Andrew Santell Email & Phone Number

San Francisco, Ca, Us

Leading teams responsible for Detection & Response, Security Engineering, Vulnerability Management, Application Security, and Penetration Testing.

Los Gatos, Ca, Us

As the founding leader of the Information Security Operations team, I defined the program's charter and vision, recruited a security engineering team, established cross functional partnerships, and launched our initial operating capability. Our team provided centralized security engineering support, investigated security events, and hunted for threat activity. We took an automations-first approach to security operations that enabled us to scale our ability to monitor, triage, analyze, and respond to growing threats.

San Diego, Ca, Us

As a Technical Director, I defined the vision, strategy, and roadmap for an enterprise-wide operational support system to enable integrated security, operations, and defense of Navy IT. I established and led a cross-functional team of approximately 50. Additionally, I managed the budget, schedule, risks, and contracts for the effort. I also advised senior executives and Admirals on security engineering, operations and IT service management.

San Diego, Ca, Us

I established the cybersecurity program for a global organization, to include endpoint security, network security, detection & response, vulnerability management, GRC, and more. I led product and program development, including the management of schedule and budget, across seven disparate engineering teams (100+ people) to deliver integrated security capabilities. I successfully implemented NIST's Risk Management Framework (RMF) and 800-53 security controls to manage risk and meet compliance.

San Diego, Ca, Us

I developed a multi-year strategy and roadmap for the Navy’s Distributed Security Operations Center (SOC), and led the development and deployment of security tools, detections, analytics, automations, infrastructure, and processes, enabling rapid detection and response to threats. Additionally, I hired, mentored, and led a ~50-person Agile development team.

Mclean, Va, Us

As a Lead Cyber Security Engineer, I led an engineering effort to develop a highly scalable network sensor and big data analytic capabilities based on open-source technologies. We successfully developed a prototype and fielded it to production. Additionally, I developed a reference architecture for a globally distributed Security Operations Center (SOC). I also routinely advised senior executives within the DoD on current threats and state of information security technologies and practices.

Fort Meade, Md, Us

As the lead Security Engineer, I led security operations efforts, to include threat analysis, vulnerability management, and incident response. Additionally, I conducted security and risk assessments, developed security policies, evaluated security products, developed and deployed security tools, and conducted research on cyber defense, offensive security, deceptive technologies, anomaly detection, and other emerging areas.

University Park, Pa, Us

IST 451 - Network SecurityThis course provided students with a comprehensive understanding of the fundamental issues and concepts of network security and cryptography, and the mainstream network security technologies and protocols that are widely used in the real world. Students learned how to: • Analyze raw network traffic • Develop network tools and custom packets • Attack vulnerable hosts • Defend, Detect, and Deter network attacks

Pittsburgh, Pa, Us

14-822 - Host-based Forensics

Pittsburgh, Pa, Us

As an RA, I conducted Insider Threat research and developed a web crawler and client honeypot to discover drive-by malware.

As an IT Security Specialist, I conducted risk assessments (NIST/DIACAP/RMF) of IT systems and networks and managed network and security appliances.

Master Of Science, Information Security Technology And Management

Chief Information Security Officer (Ciso) Executive Program

Bachelor Of Science, Security And Risk Analysis: Information And Cyber Security