Group Purchasing
Group Purchasing

Mark Baggett

FellowChief Technology Officer at The Internet Storm Center

Specialities

Cyber Defense

Connect with Mark

Mark Baggett

About Mark Baggett

Every defender faces moments when the data feels endless and the stakes are high. Mark Baggett teaches practitioners to turn that complexity into control. A SANS Faculty Fellow and author of SANS SEC573: AI-Powered Security Automation: Building Tools with Python, LLMs, and MCP and SANS SEC673: Advanced Information Security Automation with Python, Mark shows security professionals how to harness Python to detect, respond to, and outthink adversaries. As Chief Technology Officer of the SANS Internet Storm Center, he leads global collaboration on threat analysis and defensive innovation, turning field experience into lessons that make defenders stronger. His mission: make automation accessible, impactful, and achievable for every defender—regardless of coding background.

Mark’s path into cybersecurity began with equal parts curiosity and challenge. When his own system was compromised early in his career, it sparked a lifelong drive to understand attackers’ mindsets, and to help defenders anticipate their next move. Over three decades, Mark has worked across every layer of enterprise defense, from hands-on engineering to executive leadership, gaining a 360° view of how attacks unfold and how automation can stop them. Between 2010 and 2024, he served as Technical Advisor to the U.S. Department of Defense, guiding national programs to strengthen detection and response. These experiences shaped his SANS courses, where every lab mirrors challenges he has faced in the field. Students leave with automation workflows and tested playbooks they can use immediately, turning classroom lessons into lasting capability.

Mark holds a Master of Science in Information Security Engineering (MSISE) from the SANS Technology Institute and a Bachelor of Science in Computer Science (BSCS) from Augusta University. He is the 15th person worldwide to earn the GIAC Security Expert (GSE) certification and maintains additional credentials including Python Coder (GPYC), Exploit Researcher and Advanced Penetration Tester (GXPN), Penetration Tester (GPEN), Certified Intrusion Analyst (GCIA), Incident Handler (GCIH), Security Essentials (GSEC), Web Application Penetration Tester (GWAPT), and Project Manager (GCPM). He also serves as faculty at the SANS Technology Institute, which has been designated an NSA Center of Academic Excellence in Cyber Defense and is multi-year winner of the National Cyber League competition.

Known for his hands-on teaching style, Mark turns apprehension about programming into curiosity and confidence. Students often say his courses finally helped them “make Python click.” Beyond the classroom, he strengthens the community through open-source tools such as Freq Server, SRUM-DUMP, API-ify, and Reassembler, used by defenders and forensic analysts worldwide. As founding president of the Greater Augusta ISSA Chapter and co-founder of BSidesAugusta, he continues to mentor the next generation of cybersecurity leaders. Mark measures success not by how much students learn, but by what they automate afterward. That moment when a student’s first script works—when frustration turns into excitement—is what keeps him teaching. For Mark, teaching is about passing on the spark that changed his own career: the belief that curiosity, creativity, and code can redefine how defenders fight back.

Qualifications Summary
  • Faculty Fellow, SANS Institute
  • Chief Technology Officer, SANS Internet Storm Center
  • Course Author, SEC573: AI-Powered Security Automation: Building Tools with Python, LLMs, and MCP and SEC673: Advanced Information Security Automation with Python
  • Master of Science in Information Security Engineering (MSISE), SANS Technology Institute
  • Bachelor of Science (BS) in Computer Science, Augusta University
  • GIAC Certifications: GIAC Security Expert (GSE #15), GPYC, GXPN, GPEN, GCIA, GCIH, GSEC, GWAPT, GCPM
  • Former CISO, Morris Communications
  • Technical Advisor to US Department of Defense (2010-2024)
  • Co-founder, BSides Augusta
  • Founding President, Greater Augusta ISSA
  • Creator of open-source tools: Freq Server, SRUM-DUMP, API-ify, Reassembler

Press & Media