The Blueprint for Leading Modern SOCs – Only at SANS Network Security 2025

Join John Hubbard at SANS Network Security 2025 in Las Vegas this September for his immersive five-day course LDR551: Building and Leading Security Operations Centers.

Security Operations Centers (SOCs) are tasked with defending today’s complex, high-velocity threats, but most were never structured to operate at the scale or speed that the mission now requires. Analyst workloads are growing faster than teams can scale. Detection workflows are too often reactive and fragmented. And despite rising expectations from their organization, SOCs rarely have the strategic footing — or executive visibility — they need to deliver long-term impact.

LDR551: Building and Leading Security Operations Centers is designed to help SOC leaders alleviate those bottlenecks and take back control of their environment. At SANS Network Security 2025 (Sept. 22-27, 2025), SANS Senior Instructor and LDR551 author John Hubbard will be teaching the immersive five-day course live from Ceasars Palace in Las Vegas, NV. It will equip current and aspiring SOC leaders with the tools to drive high-performing teams, reduce operational drag, and align their work with broader organizational priorities. 

Whether creating a new SOC program or improving an existing one, attendees will learn how to:

• Build SOC structures and staffing models tailored to organizational maturity
• Implement effective triage workflows, escalation paths, and operational playbooks that help enhance cyber defense and reduce analyst burnout 
• Define and track meaningful SOC metrics that align with enterprise business objectives
• Navigate SOC tooling strategy, including SIEM optimization, AI implementation and log source management
• Develop analyst career ladders and training plans that support long-term growth
• Articulate SOC value to senior leadership in clear, business-aligned terms that resonate

Every lesson is grounded in Hubbard’s real-world experience running and advising SOCs across industries so students leave with strategies they can apply immediately upon returning to work. Check out some of his recent work here: 

• Article: How AI-Enabled Workflow Automation Can Help SOCS Reduce Burnout (Hacker News)
• Podcast: SANS Blueprint Podcast hosted by John Hubbard (SANS Institute)
• Podcast: SANS Cyber Leaders Podcast Episode 15: Fighting Back with John Hubbard (SANS Institute) 

LDR551 doesn’t just teach SOC leadership. It helps you operationalize it at scale. Register for LDR551 at SANS Network Security 2025 today.

Secure Your Spot ➜