Andrew Schwartz

Senior Security Consultant

Experience

Andrew is energetic and driven, with strong technical knowledge and experience in defensive and offensive security, vulnerability management, and the development of transformational strategies, which help clients enhance their security postures to detect and stop adversaries.

Education & Certifications

BA, Justice, American University, Washington, D.C. Offensive Security Certified Professional (OSCP), GIAC Network Forensic Analyst (GNFA), GIAC Reverse Engineering Malware (GREM), GIAC Penetration Tester (GPEN), GIAC Certified Incident Handler (GCIH), GIAC Certified Intrusion Analyst (GCIA), GIAC Security Essentials (GSEC)

Passion for Security

Andrew’s security passion started at a young age and stemmed from his love of classic action, crime, and spy movies. He also always showed a particular interest in the history of global security agencies and current events. His family still jokes about how he would spend countless hours glued to the weekly issues of Time and Newsweek magazines, reading every detail from cover to cover. These interests led Andrew to pursue a post-collegiate career in various investigative roles supporting both federal and local law enforcement agencies. Andrew’s love for the InfoSec industry is demonstrated by his eagerness to constantly grow and educate himself. Whether it’s reading a book, following a blog, keeping up to date on Twitter, taking a training course, or connecting with colleagues in the community, he makes sure to stay on top of the latest tools, threats, and research.

Recent Blog Posts

The Tale of the Lost, but not Forgotten, Undocumented NetSync: Part 1

They say, “Everything old is new again.” Or, if you are a Game of Thrones fan, “What is dead may never die.” For me, however, a mentor once told me, “Everyone is going forward. I’m going backward.” Enter NetSync… I find Twitter to be a good source for InfoSec tactics, techniques, and procedures (TTPs). Anytime...
Read

The Tale of the Lost, but not Forgotten, Undocumented NetSync: Part 2

This is a continuation of The Tale of the Lost, but not Forgotten, Undocumented NetSync (part 1) and in this section, we will look to answer: What are Some Early Indicators to Detect NetSync at the Host-based Level? What are Some Possible Controls to Deter NetSync? In an accompanying blog post, Are You Seeing What...
Read
View all posts from Andrew

Recent Webinars

Office 365 Security: What You Didn’t Know You Didn’t Know

You can download all of the slides from the webinar here. This webinar recorded on March 4, 2020. Microsoft Office 365 has taken the world by storm! Like Microsoft Office itself, Office 365 is quickly becoming ubiquitous within organizations around...
View all webinars from Andrew
Andrew Schwartz

Want to work with Andrew Schwartz or someone like him?

The TrustedSec team is comprised of experienced and qualified security professionals. Contact us to learn more about our services, our team, and how we can help you.
Contact Us