About Andrew Krug

Andrew Krug Professional Headshot
Download Headshot Download Resume (PDF)

Professional materials for media and hiring use

Securing the Cloud, Empowering Developers

Accomplished security leader with 10+ years of experience in cloud security, identity management, and technical advocacy. Currently serving as Head of Security Advocacy at Datadog, building research programs and fostering developer communities. Proven track record of architecting secure cloud solutions, leading engineering teams, and speaking at major industry conferences including BlackHat and AWS re:Invent.

Currently leading Datadog SecurityLabs at Datadog, I've built this brand from the ground up to reach over 80,000 unique readers per quarter. My work focuses on bridging the gap between security and development teams, making security practices more accessible and practical for modern cloud environments.

My technical expertise spans across cloud security architecture, identity management, DevSecOps, and security automation. I'm passionate about open source security tools and have contributed to Mozilla's security ecosystem, including the Enterprise Defense Platform and various AWS security utilities.

Core Expertise

  • Cloud Security Services: Cloud Security Audits, Cloud Penetration Testing, Secure Cloud Architecture Design
  • Professional Services: Career Coaching, Executive Coaching, Board Advisory Roles
  • Cloud & Security: AWS Cloud Architecture, Google Cloud Platform, Identity & Access Management, Cloud Security
  • Technical Skills: Python, Rust, Kubernetes, DynamoDB, Kinesis, DevSecOps, Infrastructure as Code
  • Security Specialties: Security Automation, Threat Modeling, Risk Analysis, Digital Forensics, Incident Response
  • Leadership: Engineering Management, Product Management, Technical Evangelism, Open Source Strategy

Speaking & Community Leadership

I'm an active speaker in the security and cloud communities, having presented at BlackHat USA, AWS re:Invent (9 times), BSides events, and many other conferences. I also created and deliver "Securing the Cloud Foundations," a comprehensive course that has trained thousands of cloud practitioners on security best practices.

Career Highlights

🛡️ Head of Security Advocacy

Datadog (August 2020 - Present)

Built and lead SecurityLabs brand from ground up, reaching 80,000+ unique readers per quarter. Create and deliver presentations, workshops, and training materials for global developer community. Represent Datadog at major industry conferences as thought leader in DevOps and observability.

🔒 Principal Security Engineer

Vacasa (January 2020 - August 2020)

Directed comprehensive security strategy for AWS cloud environment during company's rapid growth. Led interim DevSecOps engineering team through COVID-19 response. Developed Blockabot (universal blocklist pipeline) and continuous auditing capabilities.

🦊 Staff Security Engineer

Mozilla (August 2018 - January 2020)

Led Mozilla's Open Source Security Software Brand initiative. Managed Mozilla Enterprise Defense Platform product roadmap. Architected security solutions for Mozilla's multi-cloud strategy (AWS/GCP). Developed internal security tooling in Python and Rust.

🔐 Senior Security Engineer

Mozilla (February 2017 - August 2018)

Designed and developed Identity and Access Management stack serving 100,000+ contributors. Built secure APIs using AWS Lambda, Kinesis, and DynamoDB. Performed digital forensics and incident response for AWS cloud infrastructure.

Speaking & Recognition

🎤 Conference Speaking

  • BlackHat USA Speaker - Presented security research (2 times)
  • AWS re:Invent Speaker - Cloud security presentations (9 times)
  • BSides Speaker - Community security talks (10+ times)
  • re:Inforce Speaker - AWS security conference (3 times)
  • Cloud Native Security Day Speaker - CNCF events (2 times)

📚 Educational Impact

  • "Securing the Cloud Foundations" - Created comprehensive online and in-person course
  • Trained thousands of cloud practitioners on security best practices
  • Course covers practical security controls, threat modeling, and cloud hardening
  • SecurityLabs brand reaching 80,000+ readers per quarter

🏛️ Program Leadership

  • CNCF Security Technical Advisory Group (STAG) - Program Committee
  • Wild West Hackin' Fest - Program Committee Chair
  • Mozilla Open Source Security - Brand initiative leader

🎯 Education & Certifications

  • Bachelor of Science, Computer Science - Southern Oregon University
  • Specialization: Computer Security & Information Assurance
  • Red Hat Certified System Administrator (RHCSA) v7 - Recertified 2014

Beyond Technology

When I'm not working on security challenges, you can find me pursuing my passion for music and the outdoors.

🎷 Classical Saxophonist

I perform regularly with ensemble groups, bringing the same precision and teamwork to music that I apply to technology leadership.

🐎 Equestrian Enthusiast

I share my life with two horses, enjoying trail riding and timed events. This passion teaches patience, trust, and the importance of clear communication.

🎨 Arts & Education Advocate

I'm passionate about integrating arts into technical education, believing that creativity and analytical thinking go hand in hand.