SEC530: Defensible Security Architecture and Engineering: Implementing Zero Trust for the Hybrid Enterprise
About This Course
SEC530 teaches practical security architecture and engineering for the AI era, helping you design and build stronger prevention, detection, and response capabilities by leveraging your existing infrastructure like next-gen firewalls, SIEM, identity platforms, cloud controls, routers, switches, IDS/IPS, WAF, proxies, encryption, PKI, and Microsoft Entra ID, among others.
SEC530 is a practical class designed by highly experienced practitioners to teach tactics and tools for building and hardening security architectures against today’s most sophisticated adversaries. The course focuses on layering prevention, detection, and response controls across network, endpoint, identity, application, data, and cloud planes by leveraging existing investments common in modern organizations.
The course also covers the key technologies shaping defensible architecture today, including Zero Trust Network Access (ZTNA), Secure Access Service Edge (SASE), Network Detection and Response (NDR), Web Application and API Protection (WAAP), Data Security Posture Management (DSPM), Cloud Access Security Broker (CASB), Data Loss Prevention (DLP), Mobile Device Management (MDM), Identity Threat Detection and Response (ITDR), Conditional Access, OAuth, FIDO2, OCSF, Sigma, agentic AI, AI-assisted analytics, and post-quantum cryptography (PQC).
What You'll Learn
- Harden routers, switches, IPv6, segmentation boundaries, NAC, and identity-based access
- Engineer network visibility using NGFWs, NDR/NSM, Zeek, Suricata, flow data, and cloud telemetry
- Design secure access strategies with ZTNA, SASE, TLS inspection, and encryption tradeoffs
- Protect applications, APIs, and data with WAAP, WAF, DSPM, DLP, and workload identity
- Defend against OAuth abuse, token theft, PRT abuse, MFA bypass, and cloud lateral movement
- Connect ITDR risk signals to Conditional Access enforcement with OCSF-normalized telemetry
Entry Requirements
Participants should be proficient in written and spoken English. Please refer to our website for more details on the content taught:
https://www.sans.org/cyber-security-courses/defensible-security-architecture-and-engineering
There are no minimum entry requirements for years of experience in the domain, education level or age group; but participants should possess the relevant prerequisite skills mentioned above.