GCSA
GIAC Cloud Security Automation
Security-as-code: IaC hardening, CI/CD guardrails, automated cloud response.
› Quality score
Four-axis SecProve rubric, each 0–10. SecProve editorial assessment — each axis carries a written justification so you can push back on any single call without dismissing the whole score.
› Built for these roles
› Exam format
Open-book MCQ exam, ~75 questions over 2-3 hours, online proctored. Heavy on IaC review and pipeline-security scenarios.
30-day wait. SANS course bundles typically include 2 attempts.
› Recertification
36 CPE credits over four years (avg 9/yr) plus the $499 renewal fee per cycle.
› NICE Framework work roles
The NIST NICE work-role IDs this cert maps to. NICCS lookup.
› Core domains covered
The 3 domains this cert is centrally about. Passing the exam demonstrates working knowledge of each.
AWS/Azure/GCP security controls, IAM policies, CSPM, container security, shared responsibility model.
OWASP Top 10, secure SDLC, SAST/DAST/IAST, API security, code review, DevSecOps.
SBOM, vendor risk assessment, software supply chain attacks, dependency management.
› Also touched
Present in the blueprint but not the primary focus — you’ll be introduced but shouldn’t expect depth.
› Prerequisites
Two-plus years of cloud or DevOps experience. Scripting fluency (Python, Bash) required.
- CI/CD pipelines and IaC (Terraform, CloudFormation)
- Cloud-native security controls
- Automation and orchestration patterns
› Progression
requiredrecommendedWhere this cert fits in the typical learning path. Required edges are vendor-gated; recommended edges reflect de facto industry progression.
No vendor-gated prereqs.
› Study materials
Curated starting points. Not exhaustive — vet each against your learning style and the current exam version.
- SANS SEC540 Course Materials — SANS
- GIAC Practice Tests (2 included with exam)
› Version & lifecycle
› Salary signal
Cloud DevSecOps engineer, US, 4-6 years.
Robert Half Salary Guide · 2024 · US base only · p25–p75 range
› How it compares
› Careers that commonly pursue this cert
Secure cloud infrastructure across AWS, Azure, and GCP. Specialize in the shared responsibility model and cloud-native controls.
Embed security into the software development lifecycle. Shift left to catch vulnerabilities before they reach production.
A hybrid role growing out of the realisation that SOCs need engineers who understand cloud-native telemetry, IAM-first threat models, and how to instrument AWS/Azure/GCP for detection.
Secures the platform that trains, stores, and serves ML models — multi-tenant GPU isolation, pipeline integrity, feature-store hygiene, secrets management in ML workflows.
See this cert’s domains highlighted on the interactive map, or compare it against the rest of the catalog.