GIAC GCIA
Deep packet / detection analyst cert. Narrow but highly respected for IR and detection engineering. SANS-bundled cost is ~£5,000; voucher-only is rarely the credible route.
Deep packet / detection analyst cert. Narrow but highly respected for IR and detection engineering. SANS-bundled cost is ~£5,000; voucher-only is rarely the credible route. Pursue if: You're going deep on detection and traffic analysis and your employer is paying. Avoid if: You're self-funded without a clear role target. £5k out of pocket is rarely recovered.
In context
This cert in isolation tells you very little. Here is where it actually sits. The pathways that use it, and the roles it realistically supports.
Recommended prior knowledge
- Network fundamentals
- SIEM exposure
Common misconceptions
- It helps with senior soc / detection / ir roles. It does not unlock offensive or governance roles.
- GIAC GCIA alone clears HR filters; it doesn't replace shipped, documented work.
What this cert does NOT guarantee
- Offensive or governance roles
Practical skills that matter
- Senior SOC / detection / IR roles
- SANS-leaning teams
The serious next step
A cert is a signal. A Career Verdict tells you whether the signal is worth sending.
A Career Verdict tells you whether this cert earns its place on your specific route, what it won't fix, and what to sit before or after it.
Built on POST's practitioner-authored assessment framework, calibrated by James from twenty years across helpdesk, infrastructure and security. Framework is human-authored; the verdict applies it to your inputs.