Andrew Waugh Email & Phone Number

I help developers make more secure software and manage their risk as a senior security consultant in application security. I'm usually hacking websites, web APIs, and other related technologies, but I have a strong love for low level languages and binary applications. I enjoy exploring new systems, environments, and technology, but as my career continues I find myself taking particular joy in enabling the success of others on my team. As such, I have enjoyed spending time developing internal tools and automation to help team members focus on the difficult problems instead of tedious or repetitive work.My testing experience has been primarily on web applications and web API served through a variety of browser and thick client contexts. However, I have done a wide variety of work for clients including reverse engineering, smart fuzzing of C, C++, and Rust applications using AFL and LibFuzzer, as well as other projects across a wide variety of industries and technology. I am fluent with most common AWS services, and have recently been working on many projects that involve LLM prompt injection testing. My current learning areas are project management, Internet of Things (IOT) testing, and mobile testing. In my free time, I have a variety of hobbies. In addition to being an avid flight sim enthusiast, I'm working on a acquiring a Ham Radio License so I can experiment and tinker with radios and transmitters. I also enjoy roleplaying games, and I volunteer development time for a tiny MMORPG built as a mod on top of Beamdog's Neverwinter Nights: Enhanced Edition. I believe that as security specialists, we have a duty to empower the vulnerable. My three personal security crusades are to get people to use password managers, MFA (with push disabled!), and strongly typed languages.

Listed skills include C++, Linux, Python, Communication, and 12 others.