can use to deliver real results. "I hope to challenge the way my students traditionally think and make them aware of the biases we all have that can prevent us from becoming better CTI analysts," she explains. "I want to equip them with the knowledge and tools they need to go back and make real change in their organizations."
A critical skill Katie aims to convey to her students is to help them understand when and how each area of CTI can be applied. "It's important to remember that CTI is responsive to our organization?s requirements, so different people might need different types of CTI. By knowing the many ways CTI can help, you can successfully identify which methods are right in certain situations."
Katie's unique background enables her to approach CTI training from a variety of perspectives, from intelligence to adversary behavior, the MITRE ATT&CK knowledge base, network defense, and Security Operations Centers.
A graduate of Smith College and Georgetown University's prestigious School of Foreign Service Security Studies Program, Katie also serves on the 2019 SANS CTI Summit Advisory Board and received the President?s Award from the Women's Society of Cyberjutsu in 2018.
In her free time, Katie volunteers with the Cyberjutsu Girls Academy (CGA), a program for teenage girls that seeks to inspire exploration and learning in cybersecurity and STEM. As the CGA program manager, Katie helps organize monthly workshops on topics like Python, robotics, mobile app development, and software-defined radio.
"Seeing our teenage students learn and succeed with CGA has helped drive my passion to teach," says Katie. "It's so rewarding to see a young lady learn to code or successfully make a robot work for the first time!"
When she's not working on cybersecurity and CTI projects, Katie finds balance during her personal time with baking and cake decorating projects, as well as CrossFit workouts.
Katie explained all slides very well, and it is easy to follow her throughout the session. She replies to all our queries right away and also goes back to explain things in detail. Katie really knows the content well and is able to present and explain this to the students.
Katie's support is more than expected, like the way she has prepared slides for the exercise questions to be more informative and to make the students understand the content more easily. She connects separately to work on the issues we are experiencing for the session, along with the moderator Connor.
The instructor, Katie Nickels, is definitely the best trainer I have had. I have learned a lot from her, and her training style is brilliant. She makes time for everyone, has exceptional knowledge and experience in this field, and was enthusiastic the whole way through.
Explore content featuring this instructor’s insights and expertise.
Join us for an interactive SANS Day where cybersecurity experts and enthusiasts come together to explore the latest trends, challenges, and innovations in the field. This event promises a full day of insightful presentations, hands-on experiences, and valuable networking opportunities, and is designed for professionals at all levels. You will have the opportunity to engage with SANS Instructors and hear their insights on cybersecurity threats, customer landscape, AI, and how you can continue to development and advance in your career path. This is a must attend event for anyone passionate about staying ahead in the rapidly evolving world of cybersecurity. Don't miss out on the chance to learn, engage, connect, and grow in your cybersecurity journey!

Join us for an interactive SANS Day where cybersecurity experts and enthusiasts come together to explore the latest trends, challenges, and innovations in the field. This event promises a full day of insightful presentations, hands-on experiences, and valuable networking opportunities, and is designed for professionals at all levels. You will have the opportunity to engage with SANS Instructors and hear their insights on cybersecurity threats, customer landscape, AI, and how you can continue to development and advance in your career path. This is a must attend event for anyone passionate about staying ahead in the rapidly evolving world of cybersecurity. Don't miss out on the chance to learn, engage, connect, and grow in your cybersecurity journey!

Over the past year, cyber threats have continued to plague organizations of all types. From geopolitical conflicts such as the war in Ukraine to the increased use of social engineering techniques by adversaries, cyber threat intelligence (CTI) professionals have had a challenging time providing actionable intelligence to their consumers.

Review relevant educational resources made with contribution from this instructor.