Jason Lam
Senior InstructorConsulting Practice Director at World Wide Technology
Specialities
Cloud Security, Cybersecurity Leadership

Experience SANS training through course previews.
Learn MoreLet us help.
Contact usBecome a member for instant access to our free resources.
Sign UpWe're here to help.
Contact UsCloud Security, Cybersecurity Leadership

Jason is the Consulting Practice Director at World Wide Technology, where he leads the security practice with a focus on emerging security services. In this role, he advises Global 500 organizations on security strategy and implementation across topics including AI and Post-Quantum Cryptography. With nearly two decades of information security experience, Jason has spent the majority of his career in senior leadership—most notably at RBC and MetLife—building on a foundation of hands-on work in intrusion detection, penetration testing, and incident response within large enterprise environments. A recognized contributor to the field, Jason authored and instructs SEC522: Application Security: Securing Web Applications, APIs, and Microservices, and is the author of LDR520: Emerging Trends for Cyber Leaders: AI and Cloud.
Jason Lam has taught sans courses I have attended in the past. He's always very informative and knowledgeable and presents material in a way that makes sense.
Jason was very informative and passionate about the material.
Jason is the best teacher I have ever had. Amazing that he could keep it interesting for 7 hours.
Here are upcoming opportunities to train with this expert instructor.
Explore content featuring this instructor’s insights and expertise.
Enterprise AI is moving faster than security maturity. Learn how to identify AI-specific risks, secure models and data pipelines, and apply a lifecycle-driven MLSecOps approach to operationalize governance and resilience at scale.

This workshop is ideal for cloud security leaders, CISOs, and team managers who want to strengthen their leadership skills, align security strategies with business goals, and effectively manage cloud security programs.

This workshop supports content from SEC522: Application Security: Securing Web Applications, APIs, and Microservices

Cloud environments are attractive targets for hackers due to their complexity, which can make them difficult to defend. This presentation will cover three crucial strategy cloud security that can greatly impact your cloud's security posture.

In this session, we will guide you through the eight fundamental domains of cloud security in today's organizations. Our aim is to help you comprehend the key areas that need to be secured in the cloud.

Cloud environments are attractive targets for hackers due to their complexity, which can make them difficult to defend. This presentation will cover three crucial details of cloud setup that can greatly impact your cloud's security posture. We'll kick off by exposing common vulnerabilities that hackers exploit to compromise cloud environments. Then, we'll dive into effective mitigation strategies in three areas and show you how to implement them in a practical and hands-on manner. Our insights on mitigations will apply to typical enterprise cloud setups.

Review relevant educational resources made with contribution from this instructor.