Timothy Garcia
Principal InstructorIncident Response Lead at ADP
Specialities
Cybersecurity and IT Essentials, Cyber Defense

Experience SANS training through course previews.
Learn MoreLet us help.
Contact usBecome a member for instant access to our free resources.
Sign UpWe're here to help.
Contact UsCybersecurity and IT Essentials, Cyber Defense

Tim Garcia is a Principal Instructor at the SANS Institute and Incident Response Lead at ADP, where he leads incident response investigations across enterprise environments. He currently teaches SEC401: Security Essentials and SEC511: Cybersecurity Engineering: Advanced Threat Detection and Monitoring, covering foundational security concepts alongside advanced security operations topics. His experience includes incident response and security operations.
Garcia draws on more than 25 years of experience across military, technology, and financial sectors. He began in the U.S. Navy as an instructor and engineering leader, building a foundation in systems operations and technical training. Earlier in his career, he served in roles at Intel before spending over 16 years at Wells Fargo as Vice President and Information Security Engineer, leading threat detection and security monitoring efforts. He previously served as Head of Network Security at Santander US, where he led Zero Trust implementation efforts within the Santander US operating environment. In his current role at ADP, Garcia leads incident response investigations and develops automation processes to improve operational efficiency.
Garcia holds multiple industry certifications, including Certified Information Systems Security Professional (CISSP), along with GIAC certifications such as GIAC Security Essentials Certification (GSEC), GIAC Certified Incident Handler (GCIH), GIAC Certified Enterprise Defender (GCED), GIAC Continuous Monitoring Certification (GMON), GIAC Certified Cloud Forensics Responder (GCCC), and GIAC Information Security Fundamentals (GISF). He also holds an MBA in Technology Management. These credentials include coverage across security fundamentals as well as areas such as incident response, continuous monitoring, and cloud forensics. In addition to his operational leadership, Garcia has more than a decade of experience as an adjunct instructor teaching information security, risk management, and ethical hacking at universities in the Phoenix area.
Tim brings experience from both operational roles and academic instruction. He incorporates examples from his professional experience into course discussions and addresses how security concepts apply in operational environments. The course covers how security operations function in practice and how those concepts can be applied in organizational environments. Outside the classroom, he remains active in mentoring teams and supporting the development of cybersecurity professionals.
[Tim] was outstanding throughout the course. [His] ability to explain complex topics in a clear and engaging manner made the learning process smooth and enjoyable. [His] guidance was pivotal to my success in this course.
[Tim] was awesome and had a strong mastery of the subject.
[Tim] was extremely knowledgeable & enhances learning.
Here are upcoming opportunities to train with this expert instructor.
Explore content featuring this instructor’s insights and expertise.