Conference Description
Key Takeaways
- Six-day hybrid training event offering 35 courses across cyber defense, offensive operations, digital forensics, cloud security, and AI security
- Courses taught by practicing security professionals and mapped to GIAC certification exams
- Designed for security analysts, incident responders, penetration testers, forensics experts, and cloud security specialists
- Includes hands-on labs, NetWars tournaments, keynote presentations, and evening talks
- Held July 12 to 17, 2027 at the Grand Hyatt Washington and online
About the Event
SANSFIRE 2027 is a six-day cybersecurity training event running from July 12 to 17, 2027. The event operates in a hybrid format, with in-person sessions at the Grand Hyatt Washington in Washington, D.C. and virtual attendance options. Participants select from 35 courses spanning cyber defense, offensive security, digital forensics, cloud security, and AI security disciplines.
Each course combines lecture content with hands-on labs built around real attacker techniques. Instructors are working practitioners: those teaching incident response run IR engagements, and those teaching offensive security conduct red team operations professionally. Most courses map directly to GIAC certification exams, providing a pathway to validate skills learned during training.
Training Focus Areas
The curriculum addresses incident investigation and containment using established response methodologies. Courses cover attacker tools and techniques, enabling participants to identify and close security gaps. Specialized tracks focus on securing industrial control systems and SCADA environments where uptime and safety requirements are critical. Additional sessions address threat intelligence operationalization for faster detection and response, as well as applying AI and machine learning to security automation while defending AI systems from emerging threats.
Competitions and Community Activities
The event includes two NetWars tournaments, which are hands-on competitions designed to test and sharpen cybersecurity skills. These tournaments are included with course registration, with standalone registration available for those not attending courses. Evening programming features SANS@Night talks and keynote presentations from SANS instructors covering current techniques. A welcome reception provides networking opportunities with fellow practitioners, industry experts, and faculty.
Who Should Attend
SANSFIRE 2027 targets cybersecurity professionals including security engineers, SOC analysts, incident responders, penetration testers, security architects, and IT managers. Attendees come from government agencies, large enterprises, and consulting firms across public and private sectors. The event suits practitioners seeking to close skill gaps, prepare for GIAC certification, or stay current with evolving cyber threats affecting cloud environments, industrial control systems, and AI deployments.