Summary
Andre Hu is a Security Engineer II based in New York with seven years of experience defending web and cloud-native applications. He has moved from building security-focused features and CTF challenges to scaling application security programs—designing tooling that managed 250+ vulnerabilities and cutting CI/CD security scan times by 80% at SeatGeek. His background includes hands-on pentesting and consulting work finding XSS, insecure file uploads, and subdomain takeover vectors, plus experience creating realistic attack-simulation challenges for CTFs. Now at Etsy, he combines developer-facing security automation with pragmatic remediation guidance, pairing deep technical testing skills with product-aware threat modeling. Notably, he blends offensive insight from consulting and CTF design with production engineering to make security both measurable and actionable.
7 years of coding experience