Andrew Chang

Cybersecurity Professional | OSCP, OSWP

prof_pic.jpg

Chicago, IL

Hello! I am Andrew Chang.

I am a Lead Cloud Security Engineer at Praetorian, focused on leading penetration tests and configuration reviews against cloud environments and applications and delivering strategic recommentations to improve the security posture of external clients’ digital infrastructure and security operations. As a security professional, I strongly believe that open collaboration can improve the security of our digital lives. Consequently, I am enthusiastic about developing cutting-edge tools and methodologies by leveraging my expertise in cloud security architecture, identity and access management (IAM), and offensive security.

Prior to my time at Praetorian, I was a Security Consulting Engineer at Cisco where I also performed offensive security engagements for external clients. I have also completed my Bachelor’s and Master’s degrees in Computer Science at the Georgia Institute of Technology.

news

Feb 15, 2025 Azure RBAC Privilege Escalations - Azure VM
Oct 28, 2024 Obtained the Certified AWS Cloud Red Team Specialist certification
Jun 01, 2024 Obtained the AWS Certified Security – Specialty certification
Feb 04, 2024 Re-certified for the Google Cloud Professional Cloud Security Engineer Certification certification
Nov 28, 2023 Why Azure B2C ROPC Custom Flows Are Inherently Insecure
Feb 19, 2023 Obtained the Certified Kubernetes Administrator certification
Oct 29, 2022 Obtained the Offensive Security Wireless Professional certification
Aug 09, 2022 Obtained the Cisco Certified Cybersecurity Associate certification
Oct 19, 2021 Obtained the Offensive Security Certified Professional certification
Jan 20, 2021 Obtained the Cisco Certified DevNet Associate certification