Andy Hoernecke

Experience

1. Senior Security Engineer

   Netflix

   Sep 2022 — Present

   At Netflix, I am spearheading the development and product management of a system designed to intricately understand and enhance our security posture. This initiative is pivotal in maintaining Netflix\'s status as a leader in digital content delivery, ensuring robust cybersecurity measures.My roles and responsibilities have included:Framework Development: Conceptualized and developed a unique framework for generating security posture scores. This framework intricately links security controls and performance metrics with the MITRE ATT & CK framework, enabling a comprehensive view of our cybersecurity landscape.Data Collection & Analysis: Orchestrated the collection and aggregation of critical metrics data. My role involves collecting data from various other sources within the organization, data analysis using Python and Tableau, transforming raw data into actionable insights, and working with teams to help determine what are the best metrics to use to understand how well their function is working.Expert Collaboration: Actively collaborate with company experts, gathering valuable insights to continuously refine our security strategies. My approach includes a blend of expert surveys and data-driven methodologies.Risk Analysis: Incorporated and aligned our existing Factor Analysis of Information Risk (FAIR) analyses into our security posture methodology using the MITRE framework as a bridge to our top identified risks. This alignment allows for a more targeted and effective approach to risk management.Project & Product Management: Lead project and product management initiatives, determining development priorities based on a blend of personal expertise and stakeholder feedback.