Simon Vernon
Certified InstructorPrincipal Technical Architect at SANS Institute
Specialities
Cloud Security

Experience SANS training through course previews.
Learn MoreLet us help.
Contact usBecome a member for instant access to our free resources.
Sign UpWe're here to help.
Contact UsCloud Security

Simon Vernon brings more than a quarter century of experience to his role as Head of Research and Development for SANS Institute where he is responsible for the creation and operations of all Jupiter Rockets, BootUP, and Community Cyber Ranges. He is the CSO for Intelligence Hosting Solutions and on the board of two businesses to support security and infrastructure design decision making. Simon can be found teaching SEC502: Cloud Security Tactical Defense, SEC510: Cloud Security Controls and Mitigations or SEC549: Cloud Security Architecture.
Developing the Jupiter Rockets Ranges and the underlying infrastructure all based in public cloud allows Simon the privilege of trying out new defensive and offensive technologies and techniques in controlled environments. He and his team utilize the latest technologies to create realistic simulations of what practitioners see in real life without the pressures of working in a production asset. They then open the environments to attackers and defenders, which tests the platforms and infrastructure to destruction. As students get better, Simon learns from them, honing his own skills, while making Jupiter Rockets Ranges even more challenging.
As a self-proclaimed constant learner, Simon thrives off constant change, adaptation, and innovation through hands-on “doing”. He likes to break things to try to fix them while implementing new ideas and improvements along the way. Since getting his first PC in the late 1980’s, computers have always held Simon’s interest, but at that time, with limited opportunities in computer science, Simon focused on electrical and mechanical engineering. Simon became a specialist in auto electronics with Land Rover and the defacto IT support at work and home. In time, this experience led to his first position in commercial IT.
Simon has vast experience throughout his career, including discovering full remote execution vulnerabilities, MITM attack vectors from major vendors, appeared on TV, and has traveled and met dignitaries around the world. In 2015, Simon attended SANS Cyber Academy, which was the beginning of his journey to becoming a SANS Instructor. Although he had previously instructed at several colleges and employers over the years, he felt the impact he could have as a SANS instructor was palpable. He believes people learn best by doing once they also understand “the why”. His decades of experience put him in an excellent position to share the why and help his students grow through practical and real-world examples.
Simon keeps ahead of the curve in security and believes the cloud this is the only way to survive and prosper in today’s environment. The rapid pace of innovation and adoption of new technologies in the cloud space has proved a perfect fit for Simon’s constant need to learn new things. Some prefer the ease of locking onto a particular vendor or platform and maintaining a status quo, but that is not the road Simon takes. He constantly pivots, tries new things, breaks things, adapts, and continually improves. Moving from an on-premise mindset into the cloud includes many radical architectural and conventional changes. It could be likened to moving from Windows to Mac or changing from driving a car to riding a motorcycle. The outcome is the same, but the method to achieve it securely is very different. Re-learning common techniques in a very different environment can be challenging. Simon is here to help you on your journey.
Simon is a faculty member of the SANS Technology Institute, an NSA Center of Academic Excellence in Cyber Defense and multiple winner of the National Cyber League competition. Simon holds several positions outside of SANS including: a CSO for a data center company, Board Member of two individual businesses for security and infrastructure decision making, and he is a consultant to a number of non-profits. He also holds numerous professional certifications: GPEN, GCFE, GCIH, GSEC, MCITP, and MCP.
When not behind a computer screen, Simon can be found adventuring with his family in his recently self-converted minibus-to-campervan, motorcycling, modifying admiring cars, engines, and auto technologies, or on his way to the mountains to rock climb, ski, and snowboard.
Here are upcoming opportunities to train with this expert instructor.
Explore content featuring this instructor’s insights and expertise.
Join SANS Certified Instructor Simon Vernon and Microsoft CVP Kelly Bissell for a rare fireside chat that will cut through the noise and get to the heart of one of cybersecurity’s biggest debates: Where is AI good—and where is it dangerously bad—for security and defense?

This webcast aims to provide insights into survey results, including the tools, techniques, and strategies needed to secure multicloud environments effectively—offering valuable guidance for organizations navigating the complexities of cloud security at scale.

Prepare for the Next Era of Cloud Security.

As cloud adoption accelerates, securing the cloud remains a critical challenge. The Cloud Security track offers deep dives into securing multi-cloud strategies and the latest solutions to safeguard cloud data. Learn from experts on how to tackle cloud-specific threats in a rapidly evolving environment.

Part 3: Modernizing Identity: Navigating Challenges and Embracing Cloud SolutionsIn Part 3, we tackle the pressing need for identity modernization as organizations transition from legacy systems to cloud-based applications. As outdated protocols and misconfigurations become more prevalent, this webcast will explore the benefits of modern identity solutions and their role in enhancing security through conditional access and zero trust principles.

Join our workshop to learn how to configure, scale, and secure your logging setup for processing data either in the cloud or On-Premises utilizing new features supported in Azure for event hubs and Azure storage.

This webcast offers invaluable knowledge to help you navigate the complexities of securing multiple cloud environments, stay ahead of evolving threats, and implement robust security practices across your organization.

This talk, titled "Bridge to the Clouds: Unifying Worlds with Entra ID in Hybrid Landscapes," illuminates the integration challenges and visibility capabilities provided by Entra ID for reconciling identity and access management in hybrid cloud landscapes.

This workshop will delve into the realm of cloud native security solutions and techniques, to demonstrate how it is possible to protect such systems that are otherwise considered indefensible particularly in the case of ‘Lift and Shift’.
