Andres Hermosilla
Principal Security Engineer at Blue Shield of California
Clovis, California, United States
Summary
👤
Senior🎓
Top SchoolAndres Hermosilla is a Principal Security Engineer with 12 years of experience building pragmatic, scalable security for web and cloud platforms. He blends hands-on backend engineering in Go, Python, Node.js and Bash with a craftsperson’s approach to secure software design, from IAM and SSO to secrets management and FedRAMP compliance. Andres has led identity and verification initiatives, built internal security tooling and APIs to reduce token sprawl, and mentored teams to embed security as an engineering discipline rather than a checkbox. Based in Clovis, CA, he pairs a background in full‑stack development and design with a proven track record of translating compliance requirements into practical, auditable systems. Less obvious: his career started in design and front-end work, which informs a user-aware approach to security tooling that emphasizes developer experience.
12 years of coding experience
17 years of employment as a software developer
B.A. Graphic Design, B.A. Graphic Design at California State University, Fresno
English
Github Skills (200)
semgrep10
security10
livereload10
browserify10
mouse-events10
static-analysis10
laravel10
owasp10
build-time10
security-scanner10
zap10
zaproxy10
php10
aws10
compliance10
Programming languages (12)
Github contributions (5)
rezen/docker-notes
Jul 2017 - Feb 2023
Contributions:13 pushes, 1 branch in 5 years 8 months
rezen/zaproxy-website
Nov 2020 - Oct 2023
The source of OWASP ZAP website
Contributions:18 pushes, 10 branches in 3 years
securityowasp-zapzapowasp
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.