Get the Skills you need from Home with SANS Online Training - Special Offers Available Now


To attend this webcast, login to your SANS Account or create your Account.

This webcast has been archived. To view the webcast login into your SANS Portal Account or create an account by clicking the "Get Registered" button on the right. Once you register, you can download the presentation slides below.

Gamification of a Fortune 20 SOC

  • Thursday, April 07, 2016 at 1:00 PM EDT (2016-04-07 17:00:00 UTC)
  • Josh Stevens, Marcel Hoffmann


  • HPE

You can now attend the webcast using your mobile device!



Many Security Operations Centers (SOCs) struggle in 3 key areas when it comes to personnel: continuous training, extending retention and measuring effective KPIs. In this talk we introduce the combination of gamification, user experience and machine learning as a concept to address these 3 challenges. We plan to share our real world experience implementing these concepts for the internal SOC at Hewlett Packard Enterprise.

SOC Summit & Training

Build the Skills and the Team to Rock your SOC at the SOC Summit & Training, May 19-26, 2016 in Crystal City, VA.

The Summit will present case studies to help you identify gaps in your SOC, use threat intelligence effectively, and develop meaningful metrics to define the success of your SOC. You'll also learn how to identify and retain the talent you need to help your SOC evolve along with the dynamic threat landscape.

Speaker Bios

Marcel Hoffmann

Marcel Hoffmann manages the internal Cyber Defense Centers within Hewlett Packard Enterprise responsible for the detection, evaluation and appropriate escalation of potential cyber security incidents. The Defense Centers leverage one of the largest ArcSight installations in the world to correlate billions of security event logs into several hundreds of actionable alerts. Located near the Executive Briefing Center the CDC Palo Alto also offers the opportunity for customers to see HPE’s security portfolio in action. Together with HPE Enterprise Security Products and HPE Labs the Defense Centers are pioneering emerging technologies as well as driving innovation in existing security product families like ArcSight. Marcel holds a Master of Science in Business Informatics from the University of Applied Sciences in Dortmund, Germany.

Josh Stevens

Josh Stevens is the Chief Architect for Security Operations at Hewlett Packard Enterprise. In this role, he leads the strategic and technical direction for adaptive response and automation. Much of his current work centers on the Cyber Defense Center with a focus on product evaluations, applied research and HPE-on-HPE projects. Josh is a featured RSA Conference presenter on Big Data Analytics & Visualization for Hunt teams, with multiple patents pending for visualizing cyber-attack data. Prior to joining HPE, Josh was instrumental in building USAA’s SOC, vulnerability management and SIEM integration capabilities.

Need Help? Visit our FAQ page or email

Not able to attend a SANS webcast? All Webcasts are archived so you may view and listen at a time convenient to your schedule. View our webcast archive and access webcast recordings/PDF slides.