Andrew M. Email & Phone Number

Seattle, Wa, Us

- Manage, hire/develop/grow multiple security teams focused on M&A security diligence and large enterprise software security reviews - M&A Security Diligence team - Identifying and surfacing cybersecurity risks in Amazon acquisition targets. We cover M&A globally, across all Amazon business lines: AWS, Stores, Devices, Digital, Healthcare, and Other.- Enterprise Software Reviews team - Partnering with internal engineering groups to review and securely deploy/operationalize large scale enterprise software initiatives covering hundreds of thousands to million+ users.- Certified Amazon Interview Bar Raiser

Seattle, Washington, Us

- Building and managing the Information Security Team and Program at Rover.- Hiring and managing the growth of an excellent Information Security team! Focused on cross-team collaboration, pragmatic security, and sensible risk management.- Responsible for Product Security (Rover.com), Infrastructure Security (AWS), Corporate Security (endpoints, networks, and workplaces), SaaS Security, Vendor Management, and IT Risk Management (identification, analysis, treatment, and reporting).- Developed and implemented an Information Security Program, IT Risk Management framework, and enterprise policies for a more secure and compliant Rover.- Lead the procurement and rollout efforts for security products and tooling to fill gaps and increase our security posture - SIEM, CSPM, WAF, and EDR.- Created and currently run a vulnerability management program for application and infrastructure vulnerabilities.- Stood up and currently run a Vendor Risk Management program.

Wilmington, Ma, Us

· IoT Center of Excellence Lead· Services Operations Lead· Web application security assessments for Fortune 100 companies· Network attack simulations involving wide scope penetration tests of organizational infrastructure· Reverse engineering of embedded hardware· Reverse engineering of thick client desktop applications· Instructor led training for Fortune 5 companies

Wilmington, Ma, Us

Wilmington, Ma, Us

Arlington, Va, Us

· IT Career Foundations Program· Conducted web application penetration tests, remediation, and security related support for the Product Services IT team· Developer for the 787 Flammability Certification application (Java, Grails, SQL). Spearheaded extensive workflow optimization changes to speed up the legacy workflow framework.· Worked to develop iOS mobile enterprise security requirements with Information Assurance team

New York, New York, Us

· Worked with the Mission Control team in the Equities Technology group. My responsibilities included examining the process for deployment reporting and working with the team to streamline the process through the implementation of centralized, web-based, reporting. · Created a web application that centralized, automated, and standardized the reporting process in order to save the team 50+ hours a week.· Skills utilized included writing Javascript (jQuery), HTML, Perl, PHP, and SQL (Sybase).

Seattle, Wa, Us

· Offensive Security (IMT 598) (2022-2023)· Web Application Security (INFO 415) (2014-2019)· 5+ hours of lecture and lab content a week· Hands-on and in depth homework emphasizing practical skills development· Covers: XSS, CSRF, Clickjacking, SQLi, LFI/RFI, crypto, command injection, mass-assignment attacks, hash length extension, business logic attacks, and much more

M.S. Information Management, Cybersecurity, Data Science

B.S. Informatics, Information Security & Assurance

B.A, Political Science