Summary
Andrew Johnson is a Principal Security Engineer with 14 years of experience building and leading offensive and defensive security programs at scale across Amazon, Microsoft, Lyft, Grammarly, and Superhuman. He specializes in threat intelligence, threat hunting, and red teaming, currently overseeing Payment Security Intelligence at Amazon and previously managing multiple security sub-teams that protect payment systems and customer data. Known for blending hands-on offensive tooling and detection engineering with strategic program management, he has a track record of translating complex adversary simulation into actionable detection and remediation. Andrew also mentors the next generation as a FIRST Robotics volunteer, reflecting a passion for teaching practical engineering and security skills. He holds a BS in Computer Science from Texas A&M and brings a pragmatic “assume breach” mindset honed on Azure Red Team engagements and large-scale production environments.
14 years of coding experience
17 years of employment as a software developer
BS, Computer Science, BS, Computer Science at Texas A&M University
English, German