FREE Purple Team Summit | May 24-25: Explore collaboration approaches that maximize value of red and blue teams. Register now!


To attend this webcast, login to your SANS Account or create your Account.

5-Day Blueprint for the Supercharged SOC: MGT551, Building and Leading Security Operations Has Expanded

  • Tuesday, April 20, 2021 at 10:30 AM EST (2021-04-20 14:30:00 UTC)
  • Mark Orlando, John Hubbard

You can now attend the webcast using your mobile device!



Following a hugely successful initial run of the new security operations leadership course, MGT551, some of SANS best blue team minds have come together to build a brand new 5-day version of Building and Leading Security Operations Centers! Expanding upon the initial course themes of SOC design, organization, evaluation, and improvement, the new MGT551 offers an in-depth look at what it takes to build and manage next-level cyber defenses including people, technology, and process. In this webcast, John and Mark will introduce the new course material, new labs, and the all-new MGT551 interactive game. They will also discuss their approach to covering the fundamentals of security operations while highlighting ways that even resource-constrained SOCs can realize more advanced capabilities and keep pace with advanced adversaries.

Speaker Bios

Mark Orlando

Mark Orlando is a SANS Associate Instructor, co-author of the new MGT551: Building and Leading Security Operations Center 5 day version, instructor for SEC450: Blue Team Fundamentals: Security Operations and Analysis, and also the Co-Founder and CEO of Bionic Cyber. Prior to Bionic, Mark built, assessed, and managed security teams at the Pentagon, the White House, the Department of Energy, and numerous Fortune 500 clients. Mark has presented on security operations and assessment at DefCon's Blue Team Village, the Institute for Applied Network Security (IANS) Forum, BSidesDC, and the RSA Conference and has been quoted in the New York Times, the Washington Post, Forbes, and many other publications. He holds a Bachelor's Degree in Advanced Information Technology from George Mason University and served in the US Marine Corps as an Artillery Non-Commissioned Officer. Read Mark’s full profile here

John Hubbard

John is a Security Operations Center (SOC) consultant and speaker, a Certified SANS instructor, and the course author of 3 SANS courses: SEC450: Blue Team Fundamentals - Security Operations and Analysis, MGT551: Building and Leading Security Operations Centers, and SEC455: SIEM Design & Implementation. John also teaches additional SANS Blue Team courses such as SEC511: Continuous Monitoring and Security Operations, and SEC555: SIEM with Tactical Analytics. Through his years of experience as a Lead Cyber Security Analyst and SOC Manager for a major pharmaceutical company with over 100,000 employees and global operations, John has developed real-world, first-hand knowledge of what it takes to defend an organization against advanced cyber-attacks. Read more about John here.

Need Help? Visit our FAQ page or email

Not able to attend a SANS webcast? All Webcasts are archived so you may view and listen at a time convenient to your schedule. View our webcast archive and access webcast recordings/PDF slides.