Open to opportunities

Andrew Jones

@andrewjones1

Message

Senior cybersecurity engineer specializing in offensive security, penetration testing, and AI/LLM red-teaming.

United States

Message

What I'm looking for

I’m looking to lead penetration testing and AI/LLM security research, partner with DevOps and security operations, and help strengthen FedRAMP/SOC 2/ISO 27001 programs—turning findings into clear documentation and actionable remediation.

I’m a U.S. Air Force veteran and Senior Cybersecurity Engineer with 12+ years of experience in offensive security, penetration testing, exploit research, and adversary-focused validation. OSCP-certified, I test internal products and applications using Burp Suite and OWASP ZAP, participate in a corporate bug bounty program, and conduct original AI/LLM red-teaming research.

At SailPoint Technologies, I progressed from Vulnerability Management Engineer to Senior Cybersecurity Engineer, expanding into penetration testing, product security testing, and vendor security evaluation. I designed and optimized the Qualys vulnerability management platform across hybrid cloud and on-premises infrastructure, improving scan coverage and remediation tracking across 20,000+ systems, and I supported first-ever FedRAMP compliance while maintaining SOC 2 and ISO 27001 efforts.

Before that, I delivered incident response and threat hunting as a Cyber Warfare Operator, leveraging the Elastic Stack to aggregate and analyze data and to identify adversary activity. I also served as a Cyber Systems Administrator, using ACAS to scan 20,000 network systems and strengthening security through appropriate countermeasures, STIG/CIS benchmarking, and hands-on forensic and exploit research.

Experience

Work history, roles, and key accomplishments

Senior Cybersecurity Engineer

SailPoint Technologies

Apr 2021 - Jun 2026 (5 years 2 months)

Progressed from Vulnerability Management Engineer to Senior Cybersecurity Engineer, expanding into penetration testing, product security testing, and vendor security evaluation. Performed application and AI/LLM security testing using Burp Suite and OWASP ZAP and supported FedRAMP/SOC 2/ISO 27001 compliance activities.

Penetration Testing Application Security Testing Burp suite OWASP ZAP Qualys Tenable Vulnerability Management ProofPoint Crowdstrike SIEM Integration Threat Intelligence Asset Management FedRAMP Compliance SOC ISO 27001 LLM Security Testing

Cyber Warfare Operator

United States Air Force

Feb 2018 - Mar 2024 (6 years 1 month)

Delivered incident response and threat hunting across customer networks supporting national security operations. Researched and designed computer forensic tools and used the Elastic Stack to aggregate and analyze data to identify adversary activity.

Incident Response Threat Hunting Computer Forensics Linux Adversarial Activity Information Operations Support

Cyber Systems Administrator

United States Air Force

Apr 2014 - Feb 2018 (3 years 10 months)

Used ACAS (Assured Compliance Assessment Solution) to scan 20,000 unclassified and classified network systems for security vulnerabilities. Administered servers and other systems, analyzed risk to implement security countermeasures, and supported project delivery with cross-functional teams.

Vulnerability Scanning Server Administration Risk Analysis Countermeasures