Skip to main content
Greg Thomas AndesGA
Looking for a job

Greg Thomas Andes

@gregthomasandes

Security and compliance engineer at Theodore Drew and Associates, LLC owning a direct SOC 2 Type 2 program.

Philippines
Message

At Theodore Drew and Associates, LLC, I own the SOC 2 program for a US healthcare SaaS platform, going directly to Type 2. I scoped the report across two systems, raised automated test pass rates from 52% to 91%, and wrote and published all 22 policies ahead of plan.

I planned and executed a cross-region failover and failback across eight CloudFormation layers. I also authored an environment-agnostic DR runbook that became team procedure and SOC 2 evidence, with post-deploy checks against real resource state.

I hardened the AWS estate, built evidence collectors, and refactored CI/CD pipelines. By right-sizing services and removing orphaned resources, I cut cloud spend by 20–25%.

Earlier, I designed AWS infrastructure for OddsAndEnds LLC and built production web3 applications at Bold Technology Conglomerate. I’m now focused on AI governance and third-party AI risk, and verify machine-generated conclusions against live system state before acting.

Experience

Work history, roles, and key accomplishments

TL
Current

Principal Security & Compliance Engineer

Theodore Drew and Associates, LLC

Oct 2024 - Present (2 years 1 month)

Owns security end-to-end for a US healthcare SaaS, including SOC 2 program, multi-region disaster recovery, and AWS production environment. Led remediation across 172 in-scope controls and cut cloud spend by 20-25%.

GI

Fullstack Blockchain Developer

GSS Lab Inc.

Feb 2023 - Aug 2023 (6 months)

Architected Terraform IaC across environments, led containerization with Docker and Podman, and automated TLS lifecycle with CertManager.

BC

Full Stack Web 3 Developer

Bold Technology Conglomerate

Oct 2021 - Jan 2023 (1 year 3 months)

Built and shipped production React and Next.js applications, including an Ethereum NFT minting dapp and token-gated reseller verification system. Provisioned and maintained AWS estate with Kubernetes and GitHub Actions CI/CD.

TR

Systems Developer

Total Integrated Resources

Apr 2021 - Sep 2021 (5 months)

Built public-facing React application for Manila Cable Car project and maintained Node.js/MySQL employee application. First hands-on AWS role, trained under solutions architect, and helped stand up Jenkins CI/CD.

IC

Freelance Web Developer

Independent clients

Jan 2019 - Apr 2021 (2 years 3 months)

Self-directed frontend and backend client work using React and Node.js while transitioning from BPO roles into full-time engineering.

CO

Technical Advisor I

Concentrix

Nov 2018 - Dec 2019 (1 year 1 month)

Provided front-line technical support for US customers, handling WordPress failures, shared-hosting DNS, and server downtime.

Education

Degrees, certifications, and relevant coursework

Anthropic logoAN

Anthropic

Applied AI training, Artificial Intelligence

2026 - 2026

Completed AI Fluency training covering framework and foundations, capabilities and limitations, Model Context Protocol, Agent Skills, Subagents, and Claude 101.

Get matched with your dream remote job

Sign up now and join over 250,000+ remote workers who receive personalized job alerts, curated job matches, and more for free!

Sign up
Himalayas profile for an example user named Frankie Sullivan