Rich Greene
Certified InstructorSenior Solutions Engineer at SANS Institute
Specialities
Cyber Defense, Cybersecurity and IT Essentials

Experience SANS training through course previews.
Learn MoreLet us help.
Contact usBecome a member for instant access to our free resources.
Sign UpWe're here to help.
Contact UsCyber Defense, Cybersecurity and IT Essentials

Rich Greene believes cybersecurity isn’t just a career—it’s a calling. From the battlefield to the classroom, he’s dedicated his life to defending, teaching, and inspiring others to do the same. As a SANS Instructor and author of SEC301: Introduction to Cyber Security, one of SANS’s most widely attended foundational courses, Rich transforms complex concepts into engaging, real-world lessons that connect with students from all backgrounds. His mission is simple yet profound: to make cybersecurity accessible, exciting, and achievable for anyone willing to take up the challenge.
That sense of purpose was forged over more than two decades in military, intelligence, and cybersecurity operations. Rich’s journey began in the U.S. Army Special Forces, where he served as a Communications Sergeant before transitioning into cyber and intelligence roles supporting operations in more than 17 countries. These experiences—where seconds mattered and missions depended on secure communications—shaped his belief that true defense begins by thinking like the adversary.
After leaving the military, Rich transitioned into cyber training and consulting, eventually founding SITH2, LLC, where he helps organizations strengthen detection and incident response capabilities. These experiences directly inform the labs in SEC301, where students move beyond theory into tactical application—learning not only what to do, but why it matters.
Rich holds more than a dozen Global Information Assurance Certifications (GIAC) spanning incident handling, penetration testing, forensics, and leadership—including GIAC Cyber Threat Intelligence (GCTI), GIAC Certified Incident Handler (GCIH), GIAC Response and Industrial Defense (GRID), and GIAC Strategic Planning, Policy, and Leadership (GSTRT)—as well as the CISSP credential. He earned both his Bachelor’s Degree in Applied Cybersecurity and Master of Science in Information Security Engineering from the SANS Technology Institute, an NSA Center of Academic Excellence in Cyber Defense and multi-year winner of the National Cyber League competition.
Rich’s teaching philosophy is simple: make cybersecurity human, hands-on, and habit-forming. Students describe him as “the most engaging instructor I’ve ever had,” praising his energy, humor, and ability to make cybersecurity approachable. Many credit his teaching with transforming how they view network defense, turning intimidation into inspiration. With thousands of SEC301 alumni around the world, Rich continues to shape the next generation of defenders—equipping them to interpret threats, think critically, and apply defensive principles immediately in their work.
Beyond SANS, Rich amplifies his impact through podcasts, livestreams, and conference talks—including appearances on the Blueprint Podcast, Security Halt!, and Wait Just an Infosec—where he shares lessons on leadership, mindset, and creative problem solving. Away from the classroom, he embraces his inner “Cybersecurity Dungeon Master,” blending creativity, storytelling, and teamwork in everything he does—from tabletop games to teaching defenders how to think several moves ahead of the adversary.
Rich was great. He went above and beyond with answering all questions and clearly knew the topics in detail.
Rich Green was fantastic. He is obviously passionate about the subject, and the passion was helpful for the Live Online course in particular.
Rich [was] great. His presentation skills and delivery keep the class engaged. He always ensures students do not have questions before moving on.
Here are upcoming opportunities to train with this expert instructor.
Explore content featuring this instructor’s insights and expertise.
Explore the 2027 SANS Identity Threats & Defenses Survey with Rich Greene and industry experts. Discover trends in machine identity, detection, containment, and the defenses shaping the future of identity security.

Most security teams I’ve worked with and helped have a handful of people defending thousands. Yet we expect them to cover everything, watch everything, and control everything, like they have an army’s headcount to do it.

This webcast explores why the traditional tool-first approach to security operations is failing resource-constrained teams and what modern detection and response programs must do instead.

Join SANS Cyber Defense instructors to explore the tools, tactics, and tradecraft defenders rely on to detect, respond, and stay ahead of modern threats in 2026.

SANS instructors quickly analyzed the axios supply chain attack, uncovering RAT functionality and providing immediate guidance to help organizations identify exposure and respond.

Overview Identity has become the new battleground. From SaaS to cloud to legacy Active Directory, it is now the central control point—and attackers know it.

Join this SANS webcast to discover how to build a modern, AI-driven SOC powered by Cortex XSIAM—the industry’s leading AI-powered security operations platform.

In this upbeat, interactive session, we’ll dive into why the tried-and-true fundamentals (think password hygiene, patch management, and access controls) are the secret sauce to surviving and thriving in the age of ever-evolving cyber threats. Prepare for real-life “oops” moments, plenty of laughs, and hands-on tips you can actually use.

Improving Windows Event Log Analysis With Yamato Security Tools and The Evolving Cyber Threat Landscape: A SANS Perspective.

Healthcare and medical organizations are increasingly becoming targets of cybersecurity attacks, especially ransomware-focused attacks. These incidents can severely disrupt daily operations, causing significant challenges and delays in providing healthcare services.

Join this webcast to explore SANS and GIAC's latest industry-leading training and certifications to help cyber-practitioners, and the organizations they protect, keep pace with dynamic market conditions. Cut through the noise with this comprehensive showcase and discover the skills you and your teams will need to navigate the evolving landscape of cybersecurity.

Step into a world where cutting-edge defense meets practicality in cybersecurity! "SANS Secure Your Fortress" will teach you how to master the latest and most effective defense techniques. Whether you're a seasoned expert or just beginning your cyber journey, this event is for you.

Review relevant educational resources made with contribution from this instructor.