Andreas Dann
Application Security Expert
Münster, North Rhine-Westphalia, Germany
Summary
🤩
Rockstar🎓
Top SchoolAndreas Dann is an Application Security Expert and Senior Security Software Architect with a PhD in Computer Science and 12 years of experience securing Java applications and open-source dependencies. He blends academic rigor—authoring a dissertation on secure integration of OSS libraries—with hands-on engineering as a back-end developer and test automation engineer, contributing to notable projects like Eclipse Steady and the Soot Java optimization framework. As a former co-founder and COO of a security startup, he pairs product and operational experience with deep static analysis expertise gained through research roles at Paderborn University and industry internships. Based in Münster, Germany, he focuses on making vulnerability analysis more accurate by combining static analysis with runtime testing, and has practical experience adapting tooling for Java module systems and backward compatibility.
12 years of coding experience
7 years of employment as a software developer
Dr. rer. nat., Computer Science, Secure Software Engineering, Dr. rer. nat., Computer Science, Secure Software Engineering at Paderborn UniversityBachelor of Science - BS, Computer Science, Bachelor of Science - BS, Computer Science at Universität Paderborn
German, English
Stackoverflow
1reputation
0reached
0answers
0questions
Github Skills (14)
classloader10
maven10
javas10
junit10
classloading10
dependency-resolution10
java10
spring-boot10
test-automation10
open-source9
security9
security-txt9
security-scan9
mockito8
Programming languages (9)
Github contributions (5)
soot-oss/soot
Jul 2017 - Dec 2021
Soot - A Java optimization framework
Role in this project:
Back-end Developer
Back-end DeveloperContributions:3 reviews, 208 commits, 23 PRs in 4 years 6 months
Contributions summary:Andreas primarily contributed to the Soot framework by adapting its core components, such as `SootClass` and `SootClassBuilder`, to support Java 9 modules. These changes involved adding Java 9 module modifiers, creating a class to represent module-info classes, and modifying code to correctly resolve class references within the new module system. The user also worked on related tools, like the `ModulePathSourceLocator`, to ensure correct class loading and dependency resolution in the Java 9 environment.
java-optimization-frameworksootjava-optimizationoptimization-frameworkoptimization
eclipse-steady/steady
Oct 2018 - Jun 2020
Analyses your Java applications for open-source dependencies with known vulnerabilities, using both static analysis and testing to determine code context and usage for greater accuracy. https://eclipse.github.io/steady/
Role in this project:Back-end Developer & Test Automation Engineer
Back-end Developer & Test Automation EngineerContributions:1 review, 8 commits, 3 PRs in 1 year 8 months
Contributions summary:Andreas primarily contributed to the development and testing of the Maven plugin for the `eclipse-steady/steady` repository, adding features such as a mojo for test instrumentation and setting up a stub server for integration tests. They modified code related to the Vulas agent, including removing the original javaagent if defined. The user also added test cases for mixed configurations and backwards compatibility.
dependenciessecurity-toolsanalysesvulnerabilitiessecurity
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.