A
Andy Hoernecke
About
Detail
Co-Founder, CTO, Security Engineer
California, United States
Résumé
Jobs
verified_user
0% verified
Senior Security EngineerNetflixSep 2022 - Current (3 years 11 months)At Netflix, I am spearheading the development and product management of a system designed to intricately understand and enhance our security posture. This initiative is pivotal in maintaining Netflix's status as a leader in digital content delivery, ensuring robust cybersecurity measures. My roles and responsibilities have included: Framework Development: Conceptualized and developed a unique framework for generating security posture scores. This framework intricately links security controls and performance metrics with the MITRE ATT&CK framework, enabling a comprehensive view of our cybersecurity landscape. Data Collection & Analysis: Orchestrated the collection and aggregation of critical metrics data. My role involves collecting data- BCo-Founder / Chief Technology OfficerBlue Lava IncFeb 2020 - Jun 2022 (2 years 5 months)
- BHead Of EngineeringBlue Lava IncMay 2018 - Feb 2020 (1 year 10 months)
- Senior Application Security EngineerNetflixSep 2013 - Apr 2018 (4 years 8 months)
- Principal Engineer, Application SecuritySearsNov 2012 - Sep 2013 (11 months)
- Adjunct FacultyDePaul UniversityMar 2012 - Jan 2014 (1 year 11 months)Software Engineering 526: Software Security Assessment http://www.cdm.depaul.edu/academics/pages/courseinfo.aspx?CrseId=010278
- Security ConsultantNeohapsisAug 2007 - Jan 2011 (3 years 6 months)
- Senior Security ConsultantNeohapsis now part of CiscoMay 2007 - Nov 2012 (5 years 7 months)
- Associate Security ConsultantNeohapsisMay 2007 - Aug 2007 (4 months)
Awards
verified_user
0% verified
- Iowa State University STATEment Makers 2015, Career AchievementIowa State UniversityMar 2015Iowa 'STATEment Makers' is an honor that recognizes the early personal and professional accomplishments and contributions to society of Iowa State University's young alumni (graduates 32 years of age and under). Nominations are sought annually for 'STATEment Makers' who have made differences in their own lives, the lives of others, their communities, and/or their professions through ambitious efforts that reflect the scholarly, entrepreneurial, or service-oriented spirit of an Iowa State University education.
- Iowa State University | STATEment Makers Career AchievementIowa State UniversityJan 2015
Publications
verified_user
0% verified
- SThe Joy of Proactive SecurityShmooconJan 2015This presentation asserted that the agility of modern infrastructure requires a different approach to security. We looked at common areas of a mature security program: identifying and addressing potential issues, monitoring for attacks and anomalies, understanding your environment, collecting and sharing information, all while constantly reevaluating your approach. We walked through a few real world cases where our approach coined "proactive security" has simplified Netflix's response time for identifying, responding to, and remediating security issues. We also provided demonstrations of a number of Netflix applications that are currently or soon-to-be open sourced that can help you simplify your security program regardless of whether you o
- STrapping Hacks with EnsnareSOURCE BostonApr 2014In this talk we demonstrated the concept and design of the Ensnare framework. We also demonstrated how Ensnare can be used and customized to provide a unique protection against web application security threats.