Andy Strunk Email & Phone Number

Remote, US

Performed design and implementation security reviews of cloud services and endpoint security products with a focus on macOS. This includes threat modeling and hands on testing with the goal of finding vulnerabilities and driving fixes. Owned the SAST program including tools and processes for discovering and handling code vulnerabilities.

Charleston, SC, US

As the owner of SecDevOps, my responsibilities include management of static and dynamic analysis application scans, build or CICD integration, and reporting for SOC compliance. I work closely with the development teams to report and understand vulnerability findings, propose solutions, and track compliance.As a senior Security Architect, I am the primary.

Charleston, SC, US

As a Security Architect at Benefitfocus, my responsibilities included secure application design and documentation, vulnerability discovery and remediation, administration of an Imperva WAF, investigating security alerts and incidents, creating security policy documents, approval of configuration and network changes. I oversaw the secure implementation of.

I managed a development team of about 15 embedded systems developers to create, test, and operate complex security software for networking devices. My responsibilities included coordinating with leadership and project management, managing program deliverables, working with individual developers to review design and resolve technical problems, and ensuring.

I worked as an embedded systems developer creating security products primarily for network devices. I worked extensively in C and the powerpc and m68k assembly languages. This job involved analysis, design, development, and testing. I was responsible for the entire lifecycle including repo and build management and deployment support. I also had the.

I was accepted into a highly selective full-time rotational development program aimed at developing multifaceted excellence in cybersecurity topics. This program only selects 40 people per year and runs for three years with the first three months as intensive study of security topics followed by 6-12 month rotations on different project teams and.