Andres Riancho
Principal Security Researcher at Vercel
Martínez, Buenos Aires, Argentina
Summary
🤩
Rockstar🎓
Top SchoolAndrés Riancho is a Principal Security Researcher with 18 years of experience specializing in web application and cloud security, currently leading cybersecurity research at Vercel after senior roles at Wiz, Kavak and Wildlife Studios. He has a deep hands-on background in offensive research—discovering critical vulnerabilities in network appliances and hundreds of web apps—and has led the long-running open-source scanner w3af as well as contributed to widely used projects like moto and HTTPretty. Andrés blends research, engineering and product sensibilities: he implements performance and reliability fixes in core tooling, authors vulnerability detection features (e.g., XXE detection), and drives cloud-focused tooling and assessments for AWS environments. As a founder and former VP/Director at security teams and a consultancy owner, he pairs leadership and mentoring with practical remediation and automation experience. He’s a seasoned conference speaker and trainer with a global footprint, and an uncommon mix of deep exploit knowledge plus pragmatic cloud security architecture. Based in Martínez, Buenos Aires, he also holds executive security training (CMU CISO) and organizational coaching credentials.
18 years of coding experience
12 years of employment as a software developer
Organizational Coaching Program, Organizational Coaching Program at Universidad de 'San Andrés'Electronic technician, Electronic technician at La Salle - Buenos Aires - FloridaChief Information Security Officer (CISO) Certificate, Chief Information Security Officer (CISO) Certificate at Carnegie Mellon UniversityComputer Science, Computer Science at University of Buenos AiresCCNA Cisco Certified Network Associate, CCNA Cisco Certified Network Associate at Proydesa
English, Spanish, German
Stackoverflow
1,171reputation
71kreached
7answers
1question
python-multithreading
top-5%
Github Skills (45)
ec10
socket-io10
debug10
boto10
python10
web-application-security10
testing10
httpretty10
http10
security-testing10
amazon-ec210
socket10
aws10
xml-parsing10
mocking10
Programming languages (13)
Github contributions (5)
andresriancho/w3af
Jan 2013 - Jun 2020
w3af: web application attack and audit framework, the open source web vulnerability scanner.
Role in this project:
Back-end Developer & Security Engineer
Back-end Developer & Security EngineerContributions:2 releases, 5 reviews, 6065 commits in 7 years 6 months
Contributions summary:Andres's contributions primarily focused on improving the security and performance of the web application attack and audit framework (w3af). They implemented performance enhancements in timestamp parsing, improved error handling and logging, and introduced new features, such as the ability to detect and report on vulnerabilities like XML External Entity (XXE) injection. Additionally, the user worked on enhancing the functionality of the existing plugins and addressing code quality issues.
bugbountyweb-applicationmethodologysecurity-toolsvulnerabilities
gabrielfalcao/HTTPretty
Jun 2013 - Mar 2018
Intercept HTTP requests at the Python socket level. Fakes the whole socket module
Role in this project:Back-end Developer & QA Engineer / Test Automation Engineer
Back-end Developer & QA Engineer / Test Automation EngineerContributions:5 commits, 5 PRs, 4 comments in 4 years 9 months
Contributions summary:Andres primarily contributed to the `httpretty` library by fixing bugs related to socket functionality and addressing specific issues reported in the repository. Their work involved modifying core Python code, particularly within the `httpretty/core.py` and `httpretty/compat.py` files, to ensure correct behavior when intercepting HTTP requests. Furthermore, the user added and modified tests to reproduce and resolve identified issues, demonstrating a focus on improving the library's reliability through unit testing, as seen in `tests/unit/test_httpretty.py`. The user also shows their abilities to resolve problems in the query string parsing.
decoratorspythonmockingmockpython2
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.