Andrew spent a decade developing industrial control system products, including high-end automation products at Hewlett-Packard, that are still used in large power plants and pipelines today. He then spent half a decade developing middleware products at Agilent Technologies - products that connected control systems to SAP, thus connecting a lot of OT networks to IT networks and thereby contributing to the cybersecurity problems that now plague many industries. He "got religion" (in a sense) and wound up the CTO at Industrial Defender, leading the development of the world's first industrial SIEM.

At Waterfall Security, Andrew is the VP of Industrial Security. He leads a team of experts who work with the world's most secure industrial sites. Andrew is the author of three textbooks on industrial cybersecurity, co-author of the Internet of Things Security Framework, and co-author of the UITP report on cybersecurity requirements in rail system tendering. He co-hosts the Industrial Security Podcast and contributes regularly to industrial security standards and best-practice guidance.

Andrew has designed and taught graduate engineering courses on cybersecurity at Michigan Technological University, and is a founding faculty member at CambiOS. Andrew holds degrees in Applied Mathematics and Computer Science from the University of Calgary.