Andrew McNicol has served as the Chief Technology Officer of BreakPoint Labs, since he co-founded the company in 2015.  He is responsible for communicating and implementing the company’s technical strategy, including offensive security services and tools, and leads the cybersecurity assessments line of business.  Andrew has led several operations for the company, including the tooling and tactics, techniques, and procedures (TTP) development for high-profile cyber red team engagements for several critical infrastructure clients. Andrew helps clients design and execute large-scale penetration testing efforts representative of adversarial behavior to effectively reduce risk to their mission. Andrew has more than 15 years experience in leading a technical workforce focused on red team operations, penetration testing, and vulnerability assessments designed to meet the specific goals of each client. Andrew is also a recognized expert in adversarial penetration testing, and works closely with BreakPoint Labs Team Members to ‘adopt an attacker’s mindset’ and continuously develop and hone their technical skills.

Prior to founding BreakPoint Labs, Andrew led a large penetration testing team and worked on a cyber incident response team at Parsons Corporation, focusing on malware analysis and network forensics for DoD, law enforcement, and commercial clients. Andrew has been an invited speaker at numerous Government and industry forums covering topics such as advanced penetration testing techniques beyond automated tools and how to start and grow a career in the information security field.

He earned a Master’s degree in Information Assurance from Capitol Technology University and a Bachelor’s degree in Information Systems from Towson University, and holds numerous professional certifications, including OSCE, OSCP, OSWP, GICSP, GCFA, GCIA, GCIH, GPEN, GREM, GSEC, GWAPT, GWEB, CISSP, CEH, etc.