Andrew Feferman

About Andrew Feferman

Starting as a shrink-wrap software developer for an enterprise security software company—culminating in a successful IPO—I have since expanded my expertise through management advisory services, enterprise software sales, and security program development. My deep technical and business knowledge has enabled me to successfully build and mature Development, Application Security, and DevSecOps teams, programs, and best practices.With application security serving as the frontline defense against modern threats, I emphasize the critical role of secure software in protecting sensitive data—whether it\'s PII, financial records, or intellectual property. A well-architected AppSec program not only mitigates vulnerabilities but also ensures that applications safeguard the data they process and store against breaches, compliance failures, and emerging threats.With a focus on people, process, and technology, I currently help companies identify and evaluate opportunities to enhance their Application Security maturity, ensuring that security is woven into development workflows while maintaining business agility and compliance.cissp, csslp, cism, cxce

Experience

1. Principal Solutions Architect

   Trace3

   Nov 2025 — Present · TX, US

   As a Principal Solutions Architect, I represent complex technology solutions that align with our clients’ strategic business goals. I work with cross-functional technical teams, collaborate with key vendor partners, and serve as the trusted advisor for both internal and external stakeholders. My deep technical knowledge, strong leadership skills, and passion for innovation help ensure that our customers receive cutting-edge, efficient, and scalable solutions.

Education

• The University of Texas at Austin

  BA, Computer Science

  1986 — 1993

Skills

• Software Development Life Cycle (Sdlc)
• Information Technology
• Cloud Computing
• Strategy
• Application Security
• Security
• Enterprise Software
• Enterprise Architecture
• IT Security Best Practices
• Vulnerability Management
• Secure Sdlc
• Security Audits
• Software as a Service (Saas)
• Risk Assessment
• Information Security Management
• Threat Modeling
• Penetration Testing
• Threat & Vulnerability Management
• Identity & Access Management (Iam)
• Software Development
• Ids
• Windows Server
• Information Security
• Data Security
• Encryption
• Web Application Security
• Payment Card Industry Data Security Standard (Pci Dss)
• Pci Dss
• Computer Security
• Intrusion Detection
• Fortify Sca and Ssc
• Sdlc
• Virtualization
• Network Security
• Security Architecture Design
• Identity Management
• Cissp
• Integration
• Testing
• Vulnerability Assessment