Conference Description
Key Takeaways
- Ten intensive courses spanning red team operations, detection engineering, cloud penetration testing, ICS security, and governance
- Most courses lead to GIAC certification exams, providing standardized credentials for security professionals
- Hybrid format with in-person training at Hilton Boston Park Plaza and live online options
- Designed for red and blue team members, penetration testers, SOC analysts, security architects, and CISOs
- Relevant to organizations in healthcare, biotech, finance, and higher education facing HIPAA, GLBA, PCI DSS, and Massachusetts 201 CMR 17.00 requirements
About the Event
SANS Boston 2027 runs March 1 through 6, 2027, offering cybersecurity professionals intensive training delivered by active practitioners. The event emphasizes hands-on lab scenarios designed to mirror real client environments rather than theoretical exercises. Courses run five to six days, with options for extended access and certification attempts. Attendees can participate in person or online, with flexibility to switch formats as needed. The program includes networking opportunities, exclusive talks, and social events.
Technical Focus Areas
The curriculum covers offensive and defensive security disciplines. Red team tracks address offensive operations, evasion techniques, and covert infrastructure development. Defensive courses focus on detection engineering and SIEM analytics. Specialized tracks cover cloud and mobile penetration testing, Industrial Control Systems security, and AI security automation. A governance track addresses cybersecurity risk and compliance management.
Regulatory and Industry Context
The training addresses compliance requirements under HIPAA, GLBA, PCI DSS, and Massachusetts 201 CMR 17.00. Organizations in regulated industries can use GIAC certifications to demonstrate security capabilities and meet audit requirements. The courses help teams identify security gaps before attackers exploit them while providing documented evidence of security competency for compliance purposes.
Who Should Attend
The event serves security engineers, penetration testers, SOC analysts, security architects, CISOs, and IT auditors. Organizations facing cybersecurity skills shortages can use the training to upskill internal teams rather than relying solely on external hiring. Both technical practitioners and security leaders will find relevant content across the ten course offerings.