Andrew Thornton

About Andrew Thornton

A highly technical information security professional with over twenty years of hands-on experience, skilled at developing and implementing comprehensive technical security solutions and building security programs. Has a strong grasp of technical fundamentals, applying a pragmatic approach to security. Excels in complex, large-scale environments and thrives on challenges; quickly learns new skills and efficiently manages, prioritizes, and executes multiple tasks simultaneously. Uses Python to engage with large language models, leveraging artificial intelligence to tackle security challenges effectively. Employs a thorough understanding of adversarial tools, techniques, and procedures to guide strategic and tactical decisions. Comfortable with both granular technical details and high-level strategic thinking. Well-versed in policy and security frameworks. Open-source advocate.

Experience

1. Chief Security Officer

   Cylitic Security

   Feb 2019 — Present

   Spearheaded the architectural design and implementation of all technology and product components for a managed detection and response service at a cybersecurity startup as the first hire. • Created MDR platform comprised of Tanium, Cisco Umbrella, Deep Instinct, and other internally built tools, bringing enterprise level capabilities to smaller environments, increasing their security posture. • Implemented entire security stack for securing corporate assets and networks along with customer systems running macOS and Windows operating systems. • Designed and implemented a customer facing portal using python, postgres, and reactjs running in AWS, instrumental in achieving large customer growth. • Created technology to ingest data points used for security posture rating and remediation item identification, giving enterprise customers real time visibility into their partner’s security posture. • Implemented Splunk for data aggregation and correlation of security events, decreasing MTTD. • Uses python to orchestrate and automate security processes, increasing consistency of outcomes. • Makes use of python and multiple Tanium and third party APIs to automate, orchestrate, and enhance detection and response activities

Skills

• Web Application Security Assessment
• Payment Industry
• Payment Systems
• Computer Security
• Cissp
• Django
• Tanium
• Security Audits
• Burp Suite
• Nginx
• Webscarab
• Information Security Management
• Information Assurance
• Payment Card Industry Data Security Standard (Pci Dss)
• Intrusion Detection
• Penetration Testing
• Vulnerability Assessment
• Apache
• Python
• Security
• Vulnerability Management
• Incident Response
• Ids
• Firewalls
• Web Application Security
• Ips
• Security Architecture Design
• Unix
• Information Security
• Vulnerability Scanning
• Network Security
• Pci Standards
• Security Awareness
• Webinspect
• Application Security
• Web Applications
• Pci Dss