SANS Instructors

Christopher, Principal Consultant at Applied Risk/DNV, specializes in ICS red team activities. He holds multiple security certifications and brings a wealth of practical experience to the classroom environment.

Megan is a Senior Security Engineer at IBM and SANS course author, combining her expertise in digital forensics with a fierce competitive edge as a Muay Thai fighter with 7 sanctioned bouts.

Josh Rykowski currently serves as a Cyberspace operations officer for the US Army where he has lead a Cyber Protection Team and worked to develop specialized training for those same teams.

Felix Schallock is the co-course author of ICS456 and the Owner and Managing Director of TIBITS Consulting GmbH where he provides consulting and advisory services to organizations in the critical infrastructure sectors. He brings over 30 years of experience and a diverse IT and OT background to SANS. He built and was part of operations, forensic, incident handling, offensive and audit teams. He holds numerous professional certifications and has made contributions to the field of cybersecurity.

Greg has over 30 years of hands-on experience in IT security and is experienced in desktop and server support, network design and implementation, application development and programming, IT service management, IT security, and information assurance.

John Scott is the Lead Cyber Security Researcher for Culture AI, a comprehensive Human Risk Management platform that empowers organizations to effectively measure employee security behaviors and reduce cyber risks.

Justin Searle has redefined industrial cybersecurity by leading the development of NIST IR 7628, a cornerstone in smart grid security, and creating open-source tools like ControlThings that have become essential for ICS/IIoT assessments.

Andreas is a seasoned cyber threat intelligence professional with over 15 years in cybersecurity. He specializes in cyber threat analysis and building threat management programs.

Dave Shackleford, founder of Voodoo Security, has advanced cybersecurity through his leadership roles, including serving as CTO for the Center for Internet Security, where he coordinated the first published virtualization security benchmarks.

Steve splits his time between Europe and the US, bringing a unique blend of physics expertise and an early foundation in machine learning to every project. His career spans high-stakes programming roles, from banking in Europe to cybersecurity in the US.

Jeff is a Subject Matter Expert (SME) for the Global Industrial Cyber Security Professional (GICSP) certification and is an instructor for the ICS612: ICS Cybersecurity In-Depth course.

James Shewmaker, founder of Bluenotch Corporation, has over two decades of technical experience in IT, primarily developing appliances for automation and security for broadcast radio, internet, and satellite devices.