GASAE
GIAC AI Security Automation Engineer
GIAC certification for AI Security Automation. Focus on agentic workflows, automated adversary emulation, AI-enabled response playbooks. Launched April 2026 — brand new.
› Quality score
Four-axis SecProve rubric, each 0–10. SecProve editorial assessment — each axis carries a written justification so you can push back on any single call without dismissing the whole score.
› Built for these roles
› Exam format
CyberLive hands-on, proctored
30-day wait between attempts. SANS course bundles typically include 2 attempts.
› Recertification
36 CPEs every 4 years
› NICE Framework work roles
The NIST NICE work-role IDs this cert maps to. NICCS lookup.
› Core domains covered
The 2 domains this cert is centrally about. Passing the exam demonstrates working knowledge of each.
Evasion attacks, poisoning attacks, model extraction, membership inference, model inversion, gradient-based attacks.
Prompt injection (direct & indirect), jailbreaking, prompt leaking, training data extraction, hallucination exploitation, agent manipulation.
› Prerequisites
None formal, SANS SEC598 recommended
› Study materials
Curated starting points. Not exhaustive — vet each against your learning style and the current exam version.
- GIAC Practice Tests (2 included with exam)
› Version & lifecycle
First GIAC AI-security cert. Refresh cadence will be aggressive given how fast AI tooling moves.
› Salary signal
AI security automation engineer, US, 4-6 years. Brand-new role category.
Robert Half Salary Guide extrapolation · 2024 · US base only · p25–p75 range
› How it compares
GASAE is the engineering-track AI-security cert; AIGP is governance/program track.
↔ Compare side-by-side› Careers that commonly pursue this cert
Secures the platform that trains, stores, and serves ML models — multi-tenant GPU isolation, pipeline integrity, feature-store hygiene, secrets management in ML workflows.
See this cert’s domains highlighted on the interactive map, or compare it against the rest of the catalog.