Andrew Chang
Cybersecurity Professional | OSCP, OSWP

Chicago, IL
Hello! I am Andrew Chang.
I am a Lead Cloud Security Engineer at Praetorian, focused on leading penetration tests and configuration reviews against cloud environments and applications and delivering strategic recommentations to improve the security posture of external clients’ digital infrastructure and security operations. As a security professional, I strongly believe that open collaboration can improve the security of our digital lives. Consequently, I am enthusiastic about developing cutting-edge tools and methodologies by leveraging my expertise in cloud security architecture, identity and access management (IAM), and offensive security.
Prior to my time at Praetorian, I was a Security Consulting Engineer at Cisco where I also performed offensive security engagements for external clients. I have also completed my Bachelor’s and Master’s degrees in Computer Science at the Georgia Institute of Technology.
news
Feb 15, 2025 | Azure RBAC Privilege Escalations - Azure VM |
---|---|
Oct 28, 2024 | Obtained the Certified AWS Cloud Red Team Specialist certification |
Jun 01, 2024 | Obtained the AWS Certified Security – Specialty certification |
Feb 04, 2024 | Re-certified for the Google Cloud Professional Cloud Security Engineer Certification certification |
Nov 28, 2023 | Why Azure B2C ROPC Custom Flows Are Inherently Insecure |
Feb 19, 2023 | Obtained the Certified Kubernetes Administrator certification |
Oct 29, 2022 | Obtained the Offensive Security Wireless Professional certification |
Aug 09, 2022 | Obtained the Cisco Certified Cybersecurity Associate certification |
Oct 19, 2021 | Obtained the Offensive Security Certified Professional certification |
Jan 20, 2021 | Obtained the Cisco Certified DevNet Associate certification |